$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/D31AE166C92011EDB456FB72C4F9AE02.roa File: D31AE166C92011EDB456FB72C4F9AE02.roa (raw, json) Hash identifier: PvZuO5e4GchVGqAm1QbEBiq8YBp2L+bhbVxt20o+A5E= Subject key identifier: 13:40:38:78:DF:C4:30:D7:E0:D0:0D:1F:20:A5:3A:88:F6:20:AA:2D Certificate issuer: /CN=A91CE28E/serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Certificate serial: 024F Authority key identifier: 2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/D31AE166C92011EDB456FB72C4F9AE02.roa Signing time: Wed 25 Mar 2026 02:35:55 +0000 ROA not before: Wed 25 Mar 2026 02:35:55 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 16509 IP address blocks: 202.37.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 591 (0x24f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE28E, serialNumber=2F6138FE2DB94EF7E33EC083C6825B2A3197ACE6 Validity Not Before: Mar 25 02:35:55 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c34a0b-11cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:28:a8:66:3c:ee:09:bc:2c:29:44:08:15:8d: 07:b1:c9:6a:4c:67:af:5d:77:b8:18:6f:19:56:b6: ec:21:e5:07:0b:39:a5:a6:be:59:94:b1:a4:cb:75: e5:07:b4:20:15:c0:3a:1d:70:60:6d:68:55:b3:33: 03:a4:f4:ef:c2:26:ba:e3:80:7c:8d:71:f6:a6:de: c3:cb:91:e4:41:25:85:25:68:25:43:cf:78:3a:7f: 74:d8:db:a4:8b:f0:83:e2:ab:56:64:f1:e9:24:06: 6a:2c:91:b2:5f:86:c0:df:b9:a2:cf:ce:f8:27:be: f1:3e:af:28:c1:bc:41:ae:5e:b7:7d:0a:b3:31:7f: be:39:ab:cb:77:68:60:9f:84:20:73:f4:9d:57:c8: 4b:53:a6:ed:47:b9:0e:78:45:c0:3a:98:61:79:fb: 55:a1:d9:e4:9c:5f:b2:a8:e3:60:7d:c9:41:2d:59: 29:f2:6f:1e:88:cb:e1:97:ca:76:0b:a8:8b:8b:03: 01:c9:1a:bc:46:03:ac:11:56:26:68:fa:26:63:3b: 99:6d:05:45:13:23:c4:8f:d6:e3:01:7c:64:b0:bf: a7:2f:3f:d1:3d:77:dd:aa:6f:23:4b:8e:3e:bd:73: 86:2d:71:61:a6:c0:54:6d:1d:9f:c2:3f:8f:19:5e: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:40:38:78:DF:C4:30:D7:E0:D0:0D:1F:20:A5:3A:88:F6:20:AA:2D X509v3 Authority Key Identifier: keyid:2F:61:38:FE:2D:B9:4E:F7:E3:3E:C0:83:C6:82:5B:2A:31:97:AC:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/L2E4_i25TvfjPsCDxoJbKjGXrOY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L2E4_i25TvfjPsCDxoJbKjGXrOY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE28E/DDEA7274B73B11ED91639483C4F9AE02/D31AE166C92011EDB456FB72C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.37.72.0/24 Signature Algorithm: sha256WithRSAEncryption 70:e6:4b:eb:74:f4:77:5a:53:28:0e:df:f8:c9:0b:3a:65:45: 06:a6:e1:46:92:78:db:9c:36:dc:61:1c:ac:36:f2:5f:c2:e0: e4:76:6e:9b:ca:a0:2b:85:63:0a:00:68:40:bf:34:69:ef:70: 6d:dc:2b:a6:30:cd:6c:20:47:e4:b5:5e:b3:e8:43:17:35:19: b3:dd:96:62:b6:20:92:4a:8f:d6:ad:35:5b:f1:0e:c9:94:3f: ef:d5:b8:bb:3f:a3:77:04:e9:14:b0:d2:6c:01:0e:f0:12:4f: c6:01:af:28:14:df:f8:d1:62:b5:3d:21:9b:6d:95:88:f5:e5: bf:fa:68:96:1f:96:dc:0b:ba:0a:d6:43:6a:49:ff:d6:eb:e4: 33:d5:58:1e:7f:a2:58:82:cc:bd:c3:c6:5b:54:4b:1e:b6:e6: 6a:9e:33:69:71:0d:2e:7e:4f:0a:c2:51:be:6e:5e:50:7a:c1: 5e:4e:24:5d:8b:e8:e5:2c:aa:93:8b:35:99:fe:cb:c1:e5:83: 65:86:e4:e5:8e:0f:52:ce:5d:a7:e1:0f:f9:d0:aa:91:f1:b2: 2c:6f:a8:0c:b0:f1:e9:12:ff:bf:3a:4e:c1:1b:ed:e2:35:10: 1b:23:69:40:11:85:f9:c5:24:a7:e3:e9:4a:26:85:75:71:06: 0d:52:a5:9a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAk8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0UyOEUxMTAvBgNVBAUTKDJGNjEzOEZFMkRCOTRFRjdFMzNFQzA4M0M2ODI1QjJB MzE5N0FDRTYwHhcNMjYwMzI1MDIzNTU1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWMzNGEwYi0xMWNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8CioZjzuCbwsKUQIFY0HsclqTGevXXe4GG8ZVrbsIeUHCzmlpr5ZlLGky3Xl B7QgFcA6HXBgbWhVszMDpPTvwia644B8jXH2pt7Dy5HkQSWFJWglQ894On902Nuk i/CD4qtWZPHpJAZqLJGyX4bA37miz874J77xPq8owbxBrl63fQqzMX++OavLd2hg n4Qgc/SdV8hLU6btR7kOeEXAOphheftVodnknF+yqONgfclBLVkp8m8eiMvhl8p2 C6iLiwMByRq8RgOsEVYmaPomYzuZbQVFEyPEj9bjAXxksL+nLz/RPXfdqm8jS44+ vXOGLXFhpsBUbR2fwj+PGV69WQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBNAOHjf xDDX4NANHyClOoj2IKotMB8GA1UdIwQYMBaAFC9hOP4tuU734z7Ag8aCWyoxl6zm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTI4RS9EREVBNzI3NEI3 M0IxMUVEOTE2Mzk0ODNDNEY5QUUwMi9MMkU0X2kyNVR2ZmpQc0NEeG9KYktqR1hy T1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0wyRTRfaTI1VHZmalBzQ0R4b0piS2pHWHJPWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0UyOEUvRERFQTcyNzRCNzNCMTFFRDkxNjM5NDgzQzRGOUFFMDIvRDMxQUUxNjZD OTIwMTFFREI0NTZGQjcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyiVIMA0GCSqGSIb3DQEBCwUAA4IBAQBw5kvrdPR3WlMoDt/4yQs6 ZUUGpuFGknjbnDbcYRysNvJfwuDkdm6byqArhWMKAGhAvzRp73Bt3CumMM1sIEfk tV6z6EMXNRmz3ZZitiCSSo/WrTVb8Q7JlD/v1bi7P6N3BOkUsNJsAQ7wEk/GAa8o FN/40WK1PSGbbZWI9eW/+miWH5bcC7oK1kNqSf/W6+Qz1Vgef6JYgsy9w8ZbVEse tuZqnjNpcQ0ufk8KwlG+bl5QesFeTiRdi+jlLKqTizWZ/svB5YNlhuTljg9Szl2n 4Q/50KqR8bIsb6gMsPHpEv+/Ok7BG+3iNRAbI2lAEYX5xSSn4+lKJoV1cQYNUqWa -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:38 2026 by rpki-client