$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/DE76B04EC2BA11EB99E5E36FC4F9AE02.roa File: DE76B04EC2BA11EB99E5E36FC4F9AE02.roa (raw, json) Hash identifier: OH/GXZ1q60s4R0UMX3ULerkxFMV9QJvIeVjbm9pioBQ= Subject key identifier: 9A:C6:4B:71:AF:1E:06:DF:CA:B9:26:D9:1C:90:C2:B1:A8:2E:D0:FB Certificate issuer: /CN=A91E9580/serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Certificate serial: 0A97 Authority key identifier: FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/DE76B04EC2BA11EB99E5E36FC4F9AE02.roa Signing time: Mon 02 Mar 2026 11:29:36 +0000 ROA not before: Wed 04 Feb 2026 19:16:48 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 136170 IP address blocks: 123.100.226.0/24 maxlen: 24 202.157.176.0/23 maxlen: 24 202.157.184.0/23 maxlen: 24 202.157.186.0/23 maxlen: 23 202.157.186.0/24 maxlen: 24 202.157.187.0/24 maxlen: 24 202.157.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 19:23:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2711 (0xa97) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9580, serialNumber=FE4FDA3967016C113AC807B849340AC6520F0802 Validity Not Before: Feb 4 19:16:48 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a574a0-4f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:e3:00:72:50:58:64:0f:0f:19:62:65:98: 61:75:9a:c3:d2:24:e6:c8:42:46:bb:02:52:ae:cc: 4f:3f:18:52:8a:61:2c:6b:a9:7d:d0:fd:fc:3b:ba: cc:ee:c0:7e:73:9c:5a:e2:e2:6c:6c:69:43:0c:59: 63:e2:62:f2:dd:da:d4:8e:a5:4a:0d:28:ec:2d:c8: d2:a1:5c:1e:54:a2:a4:79:bd:30:65:8d:8b:98:11: 0c:32:5d:f1:25:71:ff:16:31:7f:a3:66:bc:0a:82: 01:85:98:e1:dc:b5:11:7f:82:ca:a5:97:78:b0:5c: 40:ca:9f:ab:0e:a0:cf:50:a8:08:1d:7b:59:76:1a: 9a:bc:15:e5:c6:e8:79:8b:be:25:68:ce:0c:b5:e9: d3:c1:1a:1e:eb:18:7f:e7:71:ba:9c:1a:e5:cc:a4: c2:ab:5a:ec:a9:77:a6:3b:87:fd:93:00:1e:0d:06: 18:e8:5c:8b:01:13:c5:56:d5:f9:99:3c:de:50:c7: 90:c8:78:21:87:52:4d:e3:51:ca:8f:e9:cb:46:67: 66:ee:e4:ed:61:b4:52:c3:68:58:68:fa:52:fe:f1: 84:1a:74:6f:fc:db:fb:6a:12:a2:0c:5f:6c:53:9e: f5:2a:29:c5:c3:85:bb:6c:93:fd:51:79:da:d7:f2: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C6:4B:71:AF:1E:06:DF:CA:B9:26:D9:1C:90:C2:B1:A8:2E:D0:FB X509v3 Authority Key Identifier: keyid:FE:4F:DA:39:67:01:6C:11:3A:C8:07:B8:49:34:0A:C6:52:0F:08:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/_k_aOWcBbBE6yAe4STQKxlIPCAI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_k_aOWcBbBE6yAe4STQKxlIPCAI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9580/C7CE2E107F8D11EAAD8CD51EC4F9AE02/DE76B04EC2BA11EB99E5E36FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 123.100.226.0/24 202.157.176.0/23 202.157.184.0-202.157.189.255 Signature Algorithm: sha256WithRSAEncryption 5c:fe:10:80:47:32:9f:16:98:b2:64:10:fb:b8:fe:b1:4e:23: e3:e9:d9:ad:6e:b3:d9:15:fc:02:29:76:50:a8:36:b1:02:fe: 6a:0e:55:28:f4:58:4a:6c:45:24:3c:8d:08:41:97:6d:d5:a7: 35:1d:57:7b:21:e6:5f:e0:bf:e9:5b:81:82:67:d2:85:7b:3a: 1e:c3:3a:e9:c4:16:5c:55:13:59:58:84:17:aa:8a:91:11:5b: 19:6c:90:22:1b:75:b3:49:1c:58:ff:ec:01:33:c5:f1:bd:a1: 96:bb:43:79:69:d7:65:db:99:21:74:41:6b:95:76:c5:88:08: a1:ed:ec:d5:e5:54:fb:4b:eb:a1:4e:e4:0f:ed:e4:ee:b1:34: 15:ec:a0:f9:48:43:a4:9e:34:55:89:b2:ca:6f:1d:f5:48:66: 73:40:4b:5e:00:a9:8a:bf:98:8c:a3:8d:20:01:2f:b1:a4:fc: 2a:10:77:77:e8:e7:22:33:28:54:18:d6:5c:f2:12:59:44:82: 64:fb:f1:fa:14:00:b2:13:01:04:ab:c4:43:2c:4f:5b:8e:f2: 83:95:79:f7:86:49:34:f0:a9:a3:15:f4:9d:10:74:4a:05:18: 7a:5e:42:c1:50:c6:91:35:c6:10:93:2b:c9:bf:bd:0a:b5:da: 30:31:1d:db -----BEGIN CERTIFICATE----- MIIFUDCCBDigAwIBAgICCpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk1ODAxMTAvBgNVBAUTKEZFNEZEQTM5NjcwMTZDMTEzQUM4MDdCODQ5MzQwQUM2 NTIwRjA4MDIwHhcNMjYwMjA0MTkxNjQ4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1NzRhMC00ZjFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuEnjAHJQWGQPDxliZZhhdZrD0iTmyEJGuwJSrsxPPxhSimEsa6l90P38O7rM 7sB+c5xa4uJsbGlDDFlj4mLy3drUjqVKDSjsLcjSoVweVKKkeb0wZY2LmBEMMl3x JXH/FjF/o2a8CoIBhZjh3LURf4LKpZd4sFxAyp+rDqDPUKgIHXtZdhqavBXlxuh5 i74laM4MtenTwRoe6xh/53G6nBrlzKTCq1rsqXemO4f9kwAeDQYY6FyLARPFVtX5 mTzeUMeQyHghh1JN41HKj+nLRmdm7uTtYbRSw2hYaPpS/vGEGnRv/Nv7ahKiDF9s U571KinFw4W7bJP9UXna1/J/XwIDAQABo4ICdDCCAnAwHQYDVR0OBBYEFJrGS3Gv Hgbfyrkm2RyQwrGoLtD7MB8GA1UdIwQYMBaAFP5P2jlnAWwROsgHuEk0CsZSDwgC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTU4MC9DN0NFMkUxMDdG OEQxMUVBQUQ4Q0Q1MUVDNEY5QUUwMi9fa19hT1djQmJCRTZ5QWU0U1RRS3hsSVBD QUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19rX2FPV2NCYkJFNnlBZTRTVFFLeGxJUENBSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk1ODAvQzdDRTJFMTA3RjhEMTFFQUFEOENENTFFQzRGOUFFMDIvREU3NkIwNEVD MkJBMTFFQjk5RTVFMzZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBwEHAQH/BCQwIjAg BAIAATAaAwQAe2TiAwQByp2wMAwDBAPKnbgDBAHKnbwwDQYJKoZIhvcNAQELBQAD ggEBAFz+EIBHMp8WmLJkEPu4/rFOI+Pp2a1us9kV/AIpdlCoNrEC/moOVSj0WEps RSQ8jQhBl23VpzUdV3sh5l/gv+lbgYJn0oV7Oh7DOunEFlxVE1lYhBeqipERWxls kCIbdbNJHFj/7AEzxfG9oZa7Q3lp12XbmSF0QWuVdsWICKHt7NXlVPtL66FO5A/t 5O6xNBXsoPlIQ6SeNFWJsspvHfVIZnNAS14AqYq/mIyjjSABL7Gk/CoQd3fo5yIz KFQY1lzyEllEgmT78foUALITAQSrxEMsT1uO8oOVefeGSTTwqaMV9J0QdEoFGHpe QsFQxpE1xhCTK8m/vQq12jAxHds= -----END CERTIFICATE-----Generated at Thu Mar 26 06:50:50 2026 by rpki-client