$ rpki-client -vvvf rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/CD7290AA136F11F1982A4804323D8C67.roa File: CD7290AA136F11F1982A4804323D8C67.roa (raw, json) Hash identifier: qDyZwBwrqthySOB52fs7wXlt74iPUc5q4sz33hWCJXw= Subject key identifier: 39:33:40:9D:EC:B8:74:CF:AD:97:FC:19:BA:7F:95:2B:07:86:B3:9C Certificate issuer: /CN=A911F587/serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655 Certificate serial: 77 Authority key identifier: 37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/CD7290AA136F11F1982A4804323D8C67.roa Signing time: Fri 11 Sep 2026 08:58:48 +0000 ROA not before: Fri 11 Sep 2026 08:58:48 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 133427 IP address blocks: 192.51.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 119 (0x77) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F587, serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655 Validity Not Before: Sep 11 08:58:48 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6aa3c2c8-97c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fc:2b:83:61:13:46:2a:c3:dd:29:c1:88:16: 32:96:09:45:5c:9e:72:0f:dd:39:b4:d6:92:8c:07: ac:ad:e3:a3:77:1d:33:2b:d9:7e:eb:e1:a1:fa:bf: 99:18:e8:de:52:57:15:69:71:4d:50:c0:46:b9:31: f6:94:dc:9c:56:9a:0f:4e:3f:52:e2:3a:88:52:d7: d7:aa:16:e9:22:cc:da:15:15:0b:6c:eb:56:24:1b: 70:a9:bd:c4:a6:16:33:33:2a:16:3c:6e:ec:1c:90: e1:b1:a9:30:7e:70:85:c0:4f:d1:04:b8:ce:08:e8: 4f:ec:7c:88:28:69:67:44:ee:3d:4e:0e:e6:db:f0: 93:dc:70:87:03:ce:8f:d6:59:5c:c0:ba:f7:2e:64: e0:db:c6:8b:0c:bf:a5:a6:d7:6a:33:b7:48:3e:21: 37:9e:9c:34:50:57:03:7b:a4:92:99:86:b4:6b:a7: f5:35:dc:4f:de:35:94:45:6e:e4:e1:87:c2:93:1a: a6:2f:3b:c1:c2:18:9e:a3:65:ba:b1:d0:db:32:24: f4:2e:a7:e7:8e:a2:6f:ef:f8:34:e8:bd:c4:80:af: bc:d0:62:82:7e:30:7c:c7:f6:04:03:64:35:4f:f0: 71:3c:e2:84:51:09:f0:35:e5:df:b8:6c:07:02:a5: 5e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:33:40:9D:EC:B8:74:CF:AD:97:FC:19:BA:7F:95:2B:07:86:B3:9C X509v3 Authority Key Identifier: keyid:37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/CD7290AA136F11F1982A4804323D8C67.roa sbgp-ipAddrBlock: critical IPv4: 192.51.254.0/24 Signature Algorithm: sha256WithRSAEncryption a0:a1:4f:20:4b:b5:dc:43:d2:1f:99:3f:0c:7a:2b:e3:56:c3: 00:a1:15:9d:48:25:0d:5b:1b:b6:51:12:b2:91:3a:de:2c:ae: e9:a2:12:05:12:e9:77:ae:ed:11:43:c2:60:f3:d8:e3:72:fa: a6:ef:e5:89:7a:4a:d7:70:17:2e:c0:e7:a8:00:4d:6a:ca:f1: cc:d1:27:c4:d6:fc:49:0c:ab:c0:b1:08:ee:d3:ed:76:bc:45: 8d:5f:f4:c4:97:31:2a:9c:b2:c2:1e:a1:55:f6:fd:bf:6e:79: 21:3c:33:76:a9:70:9a:f1:82:7b:89:6b:58:32:0e:cc:75:6f: 6d:dd:84:8e:58:18:af:6b:41:1a:50:7e:22:81:50:9e:ab:2a: 09:20:aa:1a:5b:c3:5d:39:88:2c:94:e3:8e:1a:7f:fc:4e:fc: 4e:9d:cb:f8:c6:ae:12:5f:a7:fe:b3:04:00:a8:53:0b:9e:61: 8c:04:30:2a:92:9a:11:99:d2:04:35:45:bd:32:a9:57:4a:e2: 0f:6a:1a:6a:5b:78:05:cb:70:51:67:fe:49:3f:51:cc:c5:ac: c8:47:00:2f:4b:f0:ff:29:3a:c5:35:28:e1:cb:fc:dd:1e:3f: 89:8e:ab:27:aa:43:5d:ea:cb:d2:bd:f2:91:7e:fd:b8:f2:b4: ed:0d:d0:79 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBdzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NzExMC8GA1UEBRMoMzdCMEYwMTAwRDNCQzNERUU2NUQ5QkVCMEFFQ0M0Q0VF MUZCMzY1NTAeFw0yNjA5MTEwODU4NDhaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYTNjMmM4LTk3YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDR/CuDYRNGKsPdKcGIFjKWCUVcnnIP3Tm01pKMB6yt46N3HTMr2X7r4aH6v5kY 6N5SVxVpcU1QwEa5MfaU3JxWmg9OP1LiOohS19eqFukizNoVFQts61YkG3CpvcSm FjMzKhY8buwckOGxqTB+cIXAT9EEuM4I6E/sfIgoaWdE7j1ODubb8JPccIcDzo/W WVzAuvcuZODbxosMv6Wm12ozt0g+ITeenDRQVwN7pJKZhrRrp/U13E/eNZRFbuTh h8KTGqYvO8HCGJ6jZbqx0NsyJPQup+eOom/v+DTovcSAr7zQYoJ+MHzH9gQDZDVP 8HE84oRRCfA15d+4bAcCpV5PAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUOTNAney4 dM+tl/wZun+VKweGs5wwHwYDVR0jBBgwFoAUN7DwEA07w97mXZvrCuzEzuH7NlUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg3L0I4NDBFRDg2MTM2 RTExRjFBRDc5MUJBMzMxM0Q4QzY3L043RHdFQTA3dzk3bVhadnJDdXpFenVIN05s VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTjdEd0VBMDd3OTdtWFp2ckN1ekV6dUg3TmxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjU4Ny9CODQwRUQ4NjEzNkUxMUYxQUQ3OTFCQTMzMTNEOEM2Ny9DRDcyOTBBQTEz NkYxMUYxOTgyQTQ4MDQzMjNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADAM/4wDQYJKoZIhvcNAQELBQADggEBAKChTyBLtdxD0h+ZPwx6K+NW wwChFZ1IJQ1bG7ZRErKROt4srumiEgUS6Xeu7RFDwmDz2ONy+qbv5Yl6StdwFy7A 56gATWrK8czRJ8TW/EkMq8CxCO7T7Xa8RY1f9MSXMSqcssIeoVX2/b9ueSE8M3ap cJrxgnuJa1gyDsx1b23dhI5YGK9rQRpQfiKBUJ6rKgkgqhpbw105iCyU444af/xO /E6dy/jGrhJfp/6zBACoUwueYYwEMCqSmhGZ0gQ1Rb0yqVdK4g9qGmpbeAXLcFFn /kk/UczFrMhHAC9L8P8pOsU1KOHL/N0eP4mOqyeqQ13qy9K98pF+/bjytO0N0Hk= -----END CERTIFICATE-----Generated at Thu Sep 24 21:27:45 2026 by rpki-client