$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/FF1FE402898011EEB3403779C4F9AE02.roa File: FF1FE402898011EEB3403779C4F9AE02.roa (raw, json) Hash identifier: PkkKjxmP3oqdz8rOsnvlI4lixs/LLzNeT38IVCT5f2s= Subject key identifier: 20:05:B0:B3:D2:73:BD:A5:8D:A8:3F:C8:E1:A9:8C:8B:F9:5F:0F:71 Certificate issuer: /CN=A91CE524/serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Certificate serial: 01AE Authority key identifier: 63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/FF1FE402898011EEB3403779C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:41:01 +0000 ROA not before: Wed 09 Jul 2025 05:41:15 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152106 IP address blocks: 202.36.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 430 (0x1ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE524, serialNumber=637902E1BA96881D472EECADFA45B5577E3C1C31 Validity Not Before: Jul 9 05:41:15 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3ed8d-3d27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:19:5e:fc:4f:0b:0e:57:f0:86:6a:fd:f8:c4: 25:0f:0a:2d:2e:6b:57:a4:97:5e:42:00:7f:a2:bc: ff:66:c8:9d:06:35:5c:d2:af:4a:06:ea:2a:c4:44: 37:4a:15:e8:d1:5d:a0:45:ea:d1:ca:46:0a:5e:eb: 39:ad:26:dd:a6:2c:62:c4:94:1a:4f:a5:64:8f:9c: 48:5f:60:bd:13:44:77:c1:11:70:cd:f8:9c:f9:75: 41:85:e8:83:7e:87:2e:2e:04:20:9d:c0:88:84:66: 14:02:95:77:17:8d:22:d8:05:42:87:e3:5b:7f:be: a0:3a:77:90:e4:ff:66:6f:7f:e2:2a:dd:0c:0a:a1: 98:01:85:08:3f:06:18:53:a0:74:df:7a:3b:a7:b6: 51:88:f6:e6:25:52:dd:9e:15:eb:28:9b:26:4c:ef: 51:da:cf:fc:dd:b9:6f:df:dc:d6:d8:c7:d5:86:61: f4:40:c2:95:62:34:00:ca:3a:9f:fd:12:14:33:87: f9:06:d0:fa:ee:63:26:af:03:0e:6e:8c:be:0e:22: 35:86:fb:69:d7:61:c3:bd:e4:a2:a5:f0:4c:28:59: a5:2b:62:92:16:9f:0d:eb:2b:a0:25:de:89:2f:9b: b2:a1:7f:14:86:2e:ea:75:02:10:bc:b5:63:32:5c: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:05:B0:B3:D2:73:BD:A5:8D:A8:3F:C8:E1:A9:8C:8B:F9:5F:0F:71 X509v3 Authority Key Identifier: keyid:63:79:02:E1:BA:96:88:1D:47:2E:EC:AD:FA:45:B5:57:7E:3C:1C:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/Y3kC4bqWiB1HLuyt-kW1V348HDE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y3kC4bqWiB1HLuyt-kW1V348HDE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE524/0C2C2BD688C511EEA8311C71C4F9AE02/FF1FE402898011EEB3403779C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.36.228.0/24 Signature Algorithm: sha256WithRSAEncryption 24:b8:1b:87:ee:89:27:fb:41:2a:6d:35:c9:51:57:ba:9e:48: 21:52:a9:d4:5c:04:fa:8b:c4:0a:71:8f:a0:b9:a0:51:ae:82: 23:b2:66:9a:67:7c:d6:ed:35:e6:28:3b:66:0f:fc:9e:fc:10: e8:1f:44:05:f0:c1:9e:55:fc:2f:2e:94:32:04:78:9f:f8:35: 17:39:af:9a:bf:78:95:67:9e:58:f9:d4:f3:7d:57:42:b7:f9: 75:84:cb:18:97:a8:69:cd:eb:a4:23:d3:3b:ac:1e:72:79:07: 26:d5:87:82:12:69:b0:f1:41:f2:f7:c1:cf:46:b1:3a:7b:e9: 81:91:ec:ac:eb:f8:78:a9:96:af:c8:3a:e3:d9:bc:7e:f3:22: 88:0c:aa:d3:01:54:53:8f:0b:5d:fc:07:79:7f:5c:c8:7a:58: f5:78:7b:19:52:d9:bb:4e:67:dd:56:33:77:96:bc:fa:af:b1: 21:fb:bf:4b:9d:b0:42:92:c4:34:c9:db:c8:ba:0f:34:ca:58: a1:b0:bd:2c:83:77:a8:0a:21:b2:c3:88:30:ac:1e:88:45:8a: 28:92:fc:a8:96:9e:20:d4:d0:fc:2e:8b:51:35:71:4b:66:a1: 02:76:29:9b:80:1c:4d:c5:d7:5e:42:80:93:55:12:6b:56:33: 10:bc:7e:05 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U1MjQxMTAvBgNVBAUTKDYzNzkwMkUxQkE5Njg4MUQ0NzJFRUNBREZBNDVCNTU3 N0UzQzFDMzEwHhcNMjUwNzA5MDU0MTE1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZWQ4ZC0zZDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtRle/E8LDlfwhmr9+MQlDwotLmtXpJdeQgB/orz/ZsidBjVc0q9KBuoqxEQ3 ShXo0V2gRerRykYKXus5rSbdpixixJQaT6Vkj5xIX2C9E0R3wRFwzfic+XVBheiD focuLgQgncCIhGYUApV3F40i2AVCh+Nbf76gOneQ5P9mb3/iKt0MCqGYAYUIPwYY U6B033o7p7ZRiPbmJVLdnhXrKJsmTO9R2s/83blv39zW2MfVhmH0QMKVYjQAyjqf /RIUM4f5BtD67mMmrwMOboy+DiI1hvtp12HDveSipfBMKFmlK2KSFp8N6yugJd6J L5uyoX8Uhi7qdQIQvLVjMlxIzwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCAFsLPS c72ljag/yOGpjIv5Xw9xMB8GA1UdIwQYMBaAFGN5AuG6logdRy7srfpFtVd+PBwx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTUyNC8wQzJDMkJENjg4 QzUxMUVFQTgzMTFDNzFDNEY5QUUwMi9ZM2tDNGJxV2lCMUhMdXl0LWtXMVYzNDhI REUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1kza0M0YnFXaUIxSEx1eXQta1cxVjM0OEhERS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U1MjQvMEMyQzJCRDY4OEM1MTFFRUE4MzExQzcxQzRGOUFFMDIvRkYxRkU0MDI4 OTgwMTFFRUIzNDAzNzc5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyiTkMA0GCSqGSIb3DQEBCwUAA4IBAQAkuBuH7okn+0EqbTXJUVe6 nkghUqnUXAT6i8QKcY+guaBRroIjsmaaZ3zW7TXmKDtmD/ye/BDoH0QF8MGeVfwv LpQyBHif+DUXOa+av3iVZ55Y+dTzfVdCt/l1hMsYl6hpzeukI9M7rB5yeQcm1YeC Emmw8UHy98HPRrE6e+mBkeys6/h4qZavyDrj2bx+8yKIDKrTAVRTjwtd/Ad5f1zI elj1eHsZUtm7TmfdVjN3lrz6r7Eh+79LnbBCksQ0ydvIug80ylihsL0sg3eoCiGy w4gwrB6IRYookvyolp4g1ND8LotRNXFLZqECdimbgBxNxddeQoCTVRJrVjMQvH4F -----END CERTIFICATE-----Generated at Fri Mar 27 00:10:01 2026 by rpki-client