$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/B74BF7F018BF11EFB54AFB20C4F9AE02.roa File: B74BF7F018BF11EFB54AFB20C4F9AE02.roa (raw, json) Hash identifier: i7+K6StkhEeeezuH07nFABJ4+D7tgTloR83xwjCdBu8= Subject key identifier: 20:46:9A:9B:9B:D6:74:6F:D1:76:FA:FB:8D:D6:CC:85:11:0D:05:BC Certificate issuer: /CN=A91CE403/serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Certificate serial: 0158 Authority key identifier: D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/B74BF7F018BF11EFB54AFB20C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:10:37 +0000 ROA not before: Thu 29 Jan 2026 04:23:39 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 152175 IP address blocks: 36.50.98.0/23 maxlen: 24 203.29.114.0/23 maxlen: 24 2401:5a60::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 04:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE403, serialNumber=D78F30904E75DF94CEB75966AF838E763EA89762 Validity Not Before: Jan 29 04:23:39 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a456ed-6a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8b:fa:d4:1c:fd:5a:61:85:ab:a8:a0:83:2d: 39:c7:c8:3a:69:64:42:00:73:09:8d:90:2e:ed:b1: d2:52:d3:f8:06:29:03:f7:4a:15:b0:8b:49:0c:39: 78:1a:3f:1e:68:ff:70:10:79:f0:09:f2:79:4c:2d: 1d:e4:2c:3a:ed:3b:da:68:a0:96:a9:9d:f3:6a:42: a0:3a:30:19:a1:8d:36:3e:d2:4e:42:3d:77:7c:d2: 39:f1:97:8a:7d:47:5a:b6:17:f3:d5:45:40:2b:ae: 18:68:0d:05:cf:5f:86:fa:a3:f2:97:bc:17:68:3d: 8d:af:41:2c:5d:9c:3a:43:e8:e3:9a:79:81:f0:d4: 41:8b:0c:35:77:0e:78:47:8a:7d:ca:47:c0:94:25: 02:67:30:eb:ea:24:80:08:81:5e:34:81:67:b9:67: 3f:10:11:4e:cc:08:14:cd:74:64:a2:2a:7e:2f:d4: a3:b6:23:35:5d:c5:e7:93:c0:dc:9b:f7:a1:12:6f: 84:66:5e:f4:74:0a:f9:3d:49:b7:40:b9:1b:b5:e0: b9:31:86:8a:80:18:a4:85:8a:49:e1:25:aa:91:ed: 58:2f:5e:e4:34:fc:f8:e2:8c:77:74:eb:40:db:5b: d3:7f:f0:86:7d:6e:4a:73:c0:05:55:3a:e7:ca:44: 04:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:46:9A:9B:9B:D6:74:6F:D1:76:FA:FB:8D:D6:CC:85:11:0D:05:BC X509v3 Authority Key Identifier: keyid:D7:8F:30:90:4E:75:DF:94:CE:B7:59:66:AF:83:8E:76:3E:A8:97:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/148wkE5135TOt1lmr4OOdj6ol2I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/148wkE5135TOt1lmr4OOdj6ol2I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE403/802072E818BE11EFADA7E51DC4F9AE02/B74BF7F018BF11EFB54AFB20C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 36.50.98.0/23 203.29.114.0/23 IPv6: 2401:5a60::/32 Signature Algorithm: sha256WithRSAEncryption ac:f8:08:3e:47:d9:39:93:4a:b5:40:9f:4b:27:ca:63:72:18: 3a:ed:a2:80:0d:8b:f7:5b:5d:f0:28:fc:70:4d:b4:e2:54:0b: 3d:a4:b8:bd:7b:a5:e8:53:8e:62:d5:dc:b9:9e:c1:16:c3:77: ca:18:c7:4c:26:a4:9e:26:8b:11:92:68:73:3c:39:6d:5f:32: 0c:c9:5d:d6:43:cc:e8:ae:4a:d5:e6:90:74:c6:3a:d6:7e:9f: b7:8a:16:38:45:e0:3d:a9:7d:3f:7a:27:a1:9a:0e:d5:36:d3: 14:05:d9:99:43:b6:88:08:9b:f6:ba:78:36:b0:04:53:c9:58: 51:12:ea:07:23:2e:33:72:79:1e:8d:2c:73:6a:a6:5d:99:69: 19:42:c2:3b:ff:8a:40:0d:1c:b6:b1:a5:46:b6:0a:bb:20:85: 39:5b:7b:0f:5b:a7:04:da:e5:06:85:83:62:03:c2:4b:90:4f: 1b:4a:ea:d3:09:ae:45:ad:33:9b:0c:f7:2f:c3:4d:2e:b1:14: d6:7b:c6:41:7f:78:a6:45:f0:f8:38:e0:ae:a0:b7:67:fd:51: fb:9d:9c:30:24:7c:82:a0:2a:0d:9b:89:11:d6:84:9b:d7:10: da:74:27:76:98:6c:71:cb:73:66:eb:89:63:15:34:55:40:10: 26:f2:5f:d2 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U0MDMxMTAvBgNVBAUTKEQ3OEYzMDkwNEU3NURGOTRDRUI3NTk2NkFGODM4RTc2 M0VBODk3NjIwHhcNMjYwMTI5MDQyMzM5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTZlZC02YTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYv61Bz9WmGFq6iggy05x8g6aWRCAHMJjZAu7bHSUtP4BikD90oVsItJDDl4 Gj8eaP9wEHnwCfJ5TC0d5Cw67TvaaKCWqZ3zakKgOjAZoY02PtJOQj13fNI58ZeK fUdathfz1UVAK64YaA0Fz1+G+qPyl7wXaD2Nr0EsXZw6Q+jjmnmB8NRBiww1dw54 R4p9ykfAlCUCZzDr6iSACIFeNIFnuWc/EBFOzAgUzXRkoip+L9SjtiM1XcXnk8Dc m/ehEm+EZl70dAr5PUm3QLkbteC5MYaKgBikhYpJ4SWqke1YL17kNPz44ox3dOtA 21vTf/CGfW5Kc8AFVTrnykQEewIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFCBGmpub 1nRv0Xb6+43WzIURDQW8MB8GA1UdIwQYMBaAFNePMJBOdd+UzrdZZq+DjnY+qJdi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTQwMy84MDIwNzJFODE4 QkUxMUVGQURBN0U1MURDNEY5QUUwMi8xNDh3a0U1MTM1VE90MWxtcjRPT2RqNm9s MkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzE0OHdrRTUxMzVUT3QxbG1yNE9PZGo2b2wySS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U0MDMvODAyMDcyRTgxOEJFMTFFRkFEQTdFNTFEQzRGOUFFMDIvQjc0QkY3RjAx OEJGMTFFRkI1NEFGQjIwQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBJDJiAwQByx1yMA0EAgACMAcDBQAkAVpgMA0GCSqGSIb3DQEBCwUA A4IBAQCs+Ag+R9k5k0q1QJ9LJ8pjchg67aKADYv3W13wKPxwTbTiVAs9pLi9e6Xo U45i1dy5nsEWw3fKGMdMJqSeJosRkmhzPDltXzIMyV3WQ8zorkrV5pB0xjrWfp+3 ihY4ReA9qX0/eiehmg7VNtMUBdmZQ7aICJv2ung2sARTyVhREuoHIy4zcnkejSxz aqZdmWkZQsI7/4pADRy2saVGtgq7IIU5W3sPW6cE2uUGhYNiA8JLkE8bSurTCa5F rTObDPcvw00usRTWe8ZBf3imRfD4OOCuoLdn/VH7nZwwJHyCoCoNm4kR1oSb1xDa dCd2mGxxy3Nm64ljFTRVQBAm8l/S -----END CERTIFICATE-----Generated at Sat Mar 28 13:39:53 2026 by rpki-client