$ rpki-client -vvf rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/B8C57E86E40511F09F69296D616F56BC.roa File: B8C57E86E40511F09F69296D616F56BC.roa (raw, json) Hash identifier: 0PLmzdBuVQg3z41GtU+TW3iba2zd+GOh2hgEf2R4V5Q= Subject key identifier: 23:E8:1F:2A:2A:71:D5:74:38:01:BB:5F:03:D7:7F:50:E1:B1:35:C8 Certificate issuer: /CN=A9139FBB/serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Certificate serial: 27 Authority key identifier: 24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/B8C57E86E40511F09F69296D616F56BC.roa Signing time: Sun 01 Mar 2026 05:49:58 +0000 ROA not before: Sun 28 Dec 2025 15:56:44 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 154461 IP address blocks: 144.79.210.0/23 maxlen: 23 144.79.210.0/24 maxlen: 24 144.79.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39 (0x27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9139FBB, serialNumber=24E45A4670865ED1C511DD222D5185BFA672085E Validity Not Before: Dec 28 15:56:44 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d386-2884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7b:2a:fb:1a:f5:95:ad:6f:fd:35:97:14:5a: e6:eb:2c:7c:e4:be:65:83:66:dd:18:4c:43:2c:d9: 01:d1:a4:6e:3d:f8:0d:13:ec:11:67:78:a3:04:fc: 1d:4d:7e:77:e1:e2:4e:6e:46:2e:92:61:32:c5:9d: 25:f6:29:45:b5:3e:9c:9c:b0:49:e2:b1:88:cb:30: a4:22:e7:85:21:81:e2:28:2e:ab:cc:94:60:f8:da: b5:5b:f3:c6:33:04:56:a9:d7:e0:fd:3b:f6:4d:13: ad:42:57:ec:6a:5f:9b:35:df:0a:ad:05:a4:a1:07: 23:78:3d:e3:2b:7c:41:00:08:a8:13:03:df:0e:fa: f6:86:fe:86:00:2e:5c:26:ad:25:e8:67:36:a5:21: f4:58:c3:80:c5:b4:4a:ec:9f:1c:56:fc:d9:35:1d: be:32:7d:79:68:e0:57:37:da:a8:ae:ef:ec:52:73: ac:ba:2d:4e:ec:0f:71:27:55:eb:70:54:05:e4:cd: 30:89:98:0a:dd:7f:64:d2:06:76:bf:bc:31:97:dc: 77:11:54:bf:dc:a4:c4:a1:02:18:f9:2b:17:9b:28: 37:11:c6:60:08:56:0a:a6:d9:29:7a:8a:fd:70:37: e2:2d:36:bb:03:07:d3:a9:6f:93:d3:29:4e:29:fb: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:E8:1F:2A:2A:71:D5:74:38:01:BB:5F:03:D7:7F:50:E1:B1:35:C8 X509v3 Authority Key Identifier: keyid:24:E4:5A:46:70:86:5E:D1:C5:11:DD:22:2D:51:85:BF:A6:72:08:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/JORaRnCGXtHFEd0iLVGFv6ZyCF4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JORaRnCGXtHFEd0iLVGFv6ZyCF4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139FBB/BA9A9E68E40411F0A6619C60616F56BC/B8C57E86E40511F09F69296D616F56BC.roa sbgp-ipAddrBlock: critical IPv4: 144.79.210.0/23 Signature Algorithm: sha256WithRSAEncryption a3:3d:31:81:58:53:1d:ee:de:00:01:14:32:bc:a9:3a:91:1e: e5:bb:bc:3f:43:1c:41:99:23:b8:7e:1f:b8:77:49:59:1f:cb: c9:ed:e2:02:70:35:25:55:cd:26:f4:0b:18:03:86:98:1a:a4: c6:32:7f:b5:a4:f0:6a:c3:06:2c:cf:a9:57:e3:1b:33:17:3e: b1:a2:91:b6:19:c2:b8:2a:c2:26:4a:80:ca:0a:0f:4e:61:90: 4e:d9:b3:d2:8e:48:01:a5:4e:4c:5b:26:53:9c:65:e5:9b:a7: 73:a1:28:30:11:da:4b:28:d7:25:d7:6f:34:21:52:65:d5:46: bb:0b:cb:6d:64:69:85:d5:4e:94:6a:4a:15:5d:1d:c7:1e:d7: a2:b9:4f:66:fc:40:15:ce:dc:02:94:ec:a1:73:53:71:4b:e6: bd:ec:77:8f:82:38:19:22:e8:4b:2c:f4:71:87:76:56:77:be: 27:26:ae:b1:4c:8b:f6:e5:0a:87:02:6b:08:78:bd:ca:d8:59: 7d:36:11:01:21:32:b5:55:4c:53:3a:04:7e:b2:d4:60:40:28: d2:b3:c1:79:aa:24:ce:50:85:81:f5:a5:b6:db:2b:ee:7f:e9: 32:31:23:ce:80:0f:b7:15:69:d9:27:7d:d9:2b:43:b3:1c:fd: 52:59:92:1d -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBJzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz OUZCQjExMC8GA1UEBRMoMjRFNDVBNDY3MDg2NUVEMUM1MTFERDIyMkQ1MTg1QkZB NjcyMDg1RTAeFw0yNTEyMjgxNTU2NDRaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMzg2LTI4ODQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCteyr7GvWVrW/9NZcUWubrLHzkvmWDZt0YTEMs2QHRpG49+A0T7BFneKME/B1N fnfh4k5uRi6SYTLFnSX2KUW1PpycsEnisYjLMKQi54UhgeIoLqvMlGD42rVb88Yz BFap1+D9O/ZNE61CV+xqX5s13wqtBaShByN4PeMrfEEACKgTA98O+vaG/oYALlwm rSXoZzalIfRYw4DFtErsnxxW/Nk1Hb4yfXlo4Fc32qiu7+xSc6y6LU7sD3EnVetw VAXkzTCJmArdf2TSBna/vDGX3HcRVL/cpMShAhj5KxebKDcRxmAIVgqm2Sl6iv1w N+ItNrsDB9Opb5PTKU4p+yWNAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUI+gfKipx 1XQ4AbtfA9d/UOGxNcgwHwYDVR0jBBgwFoAUJORaRnCGXtHFEd0iLVGFv6ZyCF4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM5RkJCL0JBOUE5RTY4RTQw NDExRjBBNjYxOUM2MDYxNkY1NkJDL0pPUmFSbkNHWHRIRkVkMGlMVkdGdjZaeUNG NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSk9SYVJuQ0dYdEhGRWQwaUxWR0Z2Nlp5Q0Y0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz OUZCQi9CQTlBOUU2OEU0MDQxMUYwQTY2MTlDNjA2MTZGNTZCQy9COEM1N0U4NkU0 MDUxMUYwOUY2OTI5NkQ2MTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGQT9IwDQYJKoZIhvcNAQELBQADggEBAKM9MYFYUx3u3gABFDK8qTqR HuW7vD9DHEGZI7h+H7h3SVkfy8nt4gJwNSVVzSb0CxgDhpgapMYyf7Wk8GrDBizP qVfjGzMXPrGikbYZwrgqwiZKgMoKD05hkE7Zs9KOSAGlTkxbJlOcZeWbp3OhKDAR 2kso1yXXbzQhUmXVRrsLy21kaYXVTpRqShVdHcce16K5T2b8QBXO3AKU7KFzU3FL 5r3sd4+COBki6Ess9HGHdlZ3vicmrrFMi/blCocCawh4vcrYWX02EQEhMrVVTFM6 BH6y1GBAKNKzwXmqJM5QhYH1pbbbK+5/6TIxI86AD7cVadknfdkrQ7Mc/VJZkh0= -----END CERTIFICATE-----Generated at Mon Mar 2 21:21:19 2026 by rpki-client