$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/678C24C0663F11EEBD955D43C4F9AE02.roa File: 678C24C0663F11EEBD955D43C4F9AE02.roa (raw, json) Hash identifier: r/B/wTWM1e+RbFQV+OxoufBd8XhZQMs6+SrSBQGZEm0= Subject key identifier: B3:84:6D:7B:6C:0E:93:BD:01:B3:F4:8A:AF:2A:29:51:89:59:E3:3B Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Certificate serial: 0215 Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/678C24C0663F11EEBD955D43C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:44:19 +0000 ROA not before: Wed 13 Aug 2025 04:42:14 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 7575 IP address blocks: 203.6.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 02:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 533 (0x215) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A Validity Not Before: Aug 13 04:42:14 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a47af3-0bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:6e:fc:6f:b2:cc:69:b4:d7:ad:ff:2b:40: 11:0a:0b:2d:e0:81:d0:f1:5d:06:bc:2e:d3:ed:ec: 61:e0:f6:75:b1:90:22:62:e8:a1:78:81:0a:8c:11: f1:c1:d3:7c:57:f9:12:88:eb:f6:ef:67:27:80:ab: b5:6f:b7:8d:b4:1d:e4:46:5d:ef:09:02:9c:83:e9: d1:96:9c:d9:95:9c:d9:9e:46:86:96:d6:37:94:e2: 48:a2:ec:cd:dc:80:26:f3:28:51:ee:07:96:d4:26: 7f:68:ac:a6:75:16:b3:bc:74:ac:2b:d8:38:04:3d: 35:5d:86:52:6c:28:51:80:76:f9:5a:e9:ee:24:91: a9:5a:b1:a1:7f:b1:9a:1a:7d:31:61:77:0a:5b:7b: 77:ff:4f:75:8e:59:83:fb:ed:0b:99:e9:5a:b3:74: ca:90:20:55:98:f2:5d:b7:0b:7c:27:d5:70:59:d6: 56:fc:7f:cd:b7:c9:d9:b3:77:a4:84:0f:ff:82:1f: d1:32:eb:2e:c6:5d:ae:86:d9:b9:5f:0b:74:9d:b1: 07:16:f8:9a:fd:0b:f9:24:92:38:da:fd:5c:86:d0: c6:e7:09:1e:c8:30:be:0b:62:d9:71:df:22:c8:4b: d0:0f:41:15:2c:ce:ee:4b:fb:a6:04:30:c1:a4:d6: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:84:6D:7B:6C:0E:93:BD:01:B3:F4:8A:AF:2A:29:51:89:59:E3:3B X509v3 Authority Key Identifier: keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/678C24C0663F11EEBD955D43C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.6.8.0/22 Signature Algorithm: sha256WithRSAEncryption 40:6a:40:7b:3a:85:be:f1:de:a3:cf:75:14:4a:2f:d5:7a:08: 7a:24:d5:44:3c:26:a1:bd:4d:55:fe:28:9c:02:63:77:ca:f6: 0c:9a:fb:05:94:ac:37:bc:2e:b1:b8:55:b1:a2:b8:da:80:c0: 52:c9:5c:1e:93:02:60:d6:77:bd:a2:ea:5b:61:e3:60:16:19: c3:15:52:b2:25:d8:bf:56:27:70:15:f8:0f:cb:b0:18:56:62: e0:e1:39:ab:98:99:32:f9:b0:dd:74:74:2a:33:cc:65:a6:55: 15:08:ac:73:b9:ae:5b:89:1d:ae:ba:63:2f:cb:df:04:12:53: c5:b4:fe:77:9d:ac:2d:d5:42:07:6e:fd:2e:dc:e8:9f:9d:71: 1c:87:42:d0:48:1f:f1:da:14:71:4a:c8:bc:a4:8c:d1:24:5e: 24:43:72:3c:5b:7e:d9:12:cc:b8:87:8e:aa:ce:29:8c:f5:e3: 6e:1b:de:17:35:01:bc:e9:43:59:c9:06:d8:98:f7:d5:1a:37: 5b:9b:6c:e6:35:4f:2b:aa:37:42:61:f1:fb:c7:eb:ce:44:b2: e4:f0:8a:b9:bd:a9:d9:b7:26:a5:15:d8:2c:bf:1e:c3:73:24: 6f:2f:f3:55:2d:98:8c:af:7b:ca:b0:85:2d:d3:38:dc:3f:a5: f6:d4:30:92 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAhUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKDVFNzJBQTdENUIxRDU2MzJFNUQzM0ZFQzcyRkE3NDMz RjQ5Q0UyOUEwHhcNMjUwODEzMDQ0MjE0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2FmMy0wYmFlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyKxu/G+yzGm0163/K0ARCgst4IHQ8V0GvC7T7exh4PZ1sZAiYuiheIEKjBHx wdN8V/kSiOv272cngKu1b7eNtB3kRl3vCQKcg+nRlpzZlZzZnkaGltY3lOJIouzN 3IAm8yhR7geW1CZ/aKymdRazvHSsK9g4BD01XYZSbChRgHb5WunuJJGpWrGhf7Ga Gn0xYXcKW3t3/091jlmD++0Lmelas3TKkCBVmPJdtwt8J9VwWdZW/H/Nt8nZs3ek hA//gh/RMusuxl2uhtm5Xwt0nbEHFvia/Qv5JJI42v1chtDG5wkeyDC+C2LZcd8i yEvQD0EVLM7uS/umBDDBpNZBqwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLOEbXts DpO9AbP0iq8qKVGJWeM7MB8GA1UdIwQYMBaAFF5yqn1bHVYy5dM/7HL6dDP0nOKa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9FQTdFNUZBNjYz NkYxMUVFOTdDNzRCNUNDNEY5QUUwMi9YbktxZlZzZFZqTGwwel9zY3ZwME1fU2M0 cG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1huS3FmVnNkVmpMbDB6X3NjdnAwTV9TYzRwby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlFODIvRUE3RTVGQTY2MzZGMTFFRTk3Qzc0QjVDQzRGOUFFMDIvNjc4QzI0QzA2 NjNGMTFFRUJEOTU1RDQzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCywYIMA0GCSqGSIb3DQEBCwUAA4IBAQBAakB7OoW+8d6jz3UUSi/V egh6JNVEPCahvU1V/iicAmN3yvYMmvsFlKw3vC6xuFWxorjagMBSyVwekwJg1ne9 oupbYeNgFhnDFVKyJdi/VidwFfgPy7AYVmLg4TmrmJky+bDddHQqM8xlplUVCKxz ua5biR2uumMvy98EElPFtP53nawt1UIHbv0u3OifnXEch0LQSB/x2hRxSsi8pIzR JF4kQ3I8W37ZEsy4h46qzimM9eNuG94XNQG86UNZyQbYmPfVGjdbm2zmNU8rqjdC YfH7x+vORLLk8Iq5vanZtyalFdgsvx7DcyRvL/NVLZiMr3vKsIUt0zjcP6X21DCS -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:42 2026 by rpki-client