$ rpki-client -vvf rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/CF1D6B3873B111EEB1254A5AC4F9AE02.roa File: CF1D6B3873B111EEB1254A5AC4F9AE02.roa (raw, json) Hash identifier: CpTWwAtDyYV5NG3Dw7iBHIxDpXfL3jOA6p5oviFkDVs= Subject key identifier: BE:09:F7:28:0C:E5:43:9C:10:8A:6B:72:1B:2F:F5:89:68:25:BA:38 Certificate issuer: /CN=A9142B70/serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Certificate serial: 01BC Authority key identifier: 62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/CF1D6B3873B111EEB1254A5AC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:24:23 +0000 ROA not before: Mon 29 Sep 2025 04:32:32 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 132468 IP address blocks: 202.63.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:16:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 444 (0x1bc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9142B70, serialNumber=622E7662D9FBE10C1AAE0BDFE988DB996AE3FD59 Validity Not Before: Sep 29 04:32:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a413d7-9800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:55:d6:d0:da:e4:81:5d:cd:84:f4:be:ad:80: 57:6d:8b:86:b0:80:a9:04:3e:f5:2d:e1:fa:25:41: ba:dc:bf:87:00:91:c1:d1:de:bc:a0:87:e9:7d:81: 71:4d:26:52:7c:ab:47:73:a3:ff:33:ea:bb:8e:30: f1:42:00:b1:c2:de:66:3e:00:92:ef:b0:6d:a4:3c: 8f:23:7c:d1:c0:65:dd:21:fb:bd:13:97:60:b3:81: 77:bc:bb:03:71:7d:64:e8:f4:f5:61:af:9d:95:c7: 2b:3d:85:bf:d2:82:a3:b5:bc:61:14:59:8d:87:66: 6f:63:04:96:19:7a:85:9c:bf:d3:63:9c:28:2c:5f: 6a:10:ea:05:fa:00:98:e8:65:e0:57:ad:6b:d5:d4: 88:e9:ad:2b:f4:ab:79:8b:ea:10:05:b9:86:d4:07: 7c:11:bd:d0:3f:90:e7:a6:ab:68:4d:ee:d9:20:59: 50:82:22:0a:ed:93:87:8b:b6:48:78:09:92:ed:c0: 6e:7b:27:ec:cb:d1:58:c3:3a:26:82:d8:15:9f:7c: 60:41:3e:eb:25:81:c7:c2:69:d2:9b:d7:67:93:7d: 95:51:54:86:c0:d2:00:bf:75:a0:fa:b6:cd:78:99: d4:d7:ec:37:c4:24:ea:e4:78:1f:7d:43:43:87:dd: 9b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:09:F7:28:0C:E5:43:9C:10:8A:6B:72:1B:2F:F5:89:68:25:BA:38 X509v3 Authority Key Identifier: keyid:62:2E:76:62:D9:FB:E1:0C:1A:AE:0B:DF:E9:88:DB:99:6A:E3:FD:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/Yi52Ytn74Qwargvf6YjbmWrj_Vk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yi52Ytn74Qwargvf6YjbmWrj_Vk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142B70/CCB454A473A911EE84527F2EC4F9AE02/CF1D6B3873B111EEB1254A5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.63.254.0/23 Signature Algorithm: sha256WithRSAEncryption 54:09:dd:4e:f3:7d:fb:fa:c9:b6:ba:ae:4a:a6:7e:da:ee:ee: 60:ce:41:59:56:55:11:46:0d:5c:b5:14:85:6b:e1:01:67:fd: fd:a0:65:a8:0a:aa:86:56:a8:bf:9a:3e:2e:10:07:56:01:2d: e2:e1:5e:e5:ec:aa:c5:01:76:7c:9e:6a:fe:e8:25:e6:28:87: fc:5b:ad:28:ce:36:1c:66:fb:fe:86:7a:76:7d:de:39:c1:c0: 6f:2c:9a:c0:c4:22:1c:f7:ea:60:f2:65:34:91:a0:d8:71:2f: 51:0b:df:5c:eb:3a:56:1e:86:08:d4:ae:c8:e5:53:d9:ec:60: 04:0c:a9:a3:4f:0d:3c:34:93:db:fe:04:55:62:ff:0f:7d:02: 63:d7:56:b6:0e:9f:27:fb:94:3c:cc:a4:53:5f:79:80:0d:4f: 8a:ec:8e:19:84:2f:af:e9:16:76:c6:5b:7e:ae:8a:57:80:25: 43:bb:0a:fd:fb:c7:b4:50:50:9e:f4:c2:38:d7:0a:8b:c0:32: bf:e0:e0:85:91:b9:a9:77:8f:c6:47:d2:16:f9:6b:e1:35:b2: 36:7c:67:e1:a5:01:6c:65:61:88:68:fb:87:41:44:56:e1:ba: 86:8e:05:66:8b:07:0f:65:97:64:8c:46:48:92:bb:26:8b:d7: 62:35:ee:1b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAbwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDJCNzAxMTAvBgNVBAUTKDYyMkU3NjYyRDlGQkUxMEMxQUFFMEJERkU5ODhEQjk5 NkFFM0ZENTkwHhcNMjUwOTI5MDQzMjMyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTNkNy05ODAwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAt1XW0NrkgV3NhPS+rYBXbYuGsICpBD71LeH6JUG63L+HAJHB0d68oIfpfYFx TSZSfKtHc6P/M+q7jjDxQgCxwt5mPgCS77BtpDyPI3zRwGXdIfu9E5dgs4F3vLsD cX1k6PT1Ya+dlccrPYW/0oKjtbxhFFmNh2ZvYwSWGXqFnL/TY5woLF9qEOoF+gCY 6GXgV61r1dSI6a0r9Kt5i+oQBbmG1Ad8Eb3QP5DnpqtoTe7ZIFlQgiIK7ZOHi7ZI eAmS7cBueyfsy9FYwzomgtgVn3xgQT7rJYHHwmnSm9dnk32VUVSGwNIAv3Wg+rbN eJnU1+w3xCTq5HgffUNDh92buQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL4J9ygM 5UOcEIprchsv9YloJbo4MB8GA1UdIwQYMBaAFGIudmLZ++EMGq4L3+mI25lq4/1Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MkI3MC9DQ0I0NTRBNDcz QTkxMUVFODQ1MjdGMkVDNEY5QUUwMi9ZaTUyWXRuNzRRd2FyZ3ZmNllqYm1Xcmpf VmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lpNTJZdG43NFF3YXJndmY2WWpibVdyal9Way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDJCNzAvQ0NCNDU0QTQ3M0E5MTFFRTg0NTI3RjJFQzRGOUFFMDIvQ0YxRDZCMzg3 M0IxMTFFRUIxMjU0QTVBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQByj/+MA0GCSqGSIb3DQEBCwUAA4IBAQBUCd1O8337+sm2uq5Kpn7a 7u5gzkFZVlURRg1ctRSFa+EBZ/39oGWoCqqGVqi/mj4uEAdWAS3i4V7l7KrFAXZ8 nmr+6CXmKIf8W60ozjYcZvv+hnp2fd45wcBvLJrAxCIc9+pg8mU0kaDYcS9RC99c 6zpWHoYI1K7I5VPZ7GAEDKmjTw08NJPb/gRVYv8PfQJj11a2Dp8n+5Q8zKRTX3mA DU+K7I4ZhC+v6RZ2xlt+ropXgCVDuwr9+8e0UFCe9MI41wqLwDK/4OCFkbmpd4/G R9IW+WvhNbI2fGfhpQFsZWGIaPuHQURW4bqGjgVmiwcPZZdkjEZIkrsmi9diNe4b -----END CERTIFICATE-----Generated at Mon Mar 2 16:25:21 2026 by rpki-client