$ rpki-client -vvf rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/3F7E724808FA11F1B69E3FD3313D8C67.roa File: 3F7E724808FA11F1B69E3FD3313D8C67.roa (raw, json) Hash identifier: NZDM0P5b400zVrhyd2jzSLfxw/qGeaxR3jXe0NSn67o= Subject key identifier: BE:D4:96:EC:10:7C:80:BA:AA:54:6D:E1:EA:E0:6A:C9:EE:28:7F:57 Certificate issuer: /CN=A919DB08/serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828 Certificate serial: 20 Authority key identifier: 23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/3F7E724808FA11F1B69E3FD3313D8C67.roa Signing time: Fri 27 Mar 2026 08:44:45 +0000 ROA not before: Fri 27 Mar 2026 08:44:45 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 8075 IP address blocks: 137.132.48.0/24 maxlen: 24 137.132.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919DB08, serialNumber=2391FB4D9AED44AB80E6AFD8D820A1C064439828 Validity Not Before: Mar 27 08:44:45 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69c6437c-e7ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7d:65:28:f8:77:8d:79:b6:02:e8:c4:f7:6b: 70:49:45:49:79:aa:89:76:0b:51:f4:ab:b0:10:e1: 57:3e:2b:af:12:e8:07:8f:67:a8:3f:0d:6e:b5:2e: c0:02:2c:24:e8:76:e9:5a:81:72:b8:a3:9c:64:f9: 06:5a:b2:6e:14:a5:a1:d1:2a:25:0f:ba:f5:fc:18: e5:40:57:9f:c0:de:94:89:a2:72:ab:9e:5d:85:54: 1f:e9:a5:b4:fa:62:be:f5:14:7c:58:bb:3f:4e:0f: 27:6f:08:ef:b7:c4:5b:5a:f6:57:9e:38:d9:c0:c7: ab:88:d3:73:d4:07:c7:4e:56:25:da:82:96:f9:95: 2c:6e:0e:78:09:0c:96:e1:d4:62:cc:71:ad:00:15: 37:35:99:a1:aa:e9:4c:9e:19:6e:d8:f2:85:ac:46: 7b:e4:d9:a6:42:90:71:4f:19:69:22:ce:18:4f:40: 96:3a:35:6a:e4:69:15:ed:5d:f5:33:8d:9b:64:b4: 2b:1d:5c:fb:6d:74:34:0a:c8:1e:da:36:ff:69:31: aa:55:7c:c5:6c:cd:d0:b5:1e:31:c4:3a:1e:af:b2: 2c:b8:d0:07:b0:74:5f:94:20:fe:d6:a8:8e:b1:47: 1e:c4:d3:f4:4b:34:3a:32:91:b4:9c:38:9f:04:d2: 75:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D4:96:EC:10:7C:80:BA:AA:54:6D:E1:EA:E0:6A:C9:EE:28:7F:57 X509v3 Authority Key Identifier: keyid:23:91:FB:4D:9A:ED:44:AB:80:E6:AF:D8:D8:20:A1:C0:64:43:98:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/I5H7TZrtRKuA5q_Y2CChwGRDmCg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/I5H7TZrtRKuA5q_Y2CChwGRDmCg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919DB08/3886E8B808F911F18084D086313D8C67/3F7E724808FA11F1B69E3FD3313D8C67.roa sbgp-ipAddrBlock: critical IPv4: 137.132.48.0/23 Signature Algorithm: sha256WithRSAEncryption af:4a:b1:58:86:d7:c0:6f:ea:d8:19:f4:ef:f7:4d:57:58:16: 51:ba:7b:9c:69:60:2d:61:34:21:44:ec:47:ea:10:18:0e:22: c3:f9:3e:63:dc:ae:4b:75:f0:07:84:30:70:fc:e9:4f:68:26: e1:74:27:5c:ef:54:04:55:90:14:25:06:2d:94:d8:0b:56:ce: 80:9b:8a:2e:af:9f:75:83:de:10:93:a7:db:dd:20:ff:c4:76: 3c:be:1c:55:01:4b:65:5b:4e:72:c3:30:97:89:ef:46:ad:2d: ad:07:6d:23:6d:26:c8:2b:57:fd:7a:42:87:22:42:18:c1:1c: 9f:0d:d6:dc:1a:47:59:83:bb:01:e5:51:ea:59:e5:c2:41:81: cc:dd:46:43:18:f5:3d:25:1c:99:68:b3:70:91:32:98:bc:8f: f1:ac:39:38:be:b5:91:22:50:63:c6:26:9b:3e:80:8d:39:d7: 64:ab:be:61:54:a5:ab:97:e2:b9:8f:41:1b:a8:ee:e3:96:23: cf:17:37:b6:dc:5c:c4:a7:18:c5:ac:06:5f:e1:12:8b:8e:e7: c4:60:82:37:35:9e:19:37:ad:92:60:e9:77:6a:75:c8:6b:e6: bc:b6:b5:53:60:cf:10:2f:02:d6:af:69:96:cf:f2:07:fd:ef: e9:bd:43:ff -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 REIwODExMC8GA1UEBRMoMjM5MUZCNEQ5QUVENDRBQjgwRTZBRkQ4RDgyMEExQzA2 NDQzOTgyODAeFw0yNjAzMjcwODQ0NDVaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzY0MzdjLWU3YWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpfWUo+HeNebYC6MT3a3BJRUl5qol2C1H0q7AQ4Vc+K68S6AePZ6g/DW61LsAC LCTodulagXK4o5xk+QZasm4UpaHRKiUPuvX8GOVAV5/A3pSJonKrnl2FVB/ppbT6 Yr71FHxYuz9ODydvCO+3xFta9leeONnAx6uI03PUB8dOViXagpb5lSxuDngJDJbh 1GLMca0AFTc1maGq6UyeGW7Y8oWsRnvk2aZCkHFPGWkizhhPQJY6NWrkaRXtXfUz jZtktCsdXPttdDQKyB7aNv9pMapVfMVszdC1HjHEOh6vsiy40AewdF+UIP7WqI6x Rx7E0/RLNDoykbScOJ8E0nUZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUvtSW7BB8 gLqqVG3h6uBqye4of1cwHwYDVR0jBBgwFoAUI5H7TZrtRKuA5q/Y2CChwGRDmCgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTlEQjA4LzM4ODZFOEI4MDhG OTExRjE4MDg0RDA4NjMxM0Q4QzY3L0k1SDdUWnJ0Ukt1QTVxX1kyQ0Nod0dSRG1D Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSTVIN1RacnRSS3VBNXFfWTJDQ2h3R1JEbUNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 REIwOC8zODg2RThCODA4RjkxMUYxODA4NEQwODYzMTNEOEM2Ny8zRjdFNzI0ODA4 RkExMUYxQjY5RTNGRDMzMTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGJhDAwDQYJKoZIhvcNAQELBQADggEBAK9KsViG18Bv6tgZ9O/3TVdY FlG6e5xpYC1hNCFE7EfqEBgOIsP5PmPcrkt18AeEMHD86U9oJuF0J1zvVARVkBQl Bi2U2AtWzoCbii6vn3WD3hCTp9vdIP/Edjy+HFUBS2VbTnLDMJeJ70atLa0HbSNt JsgrV/16QociQhjBHJ8N1twaR1mDuwHlUepZ5cJBgczdRkMY9T0lHJlos3CRMpi8 j/GsOTi+tZEiUGPGJps+gI0512SrvmFUpauX4rmPQRuo7uOWI88XN7bcXMSnGMWs Bl/hEouO58Rggjc1nhk3rZJg6Xdqdchr5ry2tVNgzxAvAtavaZbP8gf97+m9Q/8= -----END CERTIFICATE-----Generated at Fri Apr 17 14:14:05 2026 by rpki-client