$ rpki-client -vvf rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/20EC686CFB8211EEAAFD740AC4F9AE02.roa File: 20EC686CFB8211EEAAFD740AC4F9AE02.roa (raw, json) Hash identifier: E+BR0+TimYOC5eHCgMJvkbeghM62K4+PNvqm5Xd/1Us= Subject key identifier: D1:C2:2F:CA:A1:C9:F9:B3:E2:11:A3:3E:D3:C5:FD:C0:3B:DC:9C:F0 Certificate issuer: /CN=A91406AA/serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Certificate serial: 0871 Authority key identifier: 31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/20EC686CFB8211EEAAFD740AC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:44:21 +0000 ROA not before: Wed 08 Oct 2025 22:24:27 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 133878 IP address blocks: 202.180.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:45:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91406AA, serialNumber=315513E54AB0C99B8BCA84042E38358B60DB1B2C Validity Not Before: Oct 8 22:24:27 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a48905-d6d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:37:26:5a:b7:2d:5a:5e:d5:10:b8:81:b6:9a: 19:1c:82:37:48:9d:91:84:cc:e2:a9:89:d9:94:48: 50:8f:1b:ad:d3:2c:4a:55:75:1d:b1:f7:80:22:f1: 72:8c:ff:01:86:47:fd:cb:22:8e:b8:4c:19:85:49: 93:69:06:be:32:d1:9f:28:6b:2e:e5:68:1a:d8:39: cf:38:2e:21:66:ae:2b:bb:a7:51:c1:6f:f7:11:bc: 91:a8:ea:8b:74:5e:05:01:a4:01:35:09:25:f8:af: 78:91:ce:20:d0:80:e4:98:e6:8a:e7:0f:34:68:45: dc:49:0f:fc:49:3e:60:23:ce:f7:db:42:17:50:56: 16:40:4d:b2:fc:f9:5d:eb:20:a4:49:fc:92:15:34: 85:99:8b:28:fe:d6:18:98:0c:68:63:b2:a8:91:8e: 49:fa:75:6d:19:0a:27:99:7b:31:c7:db:45:64:33: 43:be:b6:9c:51:f4:29:19:74:74:c5:a4:52:43:9f: 51:fc:8c:b7:9b:54:a7:3a:fb:90:b6:a9:a8:85:e2: d4:5c:b8:b2:7a:f9:17:ef:d4:66:98:8f:7f:1e:a1: a9:d7:5e:9f:89:b9:9d:f4:df:c1:c8:65:96:aa:7e: 73:fa:f9:ec:cd:b9:fc:e2:ee:45:31:2b:80:51:19: b6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:C2:2F:CA:A1:C9:F9:B3:E2:11:A3:3E:D3:C5:FD:C0:3B:DC:9C:F0 X509v3 Authority Key Identifier: keyid:31:55:13:E5:4A:B0:C9:9B:8B:CA:84:04:2E:38:35:8B:60:DB:1B:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/MVUT5UqwyZuLyoQELjg1i2DbGyw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MVUT5UqwyZuLyoQELjg1i2DbGyw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91406AA/8F5BB4F886C111EBBAB3184BC4F9AE02/20EC686CFB8211EEAAFD740AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.180.79.0/24 Signature Algorithm: sha256WithRSAEncryption 16:23:40:b4:07:1c:de:54:71:ea:f2:ed:0e:b7:d0:6e:7c:3a: 66:41:6d:74:7b:bf:aa:80:18:0a:01:e1:f4:43:05:c7:13:12: 93:aa:06:33:2f:ba:55:7f:a1:93:9d:f3:19:a7:3d:c1:0d:58: ac:99:91:d0:d2:24:ab:ab:d0:4c:a6:ea:64:9c:78:3b:70:1f: 12:a8:ae:1a:82:c5:3c:8a:97:79:54:0b:73:42:17:eb:8b:28: 5a:24:a1:1b:a9:1a:9a:33:5d:47:72:76:0c:5e:bd:29:9e:df: 1c:d2:f4:8e:d1:c4:40:02:60:24:7c:85:e1:6b:92:6e:22:85: 32:0e:17:85:40:7a:8b:df:a5:2b:90:7a:79:32:fc:53:cc:78: 3e:a2:e3:4c:7b:f9:ac:69:cc:ad:92:ff:a0:e3:c5:83:7c:f8: 20:6a:2d:70:87:ab:34:22:bd:30:50:08:05:87:cb:fa:ea:f8: d7:15:5f:47:4e:f2:67:79:ef:58:ed:11:8b:35:e7:d0:e1:0e: 94:5a:5d:ae:70:9a:d0:f7:6d:b3:b5:bf:9c:92:4d:2e:bc:99: 53:0c:64:09:2c:25:8f:90:f0:0e:42:ec:c7:be:21:9e:66:90: 42:46:ac:d8:80:e0:ba:b9:6b:a1:70:b5:0c:5e:9e:9e:e6:ba: 74:af:65:87 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDA2QUExMTAvBgNVBAUTKDMxNTUxM0U1NEFCMEM5OUI4QkNBODQwNDJFMzgzNThC NjBEQjFCMkMwHhcNMjUxMDA4MjIyNDI3WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODkwNS1kNmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsjcmWrctWl7VELiBtpoZHII3SJ2RhMziqYnZlEhQjxut0yxKVXUdsfeAIvFy jP8Bhkf9yyKOuEwZhUmTaQa+MtGfKGsu5Wga2DnPOC4hZq4ru6dRwW/3EbyRqOqL dF4FAaQBNQkl+K94kc4g0IDkmOaK5w80aEXcSQ/8ST5gI87320IXUFYWQE2y/Pld 6yCkSfySFTSFmYso/tYYmAxoY7KokY5J+nVtGQonmXsxx9tFZDNDvracUfQpGXR0 xaRSQ59R/Iy3m1SnOvuQtqmoheLUXLiyevkX79RmmI9/HqGp116fibmd9N/ByGWW qn5z+vnszbn84u5FMSuAURm2hQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNHCL8qh yfmz4hGjPtPF/cA73JzwMB8GA1UdIwQYMBaAFDFVE+VKsMmbi8qEBC44NYtg2xss MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDZBQS84RjVCQjRGODg2 QzExMUVCQkFCMzE4NEJDNEY5QUUwMi9NVlVUNVVxd3ladUx5b1FFTGpnMWkyRGJH eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01WVVQ1VXF3eVp1THlvUUVMamcxaTJEYkd5dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDA2QUEvOEY1QkI0Rjg4NkMxMTFFQkJBQjMxODRCQzRGOUFFMDIvMjBFQzY4NkNG QjgyMTFFRUFBRkQ3NDBBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyrRPMA0GCSqGSIb3DQEBCwUAA4IBAQAWI0C0BxzeVHHq8u0Ot9Bu fDpmQW10e7+qgBgKAeH0QwXHExKTqgYzL7pVf6GTnfMZpz3BDVismZHQ0iSrq9BM pupknHg7cB8SqK4agsU8ipd5VAtzQhfriyhaJKEbqRqaM11HcnYMXr0pnt8c0vSO 0cRAAmAkfIXha5JuIoUyDheFQHqL36UrkHp5MvxTzHg+ouNMe/msacytkv+g48WD fPggai1wh6s0Ir0wUAgFh8v66vjXFV9HTvJnee9Y7RGLNefQ4Q6UWl2ucJrQ922z tb+ckk0uvJlTDGQJLCWPkPAOQuzHviGeZpBCRqzYgOC6uWuhcLUMXp6e5rp0r2WH -----END CERTIFICATE-----Generated at Mon Mar 2 07:37:29 2026 by rpki-client