$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/CD7FBD2CFDE711F08E6C9BDB726F56BC.roa File: CD7FBD2CFDE711F08E6C9BDB726F56BC.roa (raw, json) Hash identifier: HOjKKUKfVkEJkpJ5kP3nNLtaEubz2MLWdl6U7WuE38A= Subject key identifier: AF:98:4B:8F:09:48:04:75:FB:11:B3:16:74:6D:86:D9:80:88:58:E4 Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 05E8 Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/CD7FBD2CFDE711F08E6C9BDB726F56BC.roa Signing time: Sun 01 Mar 2026 18:22:43 +0000 ROA not before: Fri 30 Jan 2026 14:27:27 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 29802 IP address blocks: 202.43.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Jan 30 14:27:27 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a483f3-2691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:7b:bc:00:52:e7:37:b3:26:f3:5d:4c:f5:63: b8:50:77:e4:44:04:26:d7:ec:9f:b0:af:bd:4b:2f: 63:65:f1:a4:48:f4:fa:85:cd:df:36:00:16:4e:f6: f6:aa:05:08:be:bc:fe:07:30:fb:ee:60:65:0b:13: f4:b8:6c:13:cb:c5:f2:6b:bd:df:a1:74:31:01:7d: f3:b0:ce:c2:a3:16:90:7b:c0:d5:ab:53:2c:e2:ef: 17:dd:96:88:5d:9c:96:19:cd:81:30:1d:90:40:b2: 36:a1:3a:92:3f:69:60:08:71:41:af:bc:75:af:0b: cf:09:ab:45:1b:fc:45:89:70:fb:a1:e4:dc:3f:9a: f9:f0:d1:e2:b8:b9:39:ef:f0:c0:f1:4a:d3:db:2a: 56:2d:1f:73:b5:b8:39:93:fc:5e:38:44:e5:b0:2b: a8:39:58:31:67:0a:ce:63:4c:33:47:3c:98:4f:da: 61:d6:33:ac:11:82:7a:cb:18:c1:93:d1:f5:d5:95: 30:65:34:fe:d5:f4:9d:0c:3c:6a:91:a2:50:ae:00: 46:2b:46:79:8d:98:9b:44:4c:ea:92:d7:ad:55:ee: ff:9c:58:6b:e8:e5:6c:e9:5b:e6:6a:0a:e7:1c:1c: 61:6b:09:ec:7b:94:16:a5:30:3e:61:0a:c7:2b:af: 4f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:98:4B:8F:09:48:04:75:FB:11:B3:16:74:6D:86:D9:80:88:58:E4 X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/CD7FBD2CFDE711F08E6C9BDB726F56BC.roa sbgp-ipAddrBlock: critical IPv4: 202.43.7.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:10:fd:e7:64:f0:d3:8e:71:54:0a:82:9c:f5:c0:bb:14:c3: a6:9a:96:de:d7:72:d5:5b:e1:11:a8:73:de:a4:07:f7:40:bd: d3:a4:85:21:4c:0f:1b:9b:1d:87:0b:fa:6e:8d:97:10:45:f5: 03:f2:ac:8d:3c:be:0c:de:0a:34:24:eb:f2:07:4d:ed:ff:e3: 9a:7e:d8:bd:7a:0e:d1:82:40:55:2f:ca:bd:32:60:0c:55:a0: 1d:f7:76:10:0f:97:2c:97:b3:83:84:6b:bf:57:18:a4:79:7f: f9:16:d3:08:ae:dd:86:28:44:73:cd:94:0e:f6:9d:45:d9:54: c4:8f:ed:87:83:9d:07:21:db:3a:1c:b1:c5:a0:4b:6a:b1:6f: 27:ae:8d:9d:c2:38:7e:57:f8:3c:04:f2:c2:8a:c4:60:d3:8a: 86:ac:d8:de:e1:a3:c3:27:54:fd:c4:8a:cd:0c:a1:22:8f:71: fd:eb:9f:06:d2:59:85:dc:1f:6b:7a:62:8a:f8:d3:31:9b:08: 59:7b:71:f4:49:16:e6:81:4d:29:1f:fe:ee:e2:94:69:11:73: 7f:cd:90:e7:ac:57:58:a8:c1:d8:71:66:2a:6d:a3:3e:b1:56: eb:e8:b9:c5:46:12:30:3c:9f:35:ef:14:bf:e5:a3:aa:3c:1c: 3c:42:a3:5b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjYwMTMwMTQyNzI3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODNmMy0yNjkxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyHu8AFLnN7Mm811M9WO4UHfkRAQm1+yfsK+9Sy9jZfGkSPT6hc3fNgAWTvb2 qgUIvrz+BzD77mBlCxP0uGwTy8Xya73foXQxAX3zsM7CoxaQe8DVq1Ms4u8X3ZaI XZyWGc2BMB2QQLI2oTqSP2lgCHFBr7x1rwvPCatFG/xFiXD7oeTcP5r58NHiuLk5 7/DA8UrT2ypWLR9ztbg5k/xeOETlsCuoOVgxZwrOY0wzRzyYT9ph1jOsEYJ6yxjB k9H11ZUwZTT+1fSdDDxqkaJQrgBGK0Z5jZibREzqktetVe7/nFhr6OVs6Vvmagrn HBxhawnse5QWpTA+YQrHK69PfwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK+YS48J SAR1+xGzFnRthtmAiFjkMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNENzIvNDU3NkE2NzIyNjEyMTFFQ0I5MzE5OTQyQzRGOUFFMDIvQ0Q3RkJEMkNG REU3MTFGMDhFNkM5QkRCNzI2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyisHMA0GCSqGSIb3DQEBCwUAA4IBAQAsEP3nZPDTjnFUCoKc9cC7 FMOmmpbe13LVW+ERqHPepAf3QL3TpIUhTA8bmx2HC/pujZcQRfUD8qyNPL4M3go0 JOvyB03t/+Oafti9eg7RgkBVL8q9MmAMVaAd93YQD5csl7ODhGu/VxikeX/5FtMI rt2GKERzzZQO9p1F2VTEj+2Hg50HIds6HLHFoEtqsW8nro2dwjh+V/g8BPLCisRg 04qGrNje4aPDJ1T9xIrNDKEij3H9658G0lmF3B9remKK+NMxmwhZe3H0SRbmgU0p H/7u4pRpEXN/zZDnrFdYqMHYcWYqbaM+sVbr6LnFRhIwPJ817xS/5aOqPBw8QqNb -----END CERTIFICATE-----Generated at Thu Mar 26 06:36:00 2026 by rpki-client