$ rpki-client -vvf rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/433F089AE49A11EB85874B74C4F9AE02.roa File: 433F089AE49A11EB85874B74C4F9AE02.roa (raw, json) Hash identifier: Y21EB5mcTdLJ+t1P6lpjNle0vO49vwuhzcqyBGhqfzk= Subject key identifier: E7:55:75:3B:51:D2:18:C0:D3:B5:A3:9A:79:CA:6F:CF:ED:44:22:24 Certificate issuer: /CN=A91415FB/serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Certificate serial: 1A0B Authority key identifier: 37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/433F089AE49A11EB85874B74C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:24:48 +0000 ROA not before: Sat 28 Feb 2026 17:13:57 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 131607 IP address blocks: 202.5.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6667 (0x1a0b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91415FB, serialNumber=37D3374985F3BAA82D0BE04C6D87A3A035E20DEA Validity Not Before: Feb 28 17:13:57 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a46850-70df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:54:4c:6b:85:44:76:9f:55:bc:a9:73:02:e6: ce:a5:8c:82:5d:29:6e:da:b0:ab:08:72:2c:a3:4d: 9a:e6:36:10:7d:83:3e:94:6a:76:0a:1a:ff:c2:85: d4:73:e8:44:06:f0:18:de:e0:cd:11:52:7b:40:8e: 30:a4:c0:e0:e4:71:84:22:9b:18:18:08:1f:ea:12: c2:2c:64:c5:6d:fb:6d:9e:d8:fd:05:62:c0:34:66: f6:45:b1:25:fd:1c:f7:06:dd:6d:1c:85:50:a0:5c: 1c:0e:65:be:fd:a2:ad:51:89:61:dd:ce:e1:80:8b: a9:8d:73:a0:97:7e:51:ad:8a:93:a0:f9:63:49:7e: 48:b0:3a:84:55:f8:33:82:e2:cf:22:47:ff:61:7b: 5e:7e:08:c0:d7:8c:af:6d:e4:2e:60:66:8d:ce:61: 82:b7:c8:f6:b6:c3:4d:0b:35:80:70:2b:de:d5:cc: 9a:12:fd:4a:39:21:a6:f9:48:62:fb:6b:7f:00:07: b6:69:a7:a8:10:28:c1:1f:f2:f5:3d:ef:97:0f:e0: 9b:5a:e4:ec:91:a0:29:f6:f0:c2:0e:cf:e8:bf:ea: c2:a0:8b:22:58:a4:31:bc:07:0f:b1:c9:bd:6c:07: b5:dc:9f:e4:a8:6a:c4:f2:6c:6b:69:d7:7e:9b:2a: a6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:55:75:3B:51:D2:18:C0:D3:B5:A3:9A:79:CA:6F:CF:ED:44:22:24 X509v3 Authority Key Identifier: keyid:37:D3:37:49:85:F3:BA:A8:2D:0B:E0:4C:6D:87:A3:A0:35:E2:0D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/N9M3SYXzuqgtC-BMbYejoDXiDeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/N9M3SYXzuqgtC-BMbYejoDXiDeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91415FB/7F488968735D11E788DA4F14C4F9AE02/433F089AE49A11EB85874B74C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.5.224.0/20 Signature Algorithm: sha256WithRSAEncryption 18:52:56:40:0f:84:75:b4:93:80:77:89:ec:32:7c:86:4e:3e: 59:79:d7:3d:9f:6e:35:db:75:d2:7b:b2:dd:64:61:16:0e:0f: 03:25:eb:2e:95:8a:68:cf:4b:c2:5a:a9:1f:96:57:ab:a2:ff: e6:6b:00:1e:91:15:57:20:f0:e0:d7:f9:83:0c:9d:47:cf:e0: 74:e5:e8:db:8d:cd:07:37:de:48:0e:cd:af:e6:bf:32:7a:18: 59:20:8f:28:c8:ea:04:29:c4:1b:06:81:a4:55:d4:72:f4:13: 29:73:51:bf:93:e4:73:de:31:c7:2c:8e:95:a0:94:58:1f:94: 43:80:93:96:1e:9c:f9:74:1a:ef:52:00:2e:74:67:b5:e5:67: 52:fb:dd:9c:2b:fa:bf:ba:ca:0a:e2:32:81:77:2c:1f:93:30: d6:55:88:be:34:1c:ca:92:a9:bd:3b:db:3e:0b:6b:15:36:fc: f6:d0:bb:d8:bb:e1:c6:eb:90:c6:70:96:95:17:ef:ad:36:51: 15:64:b3:41:19:54:be:4d:44:b3:4b:2a:f3:e8:ff:9d:ef:98: c2:da:d8:bb:a3:4c:c7:09:b2:2b:7d:ab:0f:ac:86:0a:19:6d: b3:d7:aa:72:db:df:7b:c3:b7:b2:47:d7:5c:5f:4c:29:e5:bc: a0:92:af:f7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGgswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDE1RkIxMTAvBgNVBAUTKDM3RDMzNzQ5ODVGM0JBQTgyRDBCRTA0QzZEODdBM0Ew MzVFMjBERUEwHhcNMjYwMjI4MTcxMzU3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Njg1MC03MGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA11RMa4VEdp9VvKlzAubOpYyCXSlu2rCrCHIso02a5jYQfYM+lGp2Chr/woXU c+hEBvAY3uDNEVJ7QI4wpMDg5HGEIpsYGAgf6hLCLGTFbfttntj9BWLANGb2RbEl /Rz3Bt1tHIVQoFwcDmW+/aKtUYlh3c7hgIupjXOgl35RrYqToPljSX5IsDqEVfgz guLPIkf/YXtefgjA14yvbeQuYGaNzmGCt8j2tsNNCzWAcCve1cyaEv1KOSGm+Uhi +2t/AAe2aaeoECjBH/L1Pe+XD+CbWuTskaAp9vDCDs/ov+rCoIsiWKQxvAcPscm9 bAe13J/kqGrE8mxradd+myqmxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOdVdTtR 0hjA07WjmnnKb8/tRCIkMB8GA1UdIwQYMBaAFDfTN0mF87qoLQvgTG2Ho6A14g3q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MTVGQi83RjQ4ODk2ODcz NUQxMUU3ODhEQTRGMTRDNEY5QUUwMi9OOU0zU1lYenVxZ3RDLUJNYlllam9EWGlE ZW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL045TTNTWVh6dXFndEMtQk1iWWVqb0RYaURlby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDE1RkIvN0Y0ODg5Njg3MzVEMTFFNzg4REE0RjE0QzRGOUFFMDIvNDMzRjA4OUFF NDlBMTFFQjg1ODc0Qjc0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEygXgMA0GCSqGSIb3DQEBCwUAA4IBAQAYUlZAD4R1tJOAd4nsMnyG Tj5Zedc9n24123XSe7LdZGEWDg8DJesulYpoz0vCWqkfllerov/mawAekRVXIPDg 1/mDDJ1Hz+B05ejbjc0HN95IDs2v5r8yehhZII8oyOoEKcQbBoGkVdRy9BMpc1G/ k+Rz3jHHLI6VoJRYH5RDgJOWHpz5dBrvUgAudGe15WdS+92cK/q/usoK4jKBdywf kzDWVYi+NBzKkqm9O9s+C2sVNvz20LvYu+HG65DGcJaVF++tNlEVZLNBGVS+TUSz Syrz6P+d75jC2ti7o0zHCbIrfasPrIYKGW2z16py2997w7eyR9dcX0wp5bygkq/3 -----END CERTIFICATE-----Generated at Mon Mar 2 14:22:40 2026 by rpki-client