$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7BD18B9EA69D11ED970A2E1EC4F9AE02.roa File: 7BD18B9EA69D11ED970A2E1EC4F9AE02.roa (raw, json) Hash identifier: K3aeCKo2mZ2NOnnVOuFmorGAloq7x6dVjZPYqNrpk70= Subject key identifier: 35:CC:33:20:B6:09:26:55:D5:AE:BF:02:26:D8:3F:8C:06:4D:01:1E Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 074A Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7BD18B9EA69D11ED970A2E1EC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:09:19 +0000 ROA not before: Wed 08 Oct 2025 22:24:17 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132264 IP address blocks: 131.203.8.0/21 maxlen: 24 131.203.16.0/22 maxlen: 24 131.203.20.0/22 maxlen: 24 131.203.24.0/22 maxlen: 24 131.203.160.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Oct 8 22:24:17 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a480cf-7551 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a3:43:5a:ea:be:d2:b4:46:fc:de:f9:66:7e: eb:92:29:0b:08:68:57:29:5e:6e:a4:ad:2c:69:fc: 86:c0:6c:ca:4d:68:ca:b7:10:ef:3b:7c:e9:20:a1: 25:ee:e6:31:41:90:ea:34:7f:57:44:67:9b:20:15: cf:65:f1:41:94:48:50:a4:57:02:24:c4:a2:ba:63: 79:56:d5:86:79:6b:ea:4b:84:3a:da:8c:93:c6:d8: bb:ed:82:46:75:f7:2d:e5:ad:72:e6:d5:fc:0c:e1: b0:d9:74:37:c1:58:50:4f:3e:98:fa:f3:85:6d:d4: 54:9f:d1:ce:e8:91:01:78:e6:89:25:50:34:f4:83: 35:8c:4d:75:2c:58:df:c4:45:9d:dc:77:43:d0:4d: 5d:01:0f:2c:aa:85:ef:c7:e4:75:4d:4f:fb:b0:79: b9:2a:7e:18:45:fc:07:34:94:f2:1c:b8:d0:c2:17: 93:d7:05:09:dc:e1:41:43:b5:d9:b0:61:27:5b:fc: ab:69:e8:16:b0:bd:9e:e9:dc:b7:b5:8c:09:6c:28: 03:6b:cc:eb:7f:dc:5a:92:61:56:7b:37:f7:aa:07: 03:07:e1:8d:60:57:f3:4f:68:88:6d:f2:7c:99:7e: 23:c8:96:2d:75:2a:57:54:26:88:23:03:cb:dc:0a: cf:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CC:33:20:B6:09:26:55:D5:AE:BF:02:26:D8:3F:8C:06:4D:01:1E X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7BD18B9EA69D11ED970A2E1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 131.203.8.0-131.203.27.255 131.203.160.0/21 Signature Algorithm: sha256WithRSAEncryption 48:52:35:ac:dc:2a:6c:e5:3f:81:a4:4a:60:b2:f7:c7:bf:a8: c4:30:fa:30:2e:f9:63:17:c9:98:25:6b:55:fc:ff:e8:ff:ce: ba:31:6b:0d:e8:82:f1:92:4b:0d:ed:59:0b:55:08:33:fd:08: fb:d5:3d:f2:96:e9:c4:3e:63:cc:97:a3:b9:62:9d:12:49:cb: 3a:77:24:e9:ff:c0:96:34:81:4a:99:92:02:5c:4b:c9:10:c5: 6b:26:41:f4:b3:86:b3:38:91:2a:6a:fc:f1:32:01:22:d0:ba: 55:7f:2a:71:00:45:8c:3a:aa:be:f3:36:88:b6:30:0a:3a:74: 05:9f:b4:92:49:24:7b:fc:4a:05:b2:14:12:c9:16:e1:c7:27: fd:69:06:7d:86:39:c0:2b:4b:f5:e2:82:3f:f0:43:4c:87:53: 4e:b1:e5:89:33:0c:59:43:5d:e3:a6:8b:4b:95:9d:d1:19:64: 76:71:54:79:df:63:aa:83:44:9a:95:74:ff:1c:0b:9d:c3:6e: 09:52:a1:c3:b6:2c:6c:5a:5f:09:ac:9b:ff:a8:03:51:f3:11: c2:5c:59:5f:c6:bb:5e:aa:7c:69:6d:30:69:b8:1c:80:9b:6c: 16:5d:39:3b:59:a1:7b:97:5c:4a:68:1f:48:bd:fc:ff:27:f6: c4:4a:f7:9d -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjUxMDA4MjIyNDE3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODBjZi03NTUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqaNDWuq+0rRG/N75Zn7rkikLCGhXKV5upK0safyGwGzKTWjKtxDvO3zpIKEl 7uYxQZDqNH9XRGebIBXPZfFBlEhQpFcCJMSiumN5VtWGeWvqS4Q62oyTxti77YJG dfct5a1y5tX8DOGw2XQ3wVhQTz6Y+vOFbdRUn9HO6JEBeOaJJVA09IM1jE11LFjf xEWd3HdD0E1dAQ8sqoXvx+R1TU/7sHm5Kn4YRfwHNJTyHLjQwheT1wUJ3OFBQ7XZ sGEnW/yraegWsL2e6dy3tYwJbCgDa8zrf9xakmFWezf3qgcDB+GNYFfzT2iIbfJ8 mX4jyJYtdSpXVCaIIwPL3ArPIQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFDXMMyC2 CSZV1a6/AibYP4wGTQEeMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvODY1OEU0NjY4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvN0JEMThCOUVB NjlEMTFFRDk3MEEyRTFFQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUMAwDBAODywgDBAKDyxgDBAODy6AwDQYJKoZIhvcNAQELBQADggEBAEhS NazcKmzlP4GkSmCy98e/qMQw+jAu+WMXyZgla1X8/+j/zroxaw3ogvGSSw3tWQtV CDP9CPvVPfKW6cQ+Y8yXo7linRJJyzp3JOn/wJY0gUqZkgJcS8kQxWsmQfSzhrM4 kSpq/PEyASLQulV/KnEARYw6qr7zNoi2MAo6dAWftJJJJHv8SgWyFBLJFuHHJ/1p Bn2GOcArS/Xigj/wQ0yHU06x5YkzDFlDXeOmi0uVndEZZHZxVHnfY6qDRJqVdP8c C53DbglSocO2LGxaXwmsm/+oA1HzEcJcWV/Gu16qfGltMGm4HICbbBZdOTtZoXuX XEpoH0i9/P8n9sRK950= -----END CERTIFICATE-----Generated at Mon Mar 2 14:29:33 2026 by rpki-client