$ rpki-client -vvf rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/A4C79C9AEC4611F0B45F05E8456F56BC.roa File: A4C79C9AEC4611F0B45F05E8456F56BC.roa (raw, json) Hash identifier: EVMXznE3JflMcjw9lwizAdWj6kleJyA1NEdHm23XCPg= Subject key identifier: 8B:E2:1A:86:F0:04:4F:8E:06:1B:57:24:22:B0:06:BC:F7:8C:00:E8 Certificate issuer: /CN=A9191DE0/serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8 Certificate serial: 22 Authority key identifier: 8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/A4C79C9AEC4611F0B45F05E8456F56BC.roa Signing time: Sun 01 Mar 2026 05:48:05 +0000 ROA not before: Thu 08 Jan 2026 04:01:00 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 138424 IP address blocks: 192.58.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9191DE0, serialNumber=8EECB11980ED11534F4192F4DE08D1B2CDB916C8 Validity Not Before: Jan 8 04:01:00 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a3d315-aae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:2a:61:b0:2b:b3:64:66:46:75:bf:66:9a: 96:fc:b0:99:39:3e:0e:f3:c7:27:9a:ef:77:15:59: bc:2b:97:00:e4:83:69:bc:db:5f:e9:39:f9:ef:88: 4d:b9:c6:93:2c:f8:4f:7a:c0:9c:db:52:d4:98:91: 83:a0:90:14:0b:cd:22:b8:19:f7:aa:ef:00:d6:aa: e2:32:0a:44:1a:5a:89:cb:53:a5:d3:ee:e2:cc:d4: 1f:87:48:d8:fc:27:3b:13:5e:96:1d:b3:04:cd:70: bb:98:ad:cf:ca:4d:e8:61:b0:b7:91:7e:fc:ec:76: ef:1a:8f:36:29:e0:0f:4d:84:b8:3a:e1:10:cf:c3: 7d:49:2c:9a:b9:45:96:76:d6:51:39:77:88:ad:a7: 52:85:19:0c:94:a1:5c:8f:d2:ee:93:f0:91:83:90: 46:7a:01:fd:ce:77:ba:61:6a:3f:ae:4f:cd:20:8d: dc:8e:6b:ad:cb:d7:24:93:3e:eb:5c:70:88:cf:e4: d7:89:39:b1:f2:6d:22:97:da:4d:46:db:3c:7d:a5: ca:1f:b1:db:b1:09:f7:20:0e:ee:d1:c7:1d:e9:fa: 68:b0:53:4b:05:19:72:ba:4a:64:d2:06:be:23:d7: 44:ac:7f:28:19:71:93:2f:83:2f:20:40:bf:6a:81: 29:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E2:1A:86:F0:04:4F:8E:06:1B:57:24:22:B0:06:BC:F7:8C:00:E8 X509v3 Authority Key Identifier: keyid:8E:EC:B1:19:80:ED:11:53:4F:41:92:F4:DE:08:D1:B2:CD:B9:16:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/juyxGYDtEVNPQZL03gjRss25Fsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/juyxGYDtEVNPQZL03gjRss25Fsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191DE0/EBA98DF4EC2211F0A5005DA03D6F56BC/A4C79C9AEC4611F0B45F05E8456F56BC.roa sbgp-ipAddrBlock: critical IPv4: 192.58.97.0/24 Signature Algorithm: sha256WithRSAEncryption 55:f6:90:62:6e:b3:e9:0f:84:33:e5:1c:50:0a:e7:3b:59:01: 62:39:51:76:a2:ea:26:97:7f:67:91:2c:da:bf:a4:86:9b:e9: 60:cb:49:95:07:48:5c:01:22:14:63:1d:5f:ab:80:f5:ad:5b: b6:83:a1:eb:cc:fd:6d:7d:41:eb:1b:45:e2:b5:49:9f:5b:50: 41:69:79:73:83:0d:ef:15:14:b5:bb:5f:97:65:47:05:35:4d: eb:e4:f8:a0:e6:e8:56:04:fb:b8:cf:de:ab:df:26:6f:cf:61: fc:76:92:4a:e0:2d:cc:15:e4:97:d7:5e:e5:e3:a6:44:1a:e3: 52:40:f3:b4:7b:20:64:97:0c:f2:a0:40:23:8a:c8:03:a9:b8: 5d:8c:87:bf:fb:c8:f6:6c:3e:8a:04:6e:64:5a:53:c5:5e:99: 8e:e8:2d:f2:b0:a7:f5:84:c2:c8:8b:19:71:da:3c:0b:0f:34: d5:b0:d6:58:7a:52:6d:de:23:d7:94:31:fc:a8:50:74:b9:9e: 4f:f1:de:a3:95:99:58:39:30:ad:72:09:b3:60:9c:15:8f:9e: a1:2d:45:6a:1d:ca:41:54:73:c6:44:2c:1e:ba:ac:eb:32:0a: 77:3a:13:c3:cd:45:13:0d:f2:82:3d:2e:91:36:91:b8:08:ca: 86:77:7b:44 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 MURFMDExMC8GA1UEBRMoOEVFQ0IxMTk4MEVEMTE1MzRGNDE5MkY0REUwOEQxQjJD REI5MTZDODAeFw0yNjAxMDgwNDAxMDBaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMzE1LWFhZTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjAiphsCuzZGZGdb9mmpb8sJk5Pg7zxyea73cVWbwrlwDkg2m821/pOfnviE25 xpMs+E96wJzbUtSYkYOgkBQLzSK4Gfeq7wDWquIyCkQaWonLU6XT7uLM1B+HSNj8 JzsTXpYdswTNcLuYrc/KTehhsLeRfvzsdu8ajzYp4A9NhLg64RDPw31JLJq5RZZ2 1lE5d4itp1KFGQyUoVyP0u6T8JGDkEZ6Af3Od7phaj+uT80gjdyOa63L1ySTPutc cIjP5NeJObHybSKX2k1G2zx9pcofsduxCfcgDu7Rxx3p+miwU0sFGXK6SmTSBr4j 10SsfygZcZMvgy8gQL9qgSktAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUi+IahvAE T44GG1ckIrAGvPeMAOgwHwYDVR0jBBgwFoAUjuyxGYDtEVNPQZL03gjRss25Fsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkxREUwL0VCQTk4REY0RUMy MjExRjBBNTAwNURBMDNENkY1NkJDL2p1eXhHWUR0RVZOUFFaTDAzZ2pSc3MyNUZz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvanV5eEdZRHRFVk5QUVpMMDNnalJzczI1RnNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 MURFMC9FQkE5OERGNEVDMjIxMUYwQTUwMDVEQTAzRDZGNTZCQy9BNEM3OUM5QUVD NDYxMUYwQjQ1RjA1RTg0NTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADAOmEwDQYJKoZIhvcNAQELBQADggEBAFX2kGJus+kPhDPlHFAK5ztZ AWI5UXai6iaXf2eRLNq/pIab6WDLSZUHSFwBIhRjHV+rgPWtW7aDoevM/W19Qesb ReK1SZ9bUEFpeXODDe8VFLW7X5dlRwU1Tevk+KDm6FYE+7jP3qvfJm/PYfx2kkrg LcwV5JfXXuXjpkQa41JA87R7IGSXDPKgQCOKyAOpuF2Mh7/7yPZsPooEbmRaU8Ve mY7oLfKwp/WEwsiLGXHaPAsPNNWw1lh6Um3eI9eUMfyoUHS5nk/x3qOVmVg5MK1y CbNgnBWPnqEtRWodykFUc8ZELB66rOsyCnc6E8PNRRMN8oI9LpE2kbgIyoZ3e0Q= -----END CERTIFICATE-----Generated at Mon Mar 2 10:26:54 2026 by rpki-client