$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/1CEBECEC229511F1916F29FEAE833773.roa File: 1CEBECEC229511F1916F29FEAE833773.roa (raw, json) Hash identifier: m1cTe0sjbHKB5Ksm5p5JN7pFm5DtOLvmL4Q6d+C3sDY= Subject key identifier: 64:80:55:88:B1:15:A7:CA:FF:4F:35:D2:0B:9C:8F:04:BA:8E:0A:3D Certificate issuer: /CN=A91F1DA2/serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E Certificate serial: 02 Authority key identifier: 55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/1CEBECEC229511F1916F29FEAE833773.roa Signing time: Wed 18 Mar 2026 06:38:46 +0000 ROA not before: Wed 18 Mar 2026 06:38:46 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 153512 IP address blocks: 202.41.16.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:22:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1DA2, serialNumber=5557FD5DD4A08959AEA42A98DE2072ED0501DB4E Validity Not Before: Mar 18 06:38:46 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ba4875-299e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:69:e0:62:dc:a9:97:7f:0b:cb:f7:85:cb:98: f1:77:1b:11:ca:cc:d1:83:aa:0a:db:c6:21:e4:fb: e7:cd:f1:59:45:b2:c7:e8:40:0d:c2:c6:06:21:94: 03:be:44:8b:d3:93:ef:07:5a:80:40:66:ba:ad:78: 8d:52:88:da:2a:5a:c1:85:e4:5b:4b:c4:dd:f1:be: cf:fd:f3:11:91:3f:d8:70:43:94:7b:d6:29:83:d0: 01:82:e6:e5:59:ca:74:85:21:22:af:d5:82:31:5b: 0f:73:93:8c:4c:be:13:43:fd:c5:0c:ff:ec:59:7e: e7:00:da:42:22:7a:e6:a3:ea:0e:98:93:f4:ee:34: 61:3a:b8:43:62:34:3f:72:db:75:ad:51:1d:1f:99: 92:9f:ed:03:58:42:1f:ae:b3:6a:f3:32:d6:1a:8b: 95:2f:16:77:78:87:15:a0:dc:26:a3:fc:56:e6:e4: 51:15:5c:03:24:bd:35:c1:dc:7e:e4:c6:8a:0c:10: e9:7a:42:36:42:e6:5f:66:02:09:a5:a1:6d:e1:22: 9f:46:53:9f:1b:71:ad:7f:c7:95:8b:7c:de:90:cf: 7a:ee:3d:85:35:31:22:15:e5:f8:87:c8:80:37:13: 77:48:92:3a:19:b0:71:68:03:f6:92:2e:9b:2f:55: 29:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:80:55:88:B1:15:A7:CA:FF:4F:35:D2:0B:9C:8F:04:BA:8E:0A:3D X509v3 Authority Key Identifier: keyid:55:57:FD:5D:D4:A0:89:59:AE:A4:2A:98:DE:20:72:ED:05:01:DB:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/VVf9XdSgiVmupCqY3iBy7QUB204.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VVf9XdSgiVmupCqY3iBy7QUB204.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1DA2/B8BA899A229411F1BD86858EAE833773/1CEBECEC229511F1916F29FEAE833773.roa sbgp-ipAddrBlock: critical IPv4: 202.41.16.0/22 Signature Algorithm: sha256WithRSAEncryption 48:d6:44:3f:15:e1:4f:83:91:4a:b0:1a:18:24:59:c1:a4:1c: 9f:17:64:6b:b2:c9:88:2f:ef:8f:bc:fa:c0:67:ff:01:02:f9: 05:4f:29:5e:04:83:9a:05:52:fb:4c:47:61:76:20:a1:8a:2d: 2c:a7:df:75:0b:1a:5a:ac:40:2e:53:51:10:4a:43:fc:5c:b8: e6:57:46:02:e3:d0:9b:19:fc:e6:98:62:e1:3b:3d:b2:e0:0d: 02:a8:1c:8c:2a:c2:df:cf:32:84:cf:9c:31:e8:12:5c:4f:34: 06:4c:9d:4e:b2:78:11:8d:2d:8c:b8:f2:9a:d9:2d:69:34:5a: 66:d8:da:0e:e1:e2:42:65:56:85:39:0c:41:f3:57:11:fd:3f: 92:20:d2:76:88:72:c2:08:ad:a3:29:57:05:c4:b3:f5:9f:47: 18:98:f4:af:b2:e0:10:67:6e:65:94:72:11:20:db:aa:a0:c1: 14:af:63:f7:86:8a:04:46:d4:01:59:a8:2c:0f:f2:dc:4b:d7: ff:0f:f2:a9:71:9d:4c:89:e5:ed:99:77:a9:fb:2e:ee:db:d8: 9f:fc:02:d6:71:41:1d:f1:07:4c:69:8d:56:56:dd:3f:59:61: e7:3d:c2:e5:57:10:54:58:83:1e:3f:3d:21:64:fe:9d:41:6c: 70:c0:b9:ad -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MURBMjExMC8GA1UEBRMoNTU1N0ZENURENEEwODk1OUFFQTQyQTk4REUyMDcyRUQw NTAxREI0RTAeFw0yNjAzMTgwNjM4NDZaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YmE0ODc1LTI5OWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNaeBi3KmXfwvL94XLmPF3GxHKzNGDqgrbxiHk++fN8VlFssfoQA3CxgYhlAO+ RIvTk+8HWoBAZrqteI1SiNoqWsGF5FtLxN3xvs/98xGRP9hwQ5R71imD0AGC5uVZ ynSFISKv1YIxWw9zk4xMvhND/cUM/+xZfucA2kIieuaj6g6Yk/TuNGE6uENiND9y 23WtUR0fmZKf7QNYQh+us2rzMtYai5UvFnd4hxWg3Caj/Fbm5FEVXAMkvTXB3H7k xooMEOl6QjZC5l9mAgmloW3hIp9GU58bca1/x5WLfN6Qz3ruPYU1MSIV5fiHyIA3 E3dIkjoZsHFoA/aSLpsvVSkNAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUZIBViLEV p8r/TzXSC5yPBLqOCj0wHwYDVR0jBBgwFoAUVVf9XdSgiVmupCqY3iBy7QUB204w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxREEyL0I4QkE4OTlBMjI5 NDExRjFCRDg2ODU4RUFFODMzNzczL1ZWZjlYZFNnaVZtdXBDcVkzaUJ5N1FVQjIw NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVlZmOVhkU2dpVm11cENxWTNpQnk3UVVCMjA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MURBMi9COEJBODk5QTIyOTQxMUYxQkQ4Njg1OEVBRTgzMzc3My8xQ0VCRUNFQzIy OTUxMUYxOTE2RjI5RkVBRTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALKKRAwDQYJKoZIhvcNAQELBQADggEBAEjWRD8V4U+DkUqwGhgkWcGk HJ8XZGuyyYgv74+8+sBn/wEC+QVPKV4Eg5oFUvtMR2F2IKGKLSyn33ULGlqsQC5T URBKQ/xcuOZXRgLj0JsZ/OaYYuE7PbLgDQKoHIwqwt/PMoTPnDHoElxPNAZMnU6y eBGNLYy48prZLWk0WmbY2g7h4kJlVoU5DEHzVxH9P5Ig0naIcsIIraMpVwXEs/Wf RxiY9K+y4BBnbmWUchEg26qgwRSvY/eGigRG1AFZqCwP8txL1/8P8qlxnUyJ5e2Z d6n7Lu7b2J/8AtZxQR3xB0xpjVZW3T9ZYec9wuVXEFRYgx4/PSFk/p1BbHDAua0= -----END CERTIFICATE-----Generated at Thu Mar 26 01:58:11 2026 by rpki-client