$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/7B8BE75E8FBE11EA9797847DC4F9AE02.roa File: 7B8BE75E8FBE11EA9797847DC4F9AE02.roa (raw, json) Hash identifier: vExhqYfIkomdDV7xNalk44Q9UiS8pz94A5xmO/cMcTw= Subject key identifier: CF:AF:08:90:6F:F2:C3:8F:86:B0:32:68:24:BC:81:F0:C8:DB:AD:30 Certificate issuer: /CN=A91C1A14/serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Certificate serial: 0A41 Authority key identifier: 59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/7B8BE75E8FBE11EA9797847DC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:00:38 +0000 ROA not before: Sun 04 Jan 2026 20:16:12 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 136030 IP address blocks: 43.225.98.0/24 maxlen: 24 43.225.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2625 (0xa41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1A14, serialNumber=598DD5A39AE477658AD5BCBFE36264A1A61D6708 Validity Not Before: Jan 4 20:16:12 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a47ec6-2543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:70:cc:69:e2:1a:6d:94:64:59:1b:90:ac:a8: 95:f4:ec:d8:ce:26:15:9b:18:2b:6e:b8:61:9c:71: ab:58:22:9a:60:7c:ca:5c:51:ae:6b:ac:dc:07:37: 11:1f:b0:b7:11:5b:a5:7c:f5:dc:be:1f:d3:80:41: c0:15:32:ab:d5:01:69:3e:ab:b9:de:21:2c:61:76: 0a:b5:94:96:03:f5:b2:75:cf:17:a3:9f:8f:72:65: 18:83:46:77:7d:2a:6e:5e:7f:51:d0:4b:d2:b3:f1: 86:73:e7:57:d5:9f:87:96:fa:0f:e0:a3:36:0c:49: 64:74:8b:af:ea:3e:bb:3d:22:7a:79:08:27:9f:51: 18:65:13:f2:16:a5:be:aa:23:f0:99:4e:04:8c:df: 7d:b0:f1:99:9b:d0:a1:f3:dc:e2:13:5a:71:20:9c: de:cb:4e:e4:27:c0:09:bf:a9:be:75:35:6d:cc:20: a1:19:b4:23:5d:8d:4d:7c:3d:77:c3:ae:23:f5:cb: 30:c0:57:20:55:0e:b7:47:d0:5f:dd:9f:e2:de:32: 41:5d:8c:1b:93:f5:e3:28:cd:99:cd:6b:f2:b7:83: 90:52:a5:b0:f9:b9:53:b2:f7:6d:07:b2:f8:5a:ca: 60:ec:ad:48:7a:7c:53:43:98:8e:b1:c5:b7:41:a4: 62:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:AF:08:90:6F:F2:C3:8F:86:B0:32:68:24:BC:81:F0:C8:DB:AD:30 X509v3 Authority Key Identifier: keyid:59:8D:D5:A3:9A:E4:77:65:8A:D5:BC:BF:E3:62:64:A1:A6:1D:67:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/WY3Vo5rkd2WK1by_42JkoaYdZwg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WY3Vo5rkd2WK1by_42JkoaYdZwg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1A14/F7E864468FBC11EAA8C3127BC4F9AE02/7B8BE75E8FBE11EA9797847DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.225.98.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:64:ec:e0:4f:f0:ba:07:a1:40:f8:32:e4:87:25:dc:84:ec: 51:e2:11:8e:9b:4e:27:ef:03:d7:9c:2f:0a:9e:d0:7c:e7:0c: 97:24:3c:42:f9:61:e4:72:bd:1f:49:2f:9a:5c:44:66:2c:c5: a0:f7:1c:1f:6d:ea:b2:26:5c:e1:22:53:39:fb:02:48:ad:fa: 24:59:f7:be:f8:7c:2c:27:ea:64:e0:6c:b7:32:76:b8:dc:d2: 8c:49:1e:a3:d3:5f:9d:6a:15:48:f1:ce:7d:94:21:f0:f6:e0: 7f:cf:f8:5f:b5:93:a3:05:b1:5e:c5:73:31:96:37:33:04:5b: 33:9e:fb:14:e5:16:66:1b:71:ab:1f:ef:9b:fd:30:6e:cc:03: 2e:3b:fa:7c:9e:46:31:c3:e6:59:85:ec:0e:03:27:5a:b4:6d: be:fc:d1:1b:95:8e:74:03:7b:42:0e:81:42:a6:6b:0a:30:3a: ec:54:18:c1:e2:b2:25:c0:a1:57:4e:b7:02:a7:23:db:9f:45: 2b:9a:ea:d5:e1:18:60:d3:a5:90:e7:85:c9:63:e3:01:1a:99: c3:1d:24:5d:5b:a5:a3:ee:13:ae:69:16:4d:71:49:ba:03:c6: b4:dc:d9:72:ec:de:93:5c:32:83:67:a8:2b:0e:98:64:20:64: bb:90:ef:df -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCkEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzFBMTQxMTAvBgNVBAUTKDU5OERENUEzOUFFNDc3NjU4QUQ1QkNCRkUzNjI2NEEx QTYxRDY3MDgwHhcNMjYwMTA0MjAxNjEyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0N2VjNi0yNTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoHDMaeIabZRkWRuQrKiV9OzYziYVmxgrbrhhnHGrWCKaYHzKXFGua6zcBzcR H7C3EVulfPXcvh/TgEHAFTKr1QFpPqu53iEsYXYKtZSWA/Wydc8Xo5+PcmUYg0Z3 fSpuXn9R0EvSs/GGc+dX1Z+HlvoP4KM2DElkdIuv6j67PSJ6eQgnn1EYZRPyFqW+ qiPwmU4EjN99sPGZm9Ch89ziE1pxIJzey07kJ8AJv6m+dTVtzCChGbQjXY1NfD13 w64j9cswwFcgVQ63R9Bf3Z/i3jJBXYwbk/XjKM2ZzWvyt4OQUqWw+blTsvdtB7L4 Wspg7K1IenxTQ5iOscW3QaRipQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM+vCJBv 8sOPhrAyaCS8gfDI260wMB8GA1UdIwQYMBaAFFmN1aOa5HdlitW8v+NiZKGmHWcI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMUExNC9GN0U4NjQ0NjhG QkMxMUVBQThDMzEyN0JDNEY5QUUwMi9XWTNWbzVya2QyV0sxYnlfNDJKa29hWWRa d2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dZM1ZvNXJrZDJXSzFieV80Mkprb2FZZFp3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzFBMTQvRjdFODY0NDY4RkJDMTFFQUE4QzMxMjdCQzRGOUFFMDIvN0I4QkU3NUU4 RkJFMTFFQTk3OTc4NDdEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBK+FiMA0GCSqGSIb3DQEBCwUAA4IBAQBdZOzgT/C6B6FA+DLkhyXc hOxR4hGOm04n7wPXnC8KntB85wyXJDxC+WHkcr0fSS+aXERmLMWg9xwfbeqyJlzh IlM5+wJIrfokWfe++HwsJ+pk4Gy3Mna43NKMSR6j01+dahVI8c59lCHw9uB/z/hf tZOjBbFexXMxljczBFsznvsU5RZmG3GrH++b/TBuzAMuO/p8nkYxw+ZZhewOAyda tG2+/NEblY50A3tCDoFCpmsKMDrsVBjB4rIlwKFXTrcCpyPbn0UrmurV4Rhg06WQ 54XJY+MBGpnDHSRdW6Wj7hOuaRZNcUm6A8a03Nly7N6TXDKDZ6grDphkIGS7kO/f -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:25 2026 by rpki-client