$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/CD7290AA136F11F1982A4804323D8C67.roa File: CD7290AA136F11F1982A4804323D8C67.roa (raw, json) Hash identifier: bt1budlRxmgY0a9FNL0aRaONr1qCrjG4x1bM1Eq8dOE= Subject key identifier: CB:30:04:44:19:E1:CD:04:6C:12:73:9F:F9:6E:40:3B:68:15:6B:1C Certificate issuer: /CN=A911F587/serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655 Certificate serial: 07 Authority key identifier: 37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/CD7290AA136F11F1982A4804323D8C67.roa Signing time: Sun 01 Mar 2026 05:30:35 +0000 ROA not before: Fri 27 Feb 2026 00:03:54 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 133427 IP address blocks: 192.51.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7 (0x7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F587, serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655 Validity Not Before: Feb 27 00:03:54 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3cefa-8875 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5d:ac:d7:ea:36:b5:fb:65:7e:e7:22:cb:95: 8f:da:fd:13:3d:c1:d2:ff:ef:bf:71:a0:ad:44:74: 84:64:b8:d8:d1:89:f9:68:18:a1:03:8f:1d:96:54: 18:55:e8:9a:07:1d:d7:f4:77:3f:67:17:ab:10:62: 3a:b5:90:b1:14:f6:b8:ed:f0:71:2c:3c:78:b6:aa: d6:48:8f:53:35:14:e0:cc:01:b8:63:85:47:9f:e8: b1:3e:c1:af:76:19:17:72:8e:06:e2:2c:05:b1:ec: de:61:ce:96:d4:80:b4:d6:d3:8a:5d:dd:f1:b1:37: 20:1a:c9:9b:c5:c2:85:26:cb:bb:bf:2a:24:a2:16: 43:bb:56:25:02:d3:be:ac:81:84:b6:75:8f:2f:11: 8f:0a:47:46:28:f7:a4:83:33:79:c7:55:fb:23:4c: 4c:83:49:96:d1:d1:03:9a:2d:44:e2:03:f8:ee:19: 28:ba:79:6c:ca:b5:62:1c:fe:a5:fa:06:11:a1:6e: cf:eb:0e:db:58:4c:4a:ec:c2:79:a6:cc:40:54:d1: 66:c7:de:0a:fe:00:5a:5a:7e:51:5f:d4:ad:ef:fd: 2c:13:ae:a6:c8:4f:03:06:ad:d0:27:f8:db:a5:19: 8d:b6:9a:c2:a1:b2:fa:21:c4:31:16:6e:fe:51:df: 1e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:30:04:44:19:E1:CD:04:6C:12:73:9F:F9:6E:40:3B:68:15:6B:1C X509v3 Authority Key Identifier: keyid:37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/CD7290AA136F11F1982A4804323D8C67.roa sbgp-ipAddrBlock: critical IPv4: 192.51.254.0/24 Signature Algorithm: sha256WithRSAEncryption 4e:f1:bf:23:a4:d3:f0:2d:0c:be:84:a2:9b:bb:a3:b6:e3:7f: 7a:84:b6:f2:28:58:8d:0b:d5:29:1b:4d:69:63:d4:b4:6e:b8: 0c:c8:dc:42:f5:d5:fd:12:55:eb:37:f1:79:06:73:a2:0d:64: 2b:e9:7f:41:28:fb:0d:62:ca:df:f7:44:c9:3e:11:45:81:68: 5a:73:1f:c7:d1:81:93:bd:ff:85:e8:11:c1:e7:d2:a5:00:ac: fa:1b:92:59:90:aa:fa:3f:18:de:8f:17:61:6c:d4:5f:8b:04: 8c:45:3c:ce:32:37:81:86:d9:dc:ec:fc:c8:d3:1e:73:70:6a: 5e:db:d5:59:9d:ee:69:a6:a2:ec:0d:62:87:24:64:f5:d4:a6: 06:5d:a4:4e:44:2a:33:46:4e:73:41:5c:02:db:03:f4:42:d4: 5c:c9:2a:23:87:ad:11:2a:65:78:63:4c:f4:cf:8c:8e:80:bd: e1:df:62:04:8e:35:44:41:a1:e4:73:13:51:20:52:29:0c:03: 78:eb:99:34:d9:73:3f:b5:27:50:b3:2e:35:90:62:60:6b:53: 0a:f0:bf:5b:3c:7f:18:06:78:5f:cd:ee:ab:48:00:95:9c:48: c6:b3:11:69:98:b3:61:6f:fb:a5:f6:3f:84:67:08:e3:03:76: a9:30:2f:85 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBBzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDDAhBOTEx RjU4NzExMC8GA1UEBRMoMzdCMEYwMTAwRDNCQzNERUU2NUQ5QkVCMEFFQ0M0Q0VF MUZCMzY1NTAeFw0yNjAyMjcwMDAzNTRaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNjZWZhLTg4NzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClXazX6ja1+2V+5yLLlY/a/RM9wdL/779xoK1EdIRkuNjRifloGKEDjx2WVBhV 6JoHHdf0dz9nF6sQYjq1kLEU9rjt8HEsPHi2qtZIj1M1FODMAbhjhUef6LE+wa92 GRdyjgbiLAWx7N5hzpbUgLTW04pd3fGxNyAayZvFwoUmy7u/KiSiFkO7ViUC076s gYS2dY8vEY8KR0Yo96SDM3nHVfsjTEyDSZbR0QOaLUTiA/juGSi6eWzKtWIc/qX6 BhGhbs/rDttYTErswnmmzEBU0WbH3gr+AFpaflFf1K3v/SwTrqbITwMGrdAn+Nul GY22msKhsvohxDEWbv5R3x77AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUyzAERBnh zQRsEnOf+W5AO2gVaxwwHwYDVR0jBBgwFoAUN7DwEA07w97mXZvrCuzEzuH7NlUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg3L0I4NDBFRDg2MTM2 RTExRjFBRDc5MUJBMzMxM0Q4QzY3L043RHdFQTA3dzk3bVhadnJDdXpFenVIN05s VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTjdEd0VBMDd3OTdtWFp2ckN1ekV6dUg3TmxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjU4Ny9CODQwRUQ4NjEzNkUxMUYxQUQ3OTFCQTMzMTNEOEM2Ny9DRDcyOTBBQTEz NkYxMUYxOTgyQTQ4MDQzMjNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADAM/4wDQYJKoZIhvcNAQELBQADggEBAE7xvyOk0/AtDL6Eopu7o7bj f3qEtvIoWI0L1SkbTWlj1LRuuAzI3EL11f0SVes38XkGc6INZCvpf0Eo+w1iyt/3 RMk+EUWBaFpzH8fRgZO9/4XoEcHn0qUArPobklmQqvo/GN6PF2Fs1F+LBIxFPM4y N4GG2dzs/MjTHnNwal7b1Vmd7mmmouwNYockZPXUpgZdpE5EKjNGTnNBXALbA/RC 1FzJKiOHrREqZXhjTPTPjI6AveHfYgSONURBoeRzE1EgUikMA3jrmTTZcz+1J1Cz LjWQYmBrUwrwv1s8fxgGeF/N7qtIAJWcSMazEWmYs2Fv+6X2P4RnCOMDdqkwL4U= -----END CERTIFICATE-----Generated at Mon Mar 2 12:54:36 2026 by rpki-client