$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/645EF9CADB9311E988E56C33C4F9AE02.roa File: 645EF9CADB9311E988E56C33C4F9AE02.roa (raw, json) Hash identifier: giSaWoz0kPjXm5QgA1jXt8OZKatJUwxEOdzcbQiRQwI= Subject key identifier: E6:C2:F9:BB:8F:C9:63:88:BE:1C:DD:94:13:CB:2D:53:7A:1E:D7:00 Certificate issuer: /CN=A91C9606/serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Certificate serial: 0DC3 Authority key identifier: 1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/645EF9CADB9311E988E56C33C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:27:55 +0000 ROA not before: Tue 04 Nov 2025 18:07:26 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 9789 IP address blocks: 202.131.3.0/24 maxlen: 24 202.131.5.0/24 maxlen: 24 202.131.6.0/24 maxlen: 24 202.131.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:16:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3523 (0xdc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9606, serialNumber=1B471DADCD91209335136EACF6CC988828654B2A Validity Not Before: Nov 4 18:07:26 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a4690b-13ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ca:02:fe:0c:00:a4:dd:36:11:25:20:47:09: 9c:0e:eb:d7:d9:57:5f:12:ae:59:37:b1:42:29:c8: 10:03:4a:71:2f:86:eb:e6:f8:a1:98:30:f7:e3:2b: 96:70:ad:c6:61:60:ed:aa:24:4e:d6:3d:ec:d9:05: a3:1d:a1:f5:f7:76:dd:84:ef:12:9f:1f:0c:b1:16: a9:f5:58:dd:47:20:db:c2:43:66:53:88:59:97:9f: b0:35:14:78:81:d6:37:92:7c:f0:bd:e8:ba:74:6b: d0:9f:d7:50:b7:e2:be:55:4a:81:b8:76:7b:f5:dd: cf:87:bb:b8:36:3a:2a:3d:c4:2c:12:ab:f1:b3:bd: d8:a5:d8:e3:5b:5e:b4:58:77:4c:3b:9e:38:d8:64: 0e:d6:3b:24:7a:b1:49:5b:87:b6:02:6f:e8:1d:dc: 54:78:4c:d8:18:a2:be:98:e5:25:5d:32:74:eb:db: 3b:45:4d:ea:ae:9d:24:03:03:9e:82:b5:3e:a4:41: 20:fb:e6:18:bc:83:e6:d2:18:6c:82:45:17:51:67: 80:14:56:2d:b8:14:9f:89:d0:06:8a:6e:e4:4c:64: b0:b3:e1:d5:8b:57:6b:99:f8:25:79:bf:90:b7:d1: 4f:0a:b8:a6:36:03:1d:1c:2d:14:ce:46:bf:a8:2d: 86:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:C2:F9:BB:8F:C9:63:88:BE:1C:DD:94:13:CB:2D:53:7A:1E:D7:00 X509v3 Authority Key Identifier: keyid:1B:47:1D:AD:CD:91:20:93:35:13:6E:AC:F6:CC:98:88:28:65:4B:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/G0cdrc2RIJM1E26s9syYiChlSyo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G0cdrc2RIJM1E26s9syYiChlSyo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9606/9C9F9F9ADB9011E9A3C12F2CC4F9AE02/645EF9CADB9311E988E56C33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.131.3.0/24 202.131.5.0-202.131.7.255 Signature Algorithm: sha256WithRSAEncryption 8a:e1:93:61:e8:7a:2f:0a:89:a2:20:8f:59:4e:49:cc:e8:ec: 2d:95:01:b0:ef:4e:51:9e:93:b6:43:68:1a:a2:6c:26:b6:3d: 6d:e8:68:c6:64:84:3b:d2:94:32:aa:ed:51:1e:fe:25:b6:5c: f5:08:f9:4e:45:df:7c:6a:b2:03:08:8a:46:1d:43:35:d7:23: ef:47:98:0f:71:8b:17:d4:40:a7:8b:3c:20:1c:fe:0c:5d:e5: 5d:7f:8a:a3:72:2e:54:12:3a:b1:51:bf:93:a0:ed:fd:68:68: 9b:50:8e:32:a9:27:5a:9b:cb:17:60:88:55:c7:bd:b1:8f:42: 3f:a8:c7:54:2f:e8:8c:81:20:a2:78:d9:2a:0e:b1:30:62:b2: e4:d7:4e:2d:05:2a:8c:95:2d:2b:b8:03:53:03:d2:0c:0b:e3: 51:df:c2:00:63:63:e5:1e:36:8f:11:47:41:ac:cd:81:96:46: 92:91:e7:bb:d0:02:e6:53:69:b9:80:df:32:38:6b:91:07:3a: 8c:46:ee:67:72:78:cf:7d:5b:21:02:08:fd:79:55:ce:32:79: 69:d7:e4:fc:4d:44:c1:b2:32:38:87:b6:3b:09:bf:05:e8:55: e5:12:b3:a5:52:46:90:b7:5d:1c:9d:0c:12:61:ac:b6:68:85: a8:01:77:57 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICDcMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzk2MDYxMTAvBgNVBAUTKDFCNDcxREFEQ0Q5MTIwOTMzNTEzNkVBQ0Y2Q0M5ODg4 Mjg2NTRCMkEwHhcNMjUxMTA0MTgwNzI2WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjkwYi0xM2FjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8soC/gwApN02ESUgRwmcDuvX2VdfEq5ZN7FCKcgQA0pxL4br5vihmDD34yuW cK3GYWDtqiRO1j3s2QWjHaH193bdhO8Snx8MsRap9VjdRyDbwkNmU4hZl5+wNRR4 gdY3knzwvei6dGvQn9dQt+K+VUqBuHZ79d3Ph7u4NjoqPcQsEqvxs73YpdjjW160 WHdMO5442GQO1jskerFJW4e2Am/oHdxUeEzYGKK+mOUlXTJ069s7RU3qrp0kAwOe grU+pEEg++YYvIPm0hhsgkUXUWeAFFYtuBSfidAGim7kTGSws+HVi1drmfgleb+Q t9FPCrimNgMdHC0Uzka/qC2GCQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFObC+buP yWOIvhzdlBPLLVN6HtcAMB8GA1UdIwQYMBaAFBtHHa3NkSCTNRNurPbMmIgoZUsq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTYwNi85QzlGOUY5QURC OTAxMUU5QTNDMTJGMkNDNEY5QUUwMi9HMGNkcmMyUklKTTFFMjZzOXN5WWlDaGxT eW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0cwY2RyYzJSSUpNMUUyNnM5c3lZaUNobFN5by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzk2MDYvOUM5RjlGOUFEQjkwMTFFOUEzQzEyRjJDQzRGOUFFMDIvNjQ1RUY5Q0FE QjkzMTFFOTg4RTU2QzMzQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQAyoMDMAwDBADKgwUDBAPKgwAwDQYJKoZIhvcNAQELBQADggEBAIrh k2Hoei8KiaIgj1lOSczo7C2VAbDvTlGek7ZDaBqibCa2PW3oaMZkhDvSlDKq7VEe /iW2XPUI+U5F33xqsgMIikYdQzXXI+9HmA9xixfUQKeLPCAc/gxd5V1/iqNyLlQS OrFRv5Og7f1oaJtQjjKpJ1qbyxdgiFXHvbGPQj+ox1Qv6IyBIKJ42SoOsTBisuTX Ti0FKoyVLSu4A1MD0gwL41HfwgBjY+UeNo8RR0GszYGWRpKR57vQAuZTabmA3zI4 a5EHOoxG7mdyeM99WyECCP15Vc4yeWnX5PxNRMGyMjiHtjsJvwXoVeUSs6VSRpC3 XRydDBJhrLZohagBd1c= -----END CERTIFICATE-----Generated at Mon Mar 2 16:46:39 2026 by rpki-client