$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/9E283D22E07A11F0AD28F7913A6F56BC.roa File: 9E283D22E07A11F0AD28F7913A6F56BC.roa (raw, json) Hash identifier: zM/gqOyVFktPoDA/WeuwpVQb7+CuTjfIizkBCA5c5Lg= Subject key identifier: D1:00:3D:F7:A6:45:C3:D6:29:C0:94:35:03:5A:6C:54:4F:31:F1:ED Certificate issuer: /CN=A91DFA25/serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B Certificate serial: 2D Authority key identifier: CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/9E283D22E07A11F0AD28F7913A6F56BC.roa Signing time: Mon 02 Mar 2026 15:16:09 +0000 ROA not before: Wed 24 Dec 2025 03:42:49 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141216 IP address blocks: 203.31.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45 (0x2d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFA25, serialNumber=CC70D8734289D305A5233A99B09CD78B8FD6664B Validity Not Before: Dec 24 03:42:49 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a5a9b9-5616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:e3:17:e2:07:68:04:87:c6:a0:11:cc:8f: 69:7c:10:29:0e:88:ac:78:41:3b:e5:e4:1d:39:87: a0:dc:8c:4e:6f:a6:3b:d8:4a:7f:2f:ee:f8:34:6e: 17:28:c2:26:5e:f8:af:b1:cd:73:e2:9f:46:6e:4b: aa:5f:46:04:26:04:9f:8e:ec:80:54:5c:f7:a4:09: 2a:1c:68:c1:b0:4a:d9:c6:06:f2:8c:5b:fb:29:17: a1:27:86:86:c5:96:47:56:b4:e0:0a:b0:41:0d:42: 8b:4b:d1:b6:04:5e:19:4c:94:88:41:56:67:89:24: a7:cd:27:97:6c:a7:93:c4:f2:c0:07:67:eb:22:2c: 84:9d:49:9a:00:e6:8d:84:04:d7:89:22:6c:60:66: 10:17:ec:99:0c:52:4e:e9:4b:5c:7a:e2:3c:75:84: e9:51:b9:5c:b7:d3:c8:d5:03:8c:81:35:7e:ff:84: 94:4a:1f:eb:23:a2:51:62:f2:cd:3c:84:86:07:c3: bd:1e:9b:b1:46:5d:68:ac:5a:3f:8f:40:2c:72:43: 50:85:00:92:6c:46:ca:a0:23:2a:0e:1f:b3:0a:7d: 29:ad:4e:3f:e3:9f:60:ed:b4:ac:45:26:7a:6b:35: 6d:d4:c4:6d:8c:e9:8f:01:25:49:7f:60:08:0b:ec: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:00:3D:F7:A6:45:C3:D6:29:C0:94:35:03:5A:6C:54:4F:31:F1:ED X509v3 Authority Key Identifier: keyid:CC:70:D8:73:42:89:D3:05:A5:23:3A:99:B0:9C:D7:8B:8F:D6:66:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/zHDYc0KJ0wWlIzqZsJzXi4_WZks.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zHDYc0KJ0wWlIzqZsJzXi4_WZks.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFA25/70F978F2E07511F0A5642F05396F56BC/9E283D22E07A11F0AD28F7913A6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 203.31.93.0/24 Signature Algorithm: sha256WithRSAEncryption 39:ae:95:e5:c3:1f:90:03:43:47:00:8f:ae:c6:03:e7:a8:62: 29:d2:7f:7a:39:27:fe:12:c8:40:d2:42:3f:a6:81:1b:eb:4c: 0b:c4:b9:94:fa:61:bb:21:d0:80:e7:0a:67:00:0f:b4:9e:0d: 0d:96:8f:a9:16:f5:63:ed:1d:49:25:d4:5a:09:dd:ee:db:f0: 1f:7e:ee:13:e0:f4:91:0e:2e:18:df:f9:6c:56:e6:4d:60:15: 0b:cf:29:f0:f8:b1:2f:2b:97:a8:11:a2:95:86:0c:18:f0:6a: 99:eb:97:a4:fb:13:eb:cb:70:73:04:1e:87:89:98:7b:0f:d8: 2e:0a:2d:df:d2:66:27:80:78:3e:f2:1f:54:61:fe:fa:89:df: 9c:64:35:35:63:17:a0:d6:2b:74:25:d9:70:72:15:9a:7c:38: 25:f1:1b:43:99:e7:2d:65:5d:da:1c:da:29:60:a6:a6:d1:83: cc:45:6b:39:3f:da:da:33:a8:8d:a6:bb:9a:42:fb:01:b3:b8: 30:a9:1e:ac:f2:cb:f7:b5:be:64:6e:13:fe:18:03:b4:25:2f: ad:4f:6c:c5:3a:d5:f0:ff:3a:a8:3a:7e:9a:a7:20:14:36:fe: 7b:91:5e:4e:c2:ad:91:f3:23:d3:be:8e:66:d2:96:e2:24:e3: 38:e4:55:17 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBLTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RkEyNTExMC8GA1UEBRMoQ0M3MEQ4NzM0Mjg5RDMwNUE1MjMzQTk5QjA5Q0Q3OEI4 RkQ2NjY0QjAeFw0yNTEyMjQwMzQyNDlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTVhOWI5LTU2MTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDON+MX4gdoBIfGoBHMj2l8ECkOiKx4QTvl5B05h6DcjE5vpjvYSn8v7vg0bhco wiZe+K+xzXPin0ZuS6pfRgQmBJ+O7IBUXPekCSocaMGwStnGBvKMW/spF6EnhobF lkdWtOAKsEENQotL0bYEXhlMlIhBVmeJJKfNJ5dsp5PE8sAHZ+siLISdSZoA5o2E BNeJImxgZhAX7JkMUk7pS1x64jx1hOlRuVy308jVA4yBNX7/hJRKH+sjolFi8s08 hIYHw70em7FGXWisWj+PQCxyQ1CFAJJsRsqgIyoOH7MKfSmtTj/jn2DttKxFJnpr NW3UxG2M6Y8BJUl/YAgL7ApvAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU0QA996ZF w9YpwJQ1A1psVE8x8e0wHwYDVR0jBBgwFoAUzHDYc0KJ0wWlIzqZsJzXi4/WZksw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGQTI1LzcwRjk3OEYyRTA3 NTExRjBBNTY0MkYwNTM5NkY1NkJDL3pIRFljMEtKMHdXbEl6cVpzSnpYaTRfV1pr cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvekhEWWMwS0owd1dsSXpxWnNKelhpNF9XWmtzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RkEyNS83MEY5NzhGMkUwNzUxMUYwQTU2NDJGMDUzOTZGNTZCQy85RTI4M0QyMkUw N0ExMUYwQUQyOEY3OTEzQTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADLH10wDQYJKoZIhvcNAQELBQADggEBADmuleXDH5ADQ0cAj67GA+eo YinSf3o5J/4SyEDSQj+mgRvrTAvEuZT6Ybsh0IDnCmcAD7SeDQ2Wj6kW9WPtHUkl 1FoJ3e7b8B9+7hPg9JEOLhjf+WxW5k1gFQvPKfD4sS8rl6gRopWGDBjwapnrl6T7 E+vLcHMEHoeJmHsP2C4KLd/SZieAeD7yH1Rh/vqJ35xkNTVjF6DWK3Ql2XByFZp8 OCXxG0OZ5y1lXdoc2ilgpqbRg8xFazk/2tozqI2mu5pC+wGzuDCpHqzyy/e1vmRu E/4YA7QlL61PbMU61fD/Oqg6fpqnIBQ2/nuRXk7CrZHzI9O+jmbSluIk4zjkVRc= -----END CERTIFICATE-----Generated at Thu Mar 26 06:20:30 2026 by rpki-client