$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa File: CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa (raw, json) Hash identifier: BDCeGfEWVHXeaWbclA9t0RZH57mKZHgC7rw0NrSMJ9s= Subject key identifier: 1C:63:15:C2:E7:4E:58:60:F9:A7:BC:27:02:6F:50:C1:E6:4F:9C:11 Certificate issuer: /CN=A91E7BC4/serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Certificate serial: 0E47 Authority key identifier: DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:46:23 +0000 ROA not before: Tue 24 Feb 2026 18:15:22 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 19551 IP address blocks: 203.121.47.0/24 maxlen: 24 211.24.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:44:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3655 (0xe47) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7BC4, serialNumber=DDA7F8A74A0A74CFF6EB630428B6C9D70D57BD76 Validity Not Before: Feb 24 18:15:22 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47b6f-5cb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:d8:9a:77:bb:b2:51:9d:65:0d:fd:b3:de:11: 41:cc:fc:d8:6a:89:a2:91:0d:2c:aa:fd:26:4b:be: 63:b7:eb:d9:d5:3f:f8:10:ef:50:1f:c0:95:ff:cd: fd:a5:1e:98:b8:93:fe:da:e8:a1:78:99:ef:9c:8c: 97:11:35:c5:ec:c8:e5:4e:2c:97:a1:51:40:1c:42: 9f:47:ac:5e:a4:17:bd:5d:c5:a3:42:6f:71:ba:c9: d1:8a:e7:77:bd:fd:7b:92:59:db:0e:15:db:63:e5: ca:e3:24:1b:05:ec:0b:69:45:ed:f6:b9:b7:c8:ec: b4:f2:c1:94:81:e5:33:cc:00:77:41:1d:54:de:50: 37:75:62:ed:b2:4c:34:5d:93:b4:66:fe:ed:64:b3: 0c:78:e0:91:b4:98:b2:7d:d7:d3:52:f2:54:02:fd: 33:ed:25:36:28:9b:03:31:06:14:9c:89:2f:c3:38: ef:f2:17:21:d7:93:57:4f:8b:c2:56:c1:dc:59:38: 98:eb:1a:e0:70:14:35:5b:76:2c:31:78:39:30:11: fe:6c:a1:8e:f2:1d:5c:d5:74:1f:42:e4:20:35:a0: d1:45:5f:b9:8e:ec:b8:9d:c7:67:9e:cc:b7:09:71: 09:9c:ec:a5:15:d7:c8:5a:56:00:54:06:5c:e2:68: 53:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:63:15:C2:E7:4E:58:60:F9:A7:BC:27:02:6F:50:C1:E6:4F:9C:11 X509v3 Authority Key Identifier: keyid:DD:A7:F8:A7:4A:0A:74:CF:F6:EB:63:04:28:B6:C9:D7:0D:57:BD:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/3af4p0oKdM_262MEKLbJ1w1XvXY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3af4p0oKdM_262MEKLbJ1w1XvXY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7BC4/2D1A595AD50D11E9BAD6C226C4F9AE02/CE3FCE34AF1611F0B50BFF7AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.121.47.0/24 211.24.174.0/24 Signature Algorithm: sha256WithRSAEncryption c6:93:a1:2c:ba:8b:6f:7d:12:4f:90:08:26:e8:34:7b:f0:bc: 83:74:41:de:76:7e:59:52:8d:fb:7a:b2:e7:a9:5d:36:69:63: 32:49:e2:df:3f:ea:89:f0:94:4c:cc:5c:72:de:f6:53:36:30: 56:5c:71:dd:07:35:e7:ab:68:b8:60:1d:60:19:90:5f:d1:c1: 75:00:bc:2c:8e:e3:ed:9e:27:90:67:37:27:de:9a:8e:46:6f: 68:85:d3:0d:7f:fa:7d:36:23:5d:c6:1b:6d:6d:e5:02:38:43: 6f:68:af:cd:cb:d0:7e:c9:6e:e3:07:e2:f6:1a:eb:80:04:10: f0:bf:30:11:94:09:55:bf:d0:50:79:99:63:9e:3e:2a:77:9e: d1:58:29:23:0c:e1:70:40:fa:ac:97:41:31:86:85:b6:ae:9b: 12:0a:d0:d6:fa:10:a9:1b:15:b6:2a:23:67:e3:fe:2d:e2:17: ee:f9:47:eb:47:27:b4:87:6c:93:53:54:53:f4:fe:96:20:f7: 84:39:5e:29:a2:8b:dd:92:62:57:e6:6e:a3:93:d8:64:5b:41: 2d:7c:79:72:fe:37:85:c7:3a:a8:80:a1:e2:90:23:5f:ee:c4: 7e:36:c4:01:56:78:01:b1:96:9f:58:bf:7f:02:1e:1f:ad:d3: 3a:a1:8a:e9 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICDkcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTdCQzQxMTAvBgNVBAUTKEREQTdGOEE3NEEwQTc0Q0ZGNkVCNjMwNDI4QjZDOUQ3 MEQ1N0JENzYwHhcNMjYwMjI0MTgxNTIyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2I2Zi01Y2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6diad7uyUZ1lDf2z3hFBzPzYaomikQ0sqv0mS75jt+vZ1T/4EO9QH8CV/839 pR6YuJP+2uiheJnvnIyXETXF7MjlTiyXoVFAHEKfR6xepBe9XcWjQm9xusnRiud3 vf17klnbDhXbY+XK4yQbBewLaUXt9rm3yOy08sGUgeUzzAB3QR1U3lA3dWLtskw0 XZO0Zv7tZLMMeOCRtJiyfdfTUvJUAv0z7SU2KJsDMQYUnIkvwzjv8hch15NXT4vC VsHcWTiY6xrgcBQ1W3YsMXg5MBH+bKGO8h1c1XQfQuQgNaDRRV+5juy4ncdnnsy3 CXEJnOylFdfIWlYAVAZc4mhTqQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFBxjFcLn Tlhg+ae8JwJvUMHmT5wRMB8GA1UdIwQYMBaAFN2n+KdKCnTP9utjBCi2ydcNV712 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFN0JDNC8yRDFBNTk1QUQ1 MEQxMUU5QkFENkMyMjZDNEY5QUUwMi8zYWY0cDBvS2RNXzI2Mk1FS0xiSjF3MVh2 WFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzNhZjRwMG9LZE1fMjYyTUVLTGJKMXcxWHZYWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTdCQzQvMkQxQTU5NUFENTBEMTFFOUJBRDZDMjI2QzRGOUFFMDIvQ0UzRkNFMzRB RjE2MTFGMEI1MEJGRjdBQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAy3kvAwQA0xiuMA0GCSqGSIb3DQEBCwUAA4IBAQDGk6EsuotvfRJP kAgm6DR78LyDdEHedn5ZUo37erLnqV02aWMySeLfP+qJ8JRMzFxy3vZTNjBWXHHd BzXnq2i4YB1gGZBf0cF1ALwsjuPtnieQZzcn3pqORm9ohdMNf/p9NiNdxhttbeUC OENvaK/Ny9B+yW7jB+L2GuuABBDwvzARlAlVv9BQeZljnj4qd57RWCkjDOFwQPqs l0ExhoW2rpsSCtDW+hCpGxW2KiNn4/4t4hfu+UfrRye0h2yTU1RT9P6WIPeEOV4p oovdkmJX5m6jk9hkW0EtfHly/jeFxzqogKHikCNf7sR+NsQBVngBsZafWL9/Ah4f rdM6oYrp -----END CERTIFICATE-----Generated at Thu Mar 26 07:49:42 2026 by rpki-client