$ rpki-client -vvf rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/AC1CD860039511EBBE8C7F47C4F9AE02.roa File: AC1CD860039511EBBE8C7F47C4F9AE02.roa (raw, json) Hash identifier: 5kk8+8xxY7wf2/VONut3pbRsEED9SU5VAXnPzakUeHo= Subject key identifier: 03:A2:44:AE:81:84:4A:D0:15:99:F8:43:D4:3D:0D:1F:B6:4E:BE:9A Certificate issuer: /CN=A91F367D/serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Certificate serial: 0837 Authority key identifier: AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/AC1CD860039511EBBE8C7F47C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:38:39 +0000 ROA not before: Fri 06 Jun 2025 21:40:18 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 4850 IP address blocks: 203.169.48.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2103 (0x837) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F367D, serialNumber=ABC7528FCE8F7945F460F752748241DAD5678A5A Validity Not Before: Jun 6 21:40:18 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3fb0f-b8a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:98:b9:59:66:e1:74:32:96:76:5b:7d:d1:b7: f0:15:a8:b6:35:96:dd:28:ee:9a:f7:37:a9:7e:7f: db:49:34:ea:62:a7:49:1b:6f:63:85:9d:c2:79:3a: 58:94:a3:d1:23:c2:3b:e9:6b:de:a3:54:df:03:38: 01:17:85:10:5c:3d:b8:c3:45:35:0c:6b:a9:7a:07: ee:35:90:2f:b9:c5:25:8f:56:e5:32:91:39:a2:0c: 72:8f:c4:f0:d9:df:d9:25:07:8a:e0:a0:b7:3a:3f: b4:43:28:66:07:f3:99:ab:e2:b1:2a:f1:19:b3:f3: 93:5c:5d:f2:d0:f5:30:5a:b1:58:e1:45:5c:b5:1d: 9b:e4:06:97:27:09:03:6d:90:fc:31:97:1c:cb:2d: f5:da:e8:24:fb:ba:9d:c4:85:2f:3a:31:15:02:f8: 6f:52:23:b7:54:5f:46:9d:86:85:02:b5:71:a7:ec: dc:0c:9c:37:2e:eb:09:6e:f1:47:01:08:0f:d0:c2: 07:0f:5c:2d:31:e8:31:0b:28:8b:63:96:0b:12:45: 18:4b:ac:31:35:83:05:47:d6:87:37:59:22:10:b4: 84:70:fe:a0:84:49:97:8c:7b:41:2f:75:2a:9c:4d: 4c:e4:91:8a:1c:e5:5b:de:87:97:78:da:dd:5f:bf: 78:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:A2:44:AE:81:84:4A:D0:15:99:F8:43:D4:3D:0D:1F:B6:4E:BE:9A X509v3 Authority Key Identifier: keyid:AB:C7:52:8F:CE:8F:79:45:F4:60:F7:52:74:82:41:DA:D5:67:8A:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/q8dSj86PeUX0YPdSdIJB2tVnilo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q8dSj86PeUX0YPdSdIJB2tVnilo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F367D/99DA7ABE039411EBB6648446C4F9AE02/AC1CD860039511EBBE8C7F47C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.169.48.0/22 Signature Algorithm: sha256WithRSAEncryption 20:f7:f6:3d:34:1c:ba:eb:15:c0:37:1a:1b:56:c5:6b:1e:61: 85:56:b1:82:d3:2d:4a:17:b2:d6:fa:44:ae:8b:4b:6e:61:bc: c6:74:58:a9:3f:f7:4e:9a:eb:93:18:6e:50:69:60:b2:92:26: 8f:68:e5:3c:9b:93:23:83:96:80:b3:c0:43:53:36:b3:31:51: ea:c0:c3:d5:59:88:b1:93:f1:e5:9f:0f:94:13:57:6a:17:3b: 9a:d5:31:80:e4:04:0f:1a:a0:cf:c8:99:62:11:47:7a:b8:8b: fd:6c:a6:fe:c2:b7:12:f4:3e:aa:13:da:2e:a8:e0:c3:d9:ad: 1e:68:96:af:8b:b8:b2:a4:12:23:5f:af:6e:d6:6f:a8:37:84: 1b:27:2e:1b:78:e1:9d:83:d6:89:1f:97:cc:b7:0d:f3:f5:ae: 77:7e:0a:ee:ac:b7:d0:63:57:a7:bb:6e:2a:7c:0f:4a:e1:e0: d4:f9:6f:53:ff:8b:a8:d5:32:31:68:6a:a1:39:c0:9f:c0:fa: 3b:bf:36:75:39:2e:52:cf:d6:8e:3f:d8:5b:3b:d3:72:7f:ac: e6:57:24:c2:e7:5f:12:a3:a2:6a:35:e9:aa:8f:93:4e:53:5e: ce:c9:1b:8f:63:35:1e:95:12:0e:c5:b2:67:56:45:e1:73:06: ea:a4:2c:d2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCDcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM2N0QxMTAvBgNVBAUTKEFCQzc1MjhGQ0U4Rjc5NDVGNDYwRjc1Mjc0ODI0MURB RDU2NzhBNUEwHhcNMjUwNjA2MjE0MDE4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZmIwZi1iOGE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65i5WWbhdDKWdlt90bfwFai2NZbdKO6a9zepfn/bSTTqYqdJG29jhZ3CeTpY lKPRI8I76Wveo1TfAzgBF4UQXD24w0U1DGupegfuNZAvucUlj1blMpE5ogxyj8Tw 2d/ZJQeK4KC3Oj+0QyhmB/OZq+KxKvEZs/OTXF3y0PUwWrFY4UVctR2b5AaXJwkD bZD8MZccyy312ugk+7qdxIUvOjEVAvhvUiO3VF9GnYaFArVxp+zcDJw3LusJbvFH AQgP0MIHD1wtMegxCyiLY5YLEkUYS6wxNYMFR9aHN1kiELSEcP6ghEmXjHtBL3Uq nE1M5JGKHOVb3oeXeNrdX7942wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAOiRK6B hErQFZn4Q9Q9DR+2Tr6aMB8GA1UdIwQYMBaAFKvHUo/Oj3lF9GD3UnSCQdrVZ4pa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzY3RC85OURBN0FCRTAz OTQxMUVCQjY2NDg0NDZDNEY5QUUwMi9xOGRTajg2UGVVWDBZUGRTZElKQjJ0Vm5p bG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3E4ZFNqODZQZVVYMFlQZFNkSUpCMnRWbmlsby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjM2N0QvOTlEQTdBQkUwMzk0MTFFQkI2NjQ4NDQ2QzRGOUFFMDIvQUMxQ0Q4NjAw Mzk1MTFFQkJFOEM3RjQ3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCy6kwMA0GCSqGSIb3DQEBCwUAA4IBAQAg9/Y9NBy66xXANxobVsVr HmGFVrGC0y1KF7LW+kSui0tuYbzGdFipP/dOmuuTGG5QaWCykiaPaOU8m5Mjg5aA s8BDUzazMVHqwMPVWYixk/Hlnw+UE1dqFzua1TGA5AQPGqDPyJliEUd6uIv9bKb+ wrcS9D6qE9ouqODD2a0eaJavi7iypBIjX69u1m+oN4QbJy4beOGdg9aJH5fMtw3z 9a53fgrurLfQY1enu24qfA9K4eDU+W9T/4uo1TIxaGqhOcCfwPo7vzZ1OS5Sz9aO P9hbO9Nyf6zmVyTC518So6JqNemqj5NOU17OyRuPYzUelRIOxbJnVkXhcwbqpCzS -----END CERTIFICATE-----Generated at Thu Mar 26 08:33:20 2026 by rpki-client