$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/0120C296835D11EEA3484166C4F9AE02.roa File: 0120C296835D11EEA3484166C4F9AE02.roa (raw, json) Hash identifier: 0ULeWis5k5ScEy2JfIawyIstIOTvRt9YF0f+ToPSQIE= Subject key identifier: 9B:CC:3D:B5:37:58:A6:68:CE:30:CD:CE:BB:40:78:6E:40:A6:D3:D7 Certificate issuer: /CN=A91E7A8E/serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Certificate serial: 01B2 Authority key identifier: 0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/0120C296835D11EEA3484166C4F9AE02.roa Signing time: Sun 01 Mar 2026 10:26:02 +0000 ROA not before: Fri 09 Jan 2026 03:22:58 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 20473 IP address blocks: 203.34.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 434 (0x1b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7A8E, serialNumber=0B813E2BBA84069EB434D656667FECE1F61B494B Validity Not Before: Jan 9 03:22:58 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4143a-e4cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0f:be:55:ff:55:69:25:27:a3:b6:77:90:7a: 25:f0:45:31:a5:5f:04:7f:c4:6f:51:52:25:9e:bd: 34:7c:3a:b5:38:7c:30:3d:82:b0:82:86:93:0b:a3: 7e:76:a7:4f:9b:28:34:12:0e:67:9b:e4:ed:b0:34: 38:e7:98:b1:a9:27:00:27:6a:b1:90:2c:ba:11:9d: 47:a5:39:4f:a6:5a:1d:b0:33:83:83:ba:01:65:1a: 53:e4:61:0e:cb:56:3d:8e:72:a0:b4:c1:46:eb:df: 45:d8:a9:fb:c5:48:fe:27:69:13:65:64:fd:77:f5: 51:73:ec:e5:93:06:85:71:3b:b5:82:54:46:17:f3: b6:da:46:a4:9c:20:9b:4d:9f:31:3f:45:f4:e2:fe: 78:cd:71:ae:83:94:37:1f:67:ff:f0:e1:16:0f:28: f1:45:d1:4e:97:09:69:7d:91:93:ac:9b:b2:45:39: df:32:19:34:39:6f:48:01:50:74:25:5b:8c:2a:fd: 79:d1:b1:bf:84:2e:a3:92:54:9d:a6:08:0e:0a:30: 7f:cd:73:14:a1:ef:e6:0e:0b:56:70:86:bc:11:c3: 52:32:b0:9c:6d:67:00:22:33:d3:6f:aa:72:ff:94: 33:41:8b:33:db:73:7a:37:17:34:e5:80:d8:ca:bf: aa:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CC:3D:B5:37:58:A6:68:CE:30:CD:CE:BB:40:78:6E:40:A6:D3:D7 X509v3 Authority Key Identifier: keyid:0B:81:3E:2B:BA:84:06:9E:B4:34:D6:56:66:7F:EC:E1:F6:1B:49:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/C4E-K7qEBp60NNZWZn_s4fYbSUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C4E-K7qEBp60NNZWZn_s4fYbSUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7A8E/A05156A6835C11EE88EAB84FC4F9AE02/0120C296835D11EEA3484166C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.34.235.0/24 Signature Algorithm: sha256WithRSAEncryption c1:d1:20:43:df:2f:0d:b8:e1:47:da:bd:78:2d:c7:d3:0f:c8: d6:4d:27:6c:ad:52:7b:f4:d1:f5:3a:f7:e8:e6:a0:84:8b:8d: 5a:9d:6b:34:ec:59:77:14:87:83:3e:a0:50:0c:3e:b6:d5:47: e9:c3:ab:d6:2b:60:f8:2d:01:4e:28:29:b6:a8:b3:3b:7a:35: c3:89:ee:d9:84:36:f1:7a:88:49:39:5a:e8:a8:d4:b7:9f:a9: eb:a5:0d:a2:d9:d9:4e:e1:84:e2:dc:fd:18:57:96:60:b8:96: 59:d6:54:1b:ad:b7:d5:89:12:2f:55:b2:77:b3:57:7d:96:43: 2d:3f:73:7f:fd:fb:37:48:dc:4f:3e:28:85:27:18:9d:5c:ad: 6f:af:02:8b:15:95:1d:d9:d4:b1:e7:68:1a:92:46:1f:bf:4d: 9f:22:17:c4:c6:91:7d:33:f8:b6:98:b1:dc:a9:f3:04:a6:56: a1:a2:d9:9b:83:5a:71:f0:40:12:ac:e5:d7:c1:c7:92:4d:cf: 7a:3b:34:7e:85:cc:72:c9:8f:c0:86:0b:99:83:54:83:d1:83: 6c:be:ba:95:06:eb:69:0c:84:52:88:f4:bd:be:c2:cc:9e:81: b1:54:b1:ba:21:cc:19:81:bf:c1:d5:78:55:b8:4c:ec:dc:a7: 78:fb:1e:a4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAbIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdBOEUxMTAvBgNVBAUTKDBCODEzRTJCQkE4NDA2OUVCNDM0RDY1NjY2N0ZFQ0Ux RjYxQjQ5NEIwHhcNMjYwMTA5MDMyMjU4WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTQzYS1lNGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvg++Vf9VaSUno7Z3kHol8EUxpV8Ef8RvUVIlnr00fDq1OHwwPYKwgoaTC6N+ dqdPmyg0Eg5nm+TtsDQ455ixqScAJ2qxkCy6EZ1HpTlPplodsDODg7oBZRpT5GEO y1Y9jnKgtMFG699F2Kn7xUj+J2kTZWT9d/VRc+zlkwaFcTu1glRGF/O22kaknCCb TZ8xP0X04v54zXGug5Q3H2f/8OEWDyjxRdFOlwlpfZGTrJuyRTnfMhk0OW9IAVB0 JVuMKv150bG/hC6jklSdpggOCjB/zXMUoe/mDgtWcIa8EcNSMrCcbWcAIjPTb6py /5QzQYsz23N6Nxc05YDYyr+qLwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJvMPbU3 WKZozjDNzrtAeG5AptPXMB8GA1UdIwQYMBaAFAuBPiu6hAaetDTWVmZ/7OH2G0lL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0E4RS9BMDUxNTZBNjgz NUMxMUVFODhFQUI4NEZDNEY5QUUwMi9DNEUtSzdxRUJwNjBOTlpXWm5fczRmWWJT VXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M0RS1LN3FFQnA2ME5OWldabl9zNGZZYlNVcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdBOEUvQTA1MTU2QTY4MzVDMTFFRTg4RUFCODRGQzRGOUFFMDIvMDEyMEMyOTY4 MzVEMTFFRUEzNDg0MTY2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyyLrMA0GCSqGSIb3DQEBCwUAA4IBAQDB0SBD3y8NuOFH2r14LcfT D8jWTSdsrVJ79NH1Ovfo5qCEi41anWs07Fl3FIeDPqBQDD621Ufpw6vWK2D4LQFO KCm2qLM7ejXDie7ZhDbxeohJOVroqNS3n6nrpQ2i2dlO4YTi3P0YV5ZguJZZ1lQb rbfViRIvVbJ3s1d9lkMtP3N//fs3SNxPPiiFJxidXK1vrwKLFZUd2dSx52gakkYf v02fIhfExpF9M/i2mLHcqfMEplahotmbg1px8EASrOXXwceSTc96OzR+hcxyyY/A hguZg1SD0YNsvrqVButpDIRSiPS9vsLMnoGxVLG6IcwZgb/B1XhVuEzs3Kd4+x6k -----END CERTIFICATE-----Generated at Thu Mar 26 17:49:00 2026 by rpki-client