$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/7A58C8D6BBEA11EA8DF46778C4F9AE02.roa File: 7A58C8D6BBEA11EA8DF46778C4F9AE02.roa (raw, json) Hash identifier: qNcLRbE6Ajqm/JUInyygs4YSZMtzHSHAM4P3L8vI2Wk= Subject key identifier: 6F:15:61:39:68:6E:4F:CD:BA:3D:2A:79:AA:01:B9:A8:86:87:04:00 Certificate issuer: /CN=A91A0832/serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Certificate serial: 378A Authority key identifier: 9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/7A58C8D6BBEA11EA8DF46778C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:28:35 +0000 ROA not before: Sat 22 Mar 2025 15:00:54 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132165 IP address blocks: 39.34.128.0/18 maxlen: 24 59.103.138.0/23 maxlen: 24 59.103.140.0/22 maxlen: 24 59.103.192.0/19 maxlen: 24 119.152.224.0/20 maxlen: 24 119.157.64.0/20 maxlen: 24 119.157.80.0/20 maxlen: 24 119.158.64.0/24 maxlen: 24 182.189.0.0/17 maxlen: 24 182.189.192.0/18 maxlen: 24 182.190.96.0/20 maxlen: 24 182.190.192.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:45:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14218 (0x378a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0832, serialNumber=9ED9055107C70F85BB91A8DA0270B5CA760AEB54 Validity Not Before: Mar 22 15:00:54 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a48553-6180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a8:7d:02:e9:f8:f0:70:38:b5:0c:3d:b5:13: b1:3f:54:8f:93:ca:b5:e7:e9:37:d6:7b:35:2f:e8: 6f:4e:a9:60:28:92:34:b1:8f:f8:ae:1a:69:b6:65: 11:f1:1b:67:63:76:bf:88:e9:c7:0c:c5:af:22:45: cf:a1:42:7c:d7:f7:eb:c6:2e:82:a9:95:68:d6:28: 77:c1:6b:0f:a5:62:c5:9e:d0:75:6a:fa:b9:32:fa: 2a:c1:71:1d:29:0a:34:6b:fd:7d:51:db:30:e8:81: cc:09:94:8d:4a:b2:b8:24:dc:c9:42:13:f2:11:3e: 1a:3c:22:d8:0f:05:4c:72:59:54:04:fc:17:09:a7: bd:cd:c7:a0:90:89:ec:53:22:36:5e:15:30:7f:6e: b6:28:b0:b6:0e:84:6f:5c:32:4a:d0:8a:20:da:13: 5e:1b:81:63:bf:a7:11:c8:c2:2b:30:3a:06:a0:23: 0e:df:0e:cc:54:6c:36:cf:88:c0:3e:c0:45:9d:62: 5c:f1:db:09:e9:94:bf:01:64:a1:8b:2b:72:23:18: 82:47:62:7c:03:a2:d4:e9:8f:47:50:a3:ac:3a:2f: e2:46:3a:97:01:3d:e0:14:6a:5e:33:e1:6e:ae:a9: 35:88:4a:fc:f6:94:98:a1:53:0a:ad:79:3b:88:31: 96:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:15:61:39:68:6E:4F:CD:BA:3D:2A:79:AA:01:B9:A8:86:87:04:00 X509v3 Authority Key Identifier: keyid:9E:D9:05:51:07:C7:0F:85:BB:91:A8:DA:02:70:B5:CA:76:0A:EB:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/ntkFUQfHD4W7kajaAnC1ynYK61Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntkFUQfHD4W7kajaAnC1ynYK61Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0832/9DAF780E1D9411E29901F3F808B02CD2/7A58C8D6BBEA11EA8DF46778C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 39.34.128.0/18 59.103.138.0-59.103.143.255 59.103.192.0/19 119.152.224.0/20 119.157.64.0/19 119.158.64.0/24 182.189.0.0/17 182.189.192.0/18 182.190.96.0/20 182.190.192.0/19 Signature Algorithm: sha256WithRSAEncryption bd:a4:2f:63:d3:d2:33:b9:9f:70:6c:9e:1c:52:eb:67:5e:9a: 60:eb:a6:8c:d8:4a:38:40:81:21:51:45:a8:14:18:7f:d6:75: 50:e3:40:9a:bc:b8:15:58:51:2b:fa:35:57:98:33:6e:90:68: 24:75:26:fd:34:11:ca:00:35:13:11:86:42:dd:fc:20:b8:4c: 6e:ca:69:69:58:b9:88:91:3e:0c:a4:34:b4:5f:68:f1:6a:b6: 3b:d7:3e:06:43:c0:e7:2d:a9:65:b7:74:6d:9a:dd:28:27:b3: 16:9c:8e:b2:56:ae:61:e5:fc:9e:3e:b6:17:96:06:1b:c4:0f: b1:b8:e0:72:6e:4a:aa:39:87:56:f2:56:20:c7:be:4d:02:4b: 7c:82:4b:a2:02:72:44:f5:ec:be:63:f4:0c:af:c2:b2:bb:fc: 73:d5:61:c2:af:cd:9b:b3:08:b5:07:04:29:68:7f:50:da:3f: 14:77:41:63:84:d3:ac:e9:0f:41:29:a3:00:84:24:a9:04:ce: 3e:2b:1f:96:2d:5f:60:ed:f0:99:e4:5d:78:f8:58:08:46:fd: 2a:4c:f0:02:ac:d3:fb:a9:fb:09:87:82:41:83:f7:34:cc:5e: 1b:0d:65:dc:e6:3c:32:7c:6f:1b:dd:bc:71:f2:e0:31:a9:0c: fd:a6:12:76 -----BEGIN CERTIFICATE----- MIIFejCCBGKgAwIBAgICN4owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA4MzIxMTAvBgNVBAUTKDlFRDkwNTUxMDdDNzBGODVCQjkxQThEQTAyNzBCNUNB NzYwQUVCNTQwHhcNMjUwMzIyMTUwMDU0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODU1My02MTgwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuah9Aun48HA4tQw9tROxP1SPk8q15+k31ns1L+hvTqlgKJI0sY/4rhpptmUR 8RtnY3a/iOnHDMWvIkXPoUJ81/frxi6CqZVo1ih3wWsPpWLFntB1avq5MvoqwXEd KQo0a/19Udsw6IHMCZSNSrK4JNzJQhPyET4aPCLYDwVMcllUBPwXCae9zcegkIns UyI2XhUwf262KLC2DoRvXDJK0Iog2hNeG4Fjv6cRyMIrMDoGoCMO3w7MVGw2z4jA PsBFnWJc8dsJ6ZS/AWShiytyIxiCR2J8A6LU6Y9HUKOsOi/iRjqXAT3gFGpeM+Fu rqk1iEr89pSYoVMKrXk7iDGWUwIDAQABo4ICnjCCApowHQYDVR0OBBYEFG8VYTlo bk/Nuj0qeaoBuaiGhwQAMB8GA1UdIwQYMBaAFJ7ZBVEHxw+Fu5Go2gJwtcp2CutU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDgzMi85REFGNzgwRTFE OTQxMUUyOTkwMUYzRjgwOEIwMkNEMi9udGtGVVFmSEQ0VzdrYWphQW5DMXluWUs2 MVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL250a0ZVUWZIRDRXN2thamFBbkMxeW5ZSzYxUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA4MzIvOURBRjc4MEUxRDk0MTFFMjk5MDFGM0Y4MDhCMDJDRDIvN0E1OEM4RDZC QkVBMTFFQThERjQ2Nzc4QzRGOUFFMDIucm9hMF0GCCsGAQUFBwEHAQH/BE4wTDBK BAIAATBEAwQGJyKAMAwDBAE7Z4oDBAQ7Z4ADBAU7Z8ADBAR3mOADBAV3nUADBAB3 nkADBAe2vQADBAa2vcADBAS2vmADBAW2vsAwDQYJKoZIhvcNAQELBQADggEBAL2k L2PT0jO5n3BsnhxS62demmDrpozYSjhAgSFRRagUGH/WdVDjQJq8uBVYUSv6NVeY M26QaCR1Jv00EcoANRMRhkLd/CC4TG7KaWlYuYiRPgykNLRfaPFqtjvXPgZDwOct qWW3dG2a3SgnsxacjrJWrmHl/J4+theWBhvED7G44HJuSqo5h1byViDHvk0CS3yC S6ICckT17L5j9AyvwrK7/HPVYcKvzZuzCLUHBClof1DaPxR3QWOE06zpD0EpowCE JKkEzj4rH5YtX2Dt8JnkXXj4WAhG/SpM8AKs0/up+wmHgkGD9zTMXhsNZdzmPDJ8 bxvdvHHy4DGpDP2mEnY= -----END CERTIFICATE-----Generated at Mon Mar 2 08:02:35 2026 by rpki-client