$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/6241069011E111EFBBB70B32C4F9AE02.roa File: 6241069011E111EFBBB70B32C4F9AE02.roa (raw, json) Hash identifier: IYaWhsLaflrkWls5/R1on1umbi8diTO+hlwnKy58I+Y= Subject key identifier: 7F:52:6A:77:EE:B2:86:D1:4A:06:25:B8:B9:13:9C:F0:AF:B1:54:ED Certificate issuer: /CN=A91D63AF/serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Certificate serial: 01A2 Authority key identifier: 34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/6241069011E111EFBBB70B32C4F9AE02.roa Signing time: Sat 07 Mar 2026 04:38:42 +0000 ROA not before: Sat 07 Mar 2026 04:38:42 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 152339 IP address blocks: 157.10.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 418 (0x1a2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D63AF, serialNumber=3474C2539861100AFD963A163C802D0264F8EC7D Validity Not Before: Mar 7 04:38:42 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69ababd2-012c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:7d:fe:ea:62:a3:93:e6:b4:fc:2a:b5:e5:84: 6f:20:97:28:b4:74:69:a2:11:26:79:33:ba:5f:e7: 3b:54:6a:4d:95:8a:03:5d:fe:ef:b7:b7:c6:08:2e: f3:d9:fe:f4:de:1c:31:1e:fb:8c:f8:91:75:99:2d: e6:4a:dc:ca:50:da:fd:aa:88:e9:df:df:92:87:9c: 6a:37:60:68:c4:36:0d:05:c6:d3:b6:38:fc:cd:46: 50:68:b6:10:73:5e:2f:4b:81:38:58:af:ab:ec:ae: 33:96:1d:b0:4f:ce:f8:ef:ea:a9:6d:96:d6:3a:9f: 2c:a6:d5:cb:03:5f:f6:92:fe:72:5e:d1:83:2d:fe: a0:99:c7:84:3d:a7:a0:f1:b1:8a:3f:67:10:83:77: ee:23:8e:8a:14:dd:14:a7:88:4b:4a:43:06:03:e6: 77:8b:36:d2:f3:c3:dd:b6:3c:06:78:7d:71:9a:84: c1:5c:94:7f:7a:ab:d7:ec:c3:2d:1d:30:16:94:4e: e8:fa:71:1b:fe:3b:de:a1:7b:37:21:9e:01:96:e0: 7c:f1:c5:ae:a3:e1:03:b5:76:94:23:90:b8:06:07: bb:97:37:be:cc:eb:dd:6f:5a:0d:e9:97:d9:94:74: 03:e3:19:ee:12:76:d3:46:ce:00:06:ef:c5:77:80: 2e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:52:6A:77:EE:B2:86:D1:4A:06:25:B8:B9:13:9C:F0:AF:B1:54:ED X509v3 Authority Key Identifier: keyid:34:74:C2:53:98:61:10:0A:FD:96:3A:16:3C:80:2D:02:64:F8:EC:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/NHTCU5hhEAr9ljoWPIAtAmT47H0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/NHTCU5hhEAr9ljoWPIAtAmT47H0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/4DFE6824B6B711EEA9D7FC3AC4F9AE02/6241069011E111EFBBB70B32C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.250.0/24 Signature Algorithm: sha256WithRSAEncryption 69:c0:35:fc:34:9d:c4:96:c0:30:b1:d1:90:79:c4:fe:d1:a9: 32:bb:a3:7f:9e:f7:1b:50:58:5a:08:76:35:56:ab:c6:ac:28: cd:22:cb:83:69:0e:a6:30:3c:c5:80:64:40:30:99:97:9f:2e: 6f:69:62:fa:a0:ac:9b:b6:e1:55:7e:ab:b8:bf:1a:1c:bd:5a: 40:c6:0c:2a:7b:9b:b1:3b:14:b3:0b:be:57:18:d2:56:73:f3: 0a:af:49:92:cf:38:32:7e:31:9e:bf:80:ee:2e:73:5a:10:03: d9:b0:9b:9c:2a:f0:94:68:e7:3d:d7:12:b5:8b:61:13:62:38: a3:76:7f:b3:04:df:e7:ef:0a:8b:17:87:0c:16:52:9b:68:6c: 65:13:9c:da:f8:df:ba:21:06:ed:39:59:fd:ae:a0:d6:2e:9c: aa:bc:cb:e7:48:5c:4f:2e:05:49:19:d1:b0:d1:c1:f8:97:e5: 52:0e:4a:7d:fd:78:3b:b5:30:d9:36:b8:b5:55:da:fb:9e:2a: 5c:e2:38:f4:b8:15:f0:ac:2d:0a:2a:eb:26:f2:4c:94:ae:02: 55:3b:94:50:77:25:70:e1:20:6e:fd:c3:a0:c6:22:d3:41:28: fb:59:c1:4e:dc:58:bc:77:2a:83:00:ae:35:24:51:75:05:f4: dc:ad:39:52 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAaIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDYzQUYxMTAvBgNVBAUTKDM0NzRDMjUzOTg2MTEwMEFGRDk2M0ExNjNDODAyRDAy NjRGOEVDN0QwHhcNMjYwMzA3MDQzODQyWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFiYWJkMi0wMTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyX3+6mKjk+a0/Cq15YRvIJcotHRpohEmeTO6X+c7VGpNlYoDXf7vt7fGCC7z 2f703hwxHvuM+JF1mS3mStzKUNr9qojp39+Sh5xqN2BoxDYNBcbTtjj8zUZQaLYQ c14vS4E4WK+r7K4zlh2wT8747+qpbZbWOp8sptXLA1/2kv5yXtGDLf6gmceEPaeg 8bGKP2cQg3fuI46KFN0Up4hLSkMGA+Z3izbS88PdtjwGeH1xmoTBXJR/eqvX7MMt HTAWlE7o+nEb/jveoXs3IZ4BluB88cWuo+EDtXaUI5C4Bge7lze+zOvdb1oN6ZfZ lHQD4xnuEnbTRs4ABu/Fd4AuuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH9Sanfu sobRSgYluLkTnPCvsVTtMB8GA1UdIwQYMBaAFDR0wlOYYRAK/ZY6FjyALQJk+Ox9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjNBRi80REZFNjgyNEI2 QjcxMUVFQTlEN0ZDM0FDNEY5QUUwMi9OSFRDVTVoaEVBcjlsam9XUElBdEFtVDQ3 SDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL05IVENVNWhoRUFyOWxqb1dQSUF0QW1UNDdIMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDYzQUYvNERGRTY4MjRCNkI3MTFFRUE5RDdGQzNBQzRGOUFFMDIvNjI0MTA2OTAx MUUxMTFFRkJCQjcwQjMyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAnQr6MA0GCSqGSIb3DQEBCwUAA4IBAQBpwDX8NJ3ElsAwsdGQecT+ 0akyu6N/nvcbUFhaCHY1VqvGrCjNIsuDaQ6mMDzFgGRAMJmXny5vaWL6oKybtuFV fqu4vxocvVpAxgwqe5uxOxSzC75XGNJWc/MKr0mSzzgyfjGev4DuLnNaEAPZsJuc KvCUaOc91xK1i2ETYjijdn+zBN/n7wqLF4cMFlKbaGxlE5za+N+6IQbtOVn9rqDW LpyqvMvnSFxPLgVJGdGw0cH4l+VSDkp9/Xg7tTDZNri1Vdr7nipc4jj0uBXwrC0K Kusm8kyUrgJVO5RQdyVw4SBu/cOgxiLTQSj7WcFO3Fi8dyqDAK41JFF1BfTcrTlS -----END CERTIFICATE-----Generated at Thu Mar 26 13:21:38 2026 by rpki-client