$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/3F0948F82D1011ECB745DB85C4F9AE02.roa File: 3F0948F82D1011ECB745DB85C4F9AE02.roa (raw, json) Hash identifier: kdT+sm008k7EJlVFHgyPf3s8RNvidHK++rJzxUn0e/U= Subject key identifier: 5D:85:80:B9:41:52:3A:B5:4D:13:60:62:63:11:78:6C:22:E4:70:33 Certificate issuer: /CN=A91E7363/serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Certificate serial: 358D Authority key identifier: A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/3F0948F82D1011ECB745DB85C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:07:15 +0000 ROA not before: Fri 30 Jan 2026 15:10:19 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 17904 IP address blocks: 203.94.96.0/19 maxlen: 19 203.94.100.0/24 maxlen: 24 203.94.102.0/23 maxlen: 23 203.94.114.0/24 maxlen: 24 203.115.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 14:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13709 (0x358d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7363, serialNumber=A897C04DE12F0A6F59C1AD1509F0B209FA5438B3 Validity Not Before: Jan 30 15:10:19 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47243-57a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:62:b2:b4:98:c3:1a:cb:50:ad:01:2b:db:21: 16:6c:1b:59:10:1e:92:ac:ab:78:cf:d0:2a:fd:01: 87:65:8f:e6:a0:9b:57:09:22:45:14:03:a4:15:ee: a0:ab:56:7a:26:da:05:68:7c:f4:f0:37:83:c8:c7: 93:a2:e2:0f:8e:5a:81:10:6f:37:5b:40:b6:b9:25: 1f:c9:d6:03:71:ab:90:71:b6:76:84:78:fb:5a:46: 92:df:2a:a0:30:54:c9:c6:ed:44:06:de:6a:ea:9e: 91:f1:a3:25:ba:b8:76:eb:2d:86:fc:c2:c4:2f:64: e1:95:fb:11:be:c3:6d:6e:f0:b1:a6:93:9f:d9:b5: 3d:d6:40:99:9a:a7:84:e0:ab:dd:93:c5:d7:4e:62: e2:c1:af:ab:84:e5:30:01:6e:00:f1:9f:a8:9c:d1: d4:de:f6:12:cd:60:0f:1b:80:b7:06:47:77:03:97: 11:39:e3:ef:cf:9d:43:47:48:55:68:f4:5f:58:05: 40:5a:54:86:f3:c9:85:25:21:51:71:d3:87:b9:29: 6d:b2:53:71:ab:65:8c:62:b1:2f:71:82:a5:cc:08: f6:09:0e:51:6e:96:bd:49:a7:dd:92:91:25:cd:ef: 0e:99:bd:bd:3a:ec:26:aa:85:33:47:b5:25:1b:7e: 8c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:85:80:B9:41:52:3A:B5:4D:13:60:62:63:11:78:6C:22:E4:70:33 X509v3 Authority Key Identifier: keyid:A8:97:C0:4D:E1:2F:0A:6F:59:C1:AD:15:09:F0:B2:09:FA:54:38:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qJfATeEvCm9Zwa0VCfCyCfpUOLM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7363/FF8B4B6C1D8411E28CD33DDB08B02CD2/3F0948F82D1011ECB745DB85C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.94.96.0/19 203.115.32.0/19 Signature Algorithm: sha256WithRSAEncryption 26:28:fa:7e:6c:10:af:8a:ad:06:80:89:c7:03:6d:9a:22:7e: 1e:8c:aa:37:7c:89:d8:40:8b:da:29:81:0b:6a:d7:c1:2a:ea: 8d:2e:00:06:3f:57:ab:92:38:fd:e9:c8:ea:10:cb:2a:d2:cb: bc:82:0f:9d:e2:03:5b:7c:4c:52:96:9f:8b:14:fe:9f:d8:e1: e3:d8:b9:43:f1:4f:4b:8e:d2:83:74:9b:b5:d1:dd:ee:fa:24: ac:a9:34:1d:0d:d2:7f:ee:d0:28:3a:97:b5:a1:24:79:5e:97: 9e:a3:09:ff:ef:e9:7a:8a:a1:59:17:fb:b3:0a:6d:22:db:41: ed:5c:56:f7:01:cc:6c:95:50:3d:6f:94:4c:91:41:be:6f:40: 6f:96:dc:39:71:ef:a7:10:fb:bb:ca:01:83:49:8d:27:11:8c: 7e:a8:17:3c:46:64:c1:6d:47:ab:78:29:2e:c5:be:96:b1:75: d9:54:0a:5b:69:21:43:99:dd:19:43:09:07:94:b5:94:19:11: 3e:4e:ea:d9:1c:f6:6b:33:a0:06:2e:50:ab:d4:c3:7a:43:95: aa:f8:d2:68:8a:20:a4:05:2e:b1:7e:2f:0f:4e:d0:84:20:9e: c9:27:72:3f:0f:11:e6:0d:bd:b2:cc:4a:f4:c5:91:71:84:6d: 87:18:6b:c9 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICNY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNjMxMTAvBgNVBAUTKEE4OTdDMDRERTEyRjBBNkY1OUMxQUQxNTA5RjBCMjA5 RkE1NDM4QjMwHhcNMjYwMTMwMTUxMDE5WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzI0My01N2EzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtmKytJjDGstQrQEr2yEWbBtZEB6SrKt4z9Aq/QGHZY/moJtXCSJFFAOkFe6g q1Z6JtoFaHz08DeDyMeTouIPjlqBEG83W0C2uSUfydYDcauQcbZ2hHj7WkaS3yqg MFTJxu1EBt5q6p6R8aMlurh26y2G/MLEL2ThlfsRvsNtbvCxppOf2bU91kCZmqeE 4Kvdk8XXTmLiwa+rhOUwAW4A8Z+onNHU3vYSzWAPG4C3Bkd3A5cROePvz51DR0hV aPRfWAVAWlSG88mFJSFRcdOHuSltslNxq2WMYrEvcYKlzAj2CQ5Rbpa9SafdkpEl ze8Omb29OuwmqoUzR7UlG36MkQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFF2FgLlB Ujq1TRNgYmMReGwi5HAzMB8GA1UdIwQYMBaAFKiXwE3hLwpvWcGtFQnwsgn6VDiz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM2My9GRjhCNEI2QzFE ODQxMUUyOENEMzNEREIwOEIwMkNEMi9xSmZBVGVFdkNtOVp3YTBWQ2ZDeUNmcFVP TE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FKZkFUZUV2Q205WndhMFZDZkN5Q2ZwVU9MTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTczNjMvRkY4QjRCNkMxRDg0MTFFMjhDRDMzRERCMDhCMDJDRDIvM0YwOTQ4Rjgy RDEwMTFFQ0I3NDVEQjg1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQFy15gAwQFy3MgMA0GCSqGSIb3DQEBCwUAA4IBAQAmKPp+bBCviq0G gInHA22aIn4ejKo3fInYQIvaKYELatfBKuqNLgAGP1erkjj96cjqEMsq0su8gg+d 4gNbfExSlp+LFP6f2OHj2LlD8U9LjtKDdJu10d3u+iSsqTQdDdJ/7tAoOpe1oSR5 Xpeeown/7+l6iqFZF/uzCm0i20HtXFb3AcxslVA9b5RMkUG+b0Bvltw5ce+nEPu7 ygGDSY0nEYx+qBc8RmTBbUereCkuxb6WsXXZVApbaSFDmd0ZQwkHlLWUGRE+TurZ HPZrM6AGLlCr1MN6Q5Wq+NJoiiCkBS6xfi8PTtCEIJ7JJ3I/DxHmDb2yzEr0xZFx hG2HGGvJ -----END CERTIFICATE-----Generated at Thu Mar 26 14:06:39 2026 by rpki-client