$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/3B5A1BBA21F411F0848CDE7EC4F9AE02.roa File: 3B5A1BBA21F411F0848CDE7EC4F9AE02.roa (raw, json) Hash identifier: xXN9mX48NmFk2vcx7rwVXSG4y30L3OeYK6lw11JbwLA= Subject key identifier: 75:E1:35:B4:85:3E:A6:0D:D4:62:B5:11:18:08:0A:CD:1A:E7:26:E7 Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: B3 Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/3B5A1BBA21F411F0848CDE7EC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:15:17 +0000 ROA not before: Tue 03 Jun 2025 08:17:53 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 396982 IP address blocks: 203.25.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Jun 3 08:17:53 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a59b75-a58a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:67:dd:b5:c8:70:e9:be:75:91:88:bf:d3: 2b:a8:f5:8e:cf:ae:a2:2f:83:c2:a3:f9:54:d7:12: cc:2a:ed:7c:0c:5f:d0:1a:9f:23:4a:b0:95:b8:3d: cc:4e:2d:b6:93:91:f4:8c:71:05:98:4f:c2:4c:b0: 66:56:38:10:63:b2:92:ce:2f:99:69:bc:2e:07:3c: ed:48:ad:2c:87:a3:5b:da:5f:86:69:0e:b2:f5:81: 89:d5:c3:67:c0:d0:74:02:a0:cf:c2:cd:1f:66:19: a6:a6:4d:b9:c6:78:49:87:98:6e:6a:da:04:69:b0: 9a:b8:80:ae:3e:4b:f5:50:50:bc:d4:97:8c:05:52: 4b:94:d4:cd:24:0d:43:39:b9:72:23:76:eb:46:05: 31:ea:66:9d:96:a4:47:1f:86:00:70:d9:bf:00:d3: 9f:3d:33:a8:79:35:84:0e:79:68:29:bb:14:84:5f: ec:2e:97:0d:ee:cf:7e:d9:cf:79:27:16:9e:6d:f5: b2:5b:27:88:db:62:cb:de:9e:d3:71:6f:58:67:49: 63:2c:2b:14:e3:56:18:14:5d:c1:73:29:e7:2a:6f: 29:b0:03:6d:98:3d:66:c3:f6:67:61:6f:5d:e4:09: 64:14:5b:c3:88:3e:7e:29:30:0f:b2:97:35:ff:03: af:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E1:35:B4:85:3E:A6:0D:D4:62:B5:11:18:08:0A:CD:1A:E7:26:E7 X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/3B5A1BBA21F411F0848CDE7EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.25.240.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:4e:65:a8:e5:7d:02:75:17:98:72:8e:80:29:49:b5:09:43: 58:b2:60:99:8e:c0:12:d9:bb:de:f4:61:09:6a:1d:43:fc:f4: af:6b:45:c4:76:b9:ab:da:dc:46:28:f6:6e:83:c3:fc:d4:b2: e9:7f:5c:f8:c2:f4:e1:a1:d9:66:53:04:47:76:42:74:ea:6a: 92:01:c1:69:08:d3:f1:84:8a:8d:22:f8:df:62:48:28:90:0a: 98:f5:43:30:18:27:5b:bf:23:5f:f8:b6:5d:1f:de:15:56:39: 82:33:e6:49:94:78:12:ed:73:00:bd:87:e6:9e:66:e8:86:17: e7:cc:b4:1e:19:31:e7:0e:5d:1d:72:d2:29:a9:6c:ab:10:4e: 95:67:0c:53:02:fc:a8:d0:03:a1:de:50:d5:f8:ef:0d:89:1b: 1d:90:61:31:50:fe:b4:36:f9:ee:0c:ed:58:a5:9d:3d:7c:46: fc:9c:a3:18:91:bd:a3:64:c9:59:d4:24:22:76:6a:42:bd:47: 76:b2:75:04:bc:3a:08:c9:af:aa:68:f7:f0:92:73:32:61:ab: a8:3a:b6:68:51:53:a0:68:36:90:3b:dd:37:46:93:a5:94:48: 59:81:4f:74:60:b2:6c:41:bd:22:e8:04:8b:6a:bc:e4:42:6d: 0b:c5:44:66 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3QUIxMTAvBgNVBAUTKDk0QzhFRjNGMkE5MjJFRTE0NEFBNkYwQjY2NDM2Q0E0 NjZDQzRCMEEwHhcNMjUwNjAzMDgxNzUzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWI3NS1hNThhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAouln3bXIcOm+dZGIv9MrqPWOz66iL4PCo/lU1xLMKu18DF/QGp8jSrCVuD3M Ti22k5H0jHEFmE/CTLBmVjgQY7KSzi+ZabwuBzztSK0sh6Nb2l+GaQ6y9YGJ1cNn wNB0AqDPws0fZhmmpk25xnhJh5huatoEabCauICuPkv1UFC81JeMBVJLlNTNJA1D OblyI3brRgUx6madlqRHH4YAcNm/ANOfPTOoeTWEDnloKbsUhF/sLpcN7s9+2c95 JxaebfWyWyeI22LL3p7TcW9YZ0ljLCsU41YYFF3BcynnKm8psANtmD1mw/ZnYW9d 5AlkFFvDiD5+KTAPspc1/wOvmQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHXhNbSF PqYN1GK1ERgICs0a5ybnMB8GA1UdIwQYMBaAFJTI7z8qki7hRKpvC2ZDbKRmzEsK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzdBQi8yNjQ4NDU5MDIx RjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1RkVxbThMWmtOc3BHYk1T d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjM3QUIvMjY0ODQ1OTAyMUYzMTFGMEEyODEzNTdBQzRGOUFFMDIvM0I1QTFCQkEy MUY0MTFGMDg0OENERTdFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyxnwMA0GCSqGSIb3DQEBCwUAA4IBAQBfTmWo5X0CdReYco6AKUm1 CUNYsmCZjsAS2bve9GEJah1D/PSva0XEdrmr2txGKPZug8P81LLpf1z4wvThodlm UwRHdkJ06mqSAcFpCNPxhIqNIvjfYkgokAqY9UMwGCdbvyNf+LZdH94VVjmCM+ZJ lHgS7XMAvYfmnmbohhfnzLQeGTHnDl0dctIpqWyrEE6VZwxTAvyo0AOh3lDV+O8N iRsdkGExUP60NvnuDO1YpZ09fEb8nKMYkb2jZMlZ1CQidmpCvUd2snUEvDoIya+q aPfwknMyYauoOrZoUVOgaDaQO903RpOllEhZgU90YLJsQb0i6ASLarzkQm0LxURm -----END CERTIFICATE-----Generated at Thu Mar 26 06:52:47 2026 by rpki-client