$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/A7FBA00E778811EDAE39280CC4F9AE02.roa File: A7FBA00E778811EDAE39280CC4F9AE02.roa (raw, json) Hash identifier: 4Ev/beoW0fM+Gbd3cQLyDxalQ01x9FRD/kJEwmhsUog= Subject key identifier: 53:3C:90:CB:ED:EF:7D:74:3B:BC:C4:EA:E1:2F:44:9C:F0:96:69:BE Certificate issuer: /CN=A91342C5/serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Certificate serial: 0439 Authority key identifier: 85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/A7FBA00E778811EDAE39280CC4F9AE02.roa Signing time: Mon 02 Mar 2026 15:11:22 +0000 ROA not before: Wed 09 Apr 2025 01:07:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 142005 IP address blocks: 64.25.32.0/20 maxlen: 24 206.127.144.0/20 maxlen: 24 209.35.96.0/23 maxlen: 24 209.35.114.0/23 maxlen: 24 209.35.156.0/23 maxlen: 24 209.35.188.0/23 maxlen: 24 216.107.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:03:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1081 (0x439) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Validity Not Before: Apr 9 01:07:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a5a899-1466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:5d:23:0c:1f:a2:d9:02:b3:5c:6f:84:fa: 5a:97:8b:ee:8b:27:86:44:eb:81:fe:6b:8f:c9:b2: 10:97:14:c7:25:d9:1a:d7:06:f7:7f:a8:7c:19:bd: 3a:8c:03:60:57:b5:09:f6:cb:1d:58:20:dd:c1:f4: 1b:d0:cc:f2:84:b2:56:d7:91:30:4a:e4:fc:1c:bc: 63:31:f4:fd:f7:41:88:9b:37:fb:cd:3f:26:54:c6: a3:b5:e9:4f:53:dc:0f:f5:81:f0:93:6a:3e:cd:52: 6e:7d:8f:c4:77:c0:13:86:e2:7d:6f:fa:a8:ad:ea: f5:06:17:09:96:93:14:e9:8a:cf:6c:1b:f6:b2:d2: 87:0e:38:c7:09:22:ee:d2:73:21:20:ea:3f:4d:ce: b0:72:96:44:2d:9b:0f:d0:07:46:4a:75:33:fe:a6: 12:03:03:dc:6e:bf:a2:76:20:d8:ac:75:48:df:5b: c1:b4:a6:ca:5d:0d:33:0c:77:53:12:ce:70:c8:d6: e7:56:df:a3:90:af:7a:2a:58:ed:bf:64:87:55:cf: ef:7e:76:3c:27:4a:32:dd:04:e0:08:bf:25:1a:a7: 69:24:1d:f0:31:ce:66:a0:1a:3b:5f:9c:cf:3d:41: f9:32:df:68:24:91:ad:33:87:1c:75:39:18:7b:3d: 6c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:3C:90:CB:ED:EF:7D:74:3B:BC:C4:EA:E1:2F:44:9C:F0:96:69:BE X509v3 Authority Key Identifier: keyid:85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/A7FBA00E778811EDAE39280CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 64.25.32.0/20 206.127.144.0/20 209.35.96.0/23 209.35.114.0/23 209.35.156.0/23 209.35.188.0/23 216.107.240.0/20 Signature Algorithm: sha256WithRSAEncryption 6f:e7:85:9c:66:7c:74:30:fa:a6:8a:ee:f0:31:90:7c:6c:57: 5b:be:08:21:89:04:28:5a:36:80:c6:4d:5d:bf:70:1a:11:81: b2:8e:04:c3:77:19:97:c0:ad:b2:94:fe:f3:41:4f:6f:2e:c8: 9d:f7:4d:bd:15:c2:b2:6b:10:59:78:1f:ef:ef:e0:32:bf:d5: 70:cd:00:7b:0b:3b:72:ff:ac:cd:55:6a:9f:aa:b7:06:f5:c8: 0f:48:cd:31:a2:ff:b3:a7:2c:10:ca:a9:de:2e:44:dc:63:59: ad:e8:c6:12:b8:83:3a:18:11:f4:97:b5:bc:34:7a:3f:b9:1a: 85:3f:a4:15:4c:6e:4e:ff:26:51:25:be:d2:d6:22:d1:0b:68: d5:4b:74:95:bb:bd:e8:bc:92:94:e8:c9:7c:ec:89:8b:85:b0: 45:02:b0:a9:27:48:7c:a3:22:da:e6:6d:7f:e1:4b:a3:b2:06: 7b:eb:08:f4:68:2a:d6:ba:5f:fe:7a:5d:90:6a:4e:5a:6e:1a: 36:95:a6:60:ba:ca:50:06:f5:2b:dd:6c:31:f4:df:55:53:ee: 95:99:ca:04:52:95:3f:b3:44:7f:cc:d1:61:01:26:0a:32:2a: 3b:78:e3:24:fe:43:3d:c7:3d:c0:20:80:1b:9e:a0:76:6f:da: ed:79:19:63 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDg1RjJCQUYxQjdERjFEQUE4Qzg4QUI2QzVFNzhDMUZD QzNGNzhEMDgwHhcNMjUwNDA5MDEwNzI3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTg5OS0xNDY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0BldIwwfotkCs1xvhPpal4vuiyeGROuB/muPybIQlxTHJdka1wb3f6h8Gb06 jANgV7UJ9ssdWCDdwfQb0MzyhLJW15EwSuT8HLxjMfT990GImzf7zT8mVMajtelP U9wP9YHwk2o+zVJufY/Ed8AThuJ9b/qorer1BhcJlpMU6YrPbBv2stKHDjjHCSLu 0nMhIOo/Tc6wcpZELZsP0AdGSnUz/qYSAwPcbr+idiDYrHVI31vBtKbKXQ0zDHdT Es5wyNbnVt+jkK96Kljtv2SHVc/vfnY8J0oy3QTgCL8lGqdpJB3wMc5moBo7X5zP PUH5Mt9oJJGtM4ccdTkYez1saQIDAQABo4IChDCCAoAwHQYDVR0OBBYEFFM8kMvt 7310O7zE6uEvRJzwlmm+MB8GA1UdIwQYMBaAFIXyuvG33x2qjIirbF54wfzD940I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xRjQwNEUzMEE0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhhcU1pS3RzWG5qQl9NUDNq UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hmSzY4YmZmSGFxTWlLdHNYbmpCX01QM2pRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQyQzUvMUY0MDRFMzBBNEU5MTFFQ0FGM0ZCMTUyQzRGOUFFMDIvQTdGQkEwMEU3 Nzg4MTFFREFFMzkyODBDQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQEQBkgAwQEzn+QAwQB0SNgAwQB0SNyAwQB0SOcAwQB0SO8AwQE2Gvw MA0GCSqGSIb3DQEBCwUAA4IBAQBv54WcZnx0MPqmiu7wMZB8bFdbvgghiQQoWjaA xk1dv3AaEYGyjgTDdxmXwK2ylP7zQU9vLsid9029FcKyaxBZeB/v7+Ayv9VwzQB7 Czty/6zNVWqfqrcG9cgPSM0xov+zpywQyqneLkTcY1mt6MYSuIM6GBH0l7W8NHo/ uRqFP6QVTG5O/yZRJb7S1iLRC2jVS3SVu73ovJKU6Ml87ImLhbBFArCpJ0h8oyLa 5m1/4UujsgZ76wj0aCrWul/+el2Qak5abho2laZguspQBvUr3Wwx9N9VU+6VmcoE UpU/s0R/zNFhASYKMio7eOMk/kM9xz3AIIAbnqB2b9rteRlj -----END CERTIFICATE-----Generated at Thu Mar 26 06:51:43 2026 by rpki-client