$ rpki-client -vvf rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/DD1D106AB55611F0ABCE9254C4F9AE02.roa File: DD1D106AB55611F0ABCE9254C4F9AE02.roa (raw, json) Hash identifier: An38CBKWaM+afdU+s8Jc/A22RKnTDQzbne417dOEm50= Subject key identifier: 4E:40:36:52:32:26:62:7D:E8:B5:31:06:6D:80:79:BB:0C:37:83:24 Certificate issuer: /CN=A919EFEE/serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423 Certificate serial: 53 Authority key identifier: 31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/DD1D106AB55611F0ABCE9254C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:16:30 +0000 ROA not before: Mon 15 Dec 2025 07:28:42 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 133135 IP address blocks: 202.176.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 83 (0x53) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EFEE, serialNumber=3142A1A861D9A44A9327F06619FEC8A6A962B423 Validity Not Before: Dec 15 07:28:42 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d9be-9b3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d2:a0:f5:08:82:d0:58:fc:c1:9c:b6:98:e0: 24:5a:f7:43:8d:da:7f:7a:34:d2:9a:0f:dc:50:c0: 6c:ba:f0:f5:d2:cc:84:26:11:2d:e3:08:c0:d4:8a: 24:75:f8:3f:a9:fc:63:36:17:96:0d:79:25:02:25: 8e:63:73:85:72:fa:14:fc:6d:84:ba:50:51:f2:50: 7d:83:91:5b:71:d0:39:9f:ec:83:bf:5a:ea:da:5f: 37:8e:9c:23:d7:56:ac:6e:1a:d6:70:4f:02:9b:fd: e1:dd:b1:62:d2:54:11:0e:1d:46:e1:52:e2:74:46: 2e:6d:75:ec:0c:a1:b2:6a:de:de:25:23:26:7b:29: 62:03:b7:24:98:bb:39:f8:0a:36:20:64:fe:bc:d2: fa:80:69:fb:07:b8:14:87:61:59:78:6b:b9:bf:18: c1:97:a8:c2:74:5f:06:b7:a1:15:25:c5:19:77:dd: ec:0b:3e:d1:1a:a4:11:fe:c4:06:61:c2:6a:4e:0d: 75:b4:a3:8d:91:6f:98:f9:b1:fb:12:c9:91:32:9d: af:f4:b6:94:17:84:73:3b:c1:2a:53:98:83:d3:b3: 48:75:13:d5:61:a5:69:d1:50:35:84:14:af:37:e3: 53:85:e9:e6:aa:34:05:21:22:9b:31:23:ad:da:0b: 48:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:40:36:52:32:26:62:7D:E8:B5:31:06:6D:80:79:BB:0C:37:83:24 X509v3 Authority Key Identifier: keyid:31:42:A1:A8:61:D9:A4:4A:93:27:F0:66:19:FE:C8:A6:A9:62:B4:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/MUKhqGHZpEqTJ_BmGf7IpqlitCM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MUKhqGHZpEqTJ_BmGf7IpqlitCM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EFEE/0F9E91F8B3D111F086C22D5AC4F9AE02/DD1D106AB55611F0ABCE9254C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.176.7.0/24 Signature Algorithm: sha256WithRSAEncryption 32:dc:0c:ea:ed:9b:18:5a:4f:01:e8:53:0f:78:f1:3a:c0:7b: a9:95:bb:6e:45:9a:e7:53:12:92:62:fb:dc:bf:ba:ea:4e:8a: 8a:d8:52:0d:e5:bf:fc:c5:4d:d7:01:7a:c2:8e:0f:5c:06:db: 4c:92:8a:f7:8b:16:4e:d7:1e:b3:b9:ee:2b:fb:a2:49:0a:13: 38:00:bf:d4:b3:50:39:01:3a:49:9b:15:94:75:c6:d8:49:48: d5:35:e4:21:27:2d:72:94:e1:4b:7b:8f:0d:4e:22:90:8e:14: 79:39:52:15:17:6d:a8:89:7d:c7:59:07:f3:f5:53:be:b4:69: f1:77:6b:2e:a6:18:8d:46:aa:d2:e8:2e:38:21:b1:c3:af:07: ab:b5:df:a4:01:ca:ae:4e:37:50:13:e4:9e:1e:07:0d:4a:bb: 09:c3:3a:15:43:5c:c0:a1:97:57:5f:9a:18:ea:d3:bc:fe:aa: 23:70:fe:99:5e:1e:41:e7:20:c6:dd:0d:06:57:8b:39:cb:ae: 22:21:c3:00:0e:15:f8:ac:b6:56:ec:7e:4a:e5:e5:4c:92:3a: 9f:85:bb:17:a9:73:4e:a6:20:99:ca:39:0d:0b:88:33:a7:a9: 5f:19:b8:1e:70:f0:fb:94:e1:ae:c2:bc:54:a8:b9:25:23:63: 9a:ca:26:b2 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 RUZFRTExMC8GA1UEBRMoMzE0MkExQTg2MUQ5QTQ0QTkzMjdGMDY2MTlGRUM4QTZB OTYyQjQyMzAeFw0yNTEyMTUwNzI4NDJaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkOWJlLTliM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCu0qD1CILQWPzBnLaY4CRa90ON2n96NNKaD9xQwGy68PXSzIQmES3jCMDUiiR1 +D+p/GM2F5YNeSUCJY5jc4Vy+hT8bYS6UFHyUH2DkVtx0Dmf7IO/WuraXzeOnCPX VqxuGtZwTwKb/eHdsWLSVBEOHUbhUuJ0Ri5tdewMobJq3t4lIyZ7KWIDtySYuzn4 CjYgZP680vqAafsHuBSHYVl4a7m/GMGXqMJ0Xwa3oRUlxRl33ewLPtEapBH+xAZh wmpODXW0o42Rb5j5sfsSyZEyna/0tpQXhHM7wSpTmIPTs0h1E9VhpWnRUDWEFK83 41OF6eaqNAUhIpsxI63aC0gXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUTkA2UjIm Yn3otTEGbYB5uww3gyQwHwYDVR0jBBgwFoAUMUKhqGHZpEqTJ/BmGf7IpqlitCMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlFRkVFLzBGOUU5MUY4QjNE MTExRjA4NkMyMkQ1QUM0RjlBRTAyL01VS2hxR0hacEVxVEpfQm1HZjdJcHFsaXRD TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTVVLaHFHSFpwRXFUSl9CbUdmN0lwcWxpdENNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 RUZFRS8wRjlFOTFGOEIzRDExMUYwODZDMjJENUFDNEY5QUUwMi9ERDFEMTA2QUI1 NTYxMUYwQUJDRTkyNTRDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADKsAcwDQYJKoZIhvcNAQELBQADggEBADLcDOrtmxhaTwHoUw948TrA e6mVu25FmudTEpJi+9y/uupOiorYUg3lv/zFTdcBesKOD1wG20ySiveLFk7XHrO5 7iv7okkKEzgAv9SzUDkBOkmbFZR1xthJSNU15CEnLXKU4Ut7jw1OIpCOFHk5UhUX baiJfcdZB/P1U760afF3ay6mGI1GqtLoLjghscOvB6u136QByq5ON1AT5J4eBw1K uwnDOhVDXMChl1dfmhjq07z+qiNw/pleHkHnIMbdDQZXiznLriIhwwAOFfistlbs fkrl5UySOp+Fuxepc06mIJnKOQ0LiDOnqV8ZuB5w8PuU4a7CvFSouSUjY5rKJrI= -----END CERTIFICATE-----Generated at Mon Mar 2 02:12:22 2026 by rpki-client