$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7EACD6DEA69D11ED970A2E1EC4F9AE02.roa File: 7EACD6DEA69D11ED970A2E1EC4F9AE02.roa (raw, json) Hash identifier: jQXlUzW3VHeQZYuGACvXU8X1tTMwFhRUqHJL1OYJ9/8= Subject key identifier: D6:E9:C9:65:BD:F6:2E:4E:AA:16:1B:54:CD:F8:D9:0B:FE:1B:43:92 Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 0750 Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7EACD6DEA69D11ED970A2E1EC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:09:24 +0000 ROA not before: Wed 08 Oct 2025 22:24:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 45267 IP address blocks: 131.203.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1872 (0x750) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Oct 8 22:24:22 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a480d4-36db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e7:13:68:09:ba:50:cf:44:46:d1:e6:d1:ac: 72:70:d3:6b:10:06:3e:09:c2:b4:4c:a0:53:80:95: 3f:f5:08:bd:7f:9c:50:ca:59:18:f8:e2:39:5e:ca: df:07:0a:fc:c8:7f:67:e1:0d:53:ea:79:9f:55:6a: 6a:05:b0:a2:ae:ea:73:2a:0e:31:ae:32:b0:06:fd: 8f:92:17:e6:a2:54:6c:a4:85:5c:93:c4:77:3e:4c: 2e:a7:f1:a9:fe:72:b5:98:c6:e5:94:87:af:2c:d3: ce:20:43:e4:59:1f:f6:fe:80:39:ab:aa:92:45:28: b7:0f:95:ec:bc:ad:2c:39:3c:94:61:aa:a6:d7:60: 99:af:7c:7c:70:02:52:25:38:59:ed:5e:cb:3e:7b: d9:22:3f:55:92:ba:36:25:17:c4:36:62:6e:d2:75: 6e:3b:cb:d9:4f:82:2c:1d:20:26:74:0f:39:c4:92: bd:80:b8:02:4f:fb:7c:f5:4c:33:6d:09:d8:ae:ca: b6:ba:78:4f:73:ed:d6:7e:f0:c1:ef:67:e4:90:b6: 3f:3a:ed:90:f4:4c:88:14:fd:fc:13:01:97:09:2c: f1:1f:c1:27:7f:b5:17:79:9f:5b:91:40:15:5d:49: bf:29:d0:35:f7:44:3e:82:a0:85:62:6d:03:b4:c9: 98:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:E9:C9:65:BD:F6:2E:4E:AA:16:1B:54:CD:F8:D9:0B:FE:1B:43:92 X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/7EACD6DEA69D11ED970A2E1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 131.203.140.0/24 Signature Algorithm: sha256WithRSAEncryption b9:b9:95:dc:89:4a:fe:78:c4:48:7d:77:f1:b3:bb:a9:55:fd: df:56:b9:ad:98:c5:b9:94:06:c3:60:73:4f:58:d5:59:22:c4: 7e:70:d0:12:d8:80:c3:4a:0a:bb:b3:55:2e:db:9f:1c:f8:08: 25:c9:a9:c2:e8:32:b8:b2:b5:e2:1a:0e:6f:14:3b:d2:40:b6: 77:db:9c:ed:34:c8:d7:5c:3a:b5:c2:05:dd:89:ee:2f:5c:ee: e6:21:b9:35:b5:85:11:d8:92:f4:12:a0:58:f8:18:e8:99:52: 0f:da:7f:90:4f:8d:1e:32:98:00:9d:1c:d3:2d:3d:bc:9a:4e: 0f:4a:06:ac:73:13:0c:65:7d:6a:c4:75:9d:2e:4f:b1:5d:72: 9d:e0:9c:2d:83:69:3c:57:ea:2c:03:49:8a:bf:2e:82:a5:fb: f1:fa:e1:e7:35:dc:d0:f9:b3:b6:4e:62:b6:a3:e1:0d:c2:23: fa:c6:9d:5a:00:41:1e:ad:c4:32:75:72:dc:1d:d1:fd:fd:40: 27:4a:a3:fc:91:33:27:61:3c:fd:9d:3e:3f:b4:6c:54:ec:d5: bb:7a:24:9b:bf:56:7c:62:19:eb:6f:c3:96:bb:1e:73:fa:aa: 0c:47:bd:41:91:1b:41:a4:57:f8:f2:8c:fb:b5:49:e2:2d:c0: 7c:1d:12:5c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB1AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjUxMDA4MjIyNDIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODBkNC0zNmRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzecTaAm6UM9ERtHm0axycNNrEAY+CcK0TKBTgJU/9Qi9f5xQylkY+OI5Xsrf Bwr8yH9n4Q1T6nmfVWpqBbCirupzKg4xrjKwBv2PkhfmolRspIVck8R3Pkwup/Gp /nK1mMbllIevLNPOIEPkWR/2/oA5q6qSRSi3D5XsvK0sOTyUYaqm12CZr3x8cAJS JThZ7V7LPnvZIj9Vkro2JRfENmJu0nVuO8vZT4IsHSAmdA85xJK9gLgCT/t89Uwz bQnYrsq2unhPc+3WfvDB72fkkLY/Ou2Q9EyIFP38EwGXCSzxH8Enf7UXeZ9bkUAV XUm/KdA190Q+gqCFYm0DtMmYAwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNbpyWW9 9i5OqhYbVM342Qv+G0OSMB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvODY1OEU0NjY4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvN0VBQ0Q2REVB NjlEMTFFRDk3MEEyRTFFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAg8uMMA0GCSqGSIb3DQEBCwUAA4IBAQC5uZXciUr+eMRIfXfxs7up Vf3fVrmtmMW5lAbDYHNPWNVZIsR+cNAS2IDDSgq7s1Uu258c+AglyanC6DK4srXi Gg5vFDvSQLZ325ztNMjXXDq1wgXdie4vXO7mIbk1tYUR2JL0EqBY+BjomVIP2n+Q T40eMpgAnRzTLT28mk4PSgascxMMZX1qxHWdLk+xXXKd4Jwtg2k8V+osA0mKvy6C pfvx+uHnNdzQ+bO2TmK2o+ENwiP6xp1aAEEercQydXLcHdH9/UAnSqP8kTMnYTz9 nT4/tGxU7NW7eiSbv1Z8Yhnrb8OWux5z+qoMR71BkRtBpFf48oz7tUniLcB8HRJc -----END CERTIFICATE-----Generated at Mon Mar 2 14:29:37 2026 by rpki-client