$ rpki-client -vvvf rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/2989C96AAA7111F19E4BB0B76311F970.roa File: 2989C96AAA7111F19E4BB0B76311F970.roa (raw, json) Hash identifier: ARh2VJW40jPAVhTJXwkB9/u8r21SXgXRVDQpwqIpEEs= Subject key identifier: 47:45:91:9D:4B:5A:D0:62:7F:33:1C:32:AB:B4:4E:D0:BF:CA:72:B5 Certificate issuer: /CN=A914699C/serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82 Certificate serial: 0B Authority key identifier: 57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/2989C96AAA7111F19E4BB0B76311F970.roa Signing time: Mon 07 Sep 2026 04:04:03 +0000 ROA not before: Mon 07 Sep 2026 04:04:03 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 58931 IP address blocks: 191.124.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914699C, serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82 Validity Not Before: Sep 7 04:04:03 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a9e37b3-3cb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:82:59:2c:46:40:1d:ab:a6:28:97:08:bd:ea: 25:a5:7c:96:e6:60:08:81:eb:b8:20:06:52:fd:a9: 34:ab:49:76:3d:69:32:42:8a:f0:19:fb:05:41:d5: 88:12:2c:33:f2:b8:3d:b5:c0:0f:27:17:39:f2:af: db:0a:31:50:c4:b7:98:56:6c:d0:42:c3:45:06:f4: 6f:31:23:44:9e:18:ea:c6:99:de:2d:ea:25:27:2e: 2a:0f:f1:18:76:96:5a:90:77:a0:c1:e4:fc:36:64: e4:3e:d9:31:73:74:81:38:93:43:6e:d9:7f:8b:1a: e2:17:b9:dc:e6:42:89:b2:f0:bb:5c:22:aa:3c:2a: bf:d3:50:cf:7b:0d:90:92:93:a6:bc:82:d3:de:b2: 9c:66:5b:09:fa:86:84:ec:00:fe:59:a4:bf:60:44: 33:af:8a:d9:c1:a9:69:38:e4:88:ce:c3:0c:23:65: c6:b0:d9:33:a9:69:10:57:75:ac:b1:6a:a3:ee:f9: 8c:52:2f:1e:4a:04:2f:7f:28:5f:1b:1e:bd:e7:83: 1b:f1:10:74:1c:e5:f8:c3:cf:af:39:82:b4:bb:5e: 7f:18:7f:47:ea:80:7c:56:8a:57:35:68:27:52:83: 76:18:d2:8d:74:75:47:ce:1b:74:69:0b:24:c0:68: 47:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:45:91:9D:4B:5A:D0:62:7F:33:1C:32:AB:B4:4E:D0:BF:CA:72:B5 X509v3 Authority Key Identifier: keyid:57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/2989C96AAA7111F19E4BB0B76311F970.roa sbgp-ipAddrBlock: critical IPv4: 191.124.236.0/22 Signature Algorithm: sha256WithRSAEncryption 41:69:c0:48:a4:87:6c:33:0f:c8:cd:77:f3:0c:1d:37:c6:42: c8:bb:45:fe:a1:94:e8:b3:df:08:c5:fd:8b:87:17:1e:ff:9b: 1b:42:4b:09:a1:73:e8:70:86:c2:6d:09:ae:eb:3e:bb:5e:9e: 5f:35:c8:6f:3c:33:0e:74:e8:93:69:46:8d:16:69:d6:59:be: 4e:89:59:17:93:47:50:c8:5f:79:87:97:df:80:d2:24:73:50: 3f:ab:2a:f6:13:19:b0:dc:aa:89:ba:15:7e:09:11:e6:b7:40: b0:4f:e4:58:be:17:ff:5a:f3:8c:19:6e:73:64:d6:7e:44:e9: bd:31:eb:fc:9d:df:bf:c5:d9:6e:5f:b9:eb:e1:91:49:62:43: 4e:f0:44:a8:f5:a7:09:3f:98:77:33:26:cd:ee:ed:2a:f6:8c: 59:8f:91:cc:cd:10:f9:cb:02:64:a8:8a:78:80:26:0d:ce:86: 64:34:d3:47:9b:90:c9:b6:c7:9b:bc:3f:c3:fa:a5:d5:e1:df: 91:00:37:8d:e8:19:92:5f:3b:ab:84:c7:f3:05:39:3b:68:51: 63:c0:32:aa:99:51:de:ca:38:76:2b:78:9e:ad:22:df:9b:45: 46:b1:19:13:cc:b0:86:82:22:07:34:5c:2e:06:54:a7:15:7b: 41:41:59:e7 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Njk5QzExMC8GA1UEBRMoNTc3MkUzQjgyNzhDQjZDN0FBQkQ3QUNGOUVGNTYyQUI1 OTNDMkU4MjAeFw0yNjA5MDcwNDA0MDNaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOWUzN2IzLTNjYjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDdglksRkAdq6Yolwi96iWlfJbmYAiB67ggBlL9qTSrSXY9aTJCivAZ+wVB1YgS LDPyuD21wA8nFznyr9sKMVDEt5hWbNBCw0UG9G8xI0SeGOrGmd4t6iUnLioP8Rh2 llqQd6DB5Pw2ZOQ+2TFzdIE4k0Nu2X+LGuIXudzmQomy8LtcIqo8Kr/TUM97DZCS k6a8gtPespxmWwn6hoTsAP5ZpL9gRDOvitnBqWk45IjOwwwjZcaw2TOpaRBXdayx aqPu+YxSLx5KBC9/KF8bHr3ngxvxEHQc5fjDz685grS7Xn8Yf0fqgHxWilc1aCdS g3YY0o10dUfOG3RpCyTAaEddAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUR0WRnUta 0GJ/Mxwyq7RO0L/KcrUwHwYDVR0jBBgwFoAUV3LjuCeMtseqvXrPnvViq1k8LoIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2OTlDL0Q2NkI4RkQ2QTdF OTExRjE5RjZBODI3NEE2RUU1MjhFL1YzTGp1Q2VNdHNlcXZYclBudlZpcTFrOExv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvVjNManVDZU10c2VxdlhyUG52VmlxMWs4TG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk5Qy9ENjZCOEZENkE3RTkxMUYxOUY2QTgyNzRBNkVFNTI4RS8yOTg5Qzk2QUFB NzExMUYxOUU0QkIwQjc2MzExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAK/fOwwDQYJKoZIhvcNAQELBQADggEBAEFpwEikh2wzD8jNd/MMHTfG Qsi7Rf6hlOiz3wjF/YuHFx7/mxtCSwmhc+hwhsJtCa7rPrtenl81yG88Mw506JNp Ro0WadZZvk6JWReTR1DIX3mHl9+A0iRzUD+rKvYTGbDcqom6FX4JEea3QLBP5Fi+ F/9a84wZbnNk1n5E6b0x6/yd37/F2W5fuevhkUliQ07wRKj1pwk/mHczJs3u7Sr2 jFmPkczNEPnLAmSoiniAJg3OhmQ000ebkMm2x5u8P8P6pdXh35EAN43oGZJfO6uE x/MFOTtoUWPAMqqZUd7KOHYreJ6tIt+bRUaxGRPMsIaCIgc0XC4GVKcVe0FBWec= -----END CERTIFICATE-----Generated at Mon Sep 21 20:29:00 2026 by rpki-client