$ rpki-client -vvf rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/321730E4F5D211F0882E5659486F56BC.roa File: 321730E4F5D211F0882E5659486F56BC.roa (raw, json) Hash identifier: 3VgrH2bQyaBcgb08AqR1YTYcVneSVR2xlGdpz2xEp1c= Subject key identifier: 05:27:04:D5:C5:A5:51:21:22:36:6C:6C:18:82:52:A3:F1:98:8A:D6 Certificate issuer: /CN=A91174DD/serialNumber=19BE1321188F0976D32E836D1AFBA546276657E3 Certificate serial: 1B Authority key identifier: 19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/321730E4F5D211F0882E5659486F56BC.roa Signing time: Sun 01 Mar 2026 05:43:20 +0000 ROA not before: Tue 20 Jan 2026 07:32:38 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 142177 IP address blocks: 192.42.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.crl rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:27:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91174DD, serialNumber=19BE1321188F0976D32E836D1AFBA546276657E3 Validity Not Before: Jan 20 07:32:38 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d1f7-9839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:9c:b3:2f:35:30:1a:5f:f2:47:ed:bd:d7: f0:8d:23:8a:bf:78:06:94:ef:5e:00:0c:c6:2c:0b: ec:43:c7:9d:20:75:ed:e2:76:31:cd:79:f9:bb:42: cc:26:6c:8a:92:5b:96:74:6c:ec:b3:e7:1b:72:8f: 6a:68:a0:ad:28:dd:d8:5c:bf:ab:a4:93:99:c0:72: 73:17:c9:ac:0f:d1:61:c5:20:4f:cd:db:8b:f1:0c: 37:49:e1:5a:df:e4:5c:4e:62:68:9e:56:a9:59:ab: 20:66:70:4b:4f:a3:9c:1b:7e:ba:db:d7:c4:7d:1b: 1c:57:07:64:2a:a8:85:43:8a:7a:62:af:7e:99:3d: e3:a8:56:22:94:4c:d9:38:cb:3b:41:2e:23:1a:14: 5d:5a:ae:58:d5:86:f8:1a:ef:c8:6c:3b:d5:8f:79: 20:35:d6:4e:9c:67:f7:97:af:ad:3a:2a:b7:8e:5f: a9:e5:1e:0c:ee:0f:1f:cf:37:28:24:08:03:52:28: fe:f3:6d:70:a7:ab:74:7a:f4:65:0e:fe:c9:c5:10: ea:41:49:76:e6:46:c8:67:06:0f:49:1e:1f:bc:58: b8:a2:0e:a8:cc:cd:be:49:86:f3:0c:f5:2d:ac:a0: 24:58:6d:ac:8c:07:7f:dc:b9:06:0d:49:ad:35:e3: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:27:04:D5:C5:A5:51:21:22:36:6C:6C:18:82:52:A3:F1:98:8A:D6 X509v3 Authority Key Identifier: keyid:19:BE:13:21:18:8F:09:76:D3:2E:83:6D:1A:FB:A5:46:27:66:57:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/Gb4TIRiPCXbTLoNtGvulRidmV-M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Gb4TIRiPCXbTLoNtGvulRidmV-M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91174DD/D9476318F5D011F0A06517D2476F56BC/321730E4F5D211F0882E5659486F56BC.roa sbgp-ipAddrBlock: critical IPv4: 192.42.86.0/24 Signature Algorithm: sha256WithRSAEncryption 3e:24:07:c5:c0:8d:fc:e9:7e:e1:f8:f6:3c:f7:61:2e:10:ca: 09:93:5d:e7:9c:21:65:6e:60:98:1e:00:b6:9e:69:c8:c5:84: 52:67:d0:8c:b6:b2:b9:db:cf:eb:47:07:61:14:c2:d2:9f:24: af:0a:44:e0:fe:41:89:86:8d:2e:08:20:9b:fe:02:bf:38:81: 7c:ea:e7:4a:c3:9e:bc:22:c8:39:84:ae:f5:ff:bb:dc:ba:96: 26:01:af:81:b2:52:e0:d6:e3:a6:c8:95:dc:88:3e:bd:91:d6: ce:ef:b9:01:02:6b:5d:08:24:d2:1a:67:45:df:18:b1:d3:23: b4:d9:e1:3d:6c:33:32:d9:87:2c:62:73:a1:64:a3:a9:01:ba: 1c:33:7d:4b:bd:5f:3d:c4:c1:52:e0:81:1f:f1:a2:ac:f6:62: ec:c2:ca:63:42:fd:34:f6:c9:1c:86:77:b6:6b:b8:d8:1a:72: fe:f7:98:d3:f1:62:06:15:3f:28:ab:b2:d2:28:3c:a0:d0:c4: 81:24:c5:72:bd:60:c7:fb:50:4a:54:13:08:db:c2:13:2b:af: 62:83:65:6c:c6:58:b2:66:63:fb:42:65:94:5e:d8:44:25:01: b7:73:22:a7:6a:7e:3c:ae:f3:8f:55:db:bb:d9:65:97:97:cd: 8c:d6:ae:a6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx NzRERDExMC8GA1UEBRMoMTlCRTEzMjExODhGMDk3NkQzMkU4MzZEMUFGQkE1NDYy NzY2NTdFMzAeFw0yNjAxMjAwNzMyMzhaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMWY3LTk4MzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC19JyzLzUwGl/yR+291/CNI4q/eAaU714ADMYsC+xDx50gde3idjHNefm7Qswm bIqSW5Z0bOyz5xtyj2pooK0o3dhcv6ukk5nAcnMXyawP0WHFIE/N24vxDDdJ4Vrf 5FxOYmieVqlZqyBmcEtPo5wbfrrb18R9GxxXB2QqqIVDinpir36ZPeOoViKUTNk4 yztBLiMaFF1arljVhvga78hsO9WPeSA11k6cZ/eXr606KreOX6nlHgzuDx/PNygk CANSKP7zbXCnq3R69GUO/snFEOpBSXbmRshnBg9JHh+8WLiiDqjMzb5JhvMM9S2s oCRYbayMB3/cuQYNSa014zpXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUBScE1cWl USEiNmxsGIJSo/GYitYwHwYDVR0jBBgwFoAUGb4TIRiPCXbTLoNtGvulRidmV+Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTE3NEREL0Q5NDc2MzE4RjVE MDExRjBBMDY1MTdEMjQ3NkY1NkJDL0diNFRJUmlQQ1hiVExvTnRHdnVsUmlkbVYt TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvR2I0VElSaVBDWGJUTG9OdEd2dWxSaWRtVi1NLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx NzRERC9EOTQ3NjMxOEY1RDAxMUYwQTA2NTE3RDI0NzZGNTZCQy8zMjE3MzBFNEY1 RDIxMUYwODgyRTU2NTk0ODZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADAKlYwDQYJKoZIhvcNAQELBQADggEBAD4kB8XAjfzpfuH49jz3YS4Q ygmTXeecIWVuYJgeALaeacjFhFJn0Iy2srnbz+tHB2EUwtKfJK8KROD+QYmGjS4I IJv+Ar84gXzq50rDnrwiyDmErvX/u9y6liYBr4GyUuDW46bIldyIPr2R1s7vuQEC a10IJNIaZ0XfGLHTI7TZ4T1sMzLZhyxic6Fko6kBuhwzfUu9Xz3EwVLggR/xoqz2 YuzCymNC/TT2yRyGd7ZruNgacv73mNPxYgYVPyirstIoPKDQxIEkxXK9YMf7UEpU EwjbwhMrr2KDZWzGWLJmY/tCZZRe2EQlAbdzIqdqfjyu849V27vZZZeXzYzWrqY= -----END CERTIFICATE-----Generated at Mon Mar 2 12:05:52 2026 by rpki-client