$ rpki-client -vvf rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/7CF84F084B9111EBBA09CA72C4F9AE02.roa File: 7CF84F084B9111EBBA09CA72C4F9AE02.roa (raw, json) Hash identifier: 2mIyjIYN6IO7ZQ4FUwscfGnk78kTtsjolDojwIN0av0= Subject key identifier: 20:3E:1A:05:E0:30:D2:DD:DF:D4:A1:A2:C0:73:40:29:BA:2F:EB:EC Certificate issuer: /CN=A91AB20B/serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Certificate serial: 0880 Authority key identifier: 5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/7CF84F084B9111EBBA09CA72C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:28:49 +0000 ROA not before: Tue 02 Sep 2025 21:42:07 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 133495 IP address blocks: 110.93.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2176 (0x880) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AB20B, serialNumber=5EC1A6AD76A3ABFDC1E1329EB2637C01864B4808 Validity Not Before: Sep 2 21:42:07 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a47751-0c83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ef:0b:bd:22:f6:b2:89:1c:a5:d3:69:af:00: 66:07:1f:b1:de:f9:7d:69:59:6b:65:32:ff:42:91: b8:7c:30:c4:08:8a:9f:d8:bc:13:bc:3e:9c:77:9b: 11:8e:15:ea:d8:22:e3:c2:40:f7:c4:a8:58:bd:a5: f2:c9:20:2d:99:75:03:5b:af:57:79:e1:31:37:c1: c0:6e:a7:c9:e6:22:9b:a2:b2:01:b1:e3:07:d6:ee: 48:6a:33:83:3a:09:b3:d4:e7:e7:e6:43:b6:83:1b: 79:6f:96:9c:22:55:5d:8c:03:fd:85:e3:c1:80:eb: f0:8c:9b:38:30:d8:fc:9d:08:63:fa:78:ce:5c:59: ee:72:5f:fe:b0:46:c5:8b:8f:73:b9:24:a0:bd:96: e6:df:b6:f6:23:5c:e5:6e:ad:99:89:43:26:85:bb: c5:0e:7f:a8:ae:1d:b8:9b:c6:3a:22:94:b5:bb:df: de:72:10:32:55:a2:f8:f8:ab:2c:98:42:06:14:f4: 3b:9e:f5:fc:cb:a9:84:d4:78:26:5d:9d:87:2d:c1: 09:04:4c:3b:43:44:05:92:aa:fb:c6:b2:41:dc:27: 50:a8:d6:e1:7d:d7:66:91:90:b9:40:af:bd:7c:fe: c0:d9:72:4b:96:40:75:d6:b9:e4:15:29:53:91:3c: 87:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:3E:1A:05:E0:30:D2:DD:DF:D4:A1:A2:C0:73:40:29:BA:2F:EB:EC X509v3 Authority Key Identifier: keyid:5E:C1:A6:AD:76:A3:AB:FD:C1:E1:32:9E:B2:63:7C:01:86:4B:48:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/XsGmrXajq_3B4TKesmN8AYZLSAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XsGmrXajq_3B4TKesmN8AYZLSAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AB20B/BA71B648120311EBBAA19414C4F9AE02/7CF84F084B9111EBBA09CA72C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 110.93.193.0/24 Signature Algorithm: sha256WithRSAEncryption 4c:c4:ce:12:3d:e8:69:7d:41:e5:57:97:95:af:b4:3b:cc:74: 28:cd:5d:49:08:49:21:74:4e:37:a4:f9:b6:d7:13:b6:d8:4e: 9c:ab:16:09:99:ef:b6:6d:64:06:3e:c3:26:a3:b5:89:ff:a5: 9d:07:0e:85:67:4a:df:a3:80:27:31:64:6f:ab:4e:2b:9e:e3: 5d:2a:01:67:48:b0:b0:d1:ab:5b:41:fa:a7:44:47:0f:a7:85: 0b:90:8c:4c:5b:de:b3:fa:89:c5:c2:30:48:ae:a1:0f:b2:52: bb:61:1c:b1:c1:98:c4:ae:c6:44:5e:c8:0b:1a:f7:2a:12:34: b6:06:d1:40:06:8c:2c:45:5c:0f:db:7b:c7:d0:3c:5f:78:5f: 1e:63:e5:14:91:65:02:52:b0:cf:f0:40:eb:1b:39:cb:9c:64: 58:b8:c3:a4:4b:3f:16:2f:ed:0e:86:7d:fe:be:7c:1f:e8:fa: bd:5a:b3:06:d1:31:e8:8e:a2:dd:d6:0e:c2:ae:a7:5b:55:38: c4:16:41:93:d8:6d:35:d5:c4:5b:f3:54:3d:2f:e0:aa:cd:cd: 20:ef:80:69:d4:ab:f0:b0:20:46:d0:d5:bb:d2:74:ea:0f:20: bb:23:0a:11:11:db:70:6c:c1:55:92:ca:dc:3c:ed:7f:88:c7: c3:0f:eb:20 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUIyMEIxMTAvBgNVBAUTKDVFQzFBNkFENzZBM0FCRkRDMUUxMzI5RUIyNjM3QzAx ODY0QjQ4MDgwHhcNMjUwOTAyMjE0MjA3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Nzc1MS0wYzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6O8LvSL2sokcpdNprwBmBx+x3vl9aVlrZTL/QpG4fDDECIqf2LwTvD6cd5sR jhXq2CLjwkD3xKhYvaXyySAtmXUDW69XeeExN8HAbqfJ5iKborIBseMH1u5IajOD Ogmz1Ofn5kO2gxt5b5acIlVdjAP9hePBgOvwjJs4MNj8nQhj+njOXFnucl/+sEbF i49zuSSgvZbm37b2I1zlbq2ZiUMmhbvFDn+orh24m8Y6IpS1u9/echAyVaL4+Kss mEIGFPQ7nvX8y6mE1HgmXZ2HLcEJBEw7Q0QFkqr7xrJB3CdQqNbhfddmkZC5QK+9 fP7A2XJLlkB11rnkFSlTkTyH7QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCA+GgXg MNLd39ShosBzQCm6L+vsMB8GA1UdIwQYMBaAFF7Bpq12o6v9weEynrJjfAGGS0gI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQjIwQi9CQTcxQjY0ODEy MDMxMUVCQkFBMTk0MTRDNEY5QUUwMi9Yc0dtclhhanFfM0I0VEtlc21OOEFZWkxT QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hzR21yWGFqcV8zQjRUS2VzbU44QVlaTFNBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUIyMEIvQkE3MUI2NDgxMjAzMTFFQkJBQTE5NDE0QzRGOUFFMDIvN0NGODRGMDg0 QjkxMTFFQkJBMDlDQTcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAbl3BMA0GCSqGSIb3DQEBCwUAA4IBAQBMxM4SPehpfUHlV5eVr7Q7 zHQozV1JCEkhdE43pPm21xO22E6cqxYJme+2bWQGPsMmo7WJ/6WdBw6FZ0rfo4An MWRvq04rnuNdKgFnSLCw0atbQfqnREcPp4ULkIxMW96z+onFwjBIrqEPslK7YRyx wZjErsZEXsgLGvcqEjS2BtFABowsRVwP23vH0DxfeF8eY+UUkWUCUrDP8EDrGznL nGRYuMOkSz8WL+0Ohn3+vnwf6Pq9WrMG0THojqLd1g7CrqdbVTjEFkGT2G011cRb 81Q9L+Cqzc0g74Bp1KvwsCBG0NW70nTqDyC7IwoREdtwbMFVksrcPO1/iMfDD+sg -----END CERTIFICATE-----Generated at Mon Mar 2 06:49:14 2026 by rpki-client