$ rpki-client -vvvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/CF1D6B3873B111EEB1254A5AC4F9AE02.roa File: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (raw, json) Hash identifier: 4ZuGDAs202LNuJDLkf18z5g5tn/G5J3YcxHeZovz+9g= Subject key identifier: 64:49:C2:80:7B:66:F2:3E:4A:9B:4E:17:9B:7E:1E:51:2D:82:A9:BC Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Certificate serial: 023C Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/CF1D6B3873B111EEB1254A5AC4F9AE02.roa Signing time: Tue 03 Nov 2026 03:51:38 +0000 ROA not before: Tue 03 Nov 2026 03:51:38 +0000 ROA not after: Mon 31 Jan 2028 00:00:00 +0000 asID: 132468 IP address blocks: 202.63.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 02:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Validity Not Before: Nov 3 03:51:38 2026 GMT Not After : Jan 31 00:00:00 2028 GMT Subject: CN=6ae95a4a-c12e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:dd:81:8b:b5:a4:ef:a6:18:af:ae:88:87:56: a8:94:f1:32:5f:b0:17:83:ef:4c:0d:29:15:74:7d: 56:86:9d:1b:2f:56:9f:d4:01:28:b4:e6:d7:91:8b: bc:b2:27:2a:84:fe:b2:58:cf:f0:4f:7d:08:38:c8: 06:0a:46:35:31:58:4a:45:e6:b0:e3:e5:90:fa:0a: 33:16:dd:a5:de:85:87:8f:27:3e:47:7d:83:b1:5f: 61:39:2f:43:a9:d1:37:04:f0:8b:f4:05:50:61:35: 75:43:31:d1:64:65:d0:32:a4:4a:a9:08:1c:cb:14: d6:01:fb:d1:13:ae:2d:90:5d:79:3e:bf:41:92:e3: a5:d3:4f:d9:c2:57:0f:11:45:43:0e:fb:53:18:f8: df:eb:ca:48:95:dc:c8:05:95:bc:fd:67:23:00:ca: de:a1:24:09:57:57:f7:c2:87:f4:6f:bc:68:22:8f: dd:0d:87:37:e4:1b:3a:23:48:05:fe:6b:87:46:d1: b4:1f:f1:f2:b4:97:a6:be:da:bd:23:5c:8d:76:da: e9:dc:09:7f:ad:57:60:cc:54:4c:e6:25:bf:d2:8d: 10:52:2f:a9:ae:bc:ef:ab:77:26:a6:b7:3f:06:bb: bb:47:44:d2:70:a4:d3:2b:c4:d4:8f:52:3f:07:de: bb:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:49:C2:80:7B:66:F2:3E:4A:9B:4E:17:9B:7E:1E:51:2D:82:A9:BC X509v3 Authority Key Identifier: keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/CF1D6B3873B111EEB1254A5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.63.254.0/23 Signature Algorithm: sha256WithRSAEncryption 6f:85:3b:e3:c6:3f:75:cd:dc:bb:4d:c6:49:37:71:54:ea:05: 6e:75:86:fa:49:f2:19:78:72:28:fe:9c:3a:1d:b9:23:5c:a9: 9e:bf:92:f8:32:20:1e:47:f8:87:03:1d:c6:01:a4:08:c3:c1: 37:78:06:2a:a4:c7:2d:d2:b1:ef:71:8a:84:3a:20:72:8b:0b: 8f:f8:fd:df:a2:62:e3:84:ef:2a:9d:f4:bd:70:44:79:7d:da: 95:1b:74:9e:ab:a9:1a:76:73:0b:07:84:33:aa:e0:1a:2d:34: 7d:bb:90:a7:2d:cb:61:f3:a7:ba:e0:08:2a:aa:d6:ff:ec:e7: 6c:cd:4d:29:de:ad:46:a7:d2:90:8d:a6:7d:b9:b4:cc:6f:5a: b2:5e:1d:34:ec:65:ee:93:96:c7:7e:07:bc:fb:6e:41:61:88: 8e:e0:6d:aa:e2:6b:c5:92:57:e3:38:61:a7:6c:2a:40:d4:31: 55:cf:f7:e3:30:64:53:f5:e2:67:f1:93:95:15:48:b8:f0:11: 94:d9:13:a5:c7:2a:61:18:c0:da:49:10:73:3d:a4:9a:77:52: 09:8a:e3:a2:80:b3:38:d7:b9:3e:61:bd:05:8b:b5:47:ff:00: 2c:30:f9:96:ce:15:22:24:38:54:75:8a:cf:f8:32:2b:2c:4f: f0:56:ff:6f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNzAxMTAvBgNVBAUTKDYyMkU3NjYyRDlGQkUxMEMxQUFFMEJERkU5ODhEQjk5 NkFFM0ZENTkwHhcNMjYxMTAzMDM1MTM4WhcNMjgwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU5NWE0YS1jMTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5d2Bi7Wk76YYr66Ih1aolPEyX7AXg+9MDSkVdH1Whp0bL1af1AEotObXkYu8 sicqhP6yWM/wT30IOMgGCkY1MVhKReaw4+WQ+gozFt2l3oWHjyc+R32DsV9hOS9D qdE3BPCL9AVQYTV1QzHRZGXQMqRKqQgcyxTWAfvRE64tkF15Pr9BkuOl00/ZwlcP EUVDDvtTGPjf68pIldzIBZW8/WcjAMreoSQJV1f3wof0b7xoIo/dDYc35Bs6I0gF /muHRtG0H/HytJemvtq9I1yNdtrp3Al/rVdgzFRM5iW/0o0QUi+prrzvq3cmprc/ Bru7R0TScKTTK8TUj1I/B967rQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGRJwoB7 ZvI+SptOF5t+HlEtgqm8MB8GA1UdIwQYMBaAFGIudmLZ++EMGq4L3+mI25lq4/1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI3MC9DQ0I0NTRBNDcz QTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRRd2FyZ3ZmNllqYm1Xcmpf VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpNTJZdG43NFF3YXJndmY2WWpibVdyal9Way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJCNzAvQ0NCNDU0QTQ3M0E5MTFFRTg0NTI3RjJFQzRGOUFFMDIvQ0YxRDZCMzg3 M0IxMTFFRUIxMjU0QTVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByj/+MA0GCSqGSIb3DQEBCwUAA4IBAQBvhTvjxj91zdy7TcZJN3FU 6gVudYb6SfIZeHIo/pw6HbkjXKmev5L4MiAeR/iHAx3GAaQIw8E3eAYqpMct0rHv cYqEOiByiwuP+P3fomLjhO8qnfS9cER5fdqVG3Seq6kadnMLB4QzquAaLTR9u5Cn Lcth86e64Agqqtb/7OdszU0p3q1Gp9KQjaZ9ubTMb1qyXh007GXuk5bHfge8+25B YYiO4G2q4mvFklfjOGGnbCpA1DFVz/fjMGRT9eJn8ZOVFUi48BGU2ROlxyphGMDa SRBzPaSad1IJiuOigLM417k+Yb0Fi7VH/wAsMPmWzhUiJDhUdYrP+DIrLE/wVv9v -----END CERTIFICATE-----Generated at Sun Nov 15 13:17:52 2026 by rpki-client