$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa File: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (raw, json) Hash identifier: kAlL657G1w2cDSecYlSMX1FGlZCqDv6UlaT/sim3FTE= Subject key identifier: A3:31:B3:BA:46:16:94:E1:28:88:9A:67:DE:08:78:9E:53:C6:BA:C6 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 18AA Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa Signing time: Mon 08 Jun 2026 17:19:16 +0000 ROA not before: Mon 08 Jun 2026 17:19:16 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 131310 IP address blocks: 143.192.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 16:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6314 (0x18aa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Jun 8 17:19:16 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a26f994-3aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c7:7d:a6:10:ac:79:ff:10:ab:49:79:82:ef: b4:2f:41:92:88:07:20:00:a7:9d:dc:8d:2f:ce:8d: 94:0a:af:49:ad:51:14:3d:02:13:c1:70:04:a0:d1: c7:6c:15:a9:7d:60:7f:28:49:c8:c1:23:51:77:f7: b9:a7:75:cf:3d:0c:de:d8:62:b3:23:d7:db:2a:ef: 1a:0a:92:96:2b:bc:b5:f5:dc:79:6b:de:ce:7f:da: 9a:68:d4:e3:e5:8b:e1:df:2c:18:14:49:bd:3d:7f: 94:98:95:18:1f:d0:e2:20:61:df:75:d6:26:04:e2: da:06:a0:ff:72:1b:b7:0f:9f:eb:30:d0:74:22:8b: 4c:7c:5d:96:b7:6e:7f:c6:f2:b0:d3:18:45:a6:24: 0a:1b:a7:96:e3:db:1e:b6:89:c5:2d:d7:ad:6d:a0: 22:57:79:3e:83:ea:7a:5e:13:95:3e:09:97:77:95: 18:7f:f8:ad:0f:da:9e:46:96:cd:bc:db:49:99:37: fb:d3:b8:b0:09:8d:2a:ae:19:0d:3d:19:01:85:dc: 92:91:28:76:b9:20:32:43:34:55:bb:8e:d0:39:0a: 7e:a3:16:64:3c:dd:9e:7d:7b:be:80:b6:ca:1c:e9: bd:5f:b8:ea:e8:08:fb:e1:82:19:8e:61:25:5d:80: 58:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:31:B3:BA:46:16:94:E1:28:88:9A:67:DE:08:78:9E:53:C6:BA:C6 X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 143.192.96.0/20 Signature Algorithm: sha256WithRSAEncryption 8e:64:84:b8:84:bb:48:4f:18:46:a7:86:89:68:b5:74:b1:86: 48:37:95:61:45:d7:0d:1d:c6:c2:45:e6:40:59:58:4d:ca:b4: 55:f8:e8:80:dd:1a:c6:22:d7:9d:d4:16:d1:e3:d8:67:b0:56: 68:2e:2e:ea:4d:c9:23:94:e9:8d:36:2b:5b:c6:51:26:2e:14: bd:e0:40:23:dd:ec:80:8a:7b:fc:0d:55:54:55:b8:71:6e:86: 59:f9:fb:3a:9a:25:e4:d5:9f:1d:cf:53:d3:49:ec:5d:d1:65: 45:69:23:51:66:e7:09:34:9b:c4:48:a1:31:50:65:55:eb:44: 2d:81:c7:b4:22:44:ec:eb:7f:b1:d9:8d:cb:59:52:6e:d5:c1: 4e:cf:e7:f1:15:b1:51:df:c0:d7:68:59:ac:1f:02:1f:5f:51: 0e:fd:03:c5:98:77:bc:28:0b:ba:cf:e5:30:9c:04:4d:eb:0c: 55:f3:38:86:1a:91:b8:56:10:9c:5f:d3:af:f5:3a:5a:0d:70: 6d:e2:25:bf:b0:c9:31:64:35:80:99:1d:d6:97:66:bf:eb:5b: a9:9f:76:b8:71:41:9a:80:63:be:14:d1:86:93:b2:3a:5f:2f: c9:8d:86:a8:2c:5c:3d:f6:d9:f0:65:e8:f7:13:3f:8a:e3:05: a8:83:80:cd -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjYwNjA4MTcxOTE2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTI2Zjk5NC0zYWE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu8d9phCsef8Qq0l5gu+0L0GSiAcgAKed3I0vzo2UCq9JrVEUPQITwXAEoNHH bBWpfWB/KEnIwSNRd/e5p3XPPQze2GKzI9fbKu8aCpKWK7y19dx5a97Of9qaaNTj 5Yvh3ywYFEm9PX+UmJUYH9DiIGHfddYmBOLaBqD/chu3D5/rMNB0IotMfF2Wt25/ xvKw0xhFpiQKG6eW49setonFLdetbaAiV3k+g+p6XhOVPgmXd5UYf/itD9qeRpbN vNtJmTf707iwCY0qrhkNPRkBhdySkSh2uSAyQzRVu47QOQp+oxZkPN2efXu+gLbK HOm9X7jq6Aj74YIZjmElXYBYoQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKMxs7pG FpThKIiaZ94IeJ5TxrrGMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg5RTcvRUZBNDc2NzBCREZCMTFFN0I4NzNGRTI3QzRGOUFFMDIvQ0E0RUM1RDZD MjlGMTFFQkJFMEIxOTQxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEj8BgMA0GCSqGSIb3DQEBCwUAA4IBAQCOZIS4hLtITxhGp4aJaLV0 sYZIN5VhRdcNHcbCReZAWVhNyrRV+OiA3RrGIted1BbR49hnsFZoLi7qTckjlOmN NitbxlEmLhS94EAj3eyAinv8DVVUVbhxboZZ+fs6miXk1Z8dz1PTSexd0WVFaSNR ZucJNJvESKExUGVV60Qtgce0IkTs63+x2Y3LWVJu1cFOz+fxFbFR38DXaFmsHwIf X1EO/QPFmHe8KAu6z+UwnARN6wxV8ziGGpG4VhCcX9Ov9TpaDXBt4iW/sMkxZDWA mR3Wl2a/61upn3a4cUGagGO+FNGGk7I6Xy/JjYaoLFw99tnwZej3Ez+K4wWog4DN -----END CERTIFICATE-----Generated at Sat Jun 13 21:25:27 2026 by rpki-client