$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa File: ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa (raw, json) Hash identifier: iXLK649RmoeUhSGlA25MdX2Oj5QWfIOM0pF/QXQTaps= Subject key identifier: 2D:71:4C:0C:71:F8:E7:EF:39:10:2A:AC:0F:94:F8:8B:19:48:E7:3C Certificate issuer: /CN=A91406AA/serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Certificate serial: 0751 Authority key identifier: 21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:09:25 +0000 ROA not before: Wed 08 Oct 2025 22:24:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 56068 IP address blocks: 131.203.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1873 (0x751) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=218A8AA050267B0805E3FDC8A939BF8FBCB00101 Validity Not Before: Oct 8 22:24:22 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a480d5-549a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:61:4d:7b:c6:d0:90:19:9c:f4:09:08:77:88: c1:01:d6:64:9f:5b:e4:ea:40:e4:17:3b:76:d0:77: da:fa:d9:c3:0d:88:3f:85:71:63:f1:87:6e:f2:c1: 71:53:10:6c:b8:eb:63:79:5b:e4:e1:37:bc:ad:84: c2:22:f4:6b:8d:b4:6a:e7:30:a5:50:5a:78:72:75: 8a:f3:8f:d0:02:37:0b:40:61:5f:a2:47:18:19:48: bf:73:c4:e6:fd:70:01:e4:cc:d7:95:3f:72:3b:f7: c0:27:88:d0:3b:99:92:80:1a:95:c3:a1:f1:75:d9: f4:49:bf:d6:d6:d0:d2:1a:8b:33:4e:fe:9f:74:6c: d8:de:18:98:75:2e:4b:66:6b:18:82:a9:50:28:fa: b3:87:0e:70:77:ca:10:1e:02:52:c3:b6:ad:a2:21: 66:af:dd:fe:a5:60:09:55:67:70:26:e9:57:69:b4: 52:bb:21:b2:24:04:db:5f:66:d9:5a:c4:39:0a:c8: a6:4c:54:80:86:1e:fe:80:71:de:66:8f:01:0b:2d: b2:7d:86:c7:92:a9:bc:bc:eb:9e:43:15:bd:07:25: 00:ac:b9:a4:8a:31:c5:a7:cf:a5:e3:77:33:8d:ec: 37:f6:48:ad:e2:03:ed:70:ed:66:d3:af:f4:60:93: 74:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:71:4C:0C:71:F8:E7:EF:39:10:2A:AC:0F:94:F8:8B:19:48:E7:3C X509v3 Authority Key Identifier: keyid:21:8A:8A:A0:50:26:7B:08:05:E3:FD:C8:A9:39:BF:8F:BC:B0:01:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/IYqKoFAmewgF4_3IqTm_j7ywAQE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IYqKoFAmewgF4_3IqTm_j7ywAQE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8658E46686C111EBBAB3184BC4F9AE02/ECF2B5A8A72B11EDAC3DA56CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 131.203.76.0/23 Signature Algorithm: sha256WithRSAEncryption 15:7f:92:b2:c1:ba:2a:61:33:3d:45:a1:34:f5:9b:89:c8:7b: 84:f3:f1:68:b9:aa:e7:b8:a5:e5:85:fe:ff:6f:5b:12:e2:29: fe:c3:c7:73:8d:7a:98:f7:1b:03:d4:35:a0:d8:93:25:ca:60: 67:00:17:1b:0a:93:4d:4a:0d:84:f7:3f:16:77:74:97:e7:ed: d6:bd:33:1c:c2:97:f7:f1:e1:73:09:73:70:70:1a:d3:f2:ce: d6:70:61:ae:84:cb:ad:cc:f2:17:08:05:73:02:57:b4:32:2e: 34:38:6d:ce:a6:73:20:65:38:96:30:ca:14:65:3d:7f:a6:25: 17:57:75:4c:3b:b3:2f:44:a6:08:b1:c9:ac:f0:0f:89:94:22: 86:43:00:24:80:e7:30:92:70:ff:c8:d6:51:9d:a3:92:e7:29: 95:33:c2:21:4a:14:a5:a6:6b:39:fe:dc:6d:35:c2:6e:46:04: 6a:81:cf:6e:bc:38:3e:9e:3a:40:77:68:92:bb:72:f7:9d:cc: c8:58:5b:7c:1b:2c:4d:3a:f1:c2:fa:17:1f:ef:50:89:c7:dc: 0c:04:d0:69:a2:f1:d4:59:62:0a:1a:8b:90:64:c8:05:4b:67: 5a:b8:13:a9:8b:6d:57:61:89:ea:e4:b2:e0:11:1b:d4:16:7a: 07:61:e1:60 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB1EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDIxOEE4QUEwNTAyNjdCMDgwNUUzRkRDOEE5MzlCRjhG QkNCMDAxMDEwHhcNMjUxMDA4MjIyNDIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODBkNS01NDlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyGFNe8bQkBmc9AkId4jBAdZkn1vk6kDkFzt20Hfa+tnDDYg/hXFj8Ydu8sFx UxBsuOtjeVvk4Te8rYTCIvRrjbRq5zClUFp4cnWK84/QAjcLQGFfokcYGUi/c8Tm /XAB5MzXlT9yO/fAJ4jQO5mSgBqVw6Hxddn0Sb/W1tDSGoszTv6fdGzY3hiYdS5L ZmsYgqlQKPqzhw5wd8oQHgJSw7atoiFmr93+pWAJVWdwJulXabRSuyGyJATbX2bZ WsQ5CsimTFSAhh7+gHHeZo8BCy2yfYbHkqm8vOueQxW9ByUArLmkijHFp8+l43cz jew39kit4gPtcO1m06/0YJN0YQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC1xTAxx +OfvORAqrA+U+IsZSOc8MB8GA1UdIwQYMBaAFCGKiqBQJnsIBeP9yKk5v4+8sAEB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84NjU4RTQ2Njg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9JWXFLb0ZBbWV3Z0Y0XzNJcVRtX2o3eXdB UUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lZcUtvRkFtZXdnRjRfM0lxVG1fajd5d0FRRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvODY1OEU0NjY4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvRUNGMkI1QThB NzJCMTFFREFDM0RBNTZDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBg8tMMA0GCSqGSIb3DQEBCwUAA4IBAQAVf5KywboqYTM9RaE09ZuJ yHuE8/FouarnuKXlhf7/b1sS4in+w8dzjXqY9xsD1DWg2JMlymBnABcbCpNNSg2E 9z8Wd3SX5+3WvTMcwpf38eFzCXNwcBrT8s7WcGGuhMutzPIXCAVzAle0Mi40OG3O pnMgZTiWMMoUZT1/piUXV3VMO7MvRKYIscms8A+JlCKGQwAkgOcwknD/yNZRnaOS 5ymVM8IhShSlpms5/txtNcJuRgRqgc9uvDg+njpAd2iSu3L3nczIWFt8GyxNOvHC +hcf71CJx9wMBNBpovHUWWIKGouQZMgFS2dauBOpi21XYYnq5LLgERvUFnoHYeFg -----END CERTIFICATE-----Generated at Mon Mar 2 19:42:07 2026 by rpki-client