$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/24E20F9E6B7011F0ACA1BB56C4F9AE02.roa File: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (raw, json) Hash identifier: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ= Subject key identifier: 53:FD:D2:FA:8A:56:56:30:97:D5:6B:CC:C0:3E:97:38:AE:ED:57:DA Certificate issuer: /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Certificate serial: E0 Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/24E20F9E6B7011F0ACA1BB56C4F9AE02.roa Signing time: Thu 05 Mar 2026 05:43:15 +0000 ROA not before: Thu 05 Mar 2026 05:43:15 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 8075 IP address blocks: 163.61.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:53:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 224 (0xe0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3 Validity Not Before: Mar 5 05:43:15 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69a917f3-dba4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:63:6c:8d:85:bc:13:e1:89:ac:be:c1:07:19: 6f:64:5f:11:49:64:a9:9f:37:6b:e0:25:64:ed:04: 4e:26:1f:bf:a5:40:c4:77:2a:4d:f2:b8:93:67:9d: cf:47:b5:8b:7a:df:9a:13:4b:5d:90:e8:f8:8c:0e: 77:fe:5a:12:7e:ce:8c:c4:3f:01:3d:5e:ba:d8:db: db:27:43:03:57:3e:4a:d9:6c:c5:64:f6:38:95:eb: a1:7c:c0:43:b5:0f:f7:88:37:25:70:1e:e6:82:d6: 48:a4:f3:1c:2c:25:5f:35:1f:6e:52:5b:24:1a:32: f9:b4:01:56:0f:0d:1d:15:4d:4b:59:0d:8c:bf:60: 4b:fc:69:9d:a4:e6:59:d5:b1:0e:90:9b:74:a7:d0: 47:dc:3b:d3:fb:27:92:44:72:67:25:23:c6:e6:7e: cb:a7:77:3a:49:b3:36:fc:d5:2b:d8:80:a3:90:a5: a9:ee:08:c1:08:bb:6b:27:d0:7c:d3:64:73:13:bf: 1e:37:5d:42:58:85:d8:47:28:09:b7:9f:99:6f:62: ef:db:e9:c4:20:10:f4:70:c8:14:4a:28:da:e9:ee: 0e:af:b3:f2:77:cc:a0:5e:69:76:15:40:a6:69:ae: 60:90:57:5b:4d:7d:90:e4:1a:4b:02:e6:7c:ba:2b: 1d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:FD:D2:FA:8A:56:56:30:97:D5:6B:CC:C0:3E:97:38:AE:ED:57:DA X509v3 Authority Key Identifier: keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/24E20F9E6B7011F0ACA1BB56C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.61.89.0/24 Signature Algorithm: sha256WithRSAEncryption 29:04:0f:26:20:48:24:1e:04:89:3c:6c:d2:36:6f:46:97:a0: 78:74:94:27:02:f8:8c:66:09:2a:44:54:40:f2:30:13:a4:db: 8b:07:2a:50:53:36:fa:99:e6:83:cc:76:fb:37:4a:c6:40:fb: 82:84:a0:3b:6c:b0:14:4d:08:85:8b:97:e5:a0:56:66:95:2d: 41:10:e2:0d:da:57:d1:96:eb:a2:24:29:bf:c2:60:af:87:cc: 78:df:9d:20:ec:e3:6e:24:c8:95:25:d7:f9:37:2e:a9:5a:2b: af:4d:d3:70:89:8e:34:3f:89:8c:c1:05:aa:5d:c8:f6:de:1b: dc:7c:59:07:32:45:25:e9:57:a6:b5:58:9f:1a:ca:60:6a:34: 56:78:de:83:ab:75:40:da:1a:be:37:2c:54:7a:c5:b4:85:4e: d5:55:d2:d6:cc:00:73:91:7d:03:33:26:ad:f5:78:fc:28:ef: f8:9d:a9:1f:9e:c1:76:14:3f:9e:b4:33:c8:fe:f8:4b:2d:c4: df:f7:b8:c6:16:b0:92:5d:b0:73:5b:ba:dd:40:22:ef:98:8d: 05:0e:99:cb:6b:63:d2:c1:27:7d:69:b7:fc:eb:b6:0a:f6:b5: d0:cd:95:29:09:ae:14:7d:87:8d:24:4c:fb:0e:da:f9:16:2a: 6b:ac:24:69 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4RkExMTAvBgNVBAUTKDBCOTIzN0UzQjA4NkI1OEMzQ0Q5Q0U2RkQ0OUFDMjYx RjdENTI1QTMwHhcNMjYwMzA1MDU0MzE1WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE5MTdmMy1kYmE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu2NsjYW8E+GJrL7BBxlvZF8RSWSpnzdr4CVk7QROJh+/pUDEdypN8riTZ53P R7WLet+aE0tdkOj4jA53/loSfs6MxD8BPV662NvbJ0MDVz5K2WzFZPY4leuhfMBD tQ/3iDclcB7mgtZIpPMcLCVfNR9uUlskGjL5tAFWDw0dFU1LWQ2Mv2BL/GmdpOZZ 1bEOkJt0p9BH3DvT+yeSRHJnJSPG5n7Lp3c6SbM2/NUr2ICjkKWp7gjBCLtrJ9B8 02RzE78eN11CWIXYRygJt5+Zb2Lv2+nEIBD0cMgUSija6e4Or7Pyd8ygXml2FUCm aa5gkFdbTX2Q5BpLAuZ8uisdewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFP90vqK VlYwl9VrzMA+lziu7VfaMB8GA1UdIwQYMBaAFAuSN+OwhrWMPNnOb9SawmH31SWj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhGQS9EMzdGNjI1Q0U3 M0QxMUVGOEEwNDYyMTdDNEY5QUUwMi9DNUkzNDdDR3RZdzgyYzV2MUpyQ1lmZlZK YU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0M1STM0N0NHdFl3ODJjNXYxSnJDWWZmVkphTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjA4RkEvRDM3RjYyNUNFNzNEMTFFRjhBMDQ2MjE3QzRGOUFFMDIvMjRFMjBGOUU2 QjcwMTFGMEFDQTFCQjU2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoz1ZMA0GCSqGSIb3DQEBCwUAA4IBAQApBA8mIEgkHgSJPGzSNm9G l6B4dJQnAviMZgkqRFRA8jATpNuLBypQUzb6meaDzHb7N0rGQPuChKA7bLAUTQiF i5floFZmlS1BEOIN2lfRluuiJCm/wmCvh8x4350g7ONuJMiVJdf5Ny6pWiuvTdNw iY40P4mMwQWqXcj23hvcfFkHMkUl6VemtVifGspgajRWeN6Dq3VA2hq+NyxUesW0 hU7VVdLWzABzkX0DMyat9Xj8KO/4nakfnsF2FD+etDPI/vhLLcTf97jGFrCSXbBz W7rdQCLvmI0FDpnLa2PSwSd9abf867YK9rXQzZUpCa4UfYeNJEz7Dtr5FiprrCRp -----END CERTIFICATE-----Generated at Thu Mar 26 02:00:24 2026 by rpki-client