$ rpki-client -vvf rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D9DAE0905A5B11EBBBCAAF76C4F9AE02.roa File: D9DAE0905A5B11EBBBCAAF76C4F9AE02.roa (raw, json) Hash identifier: pOUgm2843jh/XTjbiPgJs2qRTZ4b73+y0snqaj/61b4= Subject key identifier: 09:98:E7:75:FB:7D:CC:D3:02:3E:EE:BD:61:A7:BD:A0:11:52:3F:06 Certificate issuer: /CN=A9137ABC/serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Certificate serial: 3B72 Authority key identifier: 61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D9DAE0905A5B11EBBBCAAF76C4F9AE02.roa Signing time: Sun 01 Mar 2026 19:28:58 +0000 ROA not before: Mon 14 Jul 2025 14:51:29 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 55867 IP address blocks: 171.102.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:20:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15218 (0x3b72) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137ABC, serialNumber=61BF3ED4C3BFBC0916EF9480AAFF222A437AF02C Validity Not Before: Jul 14 14:51:29 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4937a-cb57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:db:2b:50:34:c5:26:2f:b1:4c:8d:31:05:0c: 6a:a9:b7:8a:47:a4:b8:02:48:fc:02:a4:5e:fa:a0: 50:f8:ce:46:e0:46:bb:5e:4c:a9:8f:7d:63:cd:dc: ce:cd:96:07:a4:0d:16:93:6a:30:52:b9:71:c6:a2: 9d:39:72:ba:c9:10:66:a8:34:49:6b:90:81:c4:79: 29:de:97:2b:dc:b3:9c:20:c0:f0:82:63:22:8c:de: ba:9e:4b:94:13:99:1e:7a:14:a7:36:a7:4f:43:35: fd:48:2b:38:2a:62:19:ce:ef:35:59:03:c0:57:c1: 1d:c1:eb:1c:fc:7d:c5:37:ff:6d:0d:51:47:b3:96: e5:f4:2c:94:c3:be:85:85:f9:20:e9:82:04:65:8f: 5a:b7:7c:7d:4c:96:3e:f6:65:05:1e:18:9d:7b:0a: 87:19:19:22:28:f6:2e:f3:e9:ac:5c:91:a7:2a:85: 09:42:59:ce:ff:38:db:bb:0e:f2:3e:31:63:43:72: 3f:d1:ec:d1:16:39:43:ed:74:96:64:4a:9a:53:db: c9:d1:7d:d1:14:8c:bf:23:cd:5c:04:db:3a:b9:db: f5:78:f0:dc:44:ec:2c:9b:24:99:5f:46:8f:60:2c: 23:35:44:5c:b8:b3:5d:30:d7:60:a8:43:a1:e2:fc: 41:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:98:E7:75:FB:7D:CC:D3:02:3E:EE:BD:61:A7:BD:A0:11:52:3F:06 X509v3 Authority Key Identifier: keyid:61:BF:3E:D4:C3:BF:BC:09:16:EF:94:80:AA:FF:22:2A:43:7A:F0:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yb8-1MO_vAkW75SAqv8iKkN68Cw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137ABC/713D9FB01D7811E282868DC408B02CD2/D9DAE0905A5B11EBBBCAAF76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 171.102.202.0/24 Signature Algorithm: sha256WithRSAEncryption 6a:47:ef:d9:cc:e8:65:32:1b:06:eb:53:34:b4:52:fb:c1:93: 38:c8:b5:68:8a:a2:c2:6e:fc:5b:8e:cb:fc:30:6e:3d:ca:9f: 02:f2:55:1f:1d:70:00:83:19:f7:47:5f:fe:7c:86:5d:09:e4: 81:d9:ec:e3:a2:31:27:29:9f:5c:91:af:f8:05:84:fc:23:75: 9f:66:83:28:14:e3:2c:bb:dd:f6:1d:30:b6:08:9e:43:a0:3a: b6:a1:0d:a2:79:df:5b:16:90:1f:ad:12:bc:16:2a:34:11:b3: f9:fc:62:7e:3f:52:eb:84:72:76:ab:43:a0:77:2f:6c:61:5e: 84:58:d9:69:57:85:fe:3c:5d:21:f8:76:70:e8:03:03:35:79: f4:7b:4f:2c:36:67:24:1a:29:2d:1f:6c:30:02:a6:a1:d5:48: 2e:06:11:83:94:4e:da:97:cf:8d:1d:e2:f2:ef:57:03:8f:d6: a2:34:d2:c8:c9:1a:da:01:cf:ff:2b:b3:42:c0:c2:65:d0:2f: f3:9d:63:43:0b:e1:5d:f1:b4:f0:43:8c:f5:0b:34:4e:d1:3b: b7:03:04:64:13:74:08:cc:67:95:94:95:b2:2e:50:f2:fe:5c: 99:69:c7:a5:07:e3:ea:3f:37:ca:48:3d:0c:d4:f5:8b:f0:fc: c4:f5:2f:14 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICO3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzdBQkMxMTAvBgNVBAUTKDYxQkYzRUQ0QzNCRkJDMDkxNkVGOTQ4MEFBRkYyMjJB NDM3QUYwMkMwHhcNMjUwNzE0MTQ1MTI5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OTM3YS1jYjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5dsrUDTFJi+xTI0xBQxqqbeKR6S4Akj8AqRe+qBQ+M5G4Ea7Xkypj31jzdzO zZYHpA0Wk2owUrlxxqKdOXK6yRBmqDRJa5CBxHkp3pcr3LOcIMDwgmMijN66nkuU E5keehSnNqdPQzX9SCs4KmIZzu81WQPAV8Edwesc/H3FN/9tDVFHs5bl9CyUw76F hfkg6YIEZY9at3x9TJY+9mUFHhidewqHGRkiKPYu8+msXJGnKoUJQlnO/zjbuw7y PjFjQ3I/0ezRFjlD7XSWZEqaU9vJ0X3RFIy/I81cBNs6udv1ePDcROwsmySZX0aP YCwjNURcuLNdMNdgqEOh4vxB3QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAmY53X7 fczTAj7uvWGnvaARUj8GMB8GA1UdIwQYMBaAFGG/PtTDv7wJFu+UgKr/IipDevAs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzN0FCQy83MTNEOUZCMDFE NzgxMUUyODI4NjhEQzQwOEIwMkNEMi9ZYjgtMU1PX3ZBa1c3NVNBcXY4aUtrTjY4 Q3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1liOC0xTU9fdkFrVzc1U0FxdjhpS2tONjhDdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzdBQkMvNzEzRDlGQjAxRDc4MTFFMjgyODY4REM0MDhCMDJDRDIvRDlEQUUwOTA1 QTVCMTFFQkJCQ0FBRjc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAq2bKMA0GCSqGSIb3DQEBCwUAA4IBAQBqR+/ZzOhlMhsG61M0tFL7 wZM4yLVoiqLCbvxbjsv8MG49yp8C8lUfHXAAgxn3R1/+fIZdCeSB2ezjojEnKZ9c ka/4BYT8I3WfZoMoFOMsu932HTC2CJ5DoDq2oQ2ied9bFpAfrRK8Fio0EbP5/GJ+ P1LrhHJ2q0Ogdy9sYV6EWNlpV4X+PF0h+HZw6AMDNXn0e08sNmckGiktH2wwAqah 1UguBhGDlE7al8+NHeLy71cDj9aiNNLIyRraAc//K7NCwMJl0C/znWNDC+Fd8bTw Q4z1CzRO0Tu3AwRkE3QIzGeVlJWyLlDy/lyZacelB+PqPzfKSD0M1PWL8PzE9S8U -----END CERTIFICATE-----Generated at Mon Mar 2 19:26:08 2026 by rpki-client