$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa File: 2F320256981611EB904AF150C4F9AE02.roa (raw, json) Hash identifier: kVGS0pERj+ehgp3eCMO0bHsXxIKn5tT9aw6XzPuGGIM= Subject key identifier: 3A:20:2D:B4:3B:DD:E4:76:D1:B3:1D:80:01:FE:2E:61:C1:99:1C:AC Certificate issuer: /CN=A91FF84F/serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Certificate serial: 06C1 Authority key identifier: 71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:34:10 +0000 ROA not before: Sun 02 Nov 2025 22:42:24 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 141365 IP address blocks: 203.7.172.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 22:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1729 (0x6c1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF84F, serialNumber=7141C319BB44BFBCDE3382B3BB691265F95D309F Validity Not Before: Nov 2 22:42:24 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a43242-10eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5b:92:00:47:84:d7:d4:df:23:8b:d1:77:bf: ef:8e:36:29:e3:2f:30:d2:da:e4:c0:8b:cf:79:f8: 6e:ca:75:57:e6:00:04:bc:68:a5:45:51:11:80:19: cb:4b:64:26:75:1a:eb:7c:46:c6:50:2d:a6:f9:b9: f4:99:ca:44:ea:58:09:3c:84:33:b2:2d:05:92:d3: b8:bd:07:e6:96:63:cc:14:98:0e:82:50:a4:89:47: f4:8f:13:86:e0:c6:43:94:8b:3b:91:ea:15:8c:35: 4d:be:4d:a3:ef:1d:19:c6:df:2b:f6:79:90:a2:f7: 4d:18:8d:43:06:b1:03:a3:89:63:7b:86:12:fa:ac: ed:c5:30:90:e2:c4:10:a7:95:7a:55:5f:61:e6:f3: b0:36:10:fc:ab:fa:e6:c5:bb:13:d9:2f:63:c8:62: 9c:37:4e:d8:b5:a7:19:62:2d:d4:ee:9a:2c:37:54: 63:82:73:aa:53:1f:00:d7:23:c0:cb:c6:bc:a9:49: df:9e:d9:6e:49:3a:90:ad:1d:99:6a:1d:21:50:75: 29:bb:ca:75:68:ad:bc:87:ee:e4:f2:d3:47:63:e9: 45:dc:5c:2c:06:f2:b0:1e:cd:dc:91:9e:95:af:fb: 5a:85:e2:8d:4a:77:bb:09:8c:4b:b3:c8:f6:d4:6b: 0c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:20:2D:B4:3B:DD:E4:76:D1:B3:1D:80:01:FE:2E:61:C1:99:1C:AC X509v3 Authority Key Identifier: keyid:71:41:C3:19:BB:44:BF:BC:DE:33:82:B3:BB:69:12:65:F9:5D:30:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cUHDGbtEv7zeM4Kzu2kSZfldMJ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF84F/DD487A5C981411EBA4B32150C4F9AE02/2F320256981611EB904AF150C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.7.172.0/23 Signature Algorithm: sha256WithRSAEncryption 09:b4:be:42:47:11:74:0e:9b:5a:b7:8b:34:13:6d:6d:1e:f0: 67:ad:f3:01:ba:68:3a:fc:d1:69:a4:7f:ef:15:ac:c5:b8:74: a7:df:fe:64:40:5a:e3:9f:93:eb:9e:64:5e:99:23:db:e0:0c: 30:f9:29:07:80:2a:96:34:97:3c:ee:61:30:6f:30:2a:f5:92: 62:a7:75:3c:32:09:23:4d:3e:97:04:9d:7a:03:a0:f3:86:61: f7:7a:f8:10:02:69:65:ce:d8:79:03:0d:71:07:4e:e9:1f:5d: c9:1b:6c:c7:85:1b:e1:0f:12:6b:d6:89:32:1e:4e:ca:94:a9: e8:e3:5c:56:8b:03:77:72:44:55:d7:a8:5a:dc:8b:16:cf:2d: e0:05:e0:fc:db:9a:ec:a5:52:f6:c0:4f:d7:5c:ca:5e:60:38: 6c:0d:76:8b:c5:07:9c:8d:1d:14:5f:0c:6b:60:1e:5a:12:ec: 40:0f:38:94:12:56:95:d1:ab:70:d9:31:5e:a0:f7:dd:71:4e: f7:a5:53:ad:3b:d1:7b:78:cb:bc:ac:fb:5d:3d:0e:1e:5f:54: 6e:a1:5f:f1:51:4b:53:fc:cf:e8:0d:27:a1:bc:a4:d1:4f:1c: 73:e5:2f:da:1a:47:83:de:5a:be:ed:a3:11:3a:26:74:9d:44: 28:b3:93:31 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY4NEYxMTAvBgNVBAUTKDcxNDFDMzE5QkI0NEJGQkNERTMzODJCM0JCNjkxMjY1 Rjk1RDMwOUYwHhcNMjUxMTAyMjI0MjI0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MzI0Mi0xMGViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuluSAEeE19TfI4vRd7/vjjYp4y8w0trkwIvPefhuynVX5gAEvGilRVERgBnL S2QmdRrrfEbGUC2m+bn0mcpE6lgJPIQzsi0FktO4vQfmlmPMFJgOglCkiUf0jxOG 4MZDlIs7keoVjDVNvk2j7x0Zxt8r9nmQovdNGI1DBrEDo4lje4YS+qztxTCQ4sQQ p5V6VV9h5vOwNhD8q/rmxbsT2S9jyGKcN07YtacZYi3U7posN1RjgnOqUx8A1yPA y8a8qUnfntluSTqQrR2Zah0hUHUpu8p1aK28h+7k8tNHY+lF3FwsBvKwHs3ckZ6V r/taheKNSne7CYxLs8j21GsMKwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDogLbQ7 3eR20bMdgAH+LmHBmRysMB8GA1UdIwQYMBaAFHFBwxm7RL+83jOCs7tpEmX5XTCf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjg0Ri9ERDQ4N0E1Qzk4 MTQxMUVCQTRCMzIxNTBDNEY5QUUwMi9jVUhER2J0RXY3emVNNEt6dTJrU1pmbGRN SjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NVSERHYnRFdjd6ZU00S3p1MmtTWmZsZE1KOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY4NEYvREQ0ODdBNUM5ODE0MTFFQkE0QjMyMTUwQzRGOUFFMDIvMkYzMjAyNTY5 ODE2MTFFQjkwNEFGMTUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBywesMA0GCSqGSIb3DQEBCwUAA4IBAQAJtL5CRxF0Dptat4s0E21t HvBnrfMBumg6/NFppH/vFazFuHSn3/5kQFrjn5PrnmRemSPb4Aww+SkHgCqWNJc8 7mEwbzAq9ZJip3U8MgkjTT6XBJ16A6DzhmH3evgQAmllzth5Aw1xB07pH13JG2zH hRvhDxJr1okyHk7KlKno41xWiwN3ckRV16ha3IsWzy3gBeD825rspVL2wE/XXMpe YDhsDXaLxQecjR0UXwxrYB5aEuxADziUElaV0atw2TFeoPfdcU73pVOtO9F7eMu8 rPtdPQ4eX1RuoV/xUUtT/M/oDSehvKTRTxxz5S/aGkeD3lq+7aMROiZ0nUQos5Mx -----END CERTIFICATE-----Generated at Sat Mar 28 12:07:38 2026 by rpki-client