$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa File: 866314EE5FCC11EF8416052EC4F9AE02.roa (raw, json) Hash identifier: GLcX1wFp7o9QRrChsXnCvjX1Ko/I4of/iC0AV3GlULs= Subject key identifier: E3:75:17:C7:BF:23:7D:61:9D:78:FF:E0:BB:8D:8E:94:4C:CF:12:9F Certificate issuer: /CN=A91883D3/serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9 Certificate serial: 013D Authority key identifier: EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:12:00 +0000 ROA not before: Sat 13 Dec 2025 05:04:01 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 16509 IP address blocks: 64.251.192.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 317 (0x13d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91883D3, serialNumber=EB3C8F24BBADC94134871D6E5FD0B7C58B49D3C9 Validity Not Before: Dec 13 05:04:01 2025 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a45740-0931 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ed:84:e3:22:da:8f:7d:2c:b4:b6:37:a5:a0: d3:e8:88:e0:0f:6b:3d:42:12:12:21:e5:04:dc:25: a8:cb:f7:f5:99:a9:39:c2:01:57:c2:6e:b6:da:84: d1:2c:f3:8d:86:63:4d:8b:e8:8d:c0:a0:02:a3:15: 37:5c:94:42:8c:11:45:0f:fb:50:a4:2b:db:94:22: d4:77:b9:6e:db:c2:71:47:cc:62:a6:cf:4e:b2:d6: 90:4f:a0:01:cf:19:96:76:da:83:9c:c6:45:2f:a7: 46:ba:16:8f:04:b3:9b:84:01:ea:ff:c0:81:c3:47: 43:1d:24:25:9b:50:68:cc:89:06:8f:d6:4e:95:be: e4:7c:e9:66:d6:b9:20:8c:0d:88:65:99:47:87:c5: 7f:2d:9d:b3:61:c0:a0:1e:b1:d5:46:3d:10:51:2a: 27:cb:e4:32:81:0b:ac:6d:69:6e:a9:b1:13:da:35: 55:c7:27:22:86:5c:19:66:e2:ca:a4:51:00:7b:17: 47:03:98:3f:36:0d:03:eb:c4:aa:7e:7b:55:6f:cd: 95:ec:3e:02:7e:bc:1b:0b:82:61:ac:19:08:19:39: ab:fd:dd:9e:85:96:93:13:a5:20:41:d4:55:be:4c: 26:5b:aa:a2:c7:9c:10:19:4d:1a:c2:86:f9:9e:1c: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:75:17:C7:BF:23:7D:61:9D:78:FF:E0:BB:8D:8E:94:4C:CF:12:9F X509v3 Authority Key Identifier: keyid:EB:3C:8F:24:BB:AD:C9:41:34:87:1D:6E:5F:D0:B7:C5:8B:49:D3:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/6zyPJLutyUE0hx1uX9C3xYtJ08k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6zyPJLutyUE0hx1uX9C3xYtJ08k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/8D03EF365E3611EFAC92D314C4F9AE02/866314EE5FCC11EF8416052EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 64.251.192.0/21 Signature Algorithm: sha256WithRSAEncryption 0a:da:b4:e7:71:c0:ff:83:d4:d6:17:94:d3:e1:88:2c:92:db: 28:7a:29:c9:15:97:a7:4b:c8:16:59:2d:df:a4:79:82:16:eb: ca:d2:d1:f1:d7:35:84:5e:ad:62:62:5d:1d:ae:38:4d:a0:a7: 6f:b1:34:fa:8b:39:a9:a5:b2:d2:78:e2:94:0d:5d:34:79:b4: 8a:20:e9:30:75:05:ec:f2:5d:93:7c:a5:66:aa:c7:09:8d:b5: b4:00:c3:31:f4:5b:18:bb:a4:ec:9e:9f:8b:a9:b7:cd:77:6e: c5:eb:96:e7:8b:c7:e3:99:e4:31:67:a9:2d:bc:b8:5f:6f:fc: 2f:8a:36:17:36:78:d6:fa:af:0b:99:d4:c7:b9:dc:89:47:54: 39:4f:9d:a7:69:8a:8e:b7:60:8d:ca:85:3b:69:36:e8:e4:8e: ba:bc:b7:06:36:f5:d7:05:fb:de:8e:2d:dc:4b:db:08:1e:a6: 08:65:9d:93:e7:74:d7:4d:fa:a3:46:bb:55:43:a5:71:69:ec: 0f:d1:b9:1e:43:6f:45:a0:61:8b:9c:67:12:90:dc:d4:e2:9f: 63:fd:fc:ed:1d:38:50:c2:60:1e:86:ab:6c:e0:dc:f9:f5:7f: b1:a7:81:0e:97:ed:fc:03:d0:35:6e:04:b7:0a:f1:4b:b0:06: 3a:3e:b0:25 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAT0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODgzRDMxMTAvBgNVBAUTKEVCM0M4RjI0QkJBREM5NDEzNDg3MUQ2RTVGRDBCN0M1 OEI0OUQzQzkwHhcNMjUxMjEzMDUwNDAxWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTc0MC0wOTMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsu2E4yLaj30stLY3paDT6IjgD2s9QhISIeUE3CWoy/f1mak5wgFXwm622oTR LPONhmNNi+iNwKACoxU3XJRCjBFFD/tQpCvblCLUd7lu28JxR8xips9OstaQT6AB zxmWdtqDnMZFL6dGuhaPBLObhAHq/8CBw0dDHSQlm1BozIkGj9ZOlb7kfOlm1rkg jA2IZZlHh8V/LZ2zYcCgHrHVRj0QUSony+QygQusbWluqbET2jVVxycihlwZZuLK pFEAexdHA5g/Ng0D68SqfntVb82V7D4CfrwbC4JhrBkIGTmr/d2ehZaTE6UgQdRV vkwmW6qix5wQGU0awob5nhx3ZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFON1F8e/ I31hnXj/4LuNjpRMzxKfMB8GA1UdIwQYMBaAFOs8jyS7rclBNIcdbl/Qt8WLSdPJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4ODNEMy84RDAzRUYzNjVF MzYxMUVGQUM5MkQzMTRDNEY5QUUwMi82enlQSkx1dHlVRTBoeDF1WDlDM3hZdEow OGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZ6eVBKTHV0eVVFMGh4MXVYOUMzeFl0SjA4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODgzRDMvOEQwM0VGMzY1RTM2MTFFRkFDOTJEMzE0QzRGOUFFMDIvODY2MzE0RUU1 RkNDMTFFRjg0MTYwNTJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDQPvAMA0GCSqGSIb3DQEBCwUAA4IBAQAK2rTnccD/g9TWF5TT4Ygs ktsoeinJFZenS8gWWS3fpHmCFuvK0tHx1zWEXq1iYl0drjhNoKdvsTT6izmppbLS eOKUDV00ebSKIOkwdQXs8l2TfKVmqscJjbW0AMMx9FsYu6Tsnp+LqbfNd27F65bn i8fjmeQxZ6ktvLhfb/wvijYXNnjW+q8LmdTHudyJR1Q5T52naYqOt2CNyoU7aTbo 5I66vLcGNvXXBfveji3cS9sIHqYIZZ2T53TXTfqjRrtVQ6VxaewP0bkeQ29FoGGL nGcSkNzU4p9j/fztHThQwmAehqts4Nz59X+xp4EOl+38A9A1bgS3CvFLsAY6PrAl -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:31 2026 by rpki-client