$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/7273624619B511EC98D2A883C4F9AE02.roa File: 7273624619B511EC98D2A883C4F9AE02.roa (raw, json) Hash identifier: FBbiY2Z7A2gvB+/P385wAa7i305YOeNtcXS/9FCiDPc= Subject key identifier: 6C:CE:7B:B0:DF:A3:E4:1A:8D:91:4A:06:A5:B5:52:07:66:8D:C0:A1 Certificate issuer: /CN=A91ED931/serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059 Certificate serial: 058C Authority key identifier: C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/7273624619B511EC98D2A883C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:59:19 +0000 ROA not before: Sun 07 Sep 2025 21:10:16 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 19905 IP address blocks: 202.49.96.0/21 maxlen: 23 202.49.96.0/24 maxlen: 24 202.49.97.0/24 maxlen: 24 202.49.98.0/24 maxlen: 24 202.49.99.0/24 maxlen: 24 202.49.100.0/24 maxlen: 24 202.49.101.0/24 maxlen: 24 202.49.102.0/24 maxlen: 24 202.49.103.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:36:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1420 (0x58c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED931, serialNumber=C035450BD1A2D44B151EE38C089888A5AF4B8059 Validity Not Before: Sep 7 21:10:16 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a42a17-fc3a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:51:b8:57:6d:d1:9e:bf:84:d6:16:33:47:d9: 07:3d:44:36:9f:36:6f:99:eb:fb:d0:ab:5f:60:73: 5f:84:8c:0e:23:8a:df:e6:cf:e9:2d:a7:2f:00:80: 22:52:f2:9d:62:5d:88:ee:d4:d1:5e:eb:1c:60:65: fe:0d:e4:96:eb:00:4b:c8:24:a6:ba:ab:1a:7a:9f: ad:71:e9:15:7c:21:1c:53:3c:63:55:60:7d:8d:e7: 3f:2d:21:13:88:1a:0a:6e:c6:08:f8:f6:dd:3a:1e: 82:06:48:46:dd:2d:f7:cd:f4:b0:7d:3d:20:96:ff: 90:a2:13:4b:6a:cb:6d:fd:26:13:66:0e:21:ab:4b: 8d:e1:52:6c:17:ff:c9:d0:1e:10:fd:7d:dc:4b:f5: c6:70:a5:63:b0:da:62:51:65:0d:21:89:9d:fd:b3: b0:d3:a9:a2:68:1c:1c:44:f9:e8:a2:5d:26:f5:43: 0c:6c:d1:3a:1e:e6:c5:07:53:ba:24:f1:93:8a:b9: 43:a5:b9:9e:ad:7b:da:4b:16:0a:ec:79:78:76:cb: f4:2a:ba:2f:36:99:18:68:6b:35:e8:ec:9e:7d:3b: 23:f6:fa:b0:4d:4f:99:53:50:01:59:78:2b:ec:67: 7e:97:f7:08:46:63:a1:19:22:0d:4f:96:e4:d0:78: 5a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CE:7B:B0:DF:A3:E4:1A:8D:91:4A:06:A5:B5:52:07:66:8D:C0:A1 X509v3 Authority Key Identifier: keyid:C0:35:45:0B:D1:A2:D4:4B:15:1E:E3:8C:08:98:88:A5:AF:4B:80:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wDVFC9Gi1EsVHuOMCJiIpa9LgFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED931/D1D32B6E19AF11ECAF84CD76C4F9AE02/7273624619B511EC98D2A883C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.49.96.0/21 Signature Algorithm: sha256WithRSAEncryption 71:54:c0:cc:6d:02:f6:69:27:b0:47:97:5f:c4:0f:c3:ab:c3: 27:8f:17:f5:6f:12:64:3b:4c:d7:9a:d8:c5:2a:6d:3e:49:89: 56:d9:42:21:fe:2e:0c:32:92:1f:b6:e3:0b:b4:ce:5d:c9:11: 4a:91:b4:91:4a:eb:d5:81:ff:02:70:75:ab:2f:fb:4d:35:2a: cf:3f:27:5b:a5:2c:04:d4:e8:d9:ea:81:d9:1e:cd:ca:71:d9: ea:7f:9b:05:1b:54:8a:c0:58:ba:f2:ff:57:9e:5e:cf:b7:f4: 0b:7e:91:07:9a:97:2b:cb:96:23:55:ad:93:0d:b0:e7:41:13: ca:75:af:bf:ae:f1:f3:d5:23:7d:78:23:c1:60:d5:e4:f9:ea: 4c:c6:6f:d1:0e:5f:a3:6f:44:72:32:be:1a:cb:56:35:b5:c0: 85:69:3f:ec:69:90:35:33:a9:b1:3e:6f:48:28:eb:0e:a6:3d: 52:5b:39:45:f1:03:cf:1e:4e:a4:d0:ed:02:f4:58:29:b8:de: c7:b7:a0:0f:ca:72:d5:6e:cf:50:8c:69:8f:6d:9f:9b:6d:67: 85:7a:6b:b1:3c:9a:7c:4f:88:12:22:74:85:79:9e:00:0d:09: ce:6c:90:61:5b:0b:24:8d:4f:8d:fd:aa:1f:68:dd:b9:66:55: ed:61:ed:49 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBYwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQ5MzExMTAvBgNVBAUTKEMwMzU0NTBCRDFBMkQ0NEIxNTFFRTM4QzA4OTg4OEE1 QUY0QjgwNTkwHhcNMjUwOTA3MjExMDE2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmExNy1mYzNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvlG4V23Rnr+E1hYzR9kHPUQ2nzZvmev70KtfYHNfhIwOI4rf5s/pLacvAIAi UvKdYl2I7tTRXuscYGX+DeSW6wBLyCSmuqsaep+tcekVfCEcUzxjVWB9jec/LSET iBoKbsYI+PbdOh6CBkhG3S33zfSwfT0glv+QohNLastt/SYTZg4hq0uN4VJsF//J 0B4Q/X3cS/XGcKVjsNpiUWUNIYmd/bOw06miaBwcRPnool0m9UMMbNE6HubFB1O6 JPGTirlDpbmerXvaSxYK7Hl4dsv0KrovNpkYaGs16OyefTsj9vqwTU+ZU1ABWXgr 7Gd+l/cIRmOhGSINT5bk0Hha1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGzOe7Df o+QajZFKBqW1UgdmjcChMB8GA1UdIwQYMBaAFMA1RQvRotRLFR7jjAiYiKWvS4BZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDkzMS9EMUQzMkI2RTE5 QUYxMUVDQUY4NENENzZDNEY5QUUwMi93RFZGQzlHaTFFc1ZIdU9NQ0ppSXBhOUxn RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3dEVkZDOUdpMUVzVkh1T01DSmlJcGE5TGdGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUQ5MzEvRDFEMzJCNkUxOUFGMTFFQ0FGODRDRDc2QzRGOUFFMDIvNzI3MzYyNDYx OUI1MTFFQzk4RDJBODgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDyjFgMA0GCSqGSIb3DQEBCwUAA4IBAQBxVMDMbQL2aSewR5dfxA/D q8Mnjxf1bxJkO0zXmtjFKm0+SYlW2UIh/i4MMpIftuMLtM5dyRFKkbSRSuvVgf8C cHWrL/tNNSrPPydbpSwE1OjZ6oHZHs3Kcdnqf5sFG1SKwFi68v9Xnl7Pt/QLfpEH mpcry5YjVa2TDbDnQRPKda+/rvHz1SN9eCPBYNXk+epMxm/RDl+jb0RyMr4ay1Y1 tcCFaT/saZA1M6mxPm9IKOsOpj1SWzlF8QPPHk6k0O0C9FgpuN7Ht6APynLVbs9Q jGmPbZ+bbWeFemuxPJp8T4gSInSFeZ4ADQnObJBhWwskjU+N/aofaN25ZlXtYe1J -----END CERTIFICATE-----Generated at Mon Mar 2 13:18:45 2026 by rpki-client