$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/CD8FC3C82D1E11F191B042ACB6833773.roa File: CD8FC3C82D1E11F191B042ACB6833773.roa (raw, json) Hash identifier: 01dbdj5RUmMEaG00LwJYrMguYHvqrK5PH9Dm9dhmHdk= Subject key identifier: 54:87:AF:CE:98:05:F0:C3:1C:2B:10:C5:65:15:04:DD:56:50:11:97 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: AD Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/CD8FC3C82D1E11F191B042ACB6833773.roa Signing time: Tue 31 Mar 2026 16:29:35 +0000 ROA not before: Tue 31 Mar 2026 16:29:35 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 24 IP address blocks: 207.226.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 18:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 173 (0xad) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Mar 31 16:29:35 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69cbf66f-64da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:19:d8:77:41:e6:e8:8e:ed:d7:60:3f:ec:a8: 36:94:2e:28:1b:ff:bf:30:ed:49:f9:62:0a:83:38: da:b9:e1:1c:87:2f:a0:09:e2:fc:92:88:c4:67:e6: f2:e3:ab:6a:f1:45:96:92:57:3e:1f:5b:7e:e9:8b: a6:78:d0:84:07:01:a6:b2:2e:eb:a7:ab:24:e3:82: a1:1a:9f:80:a0:bf:e0:a1:46:2b:e3:b7:1a:7d:10: 17:14:47:1c:88:3e:02:cb:03:18:c3:eb:51:d0:24: b6:f2:91:e5:27:44:fa:10:64:a3:fd:67:29:ba:cd: 61:a2:c9:a7:5f:d0:76:91:8a:b7:06:61:eb:8d:73: 6d:82:84:82:7c:00:f1:b1:3e:26:be:9c:dd:30:97: 74:7f:d0:82:fa:97:73:5e:c9:eb:b0:33:4f:b1:38: dc:46:95:d5:39:79:ad:be:9d:e4:f0:79:82:90:fb: 40:32:fb:23:96:dc:a0:12:c0:9a:f2:7e:26:b8:04: 01:e9:75:ad:88:31:c2:f7:c3:2d:3e:a8:7d:64:79: 23:8d:ae:88:be:94:3c:b2:7f:63:4d:6a:0c:99:1b: fe:be:67:06:29:b7:c6:70:ad:91:12:dd:b1:b0:a9: fd:ac:2f:bb:fc:4b:d1:77:d8:dc:5c:23:b0:42:d6: 7e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:87:AF:CE:98:05:F0:C3:1C:2B:10:C5:65:15:04:DD:56:50:11:97 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/CD8FC3C82D1E11F191B042ACB6833773.roa sbgp-ipAddrBlock: critical IPv4: 207.226.114.0/24 Signature Algorithm: sha256WithRSAEncryption 57:f0:f7:dc:fa:bc:2a:6a:34:a3:44:af:56:95:b4:ab:da:f4: 81:29:5e:34:ba:93:f2:4a:2d:b6:60:2d:eb:14:d0:00:73:0d: f7:d1:1d:16:4a:ae:72:16:8e:14:dc:4e:81:f2:a0:4a:7b:b6: c6:12:c9:b0:24:fd:bc:93:eb:a8:34:fb:2a:2b:11:90:e1:58: 79:6e:92:2e:c7:17:df:eb:7a:80:dc:0a:bf:48:58:a6:41:38: c7:b9:15:65:9c:04:6f:ef:74:60:05:a8:05:8b:08:19:34:57: a1:b6:ea:46:f3:bf:a5:e3:c0:5c:f7:f8:b7:1e:97:7d:60:80: 0d:d0:09:84:57:57:f9:c5:ee:b0:18:e2:a3:a3:57:bf:d7:b9: ea:b3:9f:47:67:78:44:91:ff:de:18:64:d7:f2:eb:50:29:60: e6:a4:65:cd:1f:b9:dc:d3:9a:7c:0f:e5:44:a6:74:df:6e:a1: d7:bf:f1:ea:5d:08:4b:62:29:be:2c:0b:b0:3e:31:91:1d:4d: be:c8:3c:3f:e6:99:18:4d:46:51:db:7d:b2:c0:2a:04:43:40: b8:48:a2:1c:c7:d7:a1:d9:ce:18:79:19:27:21:17:58:40:66: 13:b5:5c:e3:e1:36:c6:eb:3e:b1:91:6a:87:a8:ed:33:86:77: 99:cc:ea:e9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAK0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDNEN0IxNUJENzdEOUI5NzRFMzczNThEQTc1NERGRUE5 MjkxRTY4M0EwHhcNMjYwMzMxMTYyOTM1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNiZjY2Zi02NGRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjxnYd0Hm6I7t12A/7Kg2lC4oG/+/MO1J+WIKgzjaueEchy+gCeL8kojEZ+by 46tq8UWWklc+H1t+6YumeNCEBwGmsi7rp6sk44KhGp+AoL/goUYr47cafRAXFEcc iD4CywMYw+tR0CS28pHlJ0T6EGSj/Wcpus1hosmnX9B2kYq3BmHrjXNtgoSCfADx sT4mvpzdMJd0f9CC+pdzXsnrsDNPsTjcRpXVOXmtvp3k8HmCkPtAMvsjltygEsCa 8n4muAQB6XWtiDHC98MtPqh9ZHkjja6IvpQ8sn9jTWoMmRv+vmcGKbfGcK2REt2x sKn9rC+7/EvRd9jcXCOwQtZ+KwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFSHr86Y BfDDHCsQxWUVBN1WUBGXMB8GA1UdIwQYMBaAFD17Fb132bl043NY2nVN/qkpHmg6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9GRDM3MkU0QTI5 NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9QWHNWdlhmWnVYVGpjMWphZFUzLXFTa2Vh RG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFEby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvRkQzNzJFNEEyOTQ1MTFGMUE3QUEzRUJEODRFRTUyOEUvQ0Q4RkMzQzgy RDFFMTFGMTkxQjA0MkFDQjY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAz+JyMA0GCSqGSIb3DQEBCwUAA4IBAQBX8Pfc+rwqajSjRK9WlbSr 2vSBKV40upPySi22YC3rFNAAcw330R0WSq5yFo4U3E6B8qBKe7bGEsmwJP28k+uo NPsqKxGQ4Vh5bpIuxxff63qA3Aq/SFimQTjHuRVlnARv73RgBagFiwgZNFehtupG 87+l48Bc9/i3Hpd9YIAN0AmEV1f5xe6wGOKjo1e/17nqs59HZ3hEkf/eGGTX8utQ KWDmpGXNH7nc05p8D+VEpnTfbqHXv/HqXQhLYim+LAuwPjGRHU2+yDw/5pkYTUZR 232ywCoEQ0C4SKIcx9eh2c4YeRknIRdYQGYTtVzj4TbG6z6xkWqHqO0zhneZzOrp -----END CERTIFICATE-----Generated at Fri Apr 17 21:07:20 2026 by rpki-client