$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/6AB0F2A2892611EEB5E27D69C4F9AE02.roa File: 6AB0F2A2892611EEB5E27D69C4F9AE02.roa (raw, json) Hash identifier: PRbYpTR7dL6OD02LCfnRi/JtoGtSSPYB6suy4a9h8Dk= Subject key identifier: 74:BA:8B:3C:B7:4C:9A:B6:A4:D3:19:DE:D5:8E:CF:8F:60:76:EC:90 Certificate issuer: /CN=A91C2CC7/serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Certificate serial: 1073 Authority key identifier: 77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/6AB0F2A2892611EEB5E27D69C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:39:30 +0000 ROA not before: Thu 10 Apr 2025 17:56:44 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9280 IP address blocks: 203.9.24.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4211 (0x1073) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C2CC7, serialNumber=77486B610D333AEBDA8F255C501411B01F18FF49 Validity Not Before: Apr 10 17:56:44 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a479d2-af1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:d3:06:ab:0a:37:0b:a7:7a:95:71:66:07:59: 7e:71:9e:8a:48:c8:5e:30:2f:2e:65:b9:1f:b4:cc: 23:ce:53:cc:3c:b2:e6:be:83:36:e9:b3:c6:b3:75: 9e:01:28:13:22:b9:f7:dd:3d:4e:54:7f:7e:e1:91: ed:b2:0e:02:9d:30:de:65:bd:45:c2:72:47:18:15: 08:e0:31:bd:79:33:33:56:71:7c:c8:82:9e:82:b0: f5:c7:4d:bf:4a:f8:cf:80:36:c9:8c:a3:92:1f:35: 1c:49:cb:fb:a0:07:dc:37:3e:ad:27:f5:b4:88:84: 78:01:79:02:a1:5a:81:26:7a:77:3d:9b:9d:ae:ce: ce:ed:ca:03:82:92:77:e6:c7:2a:ae:50:de:25:62: 2c:ca:40:49:46:ea:de:cb:31:b8:79:5e:80:67:16: 16:6a:88:31:66:47:e0:2e:be:79:da:89:16:51:a4: c2:6a:17:ad:24:d2:f8:20:41:e5:3f:2d:83:82:3e: a9:79:85:7c:af:d1:06:6a:22:97:6f:87:d3:d9:b5: a9:20:09:34:95:b9:5b:0f:ac:cd:35:4b:e3:70:ed: 7c:67:08:35:80:69:1b:d5:48:37:2c:39:1f:4d:63: 21:a3:98:66:94:75:13:bb:71:22:50:e0:a5:1f:db: 8b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:BA:8B:3C:B7:4C:9A:B6:A4:D3:19:DE:D5:8E:CF:8F:60:76:EC:90 X509v3 Authority Key Identifier: keyid:77:48:6B:61:0D:33:3A:EB:DA:8F:25:5C:50:14:11:B0:1F:18:FF:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d0hrYQ0zOuvajyVcUBQRsB8Y_0k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2CC7/791C6A347B3811E9BC0D3B32C4F9AE02/6AB0F2A2892611EEB5E27D69C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.9.24.0/22 Signature Algorithm: sha256WithRSAEncryption 63:1f:a7:fd:0f:90:5d:60:12:4e:07:dc:2a:35:64:23:66:e7: 22:de:49:dc:f8:29:2c:12:ba:4d:34:e7:78:40:ff:53:08:e4: 51:0a:58:fa:06:cd:2e:0b:a6:dc:a9:b8:50:1d:93:b1:2c:03: 1c:13:54:38:42:64:1e:12:63:48:78:0d:02:0f:c5:e7:2d:05: 83:73:8e:a8:2a:2b:9e:aa:98:e2:81:ea:f6:6e:9d:3c:b9:e1: ea:c0:cc:35:ee:ea:cb:a2:ed:ca:d3:25:cc:7e:36:f8:af:11: f9:e2:ea:03:80:f7:4a:04:a3:25:09:a8:3d:9f:73:2b:a8:24: 69:73:e6:c9:6f:a8:d2:46:b8:6a:07:f8:9a:c2:59:45:c5:91: 6f:8f:9b:b7:5f:d8:6f:02:a4:c5:dc:39:ba:ce:f7:c0:1f:94: 57:25:81:36:c2:f4:9b:9a:b8:31:bd:94:44:0c:0a:67:b2:da: be:4e:47:b4:e0:60:dc:2b:8d:67:9a:b7:51:25:87:78:97:e6: ff:a2:03:64:27:3a:a0:6e:5d:11:b3:17:de:80:95:af:33:00: 7b:10:cc:4e:b0:df:c8:f1:db:fa:55:3e:fd:c7:82:16:d3:f4: 3f:d6:2b:a5:0c:99:71:70:3b:90:f9:ee:03:c3:22:c0:71:98: b0:78:e3:9b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICEHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzJDQzcxMTAvBgNVBAUTKDc3NDg2QjYxMEQzMzNBRUJEQThGMjU1QzUwMTQxMUIw MUYxOEZGNDkwHhcNMjUwNDEwMTc1NjQ0WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzlkMi1hZjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy9MGqwo3C6d6lXFmB1l+cZ6KSMheMC8uZbkftMwjzlPMPLLmvoM26bPGs3We ASgTIrn33T1OVH9+4ZHtsg4CnTDeZb1FwnJHGBUI4DG9eTMzVnF8yIKegrD1x02/ SvjPgDbJjKOSHzUcScv7oAfcNz6tJ/W0iIR4AXkCoVqBJnp3PZudrs7O7coDgpJ3 5scqrlDeJWIsykBJRureyzG4eV6AZxYWaogxZkfgLr552okWUaTCahetJNL4IEHl Py2Dgj6peYV8r9EGaiKXb4fT2bWpIAk0lblbD6zNNUvjcO18Zwg1gGkb1Ug3LDkf TWMho5hmlHUTu3EiUOClH9uLawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHS6izy3 TJq2pNMZ3tWOz49gduyQMB8GA1UdIwQYMBaAFHdIa2ENMzrr2o8lXFAUEbAfGP9J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMkNDNy83OTFDNkEzNDdC MzgxMUU5QkMwRDNCMzJDNEY5QUUwMi9kMGhyWVEwek91dmFqeVZjVUJRUnNCOFlf MGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2QwaHJZUTB6T3V2YWp5VmNVQlFSc0I4WV8way5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzJDQzcvNzkxQzZBMzQ3QjM4MTFFOUJDMEQzQjMyQzRGOUFFMDIvNkFCMEYyQTI4 OTI2MTFFRUI1RTI3RDY5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCywkYMA0GCSqGSIb3DQEBCwUAA4IBAQBjH6f9D5BdYBJOB9wqNWQj Zuci3knc+CksErpNNOd4QP9TCORRClj6Bs0uC6bcqbhQHZOxLAMcE1Q4QmQeEmNI eA0CD8XnLQWDc46oKiueqpjiger2bp08ueHqwMw17urLou3K0yXMfjb4rxH54uoD gPdKBKMlCag9n3MrqCRpc+bJb6jSRrhqB/iawllFxZFvj5u3X9hvAqTF3Dm6zvfA H5RXJYE2wvSbmrgxvZREDApnstq+Tke04GDcK41nmrdRJYd4l+b/ogNkJzqgbl0R sxfegJWvMwB7EMxOsN/I8dv6VT79x4IW0/Q/1iulDJlxcDuQ+e4DwyLAcZiweOOb -----END CERTIFICATE-----Generated at Mon Mar 2 06:32:22 2026 by rpki-client