$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7D920C1AB0CD11E58B55FC73C4F9AE02.roa File: 7D920C1AB0CD11E58B55FC73C4F9AE02.roa (raw, json) Hash identifier: knSiwSZTuJB5L8civuaUh8rAh8cmbNdU18vutdd1ebk= Subject key identifier: 10:D0:0E:49:C3:38:B2:89:D9:EF:C4:6D:8B:B8:33:BF:45:46:57:6C Certificate issuer: /CN=A91E2454/serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Certificate serial: 36AA Authority key identifier: AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7D920C1AB0CD11E58B55FC73C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:10:53 +0000 ROA not before: Tue 02 Dec 2025 14:41:50 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 24551 IP address blocks: 202.69.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13994 (0x36aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E2454, serialNumber=AB6262BC7D02EC1AD48B71DA98B73D22A362DAF0 Validity Not Before: Dec 2 14:41:50 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a4812d-4a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:23:08:de:0a:3d:c4:2d:dd:99:5c:a5:c5:89: 77:dc:cf:54:82:cf:2b:a1:bd:48:a5:e5:7a:85:0f: 44:64:9c:f2:94:d2:00:7f:2d:0b:15:d5:3c:03:7d: 41:b0:25:b5:4f:fb:8f:06:3e:e6:9b:19:fc:5d:27: f4:fd:18:b9:6d:e5:81:70:d6:e6:02:94:f3:62:17: 64:59:e7:f6:ca:95:f7:24:11:b5:ae:5a:aa:db:1d: d1:ce:30:07:7e:6a:3f:e5:1a:9f:1f:e8:f0:22:b2: 73:12:0e:58:d2:8c:ea:10:88:d6:75:34:ee:9a:92: 3a:5d:90:d7:57:64:2c:8b:dd:63:89:e1:86:5a:7c: 3f:d8:d7:75:6a:29:fa:d1:8e:53:fe:08:c3:9b:5d: a7:72:90:65:a2:73:fb:e1:d9:95:04:47:40:ad:1a: c5:90:e9:13:15:37:2c:d6:91:ae:ef:94:56:27:a0: 46:24:30:6b:02:91:a0:5b:63:df:bb:9c:89:61:eb: 1c:41:d2:4d:82:1e:26:ed:9a:68:8b:a7:a8:c8:d1: b4:58:28:f6:f8:1c:ea:90:de:7b:c1:bd:69:ac:6e: f4:1e:42:a1:ee:7f:40:21:25:ad:1f:1f:9a:36:0d: 8a:b5:a0:11:08:ef:87:c5:a5:8a:94:5a:97:87:12: b6:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D0:0E:49:C3:38:B2:89:D9:EF:C4:6D:8B:B8:33:BF:45:46:57:6C X509v3 Authority Key Identifier: keyid:AB:62:62:BC:7D:02:EC:1A:D4:8B:71:DA:98:B7:3D:22:A3:62:DA:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/q2JivH0C7BrUi3HamLc9IqNi2vA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q2JivH0C7BrUi3HamLc9IqNi2vA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2454/D4C30B421D8711E2A19822E008B02CD2/7D920C1AB0CD11E58B55FC73C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.69.163.0/24 Signature Algorithm: sha256WithRSAEncryption 17:00:07:a6:7c:25:47:5a:b2:4e:17:82:03:da:70:fe:85:69: 06:a5:b3:99:d5:23:31:e8:cc:dd:8e:81:79:86:84:34:db:86: f5:03:1a:01:bb:95:56:6f:57:fa:76:d2:94:86:1e:5f:61:2d: 1a:a7:31:bc:a6:c2:83:42:df:97:ec:bf:56:ef:7e:4a:94:00: 7b:f8:78:81:98:28:61:ef:bd:91:bd:c7:b4:dc:9c:aa:a7:77: 09:1f:88:ab:ca:8f:47:f2:98:b2:c5:58:bc:dc:c9:61:ff:b5: 28:86:dc:e9:50:16:0e:2f:e7:90:d5:49:00:13:58:cf:fd:e3: 56:11:bc:c6:5c:5f:a0:62:1c:15:4e:54:47:4b:fd:ca:8e:0f: 5e:4e:6e:0d:0c:5f:15:e1:7c:0f:9b:1f:67:90:cb:ba:e7:df: 3f:06:e4:86:a2:9f:74:86:42:76:d2:d4:5a:aa:dd:0c:6b:25: 53:7b:ef:fa:b7:94:22:f5:84:5b:65:6d:d0:86:79:30:1c:a0: a6:d8:4a:e6:f3:19:2e:3a:83:bb:08:c2:b3:3f:f0:f0:fb:96: b5:8b:be:ef:59:06:16:bc:a1:17:32:bd:f6:c8:9b:99:8f:91: fc:25:29:32:bd:4f:0e:51:d6:6a:0d:5e:c2:4c:e2:4d:2e:b8: fb:26:c6:cd -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICNqowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTI0NTQxMTAvBgNVBAUTKEFCNjI2MkJDN0QwMkVDMUFENDhCNzFEQTk4QjczRDIy QTM2MkRBRjAwHhcNMjUxMjAyMTQ0MTUwWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODEyZC00YTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApiMI3go9xC3dmVylxYl33M9Ugs8rob1IpeV6hQ9EZJzylNIAfy0LFdU8A31B sCW1T/uPBj7mmxn8XSf0/Ri5beWBcNbmApTzYhdkWef2ypX3JBG1rlqq2x3RzjAH fmo/5RqfH+jwIrJzEg5Y0ozqEIjWdTTumpI6XZDXV2Qsi91jieGGWnw/2Nd1ain6 0Y5T/gjDm12ncpBlonP74dmVBEdArRrFkOkTFTcs1pGu75RWJ6BGJDBrApGgW2Pf u5yJYescQdJNgh4m7Zpoi6eoyNG0WCj2+BzqkN57wb1prG70HkKh7n9AISWtHx+a Ng2KtaARCO+HxaWKlFqXhxK28QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBDQDknD OLKJ2e/EbYu4M79FRldsMB8GA1UdIwQYMBaAFKtiYrx9Auwa1Itx2pi3PSKjYtrw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMjQ1NC9ENEMzMEI0MjFE ODcxMUUyQTE5ODIyRTAwOEIwMkNEMi9xMkppdkgwQzdCclVpM0hhbUxjOUlxTmky dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3EySml2SDBDN0JyVWkzSGFtTGM5SXFOaTJ2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTI0NTQvRDRDMzBCNDIxRDg3MTFFMkExOTgyMkUwMDhCMDJDRDIvN0Q5MjBDMUFC MENEMTFFNThCNTVGQzczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAykWjMA0GCSqGSIb3DQEBCwUAA4IBAQAXAAemfCVHWrJOF4ID2nD+ hWkGpbOZ1SMx6MzdjoF5hoQ024b1AxoBu5VWb1f6dtKUhh5fYS0apzG8psKDQt+X 7L9W735KlAB7+HiBmChh772Rvce03Jyqp3cJH4iryo9H8piyxVi83Mlh/7Uohtzp UBYOL+eQ1UkAE1jP/eNWEbzGXF+gYhwVTlRHS/3Kjg9eTm4NDF8V4XwPmx9nkMu6 598/BuSGop90hkJ20tRaqt0MayVTe+/6t5Qi9YRbZW3QhnkwHKCm2Erm8xkuOoO7 CMKzP/Dw+5a1i77vWQYWvKEXMr32yJuZj5H8JSkyvU8OUdZqDV7CTOJNLrj7JsbN -----END CERTIFICATE-----Generated at Mon Mar 2 20:02:22 2026 by rpki-client