$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/CD7FBD2CFDE711F08E6C9BDB726F56BC.roa File: CD7FBD2CFDE711F08E6C9BDB726F56BC.roa (raw, json) Hash identifier: UOuvqpSDYFbocWWabFzrtfXdrPIilGb9+QOyWPSSshU= Subject key identifier: 31:34:5C:0F:0C:2A:89:A3:64:A8:0F:CD:23:67:55:A1:49:40:65:D4 Certificate issuer: /CN=A91ACD72/serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Certificate serial: 05C6 Authority key identifier: 2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/CD7FBD2CFDE711F08E6C9BDB726F56BC.roa Signing time: Fri 30 Jan 2026 14:27:27 +0000 ROA not before: Fri 30 Jan 2026 14:27:27 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 29802 IP address blocks: 202.43.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Feb 2026 22:43:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1478 (0x5c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACD72, serialNumber=2C19175325A5F36C0BB58F92119E65820C8FD57B Validity Not Before: Jan 30 14:27:27 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=697cbfcf-fd18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:6c:1e:dd:93:62:96:47:43:5c:09:17:db:fe: ac:3f:cb:b5:74:ef:c8:2f:2b:1b:7e:4f:a4:e2:e3: 84:8b:bb:94:bf:a1:d3:ba:2d:ea:a5:df:58:26:f4: 13:09:ec:2b:66:e1:e4:97:c6:64:23:75:25:c9:e2: b4:9c:48:0b:c0:3c:c3:89:20:47:80:3e:f4:b1:d8: ad:f0:e1:d9:1c:6c:39:be:e0:43:bb:96:ce:c3:83: 15:fc:1b:5b:f3:f4:99:a5:2d:56:37:55:4a:0a:90: 18:6d:0a:41:4c:73:a4:08:8f:60:7c:3f:97:81:30: 9c:a1:ee:97:b8:4c:77:52:56:18:a5:f3:73:f5:20: c1:41:c4:35:d7:d0:72:a6:ee:8b:01:03:b1:a2:57: 2a:b7:ba:03:a1:11:dd:a0:b4:13:aa:9b:25:d5:ee: 95:87:53:20:3b:72:e1:39:87:8b:6c:20:3c:d6:b6: 5a:f7:33:55:db:a5:78:79:5c:24:99:8e:b1:91:49: 2e:e8:ed:e0:0d:e9:d5:f0:61:d6:8e:ef:d6:b5:28: 9e:a6:4a:5a:eb:17:11:9b:03:c9:fe:fb:cf:e3:42: 43:64:f8:81:1f:f8:37:af:16:9f:41:51:cb:fe:b6: 02:bd:2e:84:07:3e:59:00:b2:f9:8d:0e:82:3f:a8: 93:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:34:5C:0F:0C:2A:89:A3:64:A8:0F:CD:23:67:55:A1:49:40:65:D4 X509v3 Authority Key Identifier: keyid:2C:19:17:53:25:A5:F3:6C:0B:B5:8F:92:11:9E:65:82:0C:8F:D5:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/LBkXUyWl82wLtY-SEZ5lggyP1Xs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LBkXUyWl82wLtY-SEZ5lggyP1Xs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACD72/4576A672261211ECB9319942C4F9AE02/CD7FBD2CFDE711F08E6C9BDB726F56BC.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.43.7.0/24 Signature Algorithm: sha256WithRSAEncryption 94:5f:8e:82:5a:09:90:a1:cd:15:5c:64:7a:3e:b6:0b:08:d3: 4b:98:9a:a6:01:c0:e1:fc:05:8a:1d:73:eb:c2:a1:20:82:c7: f2:40:c6:96:d4:7b:24:91:b0:e1:f2:64:7f:c7:d8:e6:d5:9c: 54:d8:86:86:eb:9b:53:57:8c:58:f3:7f:f2:62:14:e1:a2:32: fa:df:5f:d7:95:16:ab:20:07:24:fd:8c:06:47:d0:cc:02:98: c2:7c:e6:6b:62:d2:fb:a5:24:03:ad:d0:0c:ec:21:e8:e4:c5: 81:37:df:89:3e:09:9c:1f:e9:52:9d:d1:3e:b3:2d:e4:4c:99: f4:f8:7f:43:1f:41:ab:d0:bf:d6:06:d2:79:8a:d1:fc:54:c2: 66:b4:27:b4:65:9c:87:48:8c:6e:67:84:e6:4e:ed:ae:a5:8f: d7:9a:36:f0:51:76:5f:30:ef:ba:50:84:b7:e2:4c:71:a0:86: f6:a2:32:4b:02:b0:47:fe:72:15:da:59:c7:4a:5d:3f:38:5c: b0:5a:25:ba:ce:10:fc:49:48:39:4c:35:4f:c6:de:1c:21:0b: 4b:7f:ed:ed:79:fd:f5:29:d1:6a:83:63:89:fa:3b:48:a1:90: 08:53:48:3c:71:c0:b0:89:30:c0:39:d1:25:b2:d6:e6:ba:c6: 21:90:b3:72 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBcYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAwwIQTkx QUNENzIxMTAvBgNVBAUTKDJDMTkxNzUzMjVBNUYzNkMwQkI1OEY5MjExOUU2NTgy MEM4RkQ1N0IwHhcNMjYwMTMwMTQyNzI3WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDDA02OTdjYmZjZi1mZDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0Gwe3ZNilkdDXAkX2/6sP8u1dO/ILysbfk+k4uOEi7uUv6HTui3qpd9YJvQT CewrZuHkl8ZkI3UlyeK0nEgLwDzDiSBHgD70sdit8OHZHGw5vuBDu5bOw4MV/Btb 8/SZpS1WN1VKCpAYbQpBTHOkCI9gfD+XgTCcoe6XuEx3UlYYpfNz9SDBQcQ119By pu6LAQOxolcqt7oDoRHdoLQTqpsl1e6Vh1MgO3LhOYeLbCA81rZa9zNV26V4eVwk mY6xkUku6O3gDenV8GHWju/WtSiepkpa6xcRmwPJ/vvP40JDZPiBH/g3rxafQVHL /rYCvS6EBz5ZALL5jQ6CP6iTFQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDE0XA8M KomjZKgPzSNnVaFJQGXUMB8GA1UdIwQYMBaAFCwZF1MlpfNsC7WPkhGeZYIMj9V7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0Q3Mi80NTc2QTY3MjI2 MTIxMUVDQjkzMTk5NDJDNEY5QUUwMi9MQmtYVXlXbDgyd0x0WS1TRVo1bGdneVAx WHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xCa1hVeVdsODJ3THRZLVNFWjVsZ2d5UDFYcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNENzIvNDU3NkE2NzIyNjEyMTFFQ0I5MzE5OTQyQzRGOUFFMDIvQ0Q3RkJEMkNG REU3MTFGMDhFNkM5QkRCNzI2RjU2QkMucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADKKwcwDQYJKoZIhvcNAQELBQADggEBAJRfjoJaCZChzRVc ZHo+tgsI00uYmqYBwOH8BYodc+vCoSCCx/JAxpbUeySRsOHyZH/H2ObVnFTYhobr m1NXjFjzf/JiFOGiMvrfX9eVFqsgByT9jAZH0MwCmMJ85mti0vulJAOt0AzsIejk xYE334k+CZwf6VKd0T6zLeRMmfT4f0MfQavQv9YG0nmK0fxUwma0J7RlnIdIjG5n hOZO7a6lj9eaNvBRdl8w77pQhLfiTHGghvaiMksCsEf+chXaWcdKXT84XLBaJbrO EPxJSDlMNU/G3hwhC0t/7e15/fUp0WqDY4n6O0ihkAhTSDxxwLCJMMA50SWy1ua6 xiGQs3I= -----END CERTIFICATE-----Generated at Thu Feb 19 21:23:03 2026 by rpki-client