$ rpki-client -vvvf rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/CA4E2968B4C111F19C71C9826E11F970.roa File: CA4E2968B4C111F19C71C9826E11F970.roa (raw, json) Hash identifier: U/0WaPYtpEen6QKvsDEe/PvQICF7br00xSCzPGhI9jg= Subject key identifier: 6F:90:CB:80:FA:FC:A0:04:9F:30:76:75:93:DB:39:2D:DD:36:84:E1 Certificate issuer: /CN=A914699C/serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82 Certificate serial: 31 Authority key identifier: 57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82 Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/CA4E2968B4C111F19C71C9826E11F970.roa Signing time: Sun 20 Sep 2026 07:06:24 +0000 ROA not before: Sun 20 Sep 2026 07:06:24 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 138644 IP address blocks: 191.124.200.0/21 maxlen: 21 191.124.208.0/20 maxlen: 20 191.124.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 08:19:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49 (0x31) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914699C, serialNumber=5772E3B8278CB6C7AABD7ACF9EF562AB593C2E82 Validity Not Before: Sep 20 07:06:24 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6aaf85f0-895a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cf:dd:9c:74:da:c0:8f:df:ab:4c:df:95:ad: f3:4e:35:78:16:70:53:59:8d:f3:07:5d:ab:6b:9c: d4:96:ce:8f:2c:69:40:d9:cc:f4:2a:19:c4:24:f1: 68:18:ec:05:77:1a:18:2a:24:d6:72:79:7a:35:47: 43:4e:3b:8f:10:ec:6e:b9:43:34:dc:f2:b4:bc:b4: 3e:0d:94:95:11:f9:be:0a:60:d8:f5:3f:c2:29:45: 1e:3e:18:ea:2d:9f:55:78:63:43:3f:93:17:a7:15: 39:b6:12:ae:3e:c2:95:ea:1c:f9:73:6d:2e:57:2a: 69:4e:8d:ee:b7:5f:a5:13:f3:13:f3:6f:b9:d1:dd: 01:96:f3:3b:de:07:e4:6b:3e:6e:45:76:7a:1b:a0: f5:d3:14:90:48:18:54:08:f9:82:a6:74:da:dc:3d: 59:ee:36:99:c4:41:8a:3b:8e:15:e5:1c:51:cc:b2: 51:53:cc:a1:70:19:d6:70:ae:ab:55:6f:cf:f8:8a: e4:dc:44:b5:6e:e4:c8:6b:01:50:cd:cb:3d:d5:41: b7:a6:17:28:8b:1b:be:23:9d:f8:52:99:a9:a6:c8: c7:06:ea:ad:5b:8c:78:2b:79:14:24:cd:99:53:64: e2:52:24:ac:26:9f:b9:ad:e3:c3:f9:54:2a:70:b1: 33:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:90:CB:80:FA:FC:A0:04:9F:30:76:75:93:DB:39:2D:DD:36:84:E1 X509v3 Authority Key Identifier: keyid:57:72:E3:B8:27:8C:B6:C7:AA:BD:7A:CF:9E:F5:62:AB:59:3C:2E:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/V3LjuCeMtseqvXrPnvViq1k8LoI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/V3LjuCeMtseqvXrPnvViq1k8LoI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914699C/D66B8FD6A7E911F19F6A8274A6EE528E/CA4E2968B4C111F19C71C9826E11F970.roa sbgp-ipAddrBlock: critical IPv4: 191.124.200.0-191.124.255.255 Signature Algorithm: sha256WithRSAEncryption 09:d2:b9:ed:12:9a:95:75:2c:6f:1d:e2:22:fa:92:50:6d:4b: 72:ef:f9:75:e3:d9:72:2b:be:b5:0d:81:45:1b:7d:1a:a7:67: 21:8b:c4:86:5d:84:6a:2e:91:ae:bc:69:7f:0b:d3:77:f4:6a: 8f:67:29:9a:80:8a:6f:4b:84:6f:5a:33:fa:87:14:9a:20:ce: 93:0b:72:dd:d3:68:fc:d4:2f:83:50:9a:9e:20:02:84:60:24: 89:df:29:cf:a4:f2:74:1d:2b:2b:d2:bc:e2:af:63:37:f0:7b: e8:05:1e:c3:08:a8:21:f4:ac:19:71:c0:9d:7c:cb:ee:32:29: 62:29:24:b3:54:2f:f2:86:21:08:90:62:1b:c2:21:fc:46:0a: 39:47:e0:d7:45:32:26:9e:16:79:6b:8f:1e:38:aa:95:04:fe: 2c:01:d6:55:9b:c9:fb:9d:f7:a6:7a:a0:29:92:29:7c:ee:93: b6:b6:27:72:44:e8:ec:41:d8:7e:4a:7b:84:a6:d6:42:c6:e8: 0b:23:d3:1a:49:07:8f:7f:fb:4f:47:59:ef:9a:8f:cf:9c:cd: b8:d3:af:2c:c4:d6:ff:c4:c3:d3:18:cf:e7:c2:66:7b:6e:8e: 83:16:05:eb:f5:da:af:c0:8b:e7:45:51:d5:17:ea:59:53:2c: f1:ff:fc:92 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 Njk5QzExMC8GA1UEBRMoNTc3MkUzQjgyNzhDQjZDN0FBQkQ3QUNGOUVGNTYyQUI1 OTNDMkU4MjAeFw0yNjA5MjAwNzA2MjRaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYWY4NWYwLTg5NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2z92cdNrAj9+rTN+VrfNONXgWcFNZjfMHXatrnNSWzo8saUDZzPQqGcQk8WgY 7AV3GhgqJNZyeXo1R0NOO48Q7G65QzTc8rS8tD4NlJUR+b4KYNj1P8IpRR4+GOot n1V4Y0M/kxenFTm2Eq4+wpXqHPlzbS5XKmlOje63X6UT8xPzb7nR3QGW8zveB+Rr Pm5FdnoboPXTFJBIGFQI+YKmdNrcPVnuNpnEQYo7jhXlHFHMslFTzKFwGdZwrqtV b8/4iuTcRLVu5MhrAVDNyz3VQbemFyiLG74jnfhSmammyMcG6q1bjHgreRQkzZlT ZOJSJKwmn7mt48P5VCpwsTPVAgMBAAGjggJnMIICYzAdBgNVHQ4EFgQUb5DLgPr8 oASfMHZ1k9s5Ld02hOEwHwYDVR0jBBgwFoAUV3LjuCeMtseqvXrPnvViq1k8LoIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ2OTlDL0Q2NkI4RkQ2QTdF OTExRjE5RjZBODI3NEE2RUU1MjhFL1YzTGp1Q2VNdHNlcXZYclBudlZpcTFrOExv SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjRBMUJFQTYxRDY2MTFFMkIyQ0Q4QjdDNzJG RDFGRjIvVjNManVDZU10c2VxdlhyUG52VmlxMWs4TG9JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 Njk5Qy9ENjZCOEZENkE3RTkxMUYxOUY2QTgyNzRBNkVFNTI4RS9DQTRFMjk2OEI0 QzExMUYxOUM3MUM5ODI2RTExRjk3MC5yb2EwJgYIKwYBBQUHAQcBAf8EFzAVMBME AgABMA0wCwMEA798yAMDAL98MA0GCSqGSIb3DQEBCwUAA4IBAQAJ0rntEpqVdSxv HeIi+pJQbUty7/l149lyK761DYFFG30ap2chi8SGXYRqLpGuvGl/C9N39GqPZyma gIpvS4RvWjP6hxSaIM6TC3Ld02j81C+DUJqeIAKEYCSJ3ynPpPJ0HSsr0rzir2M3 8HvoBR7DCKgh9KwZccCdfMvuMiliKSSzVC/yhiEIkGIbwiH8Rgo5R+DXRTImnhZ5 a48eOKqVBP4sAdZVm8n7nfemeqApkil87pO2tidyROjsQdh+SnuEptZCxugLI9Ma SQePf/tPR1nvmo/PnM24068sxNb/xMPTGM/nwmZ7bo6DFgXr9dqvwIvnRVHVF+pZ Uyzx//yS -----END CERTIFICATE-----Generated at Mon Sep 21 19:15:50 2026 by rpki-client