$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/F7F2D20ABCE911EFB7786B63C4F9AE02.roa File: F7F2D20ABCE911EFB7786B63C4F9AE02.roa (raw, json) Hash identifier: dQd4m5byeKJORC74YKFJB4r+c7cujg4OEtxCIHvr0lM= Subject key identifier: 0B:33:F4:C5:52:8E:42:37:0B:5B:D7:67:82:A7:BB:20:2F:F2:E5:28 Certificate issuer: /CN=A91AF3C6/serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Certificate serial: 0883 Authority key identifier: 60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/F7F2D20ABCE911EFB7786B63C4F9AE02.roa Signing time: Mon 16 Mar 2026 21:21:17 +0000 ROA not before: Mon 16 Mar 2026 21:21:17 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132857 IP address blocks: 43.243.56.0/23 maxlen: 24 103.156.230.0/23 maxlen: 24 2407:2b00::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:34:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3C6, serialNumber=606EE85DC3C467FC464A894ED47A9F1BD321B441 Validity Not Before: Mar 16 21:21:17 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69b8744d-1d60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:30:5f:b5:48:1c:68:b0:fb:45:5e:26:fc:60: cf:61:7d:52:15:6c:65:b7:04:d7:04:94:66:18:11: bb:14:a6:a5:b0:54:49:4e:4e:20:06:b8:c8:28:ad: 1f:a1:e1:3b:be:f1:4f:0e:55:1c:35:4e:d9:1a:21: 67:c3:65:c2:4a:5c:6c:23:22:08:55:0b:74:e1:77: 21:13:0d:8c:ab:0e:a0:2b:d0:27:6d:d4:2b:83:16: 84:81:07:b8:f5:03:d8:9e:59:34:98:8f:ad:e4:6e: a8:79:e1:50:7f:19:04:45:51:ed:ef:c2:60:04:c9: 84:c0:3e:3c:b4:3f:52:62:0f:64:af:bc:2a:ce:90: ad:00:11:9d:1a:3d:16:a9:9e:69:b7:45:88:13:6d: 35:91:35:6e:f1:93:95:49:31:5b:27:70:21:60:52: 56:af:97:ea:84:87:f8:0f:6c:86:e9:00:e6:bb:e5: 28:0e:19:36:a7:28:9f:ca:b4:ae:75:1a:1b:9a:b7: 71:10:7b:18:63:49:b1:f9:be:82:8b:fd:bf:26:95: cc:62:7f:64:dd:f7:fe:29:2a:30:65:e3:c6:a6:be: f6:b5:00:50:36:da:03:63:47:31:a4:04:f0:23:18: 64:10:ce:c8:de:b8:3f:a3:40:af:29:d3:ad:30:17: ba:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:33:F4:C5:52:8E:42:37:0B:5B:D7:67:82:A7:BB:20:2F:F2:E5:28 X509v3 Authority Key Identifier: keyid:60:6E:E8:5D:C3:C4:67:FC:46:4A:89:4E:D4:7A:9F:1B:D3:21:B4:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/YG7oXcPEZ_xGSolO1HqfG9MhtEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YG7oXcPEZ_xGSolO1HqfG9MhtEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3C6/631CC160F33811EAA63D4154C4F9AE02/F7F2D20ABCE911EFB7786B63C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.243.56.0/23 103.156.230.0/23 IPv6: 2407:2b00::/32 Signature Algorithm: sha256WithRSAEncryption 11:eb:7d:d9:fa:d7:57:9d:14:87:ac:b7:cd:c7:33:10:6d:86: 96:88:01:96:f9:54:8e:a8:f9:b7:e7:81:59:b3:8d:7a:70:18: 94:71:04:8d:06:46:6a:ee:f5:b4:85:5b:b0:dd:ce:41:29:dd: 38:3c:ad:c1:22:fa:02:e9:7f:15:69:79:08:05:f2:44:a8:03: e4:4c:ab:6a:ef:94:06:4e:5f:90:d3:ce:08:e3:bf:42:ef:2e: b2:93:51:45:51:f1:45:40:c5:fb:35:be:dc:a3:91:44:bc:4a: 29:c4:ce:20:2d:f3:2f:a6:8d:c3:87:36:49:2b:dd:12:a5:e3: ce:3a:b9:ab:ce:10:7a:80:d4:13:02:32:a0:b4:77:8b:21:6e: da:72:cf:c2:12:3e:7a:77:6d:7c:2e:73:4b:3c:8e:a1:29:f7: 6e:17:6c:a8:db:de:e7:95:55:4a:26:c2:be:8c:41:65:7e:24: 13:8a:e5:21:97:ce:16:3d:07:6e:ad:c6:45:30:db:71:51:57: 2a:eb:c9:3f:09:8e:1b:7f:85:a3:cf:fc:e2:41:d7:59:0e:f4: 1d:8c:4a:8f:46:64:8d:40:b9:99:b2:51:2d:01:b2:32:fd:19: 02:f7:8b:10:e5:41:60:e5:e7:b6:30:8c:41:2b:a6:7d:30:bc: 41:e9:6b:01 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzQzYxMTAvBgNVBAUTKDYwNkVFODVEQzNDNDY3RkM0NjRBODk0RUQ0N0E5RjFC RDMyMUI0NDEwHhcNMjYwMzE2MjEyMTE3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4NzQ0ZC0xZDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuDBftUgcaLD7RV4m/GDPYX1SFWxltwTXBJRmGBG7FKalsFRJTk4gBrjIKK0f oeE7vvFPDlUcNU7ZGiFnw2XCSlxsIyIIVQt04XchEw2Mqw6gK9AnbdQrgxaEgQe4 9QPYnlk0mI+t5G6oeeFQfxkERVHt78JgBMmEwD48tD9SYg9kr7wqzpCtABGdGj0W qZ5pt0WIE201kTVu8ZOVSTFbJ3AhYFJWr5fqhIf4D2yG6QDmu+UoDhk2pyifyrSu dRobmrdxEHsYY0mx+b6Ci/2/JpXMYn9k3ff+KSowZePGpr72tQBQNtoDY0cxpATw IxhkEM7I3rg/o0CvKdOtMBe6FQIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFAsz9MVS jkI3C1vXZ4KnuyAv8uUoMB8GA1UdIwQYMBaAFGBu6F3DxGf8RkqJTtR6nxvTIbRB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNDNi82MzFDQzE2MEYz MzgxMUVBQTYzRDQxNTRDNEY5QUUwMi9ZRzdvWGNQRVpfeEdTb2xPMUhxZkc5TWh0 RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lHN29YY1BFWl94R1NvbE8xSHFmRzlNaHRFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYzQzYvNjMxQ0MxNjBGMzM4MTFFQUE2M0Q0MTU0QzRGOUFFMDIvRjdGMkQyMEFC Q0U5MTFFRkI3Nzg2QjYzQzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQBK/M4AwQBZ5zmMA0EAgACMAcDBQAkBysAMA0GCSqGSIb3DQEBCwUA A4IBAQAR633Z+tdXnRSHrLfNxzMQbYaWiAGW+VSOqPm354FZs416cBiUcQSNBkZq 7vW0hVuw3c5BKd04PK3BIvoC6X8VaXkIBfJEqAPkTKtq75QGTl+Q084I479C7y6y k1FFUfFFQMX7Nb7co5FEvEopxM4gLfMvpo3DhzZJK90SpePOOrmrzhB6gNQTAjKg tHeLIW7acs/CEj56d218LnNLPI6hKfduF2yo297nlVVKJsK+jEFlfiQTiuUhl84W PQdurcZFMNtxUVcq68k/CY4bf4Wjz/ziQddZDvQdjEqPRmSNQLmZslEtAbIy/RkC 94sQ5UFg5ee2MIxBK6Z9MLxB6WsB -----END CERTIFICATE-----Generated at Fri Mar 27 04:54:36 2026 by rpki-client