$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6A90213E3FAD11EEA252F62FC4F9AE02.roa File: 6A90213E3FAD11EEA252F62FC4F9AE02.roa (raw, json) Hash identifier: sbI32dMx96QI+Wi62W/45tSZM80fUbaJGeJFssGV9fY= Subject key identifier: 65:20:7D:1D:AF:9C:C5:19:CE:CC:F6:00:DC:36:B5:3B:86:83:3B:A7 Certificate issuer: /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Certificate serial: 1AA7 Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6A90213E3FAD11EEA252F62FC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:24:08 +0000 ROA not before: Sat 12 Apr 2025 16:25:05 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7714 IP address blocks: 202.20.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6823 (0x1aa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005 Validity Not Before: Apr 12 16:25:05 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48447-9e6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:a5:75:ae:00:66:82:5c:bf:f0:44:a1:cc: f0:d9:9f:20:dc:ad:f3:cb:6a:19:15:d6:a4:fd:26: a6:01:a5:6a:e4:e2:90:2c:77:76:b4:5d:ee:99:a3: a7:1d:b9:96:89:d7:55:02:58:77:c7:4e:87:6f:b3: c5:d8:24:1b:53:0f:5f:b7:03:00:8d:27:cb:c7:1b: 1d:fd:7c:97:f5:2b:63:14:bc:26:3d:42:88:49:b7: 5b:d5:08:e1:79:95:32:3d:81:a4:1a:f3:31:a3:43: ad:1a:1b:d6:72:0e:d0:65:7e:04:75:25:b2:19:21: 16:c8:3f:fd:f6:d3:e8:00:3d:b2:ea:ad:6a:0c:89: 2d:eb:4f:15:ae:cd:c6:1b:02:45:ab:90:64:b1:1f: de:5b:4b:b7:19:1d:43:8f:d0:a3:aa:05:20:d4:03: 25:0c:33:08:d7:53:3c:ac:5c:85:e5:f3:b2:85:0b: 3a:59:be:e0:d0:2d:af:89:0c:35:55:fc:25:82:87: 65:41:0f:00:7a:f4:44:62:28:34:bd:37:01:cd:bf: 6d:8e:a0:8f:b6:49:fd:5b:cb:2d:e6:d8:cd:5b:53: 79:c3:c6:88:10:59:12:31:24:43:ad:77:de:73:e4: 6c:23:31:f0:18:77:b5:a3:10:18:c3:6a:2a:4e:08: dd:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:20:7D:1D:AF:9C:C5:19:CE:CC:F6:00:DC:36:B5:3B:86:83:3B:A7 X509v3 Authority Key Identifier: keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/6A90213E3FAD11EEA252F62FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.20.76.0/24 Signature Algorithm: sha256WithRSAEncryption e1:0b:b7:b6:2d:31:41:08:bd:aa:0c:7f:83:01:6f:a6:46:b8: f8:84:9c:4c:32:8d:45:9e:b4:60:bc:e8:75:ab:f7:6a:be:d2: 09:87:3a:65:e0:dc:27:c8:e3:9b:46:0e:42:09:b2:81:7e:5a: 4e:23:fb:67:37:5f:fa:8e:ed:c2:4a:68:10:40:15:bd:cf:0c: 47:e3:ba:31:61:ec:d9:d8:a5:69:9f:df:48:c2:72:04:38:6e: 5f:1e:af:8e:3e:e3:1a:7a:0a:16:13:38:02:a0:2c:60:1f:08: 7c:54:f6:1c:e4:dc:4f:89:29:c9:bd:27:93:57:1c:32:4d:19: 4a:97:f7:fd:8a:1b:c1:d9:bc:13:ab:c9:00:41:24:6e:f2:aa: ad:0a:73:c0:4e:ed:04:2c:34:1c:bb:a6:86:28:5b:02:fa:90: cb:3c:aa:c1:9a:66:88:de:4b:6c:af:b4:cf:ce:2d:27:20:ee: da:9e:0e:cb:18:82:7b:a0:4c:8c:8f:08:9c:57:d3:8c:7d:bc: 74:30:1a:1f:05:ba:66:4c:90:5e:75:81:30:86:ed:62:d9:e9: 96:a8:60:96:5e:9b:b2:1b:11:c0:e0:2e:e8:97:b2:8b:8f:e5: 9e:3a:13:c2:ce:f2:a4:3e:40:1e:f2:6a:c7:50:e5:4f:31:f2: 7a:2e:90:e2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGqcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDZBRDcxMTAvBgNVBAUTKEJBRjVBREEzMkNBMEQzNENGM0NDRjUzQUJERjg2REU2 RjhFRDkwMDUwHhcNMjUwNDEyMTYyNTA1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODQ0Ny05ZTZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv2lda4AZoJcv/BEoczw2Z8g3K3zy2oZFdak/SamAaVq5OKQLHd2tF3umaOn HbmWiddVAlh3x06Hb7PF2CQbUw9ftwMAjSfLxxsd/XyX9StjFLwmPUKISbdb1Qjh eZUyPYGkGvMxo0OtGhvWcg7QZX4EdSWyGSEWyD/99tPoAD2y6q1qDIkt608Vrs3G GwJFq5BksR/eW0u3GR1Dj9CjqgUg1AMlDDMI11M8rFyF5fOyhQs6Wb7g0C2viQw1 VfwlgodlQQ8AevREYig0vTcBzb9tjqCPtkn9W8st5tjNW1N5w8aIEFkSMSRDrXfe c+RsIzHwGHe1oxAYw2oqTgjdGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGUgfR2v nMUZzsz2ANw2tTuGgzunMB8GA1UdIwQYMBaAFLr1raMsoNNM88z1Or34beb47ZAF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NkFENy9GOEJBQkFDQThC ODkxMUU3OTAxMTVDM0ZDNEY5QUUwMi91dld0b3l5ZzAwenp6UFU2dmZodDV2anRr QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3V2V3RveXlnMDB6enpQVTZ2Zmh0NXZqdGtBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDZBRDcvRjhCQUJBQ0E4Qjg5MTFFNzkwMTE1QzNGQzRGOUFFMDIvNkE5MDIxM0Uz RkFEMTFFRUEyNTJGNjJGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyhRMMA0GCSqGSIb3DQEBCwUAA4IBAQDhC7e2LTFBCL2qDH+DAW+m Rrj4hJxMMo1FnrRgvOh1q/dqvtIJhzpl4NwnyOObRg5CCbKBflpOI/tnN1/6ju3C SmgQQBW9zwxH47oxYezZ2KVpn99IwnIEOG5fHq+OPuMaegoWEzgCoCxgHwh8VPYc 5NxPiSnJvSeTVxwyTRlKl/f9ihvB2bwTq8kAQSRu8qqtCnPATu0ELDQcu6aGKFsC +pDLPKrBmmaI3ktsr7TPzi0nIO7ang7LGIJ7oEyMjwicV9OMfbx0MBofBbpmTJBe dYEwhu1i2emWqGCWXpuyGxHA4C7ol7KLj+WeOhPCzvKkPkAe8mrHUOVPMfJ6LpDi -----END CERTIFICATE-----Generated at Mon Mar 2 13:02:51 2026 by rpki-client