$ rpki-client -vvf rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/CB91C8D2514D11EEADBDDC4DC4F9AE02.roa File: CB91C8D2514D11EEADBDDC4DC4F9AE02.roa (raw, json) Hash identifier: Vo4hXEocOsaARTcy4r/0nnenE+IAT7B33HFUwDy31kM= Subject key identifier: 2A:1A:34:87:7C:DD:30:AE:38:07:E1:17:40:E5:B3:F6:D3:C9:41:63 Certificate issuer: /CN=A9144F59/serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Certificate serial: 1769 Authority key identifier: 26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/CB91C8D2514D11EEADBDDC4DC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:42:14 +0000 ROA not before: Mon 08 Dec 2025 16:25:32 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 55821 IP address blocks: 146.88.64.0/20 maxlen: 20 146.88.64.0/22 maxlen: 22 146.88.64.0/24 maxlen: 24 146.88.65.0/24 maxlen: 24 146.88.66.0/24 maxlen: 24 146.88.67.0/24 maxlen: 24 146.88.68.0/22 maxlen: 22 146.88.68.0/24 maxlen: 24 146.88.69.0/24 maxlen: 24 146.88.70.0/24 maxlen: 24 146.88.71.0/24 maxlen: 24 146.88.72.0/22 maxlen: 22 146.88.72.0/24 maxlen: 24 146.88.73.0/24 maxlen: 24 146.88.74.0/24 maxlen: 24 146.88.75.0/24 maxlen: 24 146.88.76.0/22 maxlen: 22 146.88.76.0/24 maxlen: 24 146.88.77.0/24 maxlen: 24 146.88.78.0/24 maxlen: 24 146.88.79.0/24 maxlen: 24 155.137.64.0/18 maxlen: 22 155.137.94.0/23 maxlen: 23 155.137.104.0/21 maxlen: 23 155.137.115.0/24 maxlen: 24 209.141.0.0/20 maxlen: 20 209.141.0.0/22 maxlen: 22 209.141.4.0/23 maxlen: 23 209.141.5.0/24 maxlen: 24 209.141.6.0/23 maxlen: 23 209.141.8.0/23 maxlen: 23 209.141.10.0/23 maxlen: 24 209.141.12.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:54:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5993 (0x1769) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144F59, serialNumber=26743B1E4E0E90A19B240C0936979CA237688DF2 Validity Not Before: Dec 8 16:25:32 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46c66-d6bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6e:7b:14:57:cd:3a:de:e3:0c:6a:fa:3c:d1: cd:25:9b:c1:13:c1:31:a8:7f:d0:a0:48:03:d4:d8: e2:fa:e6:4c:90:59:d6:c3:e5:86:37:c6:ba:f7:70: 01:80:e6:c8:68:78:a5:b0:14:b0:8b:e2:fc:87:37: 3d:8c:5e:5f:5a:3a:3b:79:ca:31:fd:41:b6:db:fb: d8:4c:cc:be:3d:4e:f9:5d:a1:c6:03:70:21:8e:3a: 51:01:24:f2:c2:78:d0:fb:b9:06:c7:25:a8:8e:7b: a6:a8:18:88:fb:bf:12:97:91:9f:8e:05:1f:f7:5e: 93:47:9c:04:29:bc:fa:88:4c:43:fd:75:7e:61:be: 80:19:64:3f:fe:bc:23:32:d9:86:b9:c6:f8:89:e5: be:f1:1e:cb:1b:3e:34:6c:38:d8:b5:ea:d0:c7:94: 48:b9:82:8b:ff:f4:34:10:d8:99:18:03:d2:f8:82: ab:97:52:d9:bb:44:f6:c7:6e:de:70:d8:11:86:5a: 76:9d:09:0e:9d:71:8d:a9:9e:89:ab:5e:b0:33:d6: 74:61:2d:28:2d:01:71:44:22:c0:fc:f9:24:8c:f0: a2:7d:27:02:51:f6:b9:5f:68:67:11:15:3c:b5:ae: 45:35:da:a3:dc:fd:41:02:76:4a:78:45:e8:54:bb: dc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:1A:34:87:7C:DD:30:AE:38:07:E1:17:40:E5:B3:F6:D3:C9:41:63 X509v3 Authority Key Identifier: keyid:26:74:3B:1E:4E:0E:90:A1:9B:24:0C:09:36:97:9C:A2:37:68:8D:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/JnQ7Hk4OkKGbJAwJNpecojdojfI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JnQ7Hk4OkKGbJAwJNpecojdojfI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144F59/44A6FF6400CB11E8BEB1EF10C4F9AE02/CB91C8D2514D11EEADBDDC4DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 146.88.64.0/20 155.137.64.0/18 209.141.0.0/20 Signature Algorithm: sha256WithRSAEncryption 66:f2:4e:07:b9:08:c8:26:f3:f6:aa:55:1e:ec:48:41:b6:13: d2:80:6f:4d:f8:c2:68:cc:b2:3a:91:bc:36:d5:a5:3e:43:5e: 61:3a:34:bb:3e:66:53:d9:b9:77:e8:5d:bd:01:bd:4b:4d:f1: 89:e0:70:0f:d7:fa:15:32:5e:d6:51:52:33:2a:db:5d:80:b1: c1:76:f1:7c:bf:af:90:6d:fd:d7:22:dd:8a:cf:10:f2:ac:c6: ec:dc:8f:e5:ca:57:e7:d8:c2:e5:24:ce:36:39:5b:f7:53:02: c3:82:01:16:ab:03:a2:92:eb:ef:82:1e:94:77:64:20:51:1a: bd:95:23:66:28:59:fc:72:53:1b:c7:72:50:7c:cd:21:85:77: 43:8a:6b:bc:08:ce:4e:ed:83:3c:eb:c3:83:2a:2a:a1:18:a0: b7:4f:62:95:7c:28:15:cb:31:5c:82:b8:3b:55:c0:7c:8c:69: da:bc:f0:a2:78:61:a4:00:e8:c9:ac:60:3a:54:67:e7:e6:1a: df:97:bd:46:46:ab:6f:eb:39:05:60:11:ed:97:c3:cc:1d:51: 4b:74:87:4d:86:e9:8e:44:e3:52:4c:11:e4:1f:a9:00:b9:b3: f8:51:22:cd:87:f0:10:7a:a6:bc:42:00:cd:8f:00:11:12:a9: d6:4a:10:09 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICF2kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDRGNTkxMTAvBgNVBAUTKDI2NzQzQjFFNEUwRTkwQTE5QjI0MEMwOTM2OTc5Q0Ey Mzc2ODhERjIwHhcNMjUxMjA4MTYyNTMyWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmM2Ni1kNmJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn257FFfNOt7jDGr6PNHNJZvBE8ExqH/QoEgD1Nji+uZMkFnWw+WGN8a693AB gObIaHilsBSwi+L8hzc9jF5fWjo7ecox/UG22/vYTMy+PU75XaHGA3AhjjpRASTy wnjQ+7kGxyWojnumqBiI+78Sl5GfjgUf916TR5wEKbz6iExD/XV+Yb6AGWQ//rwj MtmGucb4ieW+8R7LGz40bDjYterQx5RIuYKL//Q0ENiZGAPS+IKrl1LZu0T2x27e cNgRhlp2nQkOnXGNqZ6Jq16wM9Z0YS0oLQFxRCLA/PkkjPCifScCUfa5X2hnERU8 ta5FNdqj3P1BAnZKeEXoVLvcQQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFCoaNId8 3TCuOAfhF0Dls/bTyUFjMB8GA1UdIwQYMBaAFCZ0Ox5ODpChmyQMCTaXnKI3aI3y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NEY1OS80NEE2RkY2NDAw Q0IxMUU4QkVCMUVGMTBDNEY5QUUwMi9KblE3SGs0T2tLR2JKQXdKTnBlY29qZG9q ZkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0puUTdIazRPa0tHYkpBd0pOcGVjb2pkb2pmSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDRGNTkvNDRBNkZGNjQwMENCMTFFOEJFQjFFRjEwQzRGOUFFMDIvQ0I5MUM4RDI1 MTREMTFFRUFEQkREQzREQzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQEklhAAwQGm4lAAwQE0Y0AMA0GCSqGSIb3DQEBCwUAA4IBAQBm8k4H uQjIJvP2qlUe7EhBthPSgG9N+MJozLI6kbw21aU+Q15hOjS7PmZT2bl36F29Ab1L TfGJ4HAP1/oVMl7WUVIzKttdgLHBdvF8v6+Qbf3XIt2KzxDyrMbs3I/lylfn2MLl JM42OVv3UwLDggEWqwOikuvvgh6Ud2QgURq9lSNmKFn8clMbx3JQfM0hhXdDimu8 CM5O7YM868ODKiqhGKC3T2KVfCgVyzFcgrg7VcB8jGnavPCieGGkAOjJrGA6VGfn 5hrfl71GRqtv6zkFYBHtl8PMHVFLdIdNhumORONSTBHkH6kAubP4USLNh/AQeqa8 QgDNjwAREqnWShAJ -----END CERTIFICATE-----Generated at Mon Mar 2 13:48:49 2026 by rpki-client