$ rpki-client -vvf rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa File: CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa (raw, json) Hash identifier: l5RtQonTXNSBGH8zDtmLZh3WC3KxiK5dhZgCVOyckgg= Subject key identifier: 05:D8:7A:3B:4C:A4:DE:F5:56:E0:FF:33:AE:DD:7A:1B:E7:C0:0C:E6 Certificate issuer: /CN=A91589E7/serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Certificate serial: 1873 Authority key identifier: 9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:31:22 +0000 ROA not before: Sat 14 Jun 2025 17:06:56 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 131310 IP address blocks: 143.192.96.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:22:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6259 (0x1873) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91589E7, serialNumber=9BF17D8F740A2502D05D57848B9FF164C0242091 Validity Not Before: Jun 14 17:06:56 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4238a-ad32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:be:b2:a0:18:cf:a2:b6:2a:a0:0b:9c:b7: 39:f5:0a:65:8b:41:59:c3:05:3c:b6:75:94:0a:9a: a7:4e:06:4b:2a:3c:29:e1:86:7b:8e:73:cb:d1:fb: 8d:58:d1:a8:9f:1d:e1:c9:66:c7:6c:74:b6:b0:10: f0:11:09:2e:2f:51:75:77:aa:bd:ca:13:da:13:9e: 0b:35:ea:ea:6d:a7:c1:f8:cc:8f:b6:6e:46:37:bb: b8:c9:d4:ba:f1:ab:e0:81:d3:76:31:c5:00:15:39: d7:60:2b:85:ff:aa:8b:09:36:ed:6b:7b:4d:be:ac: 45:16:3f:03:32:e2:ad:b2:1c:02:dc:52:bb:da:18: 95:24:8b:9a:5d:e5:65:e5:62:f0:40:fb:e6:37:6b: d2:10:58:5e:d8:c4:b8:f7:73:6d:11:f8:da:6e:1e: e9:a3:8c:13:f1:be:27:bd:f2:ba:0a:aa:b9:e3:73: 91:a7:58:f4:a4:0a:27:da:5c:29:82:bc:79:0f:f3: 15:2f:8e:07:0b:c6:d9:56:80:d3:c6:3a:c9:06:73: 00:bf:8d:c1:33:88:de:e8:0b:00:f5:97:c9:31:08: 80:d7:18:70:70:86:f6:62:6f:6c:2b:f7:a1:62:57: 24:52:fe:cf:e3:b0:c4:e2:77:8d:c9:8b:63:95:5f: f1:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D8:7A:3B:4C:A4:DE:F5:56:E0:FF:33:AE:DD:7A:1B:E7:C0:0C:E6 X509v3 Authority Key Identifier: keyid:9B:F1:7D:8F:74:0A:25:02:D0:5D:57:84:8B:9F:F1:64:C0:24:20:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/m_F9j3QKJQLQXVeEi5_xZMAkIJE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m_F9j3QKJQLQXVeEi5_xZMAkIJE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91589E7/EFA47670BDFB11E7B873FE27C4F9AE02/CA4EC5D6C29F11EBBE0B1941C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 143.192.96.0/20 Signature Algorithm: sha256WithRSAEncryption 52:61:3e:f4:74:72:f0:e3:3d:9c:96:7a:99:a2:ce:64:26:bc: 46:74:80:37:bc:6b:88:84:ee:12:a8:9f:24:0b:0c:46:9f:95: ee:ac:9d:00:f3:0c:5b:ab:27:46:c0:ad:98:04:7e:ab:e6:f9: 8e:66:20:00:27:c4:82:b7:20:c9:d5:60:e1:e1:96:36:27:62: 64:7f:a5:c9:75:0d:94:82:3b:e8:7f:22:bc:d6:b1:66:18:2c: 36:68:f5:5c:e4:81:12:81:31:4a:81:84:32:62:35:a4:f7:03: d9:fe:21:6a:9f:d3:19:ca:4b:c1:bf:b7:6e:0a:59:4d:e8:fe: 34:b9:57:df:06:f3:87:e7:f3:c1:cf:96:97:23:ee:bb:91:09: 84:3b:ed:53:6b:54:0e:a9:40:5e:8b:7c:83:67:7e:4b:e4:ca: e2:23:15:3c:34:39:e7:a1:c7:bd:1c:f9:5e:49:75:e0:e4:a0: e0:d6:fb:72:2f:41:ef:09:f7:07:27:6e:54:2c:8c:da:39:f8: d2:96:32:f7:fc:b7:f7:38:a3:d7:f5:62:77:7a:b8:12:52:dc: 42:dd:78:2a:b5:d1:53:af:dc:6f:d2:ce:d9:19:c5:ff:2d:ad: d1:ce:d8:03:97:0b:f0:4f:dd:65:a5:00:fd:9f:1a:5a:89:46: 7c:31:2a:61 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGHMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTg5RTcxMTAvBgNVBAUTKDlCRjE3RDhGNzQwQTI1MDJEMDVENTc4NDhCOUZGMTY0 QzAyNDIwOTEwHhcNMjUwNjE0MTcwNjU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjM4YS1hZDMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApte+sqAYz6K2KqALnLc59Qpli0FZwwU8tnWUCpqnTgZLKjwp4YZ7jnPL0fuN WNGonx3hyWbHbHS2sBDwEQkuL1F1d6q9yhPaE54LNerqbafB+MyPtm5GN7u4ydS6 8avggdN2McUAFTnXYCuF/6qLCTbta3tNvqxFFj8DMuKtshwC3FK72hiVJIuaXeVl 5WLwQPvmN2vSEFhe2MS493NtEfjabh7po4wT8b4nvfK6Cqq543ORp1j0pAon2lwp grx5D/MVL44HC8bZVoDTxjrJBnMAv43BM4je6AsA9ZfJMQiA1xhwcIb2Ym9sK/eh YlckUv7P47DE4neNyYtjlV/xDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAXYejtM pN71VuD/M67dehvnwAzmMB8GA1UdIwQYMBaAFJvxfY90CiUC0F1XhIuf8WTAJCCR MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODlFNy9FRkE0NzY3MEJE RkIxMUU3Qjg3M0ZFMjdDNEY5QUUwMi9tX0Y5ajNRS0pRTFFYVmVFaTVfeFpNQWtJ SkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21fRjlqM1FLSlFMUVhWZUVpNV94Wk1Ba0lKRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTg5RTcvRUZBNDc2NzBCREZCMTFFN0I4NzNGRTI3QzRGOUFFMDIvQ0E0RUM1RDZD MjlGMTFFQkJFMEIxOTQxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQEj8BgMA0GCSqGSIb3DQEBCwUAA4IBAQBSYT70dHLw4z2clnqZos5k JrxGdIA3vGuIhO4SqJ8kCwxGn5XurJ0A8wxbqydGwK2YBH6r5vmOZiAAJ8SCtyDJ 1WDh4ZY2J2Jkf6XJdQ2UgjvofyK81rFmGCw2aPVc5IESgTFKgYQyYjWk9wPZ/iFq n9MZykvBv7duCllN6P40uVffBvOH5/PBz5aXI+67kQmEO+1Ta1QOqUBei3yDZ35L 5MriIxU8NDnnoce9HPleSXXg5KDg1vtyL0HvCfcHJ25ULIzaOfjSljL3/Lf3OKPX 9WJ3ergSUtxC3XgqtdFTr9xv0s7ZGcX/La3RztgDlwvwT91lpQD9nxpaiUZ8MSph -----END CERTIFICATE-----Generated at Mon Mar 2 10:53:09 2026 by rpki-client