$ rpki-client -vvf rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/B74426C88AA711EB876EF84BC4F9AE02.roa File: B74426C88AA711EB876EF84BC4F9AE02.roa (raw, json) Hash identifier: Eji1oSGr80uG2ZkEWDi3XKFH3aT7cQe4W8HidYlRHQU= Subject key identifier: C1:AA:F8:52:71:68:E6:6D:53:33:50:82:9B:47:26:E1:D2:DE:26:31 Certificate issuer: /CN=A91FEE70/serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Certificate serial: 0CCB Authority key identifier: FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/B74426C88AA711EB876EF84BC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:18:52 +0000 ROA not before: Tue 08 Apr 2025 18:57:33 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 16509 IP address blocks: 203.2.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 03:01:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3275 (0xccb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FEE70, serialNumber=FA94DE39088EC38A52B692279A42C4AFFB5B73B1 Validity Not Before: Apr 8 18:57:33 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a42eab-88c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:42:0c:d8:3f:db:7b:9c:88:1a:10:92:ef:16: 19:7e:41:f3:02:44:8d:9f:44:02:72:53:7f:13:5a: 62:ef:7c:fb:91:ac:f4:55:df:d1:97:06:6d:19:d8: 12:bb:02:1d:ad:3b:55:88:5f:89:9d:ee:16:7c:d3: 21:b2:88:16:0f:6e:b7:07:0e:6e:d0:73:98:31:01: e6:f1:aa:3c:61:07:89:ec:69:1d:e6:c0:90:38:67: 81:87:d5:98:df:1b:3f:22:57:68:44:9f:4f:1c:2d: 7f:50:f6:76:c8:38:61:a0:8c:f7:c9:eb:42:b9:d8: 77:2b:d8:20:ff:b5:30:d8:d0:cd:52:75:53:4b:60: 19:00:f0:c8:94:5d:97:3b:bb:48:85:2e:f7:d7:d7: 65:de:54:81:58:26:47:d7:a6:b4:4a:2b:5a:cc:25: b9:5f:3f:e3:72:f2:62:da:d8:b5:6a:59:6b:c2:fb: fd:61:5b:8c:d8:f6:cf:ed:0b:91:07:e7:da:62:18: b0:b7:0c:55:a0:30:ce:78:c1:dc:da:c5:7b:7f:dd: 22:44:48:d3:02:49:9b:3a:0a:51:2f:9d:66:29:92: a4:fe:f4:d9:ca:16:e4:30:34:ee:78:41:37:54:95: 73:05:dd:2c:6e:c8:2c:95:21:6e:0b:99:b7:c3:73: 23:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AA:F8:52:71:68:E6:6D:53:33:50:82:9B:47:26:E1:D2:DE:26:31 X509v3 Authority Key Identifier: keyid:FA:94:DE:39:08:8E:C3:8A:52:B6:92:27:9A:42:C4:AF:FB:5B:73:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/-pTeOQiOw4pStpInmkLEr_tbc7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-pTeOQiOw4pStpInmkLEr_tbc7E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FEE70/0910D1A009E811EAA630164FC4F9AE02/B74426C88AA711EB876EF84BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 203.2.170.0/24 Signature Algorithm: sha256WithRSAEncryption 39:c5:e8:9c:d6:5b:8a:64:4d:83:1a:f7:b4:23:8b:45:f9:c9: d9:a2:56:65:52:fc:52:97:c8:69:75:bd:d2:af:c1:84:e2:33: 75:84:c9:5e:54:b9:ad:cf:65:6e:c0:d8:96:f9:52:0c:f2:dc: bf:5d:fe:fb:04:5d:7d:bd:53:dd:bb:19:12:4a:fc:62:95:cf: 44:02:8d:5a:94:12:03:76:3b:47:c9:d3:aa:2a:e5:d8:7b:2d: 79:04:d7:61:77:26:f2:31:15:b3:90:a5:d6:1f:b4:41:e3:90: 45:a0:b9:21:a3:92:e6:34:8d:2c:73:fe:a0:bb:c1:cd:1b:04: c1:ea:bf:1e:30:24:ac:13:cb:0e:5a:7d:ae:58:ec:1c:4e:a0: c1:66:c2:8a:13:a5:13:66:d4:60:86:42:77:2f:6a:93:f4:3d: 09:61:eb:7d:8a:c7:14:ba:51:09:2a:a9:f5:ae:db:5c:14:0a: a5:ef:a7:81:95:18:41:49:39:e5:8f:d3:f5:01:18:1f:6a:02: cf:16:d2:d7:f6:43:4c:f5:b6:7b:52:dc:64:f0:f4:ea:52:c0: 57:97:ed:36:63:51:3a:10:32:a0:ed:eb:4e:c5:3b:08:b4:6c: ae:0c:71:28:2a:1c:cb:26:f7:4e:ad:bd:9f:97:c6:0b:3f:c5: 02:b6:ff:e6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkVFNzAxMTAvBgNVBAUTKEZBOTRERTM5MDg4RUMzOEE1MkI2OTIyNzlBNDJDNEFG RkI1QjczQjEwHhcNMjUwNDA4MTg1NzMzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmVhYi04OGM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4kIM2D/be5yIGhCS7xYZfkHzAkSNn0QCclN/E1pi73z7kaz0Vd/RlwZtGdgS uwIdrTtViF+Jne4WfNMhsogWD263Bw5u0HOYMQHm8ao8YQeJ7Gkd5sCQOGeBh9WY 3xs/IldoRJ9PHC1/UPZ2yDhhoIz3yetCudh3K9gg/7Uw2NDNUnVTS2AZAPDIlF2X O7tIhS7319dl3lSBWCZH16a0SitazCW5Xz/jcvJi2ti1allrwvv9YVuM2PbP7QuR B+faYhiwtwxVoDDOeMHc2sV7f90iREjTAkmbOgpRL51mKZKk/vTZyhbkMDTueEE3 VJVzBd0sbsgslSFuC5m3w3MjPQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMGq+FJx aOZtUzNQgptHJuHS3iYxMB8GA1UdIwQYMBaAFPqU3jkIjsOKUraSJ5pCxK/7W3Ox MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRUU3MC8wOTEwRDFBMDA5 RTgxMUVBQTYzMDE2NEZDNEY5QUUwMi8tcFRlT1FpT3c0cFN0cElubWtMRXJfdGJj N0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLy1wVGVPUWlPdzRwU3RwSW5ta0xFcl90YmM3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkVFNzAvMDkxMEQxQTAwOUU4MTFFQUE2MzAxNjRGQzRGOUFFMDIvQjc0NDI2Qzg4 QUE3MTFFQjg3NkVGODRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAywKqMA0GCSqGSIb3DQEBCwUAA4IBAQA5xeic1luKZE2DGve0I4tF +cnZolZlUvxSl8hpdb3Sr8GE4jN1hMleVLmtz2VuwNiW+VIM8ty/Xf77BF19vVPd uxkSSvxilc9EAo1alBIDdjtHydOqKuXYey15BNdhdybyMRWzkKXWH7RB45BFoLkh o5LmNI0sc/6gu8HNGwTB6r8eMCSsE8sOWn2uWOwcTqDBZsKKE6UTZtRghkJ3L2qT 9D0JYet9iscUulEJKqn1rttcFAql76eBlRhBSTnlj9P1ARgfagLPFtLX9kNM9bZ7 Utxk8PTqUsBXl+02Y1E6EDKg7etOxTsItGyuDHEoKhzLJvdOrb2fl8YLP8UCtv/m -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:34 2026 by rpki-client