$ rpki-client -vvf rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa File: 63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa (raw, json) Hash identifier: EVuru3xNSy6RQB88Xo1MqJkQivcU8HP38W4mpX0e8UU= Subject key identifier: 77:5C:C8:45:C4:26:B9:B9:20:8C:B6:DB:47:77:41:B1:97:39:85:DF Certificate issuer: /CN=A91F223F/serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Certificate serial: 01B3 Authority key identifier: DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:01:49 +0000 ROA not before: Mon 29 Dec 2025 03:22:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 45359 IP address blocks: 202.49.172.0/24 maxlen: 24 202.49.173.0/24 maxlen: 24 202.49.174.0/24 maxlen: 24 202.49.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 03:24:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 435 (0x1b3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F223F, serialNumber=DBDAD009017D91DFB438D70D1B8D4D34862F068E Validity Not Before: Dec 29 03:22:49 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41c9d-ac20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:ae:ec:f1:d2:fc:57:a7:5f:93:29:4d:bb: 55:d5:e2:48:d4:ab:e4:3c:dc:37:a5:62:db:b8:04: d7:b3:32:3a:b9:39:a0:53:89:09:86:4b:1f:d2:c5: 78:6f:01:25:5e:6c:8e:c8:8d:3f:c7:c2:f3:d6:ed: 09:05:70:e7:d2:a1:ee:f0:ab:9d:6a:72:08:85:04: 67:90:50:bc:43:7c:3a:af:91:74:59:84:9f:ec:a1: 3f:d5:48:0e:d0:e2:57:a5:4e:d9:03:67:56:7a:1e: 3f:cb:2c:c1:14:2a:c3:1a:68:2c:21:eb:b6:7c:0f: 0f:72:e9:cd:f8:e2:8e:ca:cc:ef:7a:c1:91:4c:69: b8:2b:16:6d:37:2c:d3:49:dd:ed:fc:bc:db:e3:78: c7:9a:82:0c:7e:57:b5:30:43:e9:2b:32:70:22:2b: a6:bf:e2:66:77:8d:60:a4:33:ce:b1:3c:68:91:e0: ce:7d:25:57:ac:0e:df:38:02:6d:ae:12:7e:12:33: a2:c2:80:39:a9:06:ca:9e:12:93:9a:08:36:15:1d: 51:d4:b6:44:e6:b3:27:20:96:fc:43:71:e8:da:87: 67:92:cd:2c:20:a9:53:61:23:06:d1:8e:70:16:74: 9d:49:56:f7:e6:ff:ff:0d:0c:92:b2:3d:4b:2d:b0: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:5C:C8:45:C4:26:B9:B9:20:8C:B6:DB:47:77:41:B1:97:39:85:DF X509v3 Authority Key Identifier: keyid:DB:DA:D0:09:01:7D:91:DF:B4:38:D7:0D:1B:8D:4D:34:86:2F:06:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/29rQCQF9kd-0ONcNG41NNIYvBo4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/29rQCQF9kd-0ONcNG41NNIYvBo4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F223F/0969127C8CAA11EE864DFD6DC4F9AE02/63E8E1AA8CAA11EE8B20D86EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.49.172.0/22 Signature Algorithm: sha256WithRSAEncryption 60:65:82:68:b2:7d:12:20:e1:b3:b3:9d:34:99:ad:b7:39:45: 11:eb:fd:15:a4:6b:a5:8e:17:be:ff:cf:0f:5c:df:02:f1:a7: df:90:80:22:74:a3:b2:ae:0d:ec:90:96:90:c6:12:97:53:6a: 61:96:6e:3f:4f:ac:65:ac:d6:a4:3f:56:45:d1:c3:3f:00:e1: d7:24:f9:e5:68:4a:0a:a5:64:0a:30:e6:79:1c:eb:97:8f:4d: d1:dc:45:3a:a3:46:71:f1:3b:2d:6f:d4:c4:8d:b5:85:ec:02: 98:f7:0a:52:79:8e:51:39:ab:34:f4:0b:a9:35:1f:af:34:58: 8d:1f:3a:f2:8f:2d:63:60:62:7a:92:fb:96:6b:65:04:48:5f: 9d:17:e5:62:f2:7c:a6:d4:2a:4b:1d:68:e8:c8:9a:ae:05:85: a1:88:97:ac:bb:c7:95:45:11:ae:43:34:98:0e:c6:45:4f:aa: 16:62:ba:c0:a7:00:e7:b3:f3:99:6d:03:77:9f:4f:98:9b:a2: f1:f5:d9:79:19:0e:2b:92:fe:4a:68:e2:dd:88:a1:4e:81:6f: e8:6b:5b:c3:f4:d2:0f:47:4b:f3:97:3f:0f:b4:0d:64:85:36: f0:63:01:2d:7a:9d:24:04:e1:f9:dc:87:9f:b4:c2:ee:60:7c: 62:af:f0:8b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyM0YxMTAvBgNVBAUTKERCREFEMDA5MDE3RDkxREZCNDM4RDcwRDFCOEQ0RDM0 ODYyRjA2OEUwHhcNMjUxMjI5MDMyMjQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWM5ZC1hYzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApz+u7PHS/FenX5MpTbtV1eJI1KvkPNw3pWLbuATXszI6uTmgU4kJhksf0sV4 bwElXmyOyI0/x8Lz1u0JBXDn0qHu8KudanIIhQRnkFC8Q3w6r5F0WYSf7KE/1UgO 0OJXpU7ZA2dWeh4/yyzBFCrDGmgsIeu2fA8PcunN+OKOyszvesGRTGm4KxZtNyzT Sd3t/Lzb43jHmoIMfle1MEPpKzJwIiumv+Jmd41gpDPOsTxokeDOfSVXrA7fOAJt rhJ+EjOiwoA5qQbKnhKTmgg2FR1R1LZE5rMnIJb8Q3Ho2odnks0sIKlTYSMG0Y5w FnSdSVb35v//DQySsj1LLbDFcwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHdcyEXE Jrm5IIy220d3QbGXOYXfMB8GA1UdIwQYMBaAFNva0AkBfZHftDjXDRuNTTSGLwaO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzRi8wOTY5MTI3QzhD QUExMUVFODY0REZENkRDNEY5QUUwMi8yOXJRQ1FGOWtkLTBPTmNORzQxTk5JWXZC bzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzI5clFDUUY5a2QtME9OY05HNDFOTklZdkJvNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjIyM0YvMDk2OTEyN0M4Q0FBMTFFRTg2NERGRDZEQzRGOUFFMDIvNjNFOEUxQUE4 Q0FBMTFFRThCMjBEODZFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCyjGsMA0GCSqGSIb3DQEBCwUAA4IBAQBgZYJosn0SIOGzs500ma23 OUUR6/0VpGuljhe+/88PXN8C8affkIAidKOyrg3skJaQxhKXU2phlm4/T6xlrNak P1ZF0cM/AOHXJPnlaEoKpWQKMOZ5HOuXj03R3EU6o0Zx8Tstb9TEjbWF7AKY9wpS eY5ROas09AupNR+vNFiNHzryjy1jYGJ6kvuWa2UESF+dF+Vi8nym1CpLHWjoyJqu BYWhiJesu8eVRRGuQzSYDsZFT6oWYrrApwDns/OZbQN3n0+Ym6Lx9dl5GQ4rkv5K aOLdiKFOgW/oa1vD9NIPR0vzlz8PtA1khTbwYwEtep0kBOH53IeftMLuYHxir/CL -----END CERTIFICATE-----Generated at Sat Mar 28 13:40:58 2026 by rpki-client