$ rpki-client -vvf rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/671CE4B2EF5911EFB8C93F62C4F9AE02.roa File: 671CE4B2EF5911EFB8C93F62C4F9AE02.roa (raw, json) Hash identifier: Uqjl/yz6bKUW7WJIpt5tUN6JC1ETFbt55O9WS9w0YmU= Subject key identifier: 02:A3:BF:32:92:42:7A:3A:CA:99:F2:A0:ED:00:27:C0:13:6B:A6:40 Certificate issuer: /CN=A912142C/serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Certificate serial: 3550 Authority key identifier: BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/671CE4B2EF5911EFB8C93F62C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:25:40 +0000 ROA not before: Fri 04 Jul 2025 14:51:19 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 58625 IP address blocks: 202.5.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13648 (0x3550) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912142C, serialNumber=BF583FF07DA356FDE282819F47BCEE247513119A Validity Not Before: Jul 4 14:51:19 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a47694-3d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:51:3b:08:13:1b:e1:af:29:aa:ac:49:73:2e: 61:42:a7:d5:40:a0:b4:aa:04:cc:d1:2d:dd:b7:5d: 0a:e7:69:07:13:49:31:41:01:82:ff:04:41:c7:50: 4b:98:df:96:b9:32:c2:58:56:db:72:2f:c8:a8:be: 0c:a2:60:ee:af:33:3a:a1:b8:24:7c:d9:94:21:02: b3:18:2a:89:d1:c1:0d:17:7d:cc:4a:44:31:f4:d6: ec:b2:52:2e:05:23:e5:58:45:7f:d3:09:57:28:2b: ff:26:ea:0f:62:0f:aa:4c:68:41:cb:50:43:67:41: 6a:05:3b:27:9b:d8:2f:a8:48:2e:54:ea:9a:f5:4e: 1e:c7:f7:04:6a:78:6c:99:ba:dc:d2:d9:1a:e8:78: a9:82:77:e7:b6:67:12:b9:fb:ba:74:ec:7f:e6:27: 9c:a8:4c:8a:d0:d2:78:ba:d0:a5:1c:60:78:1d:0b: e2:33:57:e3:8d:1b:41:62:92:4d:38:fd:71:a3:5e: c4:67:f0:6e:3f:89:1f:da:3c:3a:3f:3d:1c:b9:7d: 75:c0:80:b8:4d:ae:71:ae:4a:95:c8:59:b4:5a:81: c8:47:75:14:54:8c:f3:25:a1:5c:ea:69:a3:e6:10: dd:6f:92:c4:2b:e1:a5:7a:5b:41:22:fd:d2:c0:7e: 71:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:A3:BF:32:92:42:7A:3A:CA:99:F2:A0:ED:00:27:C0:13:6B:A6:40 X509v3 Authority Key Identifier: keyid:BF:58:3F:F0:7D:A3:56:FD:E2:82:81:9F:47:BC:EE:24:75:13:11:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/v1g_8H2jVv3igoGfR7zuJHUTEZo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v1g_8H2jVv3igoGfR7zuJHUTEZo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912142C/20B37CFE1D8711E2BDEFF7DE08B02CD2/671CE4B2EF5911EFB8C93F62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.5.201.0/24 Signature Algorithm: sha256WithRSAEncryption 07:1d:04:51:2e:cf:ef:68:76:53:d2:ea:66:23:80:8a:79:b9: 82:46:45:4a:92:81:4a:d4:6a:6c:0d:b0:f9:e9:bb:bf:43:dd: d4:57:a9:f5:ec:4c:35:86:83:9c:36:2a:77:69:5b:ad:9c:c0: f7:10:11:a7:e3:1b:6f:a7:47:37:fe:fa:35:9f:ba:0f:ff:b1: 5b:0d:93:e8:ff:35:e7:e5:d8:33:c2:de:e0:75:c9:97:59:d2: ba:a0:18:9e:ca:d0:58:67:1d:c4:ed:e9:99:93:d6:50:eb:3f: f4:52:6a:e6:96:03:46:fc:c5:88:91:71:f2:f5:22:98:cc:25: 7f:65:f7:5b:44:85:5e:3f:ef:f4:63:5e:a2:e0:81:de:e0:81: b9:ee:3c:57:17:78:47:78:5a:c5:c5:bb:7a:85:b5:66:76:5a: f9:a7:6c:ee:31:3a:9b:23:81:ac:5f:3d:d9:42:c0:41:60:85: 9c:5a:e6:44:22:90:3f:d3:fa:64:aa:3e:75:76:0a:14:ce:0e: b4:55:51:7f:6c:7e:6d:b9:e6:7e:12:82:12:af:1c:23:8d:17: 80:41:0d:c5:ba:27:04:58:6b:81:b4:0a:06:77:d4:fd:fe:9f: 21:63:5e:c2:83:07:fc:d3:a3:09:4a:94:57:ee:ef:e6:e4:3c: fc:3a:fb:20 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE0MkMxMTAvBgNVBAUTKEJGNTgzRkYwN0RBMzU2RkRFMjgyODE5RjQ3QkNFRTI0 NzUxMzExOUEwHhcNMjUwNzA0MTQ1MTE5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzY5NC0zZDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1E7CBMb4a8pqqxJcy5hQqfVQKC0qgTM0S3dt10K52kHE0kxQQGC/wRBx1BL mN+WuTLCWFbbci/IqL4MomDurzM6obgkfNmUIQKzGCqJ0cENF33MSkQx9NbsslIu BSPlWEV/0wlXKCv/JuoPYg+qTGhBy1BDZ0FqBTsnm9gvqEguVOqa9U4ex/cEanhs mbrc0tka6HipgnfntmcSufu6dOx/5iecqEyK0NJ4utClHGB4HQviM1fjjRtBYpJN OP1xo17EZ/BuP4kf2jw6Pz0cuX11wIC4Ta5xrkqVyFm0WoHIR3UUVIzzJaFc6mmj 5hDdb5LEK+GleltBIv3SwH5xlwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAKjvzKS Qno6ypnyoO0AJ8ATa6ZAMB8GA1UdIwQYMBaAFL9YP/B9o1b94oKBn0e87iR1ExGa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMTQyQy8yMEIzN0NGRTFE ODcxMUUyQkRFRkY3REUwOEIwMkNEMi92MWdfOEgyalZ2M2lnb0dmUjd6dUpIVVRF Wm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3YxZ184SDJqVnYzaWdvR2ZSN3p1SkhVVEVaby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE0MkMvMjBCMzdDRkUxRDg3MTFFMkJERUZGN0RFMDhCMDJDRDIvNjcxQ0U0QjJF RjU5MTFFRkI4QzkzRjYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAygXJMA0GCSqGSIb3DQEBCwUAA4IBAQAHHQRRLs/vaHZT0upmI4CK ebmCRkVKkoFK1GpsDbD56bu/Q93UV6n17Ew1hoOcNip3aVutnMD3EBGn4xtvp0c3 /vo1n7oP/7FbDZPo/zXn5dgzwt7gdcmXWdK6oBieytBYZx3E7emZk9ZQ6z/0Umrm lgNG/MWIkXHy9SKYzCV/ZfdbRIVeP+/0Y16i4IHe4IG57jxXF3hHeFrFxbt6hbVm dlr5p2zuMTqbI4GsXz3ZQsBBYIWcWuZEIpA/0/pkqj51dgoUzg60VVF/bH5tueZ+ EoISrxwjjReAQQ3FuicEWGuBtAoGd9T9/p8hY17Cgwf806MJSpRX7u/m5Dz8Ovsg -----END CERTIFICATE-----Generated at Mon Mar 2 08:01:19 2026 by rpki-client