$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa File: 7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa (raw, json) Hash identifier: cwdVnCmvvqxvWzMgTGL5Jud7cZIF7lHoUd7q8Ic9ySU= Subject key identifier: AF:3C:17:49:8C:B2:69:52:6C:5A:39:3C:61:C1:27:1C:D9:05:94:79 Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9 Certificate serial: 013C Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:11:59 +0000 ROA not before: Sat 13 Dec 2025 05:03:58 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 14618 IP address blocks: 64.251.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 316 (0x13c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9 Validity Not Before: Dec 13 05:03:58 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a4573f-a48e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e8:98:31:da:11:81:22:0a:ef:d6:84:1c:2c: cb:b2:78:99:d5:74:02:f7:ea:06:32:b9:b8:c8:a1: 59:a8:62:1d:e7:3e:d2:74:4c:c8:fa:bf:54:33:bb: 8a:9e:a7:a3:7c:41:8e:9a:e9:18:dd:5e:4a:05:68: 3e:ef:63:60:03:4c:c1:b2:75:88:97:dc:89:4a:37: ab:d3:ba:fc:39:af:aa:ba:fe:b5:21:60:f8:20:1e: 47:90:23:55:8d:0a:7e:bf:53:af:a4:d7:c3:a4:1d: 78:db:ab:c1:43:c3:c3:58:4c:48:04:d3:66:45:d0: 13:62:89:a1:a7:72:b9:d4:1f:d4:d2:f2:62:81:67: dd:0e:df:35:74:35:cc:24:63:b8:0d:dd:bb:0c:6a: 62:f3:31:26:5c:29:3a:af:ff:f0:8c:fa:03:52:a6: 4d:00:27:12:ff:c7:77:10:ea:0f:1a:b3:38:11:5a: 1c:d1:3d:17:d9:fd:a4:f8:fe:91:63:9a:a6:38:62: b5:c8:6b:35:fd:05:b9:59:5f:57:d5:97:5d:19:d2: 8b:64:3f:3c:0f:ed:c2:47:65:1a:a1:53:91:a0:27: 9c:2c:fc:9e:d7:16:db:68:0a:7b:c9:39:73:70:ac: 41:5f:c7:dd:69:5b:68:a1:73:d2:de:76:e7:6b:f5: 05:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:3C:17:49:8C:B2:69:52:6C:5A:39:3C:61:C1:27:1C:D9:05:94:79 X509v3 Authority Key Identifier: keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/7ECAB97A5F3711EFA2A15F6DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 64.251.192.0/21 Signature Algorithm: sha256WithRSAEncryption 84:9c:c3:78:bc:33:75:95:51:fb:15:8f:64:5f:eb:ee:3f:77: 85:51:fa:80:0b:e9:a4:06:95:35:2d:bc:41:79:77:2f:d2:53: cd:c3:d9:80:66:81:d6:37:f5:73:7d:c9:ea:da:f9:2f:a2:b8: 7f:35:00:42:63:02:ee:9f:44:ba:7f:0a:65:76:50:84:f9:95: 6f:aa:4b:d6:d3:36:e7:08:a5:f9:90:a7:ab:a7:b5:a5:bb:31: 19:5e:95:c9:cd:eb:a6:9c:f6:63:36:b0:cd:6a:fc:78:e0:2e: 8b:26:ee:9b:93:6a:8b:0a:8d:55:fe:d9:8a:8b:b1:e4:9b:12: 10:7b:a2:e3:ba:ed:87:77:e2:41:0e:01:69:76:09:84:0e:54: 3a:66:60:71:7b:a6:6e:ea:c9:55:08:da:5c:c2:45:6c:66:2d: 70:4a:87:21:e3:fb:91:83:ea:a7:61:f3:c7:8a:a7:70:23:a4: 11:cc:7d:f8:22:87:4e:9e:5e:21:6a:4e:2c:c0:04:d0:2e:55: 18:ba:65:b2:c2:67:18:f0:fb:b2:51:61:37:ff:b4:62:30:b3: 4c:d8:0a:87:d9:2e:77:a0:d1:51:d3:b1:5d:19:65:0d:d0:50: d7:a1:88:1f:d1:62:45:eb:be:45:52:e7:cb:fd:c9:83:e1:df: 94:3b:bb:55 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICATwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgzRDMxMTAvBgNVBAUTKEVCM0M4RjI0QkJBREM5NDEzNDg3MUQ2RTVGRDBCN0M1 OEI0OUQzQzkwHhcNMjUxMjEzMDUwMzU4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTczZi1hNDhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz+iYMdoRgSIK79aEHCzLsniZ1XQC9+oGMrm4yKFZqGId5z7SdEzI+r9UM7uK nqejfEGOmukY3V5KBWg+72NgA0zBsnWIl9yJSjer07r8Oa+quv61IWD4IB5HkCNV jQp+v1OvpNfDpB1426vBQ8PDWExIBNNmRdATYomhp3K51B/U0vJigWfdDt81dDXM JGO4Dd27DGpi8zEmXCk6r//wjPoDUqZNACcS/8d3EOoPGrM4EVoc0T0X2f2k+P6R Y5qmOGK1yGs1/QW5WV9X1ZddGdKLZD88D+3CR2UaoVORoCecLPye1xbbaAp7yTlz cKxBX8fdaVtooXPS3nbna/UFoQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK88F0mM smlSbFo5PGHBJxzZBZR5MB8GA1UdIwQYMBaAFOs8jyS7rclBNIcdbl/Qt8WLSdPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy84RDAzRUYzNjVF MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi82enlQSkx1dHlVRTBoeDF1WDlDM3hZdEow OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZ6eVBKTHV0eVVFMGh4MXVYOUMzeFl0SjA4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODgzRDMvOEQwM0VGMzY1RTM2MTFFRkFDOTJEMzE0QzRGOUFFMDIvN0VDQUI5N0E1 RjM3MTFFRkEyQTE1RjZEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDQPvAMA0GCSqGSIb3DQEBCwUAA4IBAQCEnMN4vDN1lVH7FY9kX+vu P3eFUfqAC+mkBpU1LbxBeXcv0lPNw9mAZoHWN/Vzfcnq2vkvorh/NQBCYwLun0S6 fwpldlCE+ZVvqkvW0zbnCKX5kKerp7WluzEZXpXJzeumnPZjNrDNavx44C6LJu6b k2qLCo1V/tmKi7HkmxIQe6Ljuu2Hd+JBDgFpdgmEDlQ6ZmBxe6Zu6slVCNpcwkVs Zi1wSoch4/uRg+qnYfPHiqdwI6QRzH34IodOnl4hak4swATQLlUYumWywmcY8Puy UWE3/7RiMLNM2AqH2S53oNFR07FdGWUN0FDXoYgf0WJF675FUufL/cmD4d+UO7tV -----END CERTIFICATE-----Generated at Mon Mar 2 05:42:08 2026 by rpki-client