$ rpki-client -vvf rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/82743A06E2EB11EEBAC73D0CC4F9AE02.roa File: 82743A06E2EB11EEBAC73D0CC4F9AE02.roa (raw, json) Hash identifier: WyIq/Hu944HeaDenR/ZUYZH/pTfb7Nh2xSZlqipqTz4= Subject key identifier: 98:17:F0:54:EE:DA:55:00:91:70:86:C9:8A:18:E2:BA:2D:18:94:43 Certificate issuer: /CN=A91E772F/serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Certificate serial: 0172 Authority key identifier: 1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/82743A06E2EB11EEBAC73D0CC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:05:33 +0000 ROA not before: Thu 01 May 2025 04:41:43 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152646 IP address blocks: 202.50.154.0/24 maxlen: 24 202.50.155.0/24 maxlen: 24 2001:df3:8d40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 370 (0x172) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E772F, serialNumber=1BF976EFEAB2312EA2DAC86B98A398CF0C5BD6F0 Validity Not Before: May 1 04:41:43 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a5992d-7393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8e:54:2b:e3:43:69:f4:3c:b3:22:bf:b3:ba: b4:ed:78:1e:cc:5f:ab:bc:5c:c1:c6:c9:41:a6:c5: 41:bf:62:52:37:4a:c5:84:71:e5:e7:4d:ab:03:cf: b2:df:1a:5c:2b:4a:a1:9e:ab:85:8f:95:b6:24:49: 28:a8:5c:d9:de:68:2f:e4:2f:21:95:db:61:a3:03: 1f:0c:00:bd:04:be:dc:20:a5:39:b9:a2:08:df:91: d5:1c:22:fa:b0:9f:70:b2:0d:96:94:39:6e:50:00: 2a:8f:d3:23:a4:98:91:a7:3c:3a:9d:b8:a6:2d:9c: 7e:b2:33:b9:b7:62:f4:8b:b9:fe:a9:1b:26:83:50: c4:51:d3:08:6f:d1:cd:d5:9f:96:36:b1:d6:48:78: 38:dd:0e:50:b5:c3:cf:07:89:33:e2:52:cc:f4:f5: c0:d0:77:a9:51:3e:91:e6:bd:58:4d:d9:07:c4:05: 4a:50:f9:4b:16:c3:79:6f:40:a3:48:83:27:02:ec: 2e:3e:44:8f:1b:5b:1f:ba:78:9b:6a:ae:81:e4:a0: a2:de:74:21:a7:dd:62:87:05:59:2b:79:3a:b8:a1: c8:74:c4:59:31:d5:96:f2:85:c4:b4:79:42:d9:98: e9:41:90:cb:1e:b6:df:dd:3c:88:2b:c5:71:79:37: b1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:17:F0:54:EE:DA:55:00:91:70:86:C9:8A:18:E2:BA:2D:18:94:43 X509v3 Authority Key Identifier: keyid:1B:F9:76:EF:EA:B2:31:2E:A2:DA:C8:6B:98:A3:98:CF:0C:5B:D6:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/G_l27-qyMS6i2shrmKOYzwxb1vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G_l27-qyMS6i2shrmKOYzwxb1vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E772F/1E77E732E2EB11EEAD6E9A0BC4F9AE02/82743A06E2EB11EEBAC73D0CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.50.154.0/23 IPv6: 2001:df3:8d40::/48 Signature Algorithm: sha256WithRSAEncryption 33:96:cd:0a:f3:9c:de:37:3a:db:f5:b2:ec:80:01:b0:73:67: 70:55:6e:f5:8c:40:cb:13:f5:7e:85:6a:a7:26:46:31:82:40: 83:ac:43:35:dc:1a:3d:39:c0:59:22:0a:61:e5:43:81:9b:dc: a5:f1:18:e0:30:20:f8:bb:5d:bc:65:05:4d:c4:da:1d:df:f4: d7:ac:a4:55:26:34:0b:4a:a2:4b:f8:c8:7b:fb:79:3a:a0:96: 08:ce:32:3e:aa:c3:c0:70:3a:92:40:47:24:ee:70:28:b8:e2: 64:ee:c2:6a:2e:b6:e9:89:a6:70:f8:e3:02:64:26:b9:13:eb: ba:61:fc:b8:6e:90:fe:06:d4:40:c4:06:94:b2:a1:43:fa:9d: 46:01:1a:8c:55:c5:51:58:db:37:34:81:1e:4a:44:dd:7f:3a: 1f:07:98:af:0a:0a:c1:0a:dd:82:de:cc:bc:18:af:35:47:1c: 43:0c:d4:12:ef:4e:a4:35:ee:b2:57:fe:20:ba:68:1f:39:d8: 95:c0:18:9a:bc:d8:c7:c6:77:db:5e:b7:55:8d:9d:37:8f:4c: 5d:08:2d:b3:a1:5b:c6:19:43:7c:da:f4:57:59:7a:af:d9:6c: 0c:58:dc:a5:47:cb:6c:f0:dc:fa:10:b0:f1:bd:c6:12:7b:80: 2d:07:0d:4b -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc3MkYxMTAvBgNVBAUTKDFCRjk3NkVGRUFCMjMxMkVBMkRBQzg2Qjk4QTM5OENG MEM1QkQ2RjAwHhcNMjUwNTAxMDQ0MTQzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTkyZC03MzkzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0o5UK+NDafQ8syK/s7q07XgezF+rvFzBxslBpsVBv2JSN0rFhHHl502rA8+y 3xpcK0qhnquFj5W2JEkoqFzZ3mgv5C8hldthowMfDAC9BL7cIKU5uaII35HVHCL6 sJ9wsg2WlDluUAAqj9MjpJiRpzw6nbimLZx+sjO5t2L0i7n+qRsmg1DEUdMIb9HN 1Z+WNrHWSHg43Q5QtcPPB4kz4lLM9PXA0HepUT6R5r1YTdkHxAVKUPlLFsN5b0Cj SIMnAuwuPkSPG1sfunibaq6B5KCi3nQhp91ihwVZK3k6uKHIdMRZMdWW8oXEtHlC 2ZjpQZDLHrbf3TyIK8VxeTexBwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFJgX8FTu 2lUAkXCGyYoY4rotGJRDMB8GA1UdIwQYMBaAFBv5du/qsjEuotrIa5ijmM8MW9bw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzcyRi8xRTc3RTczMkUy RUIxMUVFQUQ2RTlBMEJDNEY5QUUwMi9HX2wyNy1xeU1TNmkyc2hybUtPWXp3eGIx dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0dfbDI3LXF5TVM2aTJzaHJtS09Zend4YjF2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc3MkYvMUU3N0U3MzJFMkVCMTFFRUFENkU5QTBCQzRGOUFFMDIvODI3NDNBMDZF MkVCMTFFRUJBQzczRDBDQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQByjKaMA8EAgACMAkDBwAgAQ3zjUAwDQYJKoZIhvcNAQELBQADggEB ADOWzQrznN43Otv1suyAAbBzZ3BVbvWMQMsT9X6FaqcmRjGCQIOsQzXcGj05wFki CmHlQ4Gb3KXxGOAwIPi7XbxlBU3E2h3f9NespFUmNAtKokv4yHv7eTqglgjOMj6q w8BwOpJARyTucCi44mTuwmoutumJpnD44wJkJrkT67ph/LhukP4G1EDEBpSyoUP6 nUYBGoxVxVFY2zc0gR5KRN1/Oh8HmK8KCsEK3YLezLwYrzVHHEMM1BLvTqQ17rJX /iC6aB852JXAGJq82MfGd9tet1WNnTePTF0ILbOhW8YZQ3za9FdZeq/ZbAxY3KVH y2zw3PoQsPG9xhJ7gC0HDUs= -----END CERTIFICATE-----Generated at Thu Mar 26 08:49:13 2026 by rpki-client