$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/2428B7AE5D3A11EBA0F5C625C4F9AE02.roa File: 2428B7AE5D3A11EBA0F5C625C4F9AE02.roa (raw, json) Hash identifier: e3Igk7JGin4zvto1g58XN3HPCbdLcnRxUbaa2ZjzIbQ= Subject key identifier: 86:92:54:DC:D0:31:E3:86:56:39:40:5D:8B:CA:6F:BA:BE:08:7C:CF Certificate issuer: /CN=A916B95C/serialNumber=5BADFED330D65CA0BAB3F73901CB95305A207DC3 Certificate serial: 0754 Authority key identifier: 5B:AD:FE:D3:30:D6:5C:A0:BA:B3:F7:39:01:CB:95:30:5A:20:7D:C3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/2428B7AE5D3A11EBA0F5C625C4F9AE02.roa Signing time: Sun 01 Mar 2026 09:43:03 +0000 ROA not before: Tue 08 Jul 2025 23:03:27 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4825 IP address blocks: 202.61.4.0/24 maxlen: 24 202.61.5.0/24 maxlen: 24 202.61.6.0/24 maxlen: 24 202.61.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.crl rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:24:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1876 (0x754) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916B95C, serialNumber=5BADFED330D65CA0BAB3F73901CB95305A207DC3 Validity Not Before: Jul 8 23:03:27 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a40a27-fee0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:b4:bd:5c:91:10:ce:02:cd:d8:01:e7:bf:6f: 96:c5:07:1c:2c:8d:f6:fd:7f:db:8a:e9:a1:56:6e: e8:46:fe:6a:61:a1:26:29:df:9e:5c:bd:14:68:0a: 0f:54:8e:fb:f6:b7:71:32:54:67:e6:e1:4e:11:2d: 9f:af:b7:86:1c:d6:c8:b0:13:26:ea:66:f8:ba:48: 1b:c7:9b:b0:98:37:33:6e:54:d7:00:90:0f:0d:6d: b9:8d:0f:ab:5a:24:34:46:cc:a2:8c:cb:69:c3:33: 8a:6f:d2:85:de:fb:7e:89:a4:dc:2b:79:58:ed:f1: 9c:5d:47:4d:b5:a7:26:8e:c7:0c:21:5d:b3:41:86: 2d:fb:1c:bc:bb:86:48:f5:2b:4c:de:87:af:c2:6b: 6a:c0:c8:18:fc:40:64:a9:b2:7a:04:88:ac:2c:33: 2f:46:3d:d3:60:db:f9:8b:11:ba:c6:fd:23:0b:70: 72:60:28:f9:ce:26:3d:34:cc:ff:ff:be:66:c7:e3: d1:c7:b4:f2:29:1f:8e:47:2c:c7:2f:10:e3:71:f4: 25:b3:dc:ca:d9:6a:12:8e:04:16:6a:4c:22:8a:98: 52:ff:f0:95:67:54:db:b2:20:6b:1e:e4:84:a7:b1: fb:31:aa:2c:ac:11:61:33:e4:1d:1c:a0:96:9a:6d: b1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:92:54:DC:D0:31:E3:86:56:39:40:5D:8B:CA:6F:BA:BE:08:7C:CF X509v3 Authority Key Identifier: keyid:5B:AD:FE:D3:30:D6:5C:A0:BA:B3:F7:39:01:CB:95:30:5A:20:7D:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/W63-0zDWXKC6s_c5AcuVMFogfcM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/W63-0zDWXKC6s_c5AcuVMFogfcM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95C/272647A25D3811EBA202DF1EC4F9AE02/2428B7AE5D3A11EBA0F5C625C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.61.4.0/22 Signature Algorithm: sha256WithRSAEncryption c2:44:a2:f1:14:cf:0b:30:09:b5:b4:01:74:d6:cf:48:8a:db: 19:de:44:28:3e:52:d0:ba:f9:64:8d:06:50:fc:e0:08:ce:3e: 27:66:e1:d2:e7:64:88:67:62:eb:77:ef:ed:9e:3c:83:2b:82: 76:6f:f1:be:20:7d:11:f4:01:c3:db:8d:46:29:eb:e5:a3:40: 27:0e:f2:74:5d:b8:ca:b4:df:f2:8d:19:1c:dd:72:d5:48:d4: 14:2a:34:8f:46:8e:0a:72:35:46:1b:6d:86:94:dc:3a:76:c2: 95:4b:c4:c7:24:07:be:9b:c5:ff:49:70:68:2b:3f:d6:8d:77: 1a:6e:90:3d:7f:0b:9f:02:1b:af:cf:6f:9d:2c:da:98:ad:cf: 25:44:d1:b1:6c:c3:41:e1:3e:bb:38:bc:8f:ff:91:0f:c8:6e: 54:c9:f4:7f:b3:fa:19:80:ea:3b:dd:4a:d2:d3:9c:42:3f:16: 7c:2a:9b:15:2f:30:d6:79:ce:ec:b6:c2:ab:b8:74:c3:bd:52: 76:11:0d:62:54:25:68:3c:31:28:b2:4a:c4:e3:34:31:bf:aa: 85:29:0d:f8:ec:44:5d:d1:2f:94:a1:0c:50:39:e1:47:b3:43: 01:33:3f:83:b0:7a:df:a4:73:5e:7e:51:32:a3:53:05:f9:2e: c3:ac:25:60 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB1QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NkI5NUMxMTAvBgNVBAUTKDVCQURGRUQzMzBENjVDQTBCQUIzRjczOTAxQ0I5NTMw NUEyMDdEQzMwHhcNMjUwNzA4MjMwMzI3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MGEyNy1mZWUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA07S9XJEQzgLN2AHnv2+WxQccLI32/X/biumhVm7oRv5qYaEmKd+eXL0UaAoP VI779rdxMlRn5uFOES2fr7eGHNbIsBMm6mb4ukgbx5uwmDczblTXAJAPDW25jQ+r WiQ0RsyijMtpwzOKb9KF3vt+iaTcK3lY7fGcXUdNtacmjscMIV2zQYYt+xy8u4ZI 9StM3oevwmtqwMgY/EBkqbJ6BIisLDMvRj3TYNv5ixG6xv0jC3ByYCj5ziY9NMz/ /75mx+PRx7TyKR+ORyzHLxDjcfQls9zK2WoSjgQWakwiiphS//CVZ1TbsiBrHuSE p7H7MaosrBFhM+QdHKCWmm2xXwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIaSVNzQ MeOGVjlAXYvKb7q+CHzPMB8GA1UdIwQYMBaAFFut/tMw1lygurP3OQHLlTBaIH3D MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2Qjk1Qy8yNzI2NDdBMjVE MzgxMUVCQTIwMkRGMUVDNEY5QUUwMi9XNjMtMHpEV1hLQzZzX2M1QWN1Vk1Gb2dm Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1c2My0wekRXWEtDNnNfYzVBY3VWTUZvZ2ZjTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NkI5NUMvMjcyNjQ3QTI1RDM4MTFFQkEyMDJERjFFQzRGOUFFMDIvMjQyOEI3QUU1 RDNBMTFFQkEwRjVDNjI1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyj0EMA0GCSqGSIb3DQEBCwUAA4IBAQDCRKLxFM8LMAm1tAF01s9I itsZ3kQoPlLQuvlkjQZQ/OAIzj4nZuHS52SIZ2Lrd+/tnjyDK4J2b/G+IH0R9AHD 241GKevlo0AnDvJ0XbjKtN/yjRkc3XLVSNQUKjSPRo4KcjVGG22GlNw6dsKVS8TH JAe+m8X/SXBoKz/WjXcabpA9fwufAhuvz2+dLNqYrc8lRNGxbMNB4T67OLyP/5EP yG5UyfR/s/oZgOo73UrS05xCPxZ8KpsVLzDWec7stsKruHTDvVJ2EQ1iVCVoPDEo skrE4zQxv6qFKQ347ERd0S+UoQxQOeFHs0MBMz+DsHrfpHNeflEyo1MF+S7DrCVg -----END CERTIFICATE-----Generated at Thu Mar 26 12:55:45 2026 by rpki-client