$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/7FC61EDC2E1D11EF933E9981C4F9AE02.roa File: 7FC61EDC2E1D11EF933E9981C4F9AE02.roa (raw, json) Hash identifier: 8to8ysOqqFD6evQaOy6tyviqmwLWEUIY429pE2R6UEM= Subject key identifier: 11:B0:8B:58:4E:0B:85:36:06:51:48:95:47:9D:AA:D6:1F:A5:31:05 Certificate issuer: /CN=A91C4EC7/serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Certificate serial: 019A Authority key identifier: BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/7FC61EDC2E1D11EF933E9981C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:05:57 +0000 ROA not before: Sun 23 Nov 2025 02:49:53 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 0 IP address blocks: 202.50.242.0/24 maxlen: 24 2001:def:4000::/64 maxlen: 64 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 04:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C4EC7, serialNumber=BA89014EBC494B67FD8B3F82E8B38EF6F6C5724D Validity Not Before: Nov 23 02:49:53 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a58b35-a625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:07:37:09:92:83:db:fb:f1:b5:cd:30:d4:e4: 5a:91:17:47:c5:58:7d:bc:cc:d8:c7:4f:2c:2a:61: 29:8f:16:e8:4a:77:e9:9a:33:0f:f4:3e:a7:10:77: 7f:1d:5a:41:92:15:fd:12:6c:63:25:50:1a:10:0f: ff:ba:8a:dd:bb:6a:33:ec:a1:72:89:7e:cc:ba:77: 06:c0:48:18:67:ac:33:d7:6b:d2:b3:66:0d:f3:87: 76:db:c2:de:e2:68:87:26:72:cc:59:1e:76:d7:20: 38:76:0e:3e:fa:d8:e7:7a:e3:68:84:8b:65:96:ef: ad:29:72:35:20:bb:c7:61:20:98:79:c6:ae:6d:e7: f3:83:30:7f:fa:27:29:03:96:92:98:0b:e2:9b:99: 2d:5e:16:4a:27:45:6a:a7:8f:3a:1c:4f:67:94:16: b3:52:50:1d:7e:15:76:ba:d4:c4:01:14:d0:f2:b9: de:a2:ab:2e:a2:fc:d8:71:47:8a:8d:63:9f:7d:97: b8:49:57:73:ee:f4:26:f2:21:d7:3e:7c:89:90:d0: 48:0d:f7:12:47:f6:91:e1:56:65:a8:37:cc:87:a6: bf:fc:82:99:b5:72:eb:39:61:74:54:2b:e7:5b:6c: ba:b8:7a:60:51:fd:e8:d9:1d:72:d7:23:b1:d4:e4: 11:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:B0:8B:58:4E:0B:85:36:06:51:48:95:47:9D:AA:D6:1F:A5:31:05 X509v3 Authority Key Identifier: keyid:BA:89:01:4E:BC:49:4B:67:FD:8B:3F:82:E8:B3:8E:F6:F6:C5:72:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/uokBTrxJS2f9iz-C6LOO9vbFck0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uokBTrxJS2f9iz-C6LOO9vbFck0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4EC7/75757870BFE511EEAACE4312C4F9AE02/7FC61EDC2E1D11EF933E9981C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 202.50.242.0/24 IPv6: 2001:def:4000::/64 Signature Algorithm: sha256WithRSAEncryption 91:72:5f:e3:63:0e:48:11:86:6b:2c:53:8d:56:97:5a:b7:5a: 18:c3:5b:46:ea:76:e7:b8:9b:66:60:44:45:21:f8:3d:be:5b: 9f:c2:5a:26:ca:5b:35:fc:f6:4b:2b:57:63:2c:23:ed:4f:f4: 04:a8:03:28:a6:d6:94:ab:fb:2f:cd:96:fb:bb:70:15:bf:34: 33:8b:9b:50:9a:1a:f5:de:9e:f8:9d:ad:d6:6a:3d:f0:a8:0c: ab:e8:ea:f4:5c:19:13:b5:df:3b:56:20:d1:c5:fd:80:f2:34: 6c:76:08:7b:7b:af:a8:10:eb:ed:33:c2:27:50:0f:77:02:80: 37:1e:94:ed:b2:c0:f3:76:e4:a8:42:c3:85:a2:c8:61:90:6b: 6d:84:35:53:1c:eb:95:b5:79:7b:fd:8f:21:b4:55:4b:30:6c: 0a:32:77:7c:f4:19:77:f1:b0:12:fd:64:8e:01:53:10:c7:f2: 07:3b:66:4d:31:50:62:5b:c5:cb:76:d9:f7:22:13:be:6a:8c: 33:39:19:87:47:4c:1d:36:ee:ad:41:af:cd:54:53:3f:bf:8d: eb:11:65:51:92:21:06:80:23:26:66:0e:03:4d:9d:d6:e1:41: 48:88:2f:7b:dd:4e:aa:81:c5:73:0a:50:1b:25:33:e3:4f:76: 3b:2e:8a:4d -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzRFQzcxMTAvBgNVBAUTKEJBODkwMTRFQkM0OTRCNjdGRDhCM0Y4MkU4QjM4RUY2 RjZDNTcyNEQwHhcNMjUxMTIzMDI0OTUzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGIzNS1hNjI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwAc3CZKD2/vxtc0w1ORakRdHxVh9vMzYx08sKmEpjxboSnfpmjMP9D6nEHd/ HVpBkhX9EmxjJVAaEA//uordu2oz7KFyiX7MuncGwEgYZ6wz12vSs2YN84d228Le 4miHJnLMWR521yA4dg4++tjneuNohItllu+tKXI1ILvHYSCYecaubefzgzB/+icp A5aSmAvim5ktXhZKJ0Vqp486HE9nlBazUlAdfhV2utTEARTQ8rneoqsuovzYcUeK jWOffZe4SVdz7vQm8iHXPnyJkNBIDfcSR/aR4VZlqDfMh6a//IKZtXLrOWF0VCvn W2y6uHpgUf3o2R1y1yOx1OQRdwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBGwi1hO C4U2BlFIlUedqtYfpTEFMB8GA1UdIwQYMBaAFLqJAU68SUtn/Ys/guizjvb2xXJN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNEVDNy83NTc1Nzg3MEJG RTUxMUVFQUFDRTQzMTJDNEY5QUUwMi91b2tCVHJ4SlMyZjlpei1DNkxPTzl2YkZj azAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Vva0JUcnhKUzJmOWl6LUM2TE9POXZiRmNrMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzRFQzcvNzU3NTc4NzBCRkU1MTFFRUFBQ0U0MzEyQzRGOUFFMDIvN0ZDNjFFREMy RTFEMTFFRjkzM0U5OTgxQzRGOUFFMDIucm9hMDIGCCsGAQUFBwEHAQH/BCMwITAM BAIAATAGAwQAyjLyMBEEAgACMAsDCQAgAQ3vQAAAADANBgkqhkiG9w0BAQsFAAOC AQEAkXJf42MOSBGGayxTjVaXWrdaGMNbRup257ibZmBERSH4Pb5bn8JaJspbNfz2 SytXYywj7U/0BKgDKKbWlKv7L82W+7twFb80M4ubUJoa9d6e+J2t1mo98KgMq+jq 9FwZE7XfO1Yg0cX9gPI0bHYIe3uvqBDr7TPCJ1APdwKANx6U7bLA83bkqELDhaLI YZBrbYQ1UxzrlbV5e/2PIbRVSzBsCjJ3fPQZd/GwEv1kjgFTEMfyBztmTTFQYlvF y3bZ9yITvmqMMzkZh0dMHTburUGvzVRTP7+N6xFlUZIhBoAjJmYOA02d1uFBSIgv e91OqoHFcwpQGyUz4092Oy6KTQ== -----END CERTIFICATE-----Generated at Tue Mar 3 18:21:33 2026 by rpki-client