$ rpki-client -vvf rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa File: F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa (raw, json) Hash identifier: 2RPaofcBmVRp+rnkKNh5LcywLDf5c7LR9zPp5ibVZFk= Subject key identifier: 8E:05:F4:75:CD:DA:BC:54:18:B1:1B:EB:84:15:9D:5B:84:43:3D:B2 Certificate issuer: /CN=A917E0A8/serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Certificate serial: 06DD Authority key identifier: 74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:47:02 +0000 ROA not before: Wed 30 Apr 2025 19:29:42 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 133752 IP address blocks: 192.131.142.0/24 maxlen: 24 205.189.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:20:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1757 (0x6dd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917E0A8, serialNumber=74D44D968AF463EFB17C080D5FAD010C4AC097AA Validity Not Before: Apr 30 19:29:42 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a42736-1d8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:a9:2f:fd:09:cd:88:23:17:d8:c6:96:93:dd: 59:6e:b7:3f:1b:ef:cd:9e:5c:cb:5d:4b:98:89:7d: 3a:44:0c:c7:36:35:4c:d9:a8:65:82:af:55:35:26: 38:2d:2b:04:ba:87:37:64:61:17:96:8e:50:58:5f: 74:11:b0:43:20:a3:86:12:a4:54:7c:d8:b1:85:94: d3:40:0c:ba:8c:d0:c1:3b:5f:04:49:dd:4a:a9:01: 68:99:21:29:0c:4e:44:43:b4:aa:1c:97:ff:4d:87: e1:63:89:3b:2f:cd:81:57:dc:70:75:37:84:73:e9: 6f:2e:92:3f:50:b3:be:f2:3f:a8:e7:72:8f:d8:d5: a3:d4:47:50:f2:39:19:64:ac:b3:c5:f7:69:22:a9: 5f:ae:52:61:a6:41:81:f5:94:4e:b4:fc:9f:9a:1a: 6f:72:3a:6e:38:9e:be:4c:ce:71:1c:e4:ed:17:e1: 64:f5:65:8a:e8:f5:03:3b:4d:46:93:c0:19:24:86: 93:e8:3d:cb:fd:6c:d6:c0:e1:9f:57:ab:62:3b:ed: 6d:44:40:eb:bf:23:86:f7:b9:72:2b:7c:d9:15:b6: 8d:ff:2f:2f:58:84:5c:9b:3c:01:a4:ee:66:55:19: e6:4d:30:d4:c9:d5:c5:5b:51:bc:dd:e6:ff:6d:d4: d2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:05:F4:75:CD:DA:BC:54:18:B1:1B:EB:84:15:9D:5B:84:43:3D:B2 X509v3 Authority Key Identifier: keyid:74:D4:4D:96:8A:F4:63:EF:B1:7C:08:0D:5F:AD:01:0C:4A:C0:97:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/dNRNlor0Y--xfAgNX60BDErAl6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dNRNlor0Y--xfAgNX60BDErAl6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917E0A8/6EFC0BEE984C11EB8A41FA20C4F9AE02/F9C23E2A3ACB11EC9FEBB367C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.131.142.0/24 205.189.160.0/24 Signature Algorithm: sha256WithRSAEncryption 70:91:22:58:e8:84:40:95:54:cd:f5:ed:12:31:63:cb:91:53: 4a:4c:87:af:b0:db:de:6f:d6:d6:b3:da:62:7a:40:c2:42:96: fa:e7:e7:51:67:a0:c1:09:d9:f0:e3:91:25:e5:ef:c6:65:3c: 3c:af:7a:2a:01:4d:4e:a2:75:27:07:d2:5d:dd:de:5f:c7:4c: fd:30:41:14:4d:b2:1f:8d:bc:a8:b0:a2:9c:70:d9:bd:c1:9e: 45:ac:02:3f:10:ea:ab:05:17:f8:ca:78:1f:70:81:a7:62:6d: 98:47:8c:75:53:e0:45:75:80:2a:78:22:d7:e2:cc:04:e1:bb: 6e:e4:c2:05:05:d1:e9:bc:78:c8:25:30:c9:b2:96:3a:22:c7: f2:42:c2:32:d0:54:cd:d0:ff:b1:5b:94:18:24:64:e5:58:0f: 6b:1f:bd:a2:d5:47:9c:54:c3:5f:1c:cc:ef:19:97:54:d6:d8: 9c:b1:62:d6:41:4f:aa:3f:4b:24:af:5f:69:08:2c:3a:1f:05: b4:bd:9f:e8:06:a7:c3:3e:e7:32:92:6e:13:a7:3f:c6:42:c7: 83:e2:c6:c0:13:2c:15:69:d0:41:b5:13:a9:b0:e8:c7:de:59: 71:59:d4:3e:9a:23:bc:7a:79:59:d5:f9:b4:d5:e1:b5:8b:3c: 1b:cf:7f:7a -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICBt0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0UwQTgxMTAvBgNVBAUTKDc0RDQ0RDk2OEFGNDYzRUZCMTdDMDgwRDVGQUQwMTBD NEFDMDk3QUEwHhcNMjUwNDMwMTkyOTQyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MjczNi0xZDhjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuKkv/QnNiCMX2MaWk91Zbrc/G+/NnlzLXUuYiX06RAzHNjVM2ahlgq9VNSY4 LSsEuoc3ZGEXlo5QWF90EbBDIKOGEqRUfNixhZTTQAy6jNDBO18ESd1KqQFomSEp DE5EQ7SqHJf/TYfhY4k7L82BV9xwdTeEc+lvLpI/ULO+8j+o53KP2NWj1EdQ8jkZ ZKyzxfdpIqlfrlJhpkGB9ZROtPyfmhpvcjpuOJ6+TM5xHOTtF+Fk9WWK6PUDO01G k8AZJIaT6D3L/WzWwOGfV6tiO+1tREDrvyOG97lyK3zZFbaN/y8vWIRcmzwBpO5m VRnmTTDUydXFW1G83eb/bdTSYwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFI4F9HXN 2rxUGLEb64QVnVuEQz2yMB8GA1UdIwQYMBaAFHTUTZaK9GPvsXwIDV+tAQxKwJeq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RTBBOC82RUZDMEJFRTk4 NEMxMUVCOEE0MUZBMjBDNEY5QUUwMi9kTlJObG9yMFktLXhmQWdOWDYwQkRFckFs Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2ROUk5sb3IwWS0teGZBZ05YNjBCREVyQWw2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0UwQTgvNkVGQzBCRUU5ODRDMTFFQjhBNDFGQTIwQzRGOUFFMDIvRjlDMjNFMkEz QUNCMTFFQzlGRUJCMzY3QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAwIOOAwQAzb2gMA0GCSqGSIb3DQEBCwUAA4IBAQBwkSJY6IRAlVTN 9e0SMWPLkVNKTIevsNveb9bWs9piekDCQpb65+dRZ6DBCdnw45El5e/GZTw8r3oq AU1OonUnB9Jd3d5fx0z9MEEUTbIfjbyosKKccNm9wZ5FrAI/EOqrBRf4yngfcIGn Ym2YR4x1U+BFdYAqeCLX4swE4btu5MIFBdHpvHjIJTDJspY6IsfyQsIy0FTN0P+x W5QYJGTlWA9rH72i1UecVMNfHMzvGZdU1ticsWLWQU+qP0skr19pCCw6HwW0vZ/o BqfDPucykm4Tpz/GQseD4sbAEywVadBBtROpsOjH3llxWdQ+miO8enlZ1fm01eG1 izwbz396 -----END CERTIFICATE-----Generated at Mon Mar 2 08:03:54 2026 by rpki-client