$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/31EC6B8229D211F1942EF99297833773.roa File: 31EC6B8229D211F1942EF99297833773.roa (raw, json) Hash identifier: 6GOkqgK6766kXZRb2zev1EPOhPc93N6Z7iHPDo/M9B4= Subject key identifier: 49:22:01:BA:8F:79:92:5E:CD:AD:19:A2:22:8B:93:EE:56:12:27:46 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 0151 Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/31EC6B8229D211F1942EF99297833773.roa Signing time: Tue 28 Jul 2026 19:40:29 +0000 ROA not before: Tue 28 Jul 2026 19:40:29 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 328578 IP address blocks: 209.9.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 15:41:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Jul 28 19:40:29 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a6905ac-199d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d6:d9:c8:96:83:3d:75:7b:ff:3d:08:f1:98: 2a:02:c6:d1:5e:d1:45:26:82:02:79:7b:a3:d4:ba: 6f:de:ba:40:e3:dd:97:70:02:1d:97:f4:0b:2b:78: b5:75:57:d8:13:14:91:40:8a:4b:16:51:76:f4:24: 10:42:bc:f0:18:45:c4:24:fa:55:45:95:ed:ab:b6: 0a:f5:de:71:c1:6c:27:77:5b:d5:57:5f:4b:79:87: 58:bf:5b:77:03:a1:d4:9c:02:d6:ea:18:e4:f4:fb: c7:72:06:3d:39:d2:6a:14:2f:0a:e8:0d:f2:b7:52: 72:18:d0:e2:a0:d9:ed:4a:18:3a:d0:1d:9d:4e:a6: e9:2f:57:47:40:a3:f5:02:64:0f:19:66:bd:8e:02: e3:a0:cd:e5:88:ac:76:55:c5:3d:90:41:48:94:89: 28:86:9d:cb:a5:34:8b:fe:75:e2:68:a5:f0:47:64: cf:a6:da:27:0f:fa:d1:f9:26:ad:71:b7:b7:a3:5a: ae:4f:e2:e2:b9:18:20:45:b8:8a:b0:ee:d9:64:44: 85:02:ef:1b:78:b3:cc:e3:dd:01:09:a5:d0:a6:f0: 70:10:5e:56:5b:21:e2:0c:03:21:4d:ed:01:1c:b3: 13:01:fb:5b:8d:e8:5a:0e:84:d1:2a:c0:51:fe:29: e7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:22:01:BA:8F:79:92:5E:CD:AD:19:A2:22:8B:93:EE:56:12:27:46 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/31EC6B8229D211F1942EF99297833773.roa sbgp-ipAddrBlock: critical IPv4: 209.9.1.0/24 Signature Algorithm: sha256WithRSAEncryption b4:c0:b9:ec:08:4d:47:6c:92:d5:62:61:c1:55:16:fa:82:f6: 71:a8:6e:7d:d8:a0:06:44:05:d1:3c:5c:a0:75:f2:70:fe:d3: 12:c3:be:75:56:17:bb:ee:c9:24:91:d4:ec:fa:83:b3:e3:df: 02:d2:8a:14:c2:53:f6:ca:bc:51:81:ba:1b:44:12:19:ec:5a: d6:82:a9:40:53:cd:15:e3:31:6c:51:49:91:9d:8e:76:b1:b4: 67:87:c4:cf:ce:81:7a:8f:f2:9d:ab:45:0f:12:26:53:09:74: 41:a6:ae:a5:a3:5f:b9:23:97:9d:5f:69:07:55:f9:12:07:0f: 63:e9:8c:de:c9:70:57:16:b7:67:27:44:34:88:13:b6:98:58: f0:2e:ef:c4:0b:57:fd:5d:2e:ab:4c:d0:ac:ca:47:57:e7:56: 7d:86:7b:38:ad:ba:79:22:9e:ad:b6:25:01:cc:ee:9e:41:5e: c6:50:ef:1d:b6:4f:12:21:44:39:d5:64:74:4a:81:ec:02:79: bd:01:7a:39:c7:cb:85:e1:4b:bb:a2:c4:d2:7e:12:e0:c8:78: 9c:3f:d2:0f:36:b6:4c:66:e1:c7:18:4b:e8:a5:9d:3d:63:61: c2:bd:19:12:61:f6:07:06:7f:4a:25:7d:fc:eb:d2:d8:35:4b: a5:83:eb:7d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5 MjkxRTY4M0EwHhcNMjYwNzI4MTk0MDI5WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTY5MDVhYy0xOTlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnNbZyJaDPXV7/z0I8ZgqAsbRXtFFJoICeXuj1Lpv3rpA492XcAIdl/QLK3i1 dVfYExSRQIpLFlF29CQQQrzwGEXEJPpVRZXtq7YK9d5xwWwnd1vVV19LeYdYv1t3 A6HUnALW6hjk9PvHcgY9OdJqFC8K6A3yt1JyGNDioNntShg60B2dTqbpL1dHQKP1 AmQPGWa9jgLjoM3liKx2VcU9kEFIlIkohp3LpTSL/nXiaKXwR2TPptonD/rR+Sat cbe3o1quT+LiuRggRbiKsO7ZZESFAu8beLPM490BCaXQpvBwEF5WWyHiDAMhTe0B HLMTAftbjehaDoTRKsBR/innRwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEkiAbqP eZJeza0ZoiKLk+5WEidGMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5 NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvMzFFQzZCODIy OUQyMTFGMTk0MkVGOTkyOTc4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQA0QkBMA0GCSqGSIb3DQEBCwUAA4IBAQC0wLnsCE1HbJLVYmHBVRb6 gvZxqG592KAGRAXRPFygdfJw/tMSw751Vhe77skkkdTs+oOz498C0ooUwlP2yrxR gbobRBIZ7FrWgqlAU80V4zFsUUmRnY52sbRnh8TPzoF6j/Kdq0UPEiZTCXRBpq6l o1+5I5edX2kHVfkSBw9j6YzeyXBXFrdnJ0Q0iBO2mFjwLu/EC1f9XS6rTNCsykdX 51Z9hns4rbp5Ip6ttiUBzO6eQV7GUO8dtk8SIUQ51WR0SoHsAnm9AXo5x8uF4Uu7 osTSfhLgyHicP9IPNrZMZuHHGEvopZ09Y2HCvRkSYfYHBn9KJX3869LYNUulg+t9 -----END CERTIFICATE-----Generated at Wed Jul 29 03:57:33 2026 by rpki-client