$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/ABF1B4E60DD211EF8903F07AC4F9AE02.roa File: ABF1B4E60DD211EF8903F07AC4F9AE02.roa (raw, json) Hash identifier: cSaMSLtkU9FTO3/I0qdSykyZFjGm8Y6stoXYTpc1WwE= Subject key identifier: 73:B6:14:BE:E8:FC:2B:5E:F6:D0:01:6F:6A:80:30:CB:0A:E3:E3:AF Certificate issuer: /CN=A91BF793/serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Certificate serial: 0158 Authority key identifier: F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/ABF1B4E60DD211EF8903F07AC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:54:18 +0000 ROA not before: Wed 23 Apr 2025 05:32:06 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 152733 IP address blocks: 202.50.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 13:54:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 344 (0x158) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF793, serialNumber=F062F503EC9223FAF681E6A4DCD898491A26E494 Validity Not Before: Apr 23 05:32:06 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a5968a-3587 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f0:ab:7d:46:c9:9b:91:a9:11:f7:05:4b:bd: c3:96:87:8b:08:07:f3:2b:d0:ac:47:ad:40:00:94: a2:17:22:de:56:c1:f7:49:a6:a3:3a:47:68:14:85: 3d:6b:e7:24:e5:10:1d:b9:85:07:29:b4:d0:0a:20: cd:51:9a:54:b4:b9:6e:59:81:3d:f9:77:f1:73:df: f9:47:9f:ba:13:1d:9a:02:bb:40:61:68:c6:9d:58: e4:f6:d0:00:4b:e5:dc:f0:28:a2:26:d8:71:d0:f0: d8:5e:f0:04:ed:b8:54:1d:dd:cf:47:4a:99:cf:7b: 5c:85:78:6c:33:92:2f:e5:42:21:01:ab:71:a9:01: 4a:6a:4e:2f:83:45:28:91:38:a3:a5:24:3b:92:1e: cc:d8:da:9a:07:fd:83:c9:5c:cd:b4:b6:0c:d9:b8: 89:c5:f5:4f:32:07:2d:48:71:0e:15:a2:7d:c5:30: 48:74:e7:f5:87:4f:5b:e5:5d:86:46:51:c8:56:ee: 13:ee:ce:81:da:51:db:bd:38:10:f2:65:3a:53:8c: 66:57:b8:7b:c3:cf:b9:32:c2:c3:5b:8f:5b:a9:9a: 73:23:89:fc:df:8e:f2:79:7a:48:2c:a0:76:f6:8a: 74:8c:d3:82:b5:00:c5:66:1b:b8:a5:c5:4b:0c:5f: a7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:B6:14:BE:E8:FC:2B:5E:F6:D0:01:6F:6A:80:30:CB:0A:E3:E3:AF X509v3 Authority Key Identifier: keyid:F0:62:F5:03:EC:92:23:FA:F6:81:E6:A4:DC:D8:98:49:1A:26:E4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/8GL1A-ySI_r2geak3NiYSRom5JQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8GL1A-ySI_r2geak3NiYSRom5JQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF793/0F6BD3E00DD211EF9181113AC4F9AE02/ABF1B4E60DD211EF8903F07AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.50.138.0/24 Signature Algorithm: sha256WithRSAEncryption 49:b7:e8:99:d1:84:d4:2a:71:2a:07:eb:ca:65:30:9f:9d:06: 0f:56:53:e9:27:3f:a0:2c:35:b4:29:6f:1e:30:a4:2c:1c:2d: c5:9a:59:d5:ee:c8:08:27:ed:83:f0:2a:ab:f6:71:df:bd:b5: 58:49:0d:dd:c2:3f:7b:88:d3:da:d6:f8:bf:f4:2a:d1:da:cd: d6:08:8d:14:f0:c0:52:f7:62:58:98:d0:6b:fc:5d:6f:77:61: e5:71:bd:13:98:f5:58:a4:48:b6:d9:88:03:12:75:78:0f:ff: ee:37:fa:f8:21:ed:76:0d:bc:15:5e:d1:4f:b0:39:b0:45:38: c7:b0:22:bf:20:25:eb:39:e8:37:89:80:d4:b2:0d:e1:c5:22: 60:c0:61:15:f9:73:d4:41:48:d8:20:f0:f9:b5:fc:87:25:95: d6:0e:41:f5:99:db:d0:4c:50:03:53:2b:03:c3:05:78:72:76: 92:af:b5:0f:33:97:78:17:af:6f:2a:54:ef:64:6b:f2:30:b3: 62:ef:08:44:0b:1f:a7:70:ec:11:04:01:f2:97:db:4d:9e:ba: ab:f0:f1:84:90:79:35:0d:ff:a4:6c:b0:8f:6b:4c:7d:c5:4e: 49:17:72:75:a3:ce:39:1e:57:78:22:98:0f:2e:19:a4:d4:eb: 5a:22:4a:2c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAVgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY3OTMxMTAvBgNVBAUTKEYwNjJGNTAzRUM5MjIzRkFGNjgxRTZBNERDRDg5ODQ5 MUEyNkU0OTQwHhcNMjUwNDIzMDUzMjA2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTY4YS0zNTg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvPCrfUbJm5GpEfcFS73DloeLCAfzK9CsR61AAJSiFyLeVsH3SaajOkdoFIU9 a+ck5RAduYUHKbTQCiDNUZpUtLluWYE9+Xfxc9/5R5+6Ex2aArtAYWjGnVjk9tAA S+Xc8CiiJthx0PDYXvAE7bhUHd3PR0qZz3tchXhsM5Iv5UIhAatxqQFKak4vg0Uo kTijpSQ7kh7M2NqaB/2DyVzNtLYM2biJxfVPMgctSHEOFaJ9xTBIdOf1h09b5V2G RlHIVu4T7s6B2lHbvTgQ8mU6U4xmV7h7w8+5MsLDW49bqZpzI4n8347yeXpILKB2 9op0jNOCtQDFZhu4pcVLDF+nHwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHO2FL7o /Cte9tABb2qAMMsK4+OvMB8GA1UdIwQYMBaAFPBi9QPskiP69oHmpNzYmEkaJuSU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjc5My8wRjZCRDNFMDBE RDIxMUVGOTE4MTExM0FDNEY5QUUwMi84R0wxQS15U0lfcjJnZWFrM05pWVNSb201 SlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhHTDFBLXlTSV9yMmdlYWszTmlZU1JvbTVKUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY3OTMvMEY2QkQzRTAwREQyMTFFRjkxODExMTNBQzRGOUFFMDIvQUJGMUI0RTYw REQyMTFFRjg5MDNGMDdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAyjKKMA0GCSqGSIb3DQEBCwUAA4IBAQBJt+iZ0YTUKnEqB+vKZTCf nQYPVlPpJz+gLDW0KW8eMKQsHC3FmlnV7sgIJ+2D8Cqr9nHfvbVYSQ3dwj97iNPa 1vi/9CrR2s3WCI0U8MBS92JYmNBr/F1vd2Hlcb0TmPVYpEi22YgDEnV4D//uN/r4 Ie12DbwVXtFPsDmwRTjHsCK/ICXrOeg3iYDUsg3hxSJgwGEV+XPUQUjYIPD5tfyH JZXWDkH1mdvQTFADUysDwwV4cnaSr7UPM5d4F69vKlTvZGvyMLNi7whECx+ncOwR BAHyl9tNnrqr8PGEkHk1Df+kbLCPa0x9xU5JF3J1o845Hld4IpgPLhmk1OtaIkos -----END CERTIFICATE-----Generated at Mon Mar 2 18:33:24 2026 by rpki-client