$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7EF28CBA175111EC8D2A3722C4F9AE02.roa File: 7EF28CBA175111EC8D2A3722C4F9AE02.roa (raw, json) Hash identifier: IhpgMXVhUYugw7nNSA1+ZnbHjLI9c5SxOlLFwueit3I= Subject key identifier: EF:3D:3D:67:0F:86:D3:70:6F:87:1A:C0:51:50:3E:FD:F0:44:1E:3F Certificate issuer: /CN=A91514B1/serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB Certificate serial: 0693 Authority key identifier: 61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7EF28CBA175111EC8D2A3722C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:37:14 +0000 ROA not before: Sun 03 Aug 2025 00:06:28 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 26380 IP address blocks: 220.101.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Mar 2026 21:51:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1683 (0x693) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=6171432D5594CB3F608D3BE0F52600BBEC46E5FB Validity Not Before: Aug 3 00:06:28 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4875a-10dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e7:f5:e9:68:02:dc:c8:29:bd:f5:3e:c7:d3: e3:41:26:09:69:b8:b9:ce:92:8a:12:e0:92:fd:a1: 15:9a:52:1e:7e:d5:5c:e9:ea:fb:c8:a5:9d:c9:6e: 3b:d5:b0:fe:0e:86:d4:57:12:4a:5c:51:1d:d0:75: 14:b9:38:d8:85:e1:d8:60:d1:8a:cc:3d:d3:3c:50: 27:52:8f:b0:42:61:08:c1:bb:d1:fd:03:aa:ca:75: e0:9f:c9:47:f8:de:37:b4:4a:13:2b:ea:cd:cb:fb: f5:15:b2:b5:f7:69:ef:ac:60:a5:62:46:7a:0f:ca: e0:a7:ba:fa:b1:e8:5e:ab:3e:eb:f8:57:59:02:91: 6b:a8:98:fc:eb:ce:69:c5:4b:a0:97:a2:d1:4f:77: ba:cf:51:a2:80:03:50:28:a0:23:05:3d:86:07:8a: 53:8e:44:77:ae:48:39:74:aa:b5:93:e8:15:15:ff: e3:22:14:9d:26:1c:5c:71:0e:6f:a3:0b:56:80:84: 48:a6:67:b5:7f:76:d8:c5:49:92:58:6c:19:f5:2b: c9:26:d4:d8:71:23:23:36:f0:0a:32:62:fd:6f:a8: 0c:ad:d6:24:e3:e8:b7:4c:31:49:2e:ab:57:d8:cc: d0:3f:e1:2a:95:5b:74:f4:eb:3c:a3:16:4c:2e:b2: 4c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:3D:3D:67:0F:86:D3:70:6F:87:1A:C0:51:50:3E:FD:F0:44:1E:3F X509v3 Authority Key Identifier: keyid:61:71:43:2D:55:94:CB:3F:60:8D:3B:E0:F5:26:00:BB:EC:46:E5:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/YXFDLVWUyz9gjTvg9SYAu-xG5fs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YXFDLVWUyz9gjTvg9SYAu-xG5fs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/84189226FBE411EB82B6264FC4F9AE02/7EF28CBA175111EC8D2A3722C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 220.101.52.0/24 Signature Algorithm: sha256WithRSAEncryption 0f:63:3a:d0:3b:d2:25:97:a6:67:7c:b5:7e:a1:a0:bc:56:7d: 95:f5:c8:e0:8a:19:bc:fe:d2:8a:d8:b7:ab:f3:d9:4d:1a:c9: ab:4b:d4:75:7c:7d:3b:b4:8a:6d:09:38:62:cf:0f:19:a3:83: 27:04:ba:59:7b:3e:8f:49:15:6b:8c:41:68:f4:3e:e8:37:69: 71:6b:2f:12:e1:81:c9:78:81:48:6c:cd:7d:dd:7e:64:97:49: 32:5b:23:b6:12:2b:1f:12:af:66:5e:02:3c:91:55:2e:fa:e9: 3b:8e:56:10:4e:8d:1b:82:50:9e:0e:9d:86:0d:84:40:a2:f7: fd:dd:e3:83:6c:af:3d:96:1e:0f:65:c1:88:92:db:5f:cb:cb: f8:f3:f5:ec:ea:86:19:1f:5a:9a:42:3b:8b:15:b0:6e:9a:68: 9d:0b:30:94:fd:35:09:3f:a4:5e:b3:c4:fd:6d:5e:89:9c:3b: 4c:41:12:42:4d:6d:07:a9:45:87:d2:0b:a2:18:c4:df:42:a6: 42:93:35:c5:55:93:e2:fb:0b:1e:67:11:f4:b6:23:1c:c1:89: 01:3e:95:0b:a7:f6:e8:6c:5b:eb:c8:fa:f9:17:5e:7e:11:7a: 40:29:3a:3f:24:fc:2f:35:3a:6c:d7:64:01:fa:26:43:2f:ff: e8:98:49:5c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBpMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDYxNzE0MzJENTU5NENCM0Y2MDhEM0JFMEY1MjYwMEJC RUM0NkU1RkIwHhcNMjUwODAzMDAwNjI4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODc1YS0xMGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAiOf16WgC3MgpvfU+x9PjQSYJabi5zpKKEuCS/aEVmlIeftVc6er7yKWdyW47 1bD+DobUVxJKXFEd0HUUuTjYheHYYNGKzD3TPFAnUo+wQmEIwbvR/QOqynXgn8lH +N43tEoTK+rNy/v1FbK192nvrGClYkZ6D8rgp7r6seheqz7r+FdZApFrqJj8685p xUugl6LRT3e6z1GigANQKKAjBT2GB4pTjkR3rkg5dKq1k+gVFf/jIhSdJhxccQ5v owtWgIRIpme1f3bYxUmSWGwZ9SvJJtTYcSMjNvAKMmL9b6gMrdYk4+i3TDFJLqtX 2MzQP+EqlVt09Os8oxZMLrJMRQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO89PWcP htNwb4cawFFQPv3wRB4/MB8GA1UdIwQYMBaAFGFxQy1VlMs/YI074PUmALvsRuX7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS84NDE4OTIyNkZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9ZWEZETFZXVXl6OWdqVHZnOVNZQXUteEc1 ZnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lYRkRMVldVeXo5Z2pUdmc5U1lBdS14RzVmcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE0QjEvODQxODkyMjZGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvN0VGMjhDQkEx NzUxMTFFQzhEMkEzNzIyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA3GU0MA0GCSqGSIb3DQEBCwUAA4IBAQAPYzrQO9Ill6ZnfLV+oaC8 Vn2V9cjgihm8/tKK2Ler89lNGsmrS9R1fH07tIptCThizw8Zo4MnBLpZez6PSRVr jEFo9D7oN2lxay8S4YHJeIFIbM193X5kl0kyWyO2EisfEq9mXgI8kVUu+uk7jlYQ To0bglCeDp2GDYRAovf93eODbK89lh4PZcGIkttfy8v48/Xs6oYZH1qaQjuLFbBu mmidCzCU/TUJP6Res8T9bV6JnDtMQRJCTW0HqUWH0guiGMTfQqZCkzXFVZPi+wse ZxH0tiMcwYkBPpULp/bobFvryPr5F15+EXpAKTo/JPwvNTps12QB+iZDL//omElc -----END CERTIFICATE-----Generated at Fri Mar 13 01:30:37 2026 by rpki-client