$ rpki-client -vvvf rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/DFB66DA85E9211ED83D40E65C4F9AE02.roa File: DFB66DA85E9211ED83D40E65C4F9AE02.roa (raw, json) Hash identifier: N67ddCkBXd5hpIfzblTNGlTnQvCm5yTH/KBVQKdzy+A= Subject key identifier: 6E:89:33:F3:F9:4D:FD:AB:14:34:5A:0C:C0:93:57:15:3A:5D:A8:AA Certificate issuer: /CN=A91684D0/serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A Certificate serial: 02DF Authority key identifier: A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/DFB66DA85E9211ED83D40E65C4F9AE02.roa Signing time: Wed 23 Sep 2026 01:50:40 +0000 ROA not before: Wed 23 Sep 2026 01:50:40 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 138162 IP address blocks: 149.234.186.0/24 maxlen: 24 149.234.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 735 (0x2df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91684D0, serialNumber=A5E6F5C74BBCEB4009C55EEA68970349971FF63A Validity Not Before: Sep 23 01:50:40 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab33070-392e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:09:f6:35:6d:8f:98:57:e2:e8:f1:72:75:57: 5e:28:39:4c:d6:3d:3b:89:f3:15:02:9f:41:07:1e: b5:15:cb:3d:37:1b:f3:d3:d5:08:27:ac:55:6b:27: c3:47:9c:0b:1c:5a:0e:29:25:79:ad:b7:29:ba:1a: 31:60:cb:12:d4:8c:49:36:6a:9c:0e:ac:cc:86:df: b3:0a:cc:af:45:26:4a:52:9f:49:89:a4:b5:36:72: fa:03:07:66:ff:90:64:82:19:1c:69:87:ee:ab:1f: 21:92:c3:26:f7:79:c5:73:c8:13:52:7e:2b:aa:ea: d0:1a:2a:94:f2:7e:d1:1b:8a:95:f4:8a:46:3f:fc: ff:34:f5:8a:69:53:86:4f:90:c7:c3:8f:1d:84:7f: 28:a1:7d:a2:8c:d7:42:a6:d9:29:7f:23:32:89:56: ef:8e:14:86:6a:b0:5e:c2:ff:3f:5d:7f:fe:28:d1: a7:a9:dc:71:63:1b:e4:68:3d:b7:57:af:df:fd:d2: 14:dc:4a:36:a0:ed:6f:ef:d7:dc:60:b5:3f:72:12: 7a:1f:9a:2d:23:a5:b7:8b:b2:88:30:31:9f:61:1f: 1c:70:b0:c8:d6:6d:1d:5d:20:ca:95:53:34:2d:b3: f2:ed:e2:7f:3f:7d:57:6c:06:3b:bd:12:b9:44:e7: 19:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:89:33:F3:F9:4D:FD:AB:14:34:5A:0C:C0:93:57:15:3A:5D:A8:AA X509v3 Authority Key Identifier: keyid:A5:E6:F5:C7:4B:BC:EB:40:09:C5:5E:EA:68:97:03:49:97:1F:F6:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/peb1x0u860AJxV7qaJcDSZcf9jo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/peb1x0u860AJxV7qaJcDSZcf9jo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/D3142DB85E8F11ED8C996963C4F9AE02/DFB66DA85E9211ED83D40E65C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 149.234.186.0/24 149.234.191.0/24 Signature Algorithm: sha256WithRSAEncryption 83:38:b9:48:8a:18:73:2d:2c:44:de:a9:af:a2:1d:25:f0:68: c1:9f:b5:8a:a7:b5:ca:1e:dd:d0:eb:45:35:ff:46:35:fc:d4: 7e:1f:ef:3b:81:b6:db:4c:11:e0:4a:a6:fb:f7:fc:df:f0:6d: 7c:df:1a:26:2a:80:60:f8:3b:61:5c:29:1a:a3:bc:47:b0:d4: 8a:59:0a:e7:85:6c:a2:0d:3a:f6:c1:cf:67:8e:38:0b:f8:75: ef:47:c1:15:24:c2:f8:06:35:55:7d:f8:c2:00:32:12:9a:da: 6d:35:14:91:30:ce:b7:9a:bb:09:d9:38:08:66:6c:34:d8:b2: 7d:34:11:ea:cb:3d:f8:bc:fc:f8:07:dc:3f:ad:78:c4:b4:ba: 28:83:e6:16:e5:76:3f:c4:5d:bc:ab:1a:71:c9:09:09:c9:0e: 47:a5:52:ed:b3:ca:2e:5b:ee:93:c4:7c:e8:96:dd:1d:e1:70: 62:3d:94:68:cf:b5:57:03:b6:21:b6:6e:85:18:4f:c7:02:34: 07:37:61:25:99:e1:e2:02:48:85:2b:c1:5d:b1:d9:73:b5:a4: 4d:00:3f:75:06:10:db:25:99:dc:ab:1b:94:b0:2f:a4:7a:8a: 23:0f:cf:3c:41:19:4a:0d:36:ff:cc:b6:b3:fb:25:7f:58:b2: 8d:e8:71:5c -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAt8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njg0RDAxMTAvBgNVBAUTKEE1RTZGNUM3NEJCQ0VCNDAwOUM1NUVFQTY4OTcwMzQ5 OTcxRkY2M0EwHhcNMjYwOTIzMDE1MDQwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWIzMzA3MC0zOTJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlQn2NW2PmFfi6PFydVdeKDlM1j07ifMVAp9BBx61Fcs9Nxvz09UIJ6xVayfD R5wLHFoOKSV5rbcpuhoxYMsS1IxJNmqcDqzMht+zCsyvRSZKUp9JiaS1NnL6Awdm /5BkghkcaYfuqx8hksMm93nFc8gTUn4rqurQGiqU8n7RG4qV9IpGP/z/NPWKaVOG T5DHw48dhH8ooX2ijNdCptkpfyMyiVbvjhSGarBewv8/XX/+KNGnqdxxYxvkaD23 V6/f/dIU3Eo2oO1v79fcYLU/chJ6H5otI6W3i7KIMDGfYR8ccLDI1m0dXSDKlVM0 LbPy7eJ/P31XbAY7vRK5ROcZFwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFG6JM/P5 Tf2rFDRaDMCTVxU6XaiqMB8GA1UdIwQYMBaAFKXm9cdLvOtACcVe6miXA0mXH/Y6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODREMC9EMzE0MkRCODVF OEYxMUVEOEM5OTY5NjNDNEY5QUUwMi9wZWIxeDB1ODYwQUp4VjdxYUpjRFNaY2Y5 am8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BlYjF4MHU4NjBBSnhWN3FhSmNEU1pjZjlqby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njg0RDAvRDMxNDJEQjg1RThGMTFFRDhDOTk2OTYzQzRGOUFFMDIvREZCNjZEQTg1 RTkyMTFFRDgzRDQwRTY1QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAleq6AwQAleq/MA0GCSqGSIb3DQEBCwUAA4IBAQCDOLlIihhzLSxE 3qmvoh0l8GjBn7WKp7XKHt3Q60U1/0Y1/NR+H+87gbbbTBHgSqb79/zf8G183xom KoBg+DthXCkao7xHsNSKWQrnhWyiDTr2wc9njjgL+HXvR8EVJML4BjVVffjCADIS mtptNRSRMM63mrsJ2TgIZmw02LJ9NBHqyz34vPz4B9w/rXjEtLoog+YW5XY/xF28 qxpxyQkJyQ5HpVLts8ouW+6TxHzolt0d4XBiPZRoz7VXA7Yhtm6FGE/HAjQHN2El meHiAkiFK8FdsdlztaRNAD91BhDbJZncqxuUsC+keoojD888QRlKDTb/zLaz+yV/ WLKN6HFc -----END CERTIFICATE-----Generated at Wed Sep 23 08:26:45 2026 by rpki-client