$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/8A5FC86AECB511EE8DC7B937C4F9AE02.roa File: 8A5FC86AECB511EE8DC7B937C4F9AE02.roa (raw, json) Hash identifier: aM682PrmS/WCpTQwMbZ4q2Rx5fNH71CAoijcXAt+A2A= Subject key identifier: 7C:65:F4:59:DE:D7:C3:1D:2A:49:C2:CA:1B:92:C3:9A:24:C5:EB:41 Certificate issuer: /CN=A91D4A3A/serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Certificate serial: 0171 Authority key identifier: 83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/8A5FC86AECB511EE8DC7B937C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:04:47 +0000 ROA not before: Wed 09 Apr 2025 05:11:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152665 IP address blocks: 203.28.134.0/23 maxlen: 23 203.28.134.0/24 maxlen: 24 203.28.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:57:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 369 (0x171) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4A3A, serialNumber=83E4BCB763B8CED0365190E7280F0A6A34B35B51 Validity Not Before: Apr 9 05:11:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a58aef-2751 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f3:f9:4e:8f:29:62:bc:82:69:30:68:70:65: cc:49:df:75:ae:7b:6b:cc:da:6f:c9:88:dc:4f:93: 5a:2f:72:ca:b8:93:4f:8e:02:5e:88:03:53:92:f2: bb:8f:79:d1:f1:17:06:90:1b:ef:a1:02:cc:44:a5: a3:8d:8a:7e:0c:c5:44:c8:23:82:88:32:98:1e:a6: bf:da:ba:c0:20:21:50:81:d1:a7:a6:6a:3f:cc:49: e0:da:65:b6:eb:f4:98:5b:44:47:1b:10:bd:8a:e4: 2c:8b:5f:89:a8:66:26:5c:d1:84:2d:f4:54:e5:3d: e1:81:fa:61:9c:f5:8d:db:9b:82:fd:80:36:6b:10: 57:91:1c:56:2d:fb:1a:a0:bf:db:dd:70:1a:84:b8: de:39:bf:83:ff:e0:4c:9b:c9:c8:55:4b:50:ef:b8: 75:7d:ab:fe:69:67:e7:e8:08:f9:a2:63:5d:39:1e: fe:7c:38:c5:d1:50:70:94:3f:9a:ce:0f:8a:d8:9e: d5:23:2a:2f:85:3f:f2:e5:18:29:10:41:ff:4d:d0: d7:43:c0:7b:41:ff:fd:4f:dc:6b:db:82:5a:a5:81: 22:75:69:dd:a2:47:a7:04:ab:3d:73:a1:1b:02:61: f0:46:ab:bf:ad:40:65:20:fe:bd:02:13:95:c1:93: 89:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:65:F4:59:DE:D7:C3:1D:2A:49:C2:CA:1B:92:C3:9A:24:C5:EB:41 X509v3 Authority Key Identifier: keyid:83:E4:BC:B7:63:B8:CE:D0:36:51:90:E7:28:0F:0A:6A:34:B3:5B:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/g-S8t2O4ztA2UZDnKA8KajSzW1E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g-S8t2O4ztA2UZDnKA8KajSzW1E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4A3A/1814F366ECB511EEA4650337C4F9AE02/8A5FC86AECB511EE8DC7B937C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.28.134.0/23 Signature Algorithm: sha256WithRSAEncryption 09:ae:07:98:fc:e4:50:03:a0:89:66:24:5b:35:78:6d:78:b4: f5:b8:90:47:33:2e:25:9a:b9:b4:68:f7:6f:97:d0:29:b0:fb: ec:9a:d0:ef:84:1a:45:3d:22:e4:34:62:9e:7e:e4:67:00:ae: 43:7e:55:0e:50:a9:74:d7:02:56:e2:35:95:ef:2b:4e:5c:6e: ed:94:a0:66:e8:eb:ac:92:c2:c5:38:aa:de:c8:21:cd:dd:81: 01:a6:7a:72:20:ae:ea:89:e3:5e:1c:54:0c:0b:1b:1e:62:62: ef:64:4e:0a:7c:83:cb:5f:c9:ce:cc:aa:64:01:49:12:61:06: 99:96:34:fb:08:a9:42:b0:7c:7f:ca:77:76:74:f1:e1:d5:8b: 22:8d:38:db:5a:77:96:d3:de:8d:dd:82:b3:78:74:a7:dc:fd: 4c:8f:e1:b7:f2:25:df:2e:cc:63:2c:70:c2:ec:58:6b:29:2c: d8:2b:b3:b2:26:8c:26:8a:26:fa:85:08:d0:cf:08:3d:3b:35: 83:26:8d:7e:fa:01:b5:16:8f:31:af:d8:5b:40:ee:4b:0a:54: a5:97:47:15:82:6b:f8:71:7b:69:74:e3:9d:c0:5c:4c:fa:6f: f7:ac:3d:fc:18:51:f7:7d:a6:cf:7f:0e:3e:cd:c6:b9:38:bc: 08:b0:f1:eb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAXEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDRBM0ExMTAvBgNVBAUTKDgzRTRCQ0I3NjNCOENFRDAzNjUxOTBFNzI4MEYwQTZB MzRCMzVCNTEwHhcNMjUwNDA5MDUxMTU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGFlZi0yNzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/P5To8pYryCaTBocGXMSd91rntrzNpvyYjcT5NaL3LKuJNPjgJeiANTkvK7 j3nR8RcGkBvvoQLMRKWjjYp+DMVEyCOCiDKYHqa/2rrAICFQgdGnpmo/zEng2mW2 6/SYW0RHGxC9iuQsi1+JqGYmXNGELfRU5T3hgfphnPWN25uC/YA2axBXkRxWLfsa oL/b3XAahLjeOb+D/+BMm8nIVUtQ77h1fav+aWfn6Aj5omNdOR7+fDjF0VBwlD+a zg+K2J7VIyovhT/y5RgpEEH/TdDXQ8B7Qf/9T9xr24JapYEidWndokenBKs9c6Eb AmHwRqu/rUBlIP69AhOVwZOJrQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHxl9Fne 18MdKknCyhuSw5okxetBMB8GA1UdIwQYMBaAFIPkvLdjuM7QNlGQ5ygPCmo0s1tR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENEEzQS8xODE0RjM2NkVD QjUxMUVFQTQ2NTAzMzdDNEY5QUUwMi9nLVM4dDJPNHp0QTJVWkRuS0E4S2FqU3pX MUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ctUzh0Mk80enRBMlVaRG5LQThLYWpTelcxRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDRBM0EvMTgxNEYzNjZFQ0I1MTFFRUE0NjUwMzM3QzRGOUFFMDIvOEE1RkM4NkFF Q0I1MTFFRThEQzdCOTM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByxyGMA0GCSqGSIb3DQEBCwUAA4IBAQAJrgeY/ORQA6CJZiRbNXht eLT1uJBHMy4lmrm0aPdvl9ApsPvsmtDvhBpFPSLkNGKefuRnAK5DflUOUKl01wJW 4jWV7ytOXG7tlKBm6OusksLFOKreyCHN3YEBpnpyIK7qieNeHFQMCxseYmLvZE4K fIPLX8nOzKpkAUkSYQaZljT7CKlCsHx/ynd2dPHh1YsijTjbWneW096N3YKzeHSn 3P1Mj+G38iXfLsxjLHDC7FhrKSzYK7OyJowmiib6hQjQzwg9OzWDJo1++gG1Fo8x r9hbQO5LClSll0cVgmv4cXtpdOOdwFxM+m/3rD38GFH3fabPfw4+zca5OLwIsPHr -----END CERTIFICATE-----Generated at Thu Mar 26 08:58:28 2026 by rpki-client