$ rpki-client -vvf rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/3C2E004221F411F0848CDE7EC4F9AE02.roa File: 3C2E004221F411F0848CDE7EC4F9AE02.roa (raw, json) Hash identifier: e1py/Dvzt5ULhjodeT2xOCGPBlZKvYaIHOb5jKyG0BQ= Subject key identifier: 1F:86:7C:63:A4:71:06:A0:57:19:D3:55:80:FD:26:79:30:BD:5C:B5 Certificate issuer: /CN=A91F37AB/serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Certificate serial: B2 Authority key identifier: 94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/3C2E004221F411F0848CDE7EC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:15:17 +0000 ROA not before: Tue 03 Jun 2025 08:17:52 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 17378 IP address blocks: 203.23.39.0/24 maxlen: 24 203.33.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 178 (0xb2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F37AB, serialNumber=94C8EF3F2A922EE144AA6F0B66436CA466CC4B0A Validity Not Before: Jun 3 08:17:52 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a59b74-ce7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:08:90:e0:d8:ad:7e:1b:23:68:d8:90:e5:ab: a3:02:46:24:12:50:39:0f:9f:41:fb:3d:90:8d:43: e2:fe:11:42:e5:8d:11:db:69:55:61:77:bd:80:a3: 4c:e8:d6:ff:4b:02:d5:4b:4d:cd:27:be:01:ef:72: a0:37:57:51:00:63:39:9a:35:10:6a:d4:63:a1:43: 87:bf:c7:b1:5c:7a:ae:4b:bb:bc:26:06:08:76:c3: 1b:1b:7a:18:35:64:77:c6:19:2d:eb:d8:c2:26:c6: 62:a4:b8:e1:23:d5:53:05:c4:89:5b:52:2f:5c:99: 96:71:2d:c0:d9:04:14:32:c7:07:ac:6c:5f:73:98: 4a:3f:d3:9c:9c:e6:de:02:a9:bd:c3:87:c8:fe:30: 29:26:c3:80:fb:6f:1e:27:56:68:ce:c6:c4:19:cb: 47:88:c0:5b:d0:26:a8:75:02:84:65:d7:2c:57:30: d8:f3:2e:6f:45:6a:b3:e4:2f:bd:75:72:36:50:0b: 22:12:95:f4:f7:5c:9e:45:d5:1c:e5:d7:db:ca:e5: 20:d8:49:20:54:fa:3f:07:36:ab:22:f0:d6:82:80: 6d:b2:f1:e6:b9:ff:e8:5a:74:9c:7d:20:6b:5b:df: fb:c2:cc:b2:2a:22:bf:15:b3:06:ca:86:15:c3:0c: b8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:86:7C:63:A4:71:06:A0:57:19:D3:55:80:FD:26:79:30:BD:5C:B5 X509v3 Authority Key Identifier: keyid:94:C8:EF:3F:2A:92:2E:E1:44:AA:6F:0B:66:43:6C:A4:66:CC:4B:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/lMjvPyqSLuFEqm8LZkNspGbMSwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lMjvPyqSLuFEqm8LZkNspGbMSwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F37AB/2648459021F311F0A281357AC4F9AE02/3C2E004221F411F0848CDE7EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.23.39.0/24 203.33.231.0/24 Signature Algorithm: sha256WithRSAEncryption 4f:b1:0a:35:d2:05:ae:95:2d:8f:cf:a4:eb:4d:a0:f2:8c:88: 8e:b8:6a:75:d2:ad:aa:4b:8e:62:ba:57:5c:0f:6d:48:6f:df: f8:dc:62:27:60:a6:b1:81:bf:c9:9b:42:5d:1b:24:62:37:0a: d0:1e:0c:61:5f:2d:56:cf:7c:c7:9e:19:dd:e7:af:51:6b:77: 1d:0a:5d:cf:72:c4:46:9d:b2:d4:73:53:84:11:ba:a2:77:ea: 4a:b4:65:e9:60:06:b8:f5:3e:47:a1:24:3b:6b:4a:ec:21:8d: ee:1e:7c:fd:6a:2d:b1:ad:28:48:ce:f0:67:7c:b0:99:6d:c8: e6:17:3d:77:4b:37:eb:50:57:1c:64:66:ca:46:ec:2e:6f:35: 12:c7:f3:7c:f6:63:b5:10:5d:f8:a2:a6:87:ae:62:51:57:72: 88:16:78:37:59:0c:34:18:11:e2:2e:e1:02:a1:b6:3f:1e:98: b0:44:23:4b:37:39:de:67:28:80:3c:b6:61:01:7c:2e:00:9f: 05:3c:bf:51:8c:1b:bf:43:68:88:b3:35:6c:a8:f4:65:80:61: 4c:29:a4:7a:49:d5:a0:0c:2c:7f:8c:b9:f7:b3:5c:7d:88:a6: b5:78:4a:96:0d:77:af:e8:c8:fd:76:14:a4:62:7a:c8:1b:6a: 52:c0:71:7e -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICALIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjM3QUIxMTAvBgNVBAUTKDk0QzhFRjNGMkE5MjJFRTE0NEFBNkYwQjY2NDM2Q0E0 NjZDQzRCMEEwHhcNMjUwNjAzMDgxNzUyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWI3NC1jZTdlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArgiQ4NitfhsjaNiQ5aujAkYkElA5D59B+z2QjUPi/hFC5Y0R22lVYXe9gKNM 6Nb/SwLVS03NJ74B73KgN1dRAGM5mjUQatRjoUOHv8exXHquS7u8JgYIdsMbG3oY NWR3xhkt69jCJsZipLjhI9VTBcSJW1IvXJmWcS3A2QQUMscHrGxfc5hKP9OcnObe Aqm9w4fI/jApJsOA+28eJ1ZozsbEGctHiMBb0CaodQKEZdcsVzDY8y5vRWqz5C+9 dXI2UAsiEpX091yeRdUc5dfbyuUg2EkgVPo/BzarIvDWgoBtsvHmuf/oWnScfSBr W9/7wsyyKiK/FbMGyoYVwwy49QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFB+GfGOk cQagVxnTVYD9JnkwvVy1MB8GA1UdIwQYMBaAFJTI7z8qki7hRKpvC2ZDbKRmzEsK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzdBQi8yNjQ4NDU5MDIx RjMxMUYwQTI4MTM1N0FDNEY5QUUwMi9sTWp2UHlxU0x1RkVxbThMWmtOc3BHYk1T d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xNanZQeXFTTHVGRXFtOExaa05zcEdiTVN3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjM3QUIvMjY0ODQ1OTAyMUYzMTFGMEEyODEzNTdBQzRGOUFFMDIvM0MyRTAwNDIy MUY0MTFGMDg0OENERTdFQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAyxcnAwQAyyHnMA0GCSqGSIb3DQEBCwUAA4IBAQBPsQo10gWulS2P z6TrTaDyjIiOuGp10q2qS45iuldcD21Ib9/43GInYKaxgb/Jm0JdGyRiNwrQHgxh Xy1Wz3zHnhnd569Ra3cdCl3PcsRGnbLUc1OEEbqid+pKtGXpYAa49T5HoSQ7a0rs IY3uHnz9ai2xrShIzvBnfLCZbcjmFz13SzfrUFccZGbKRuwubzUSx/N89mO1EF34 oqaHrmJRV3KIFng3WQw0GBHiLuECobY/HpiwRCNLNzneZyiAPLZhAXwuAJ8FPL9R jBu/Q2iIszVsqPRlgGFMKaR6SdWgDCx/jLn3s1x9iKa1eEqWDXev6Mj9dhSkYnrI G2pSwHF+ -----END CERTIFICATE-----Generated at Thu Mar 26 19:13:50 2026 by rpki-client