$ rpki-client -vvf rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/CF1B3152CCE111EB90AF2C7AC4F9AE02.roa File: CF1B3152CCE111EB90AF2C7AC4F9AE02.roa (raw, json) Hash identifier: twJcU0dvcEBMbuiZq5Wi1cC3xSMhYlFvAN7WKpOcESs= Subject key identifier: D6:64:E6:66:5D:A7:21:A4:30:12:3A:D5:16:4D:FC:31:E4:8F:72:9D Certificate issuer: /CN=A91A86D0/serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Certificate serial: 0CC9 Authority key identifier: 16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/CF1B3152CCE111EB90AF2C7AC4F9AE02.roa Signing time: Sun 01 Mar 2026 17:01:16 +0000 ROA not before: Tue 02 Dec 2025 17:17:58 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 134739 IP address blocks: 185.205.140.0/22 maxlen: 22 185.205.140.0/24 maxlen: 24 185.205.141.0/24 maxlen: 24 185.205.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3273 (0xcc9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A86D0, serialNumber=16331676211AEE6773485B65233C62C3A4587AFD Validity Not Before: Dec 2 17:17:58 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a470db-80d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:17:64:f0:15:05:6f:d9:64:f5:a0:eb:0a: 7c:a2:fb:ab:90:65:c5:da:5f:21:68:0a:e5:22:37: 87:01:e9:60:c4:5b:8d:8a:1a:64:00:66:5d:80:17: 87:cf:30:49:92:f3:7e:62:04:ed:88:3d:e5:3a:9d: 89:15:15:6d:d5:b3:57:56:58:5b:47:1d:b9:67:bc: 1e:de:74:c1:81:71:ff:22:13:78:3c:54:80:e6:b4: de:f2:90:86:b6:c3:25:f2:b3:94:59:06:66:e8:c7: 8e:38:a9:2f:1e:c9:81:6d:df:7c:f8:0b:ba:e2:a6: e5:3c:60:53:09:ab:c9:3b:c7:14:5c:1c:13:14:5f: 33:90:d3:d4:e6:bb:94:21:76:29:29:b1:37:d4:e2: 43:88:d4:a0:83:f8:e1:53:3e:14:4c:5d:0d:a9:ad: 20:cc:00:1d:a9:86:af:05:c2:ba:6e:af:80:4c:8b: 9d:87:b5:48:78:91:9d:66:07:7a:3f:c6:d5:55:d3: 5c:cb:8b:3d:bf:72:a2:8e:0e:9b:bd:1d:69:23:87: 4b:1f:84:89:f3:e5:78:dd:73:bf:e2:6e:3b:ec:5c: 68:41:40:f8:74:ae:58:16:3c:30:46:a6:8d:47:6c: 6f:08:f6:3a:e2:59:80:ce:2a:3e:98:e2:30:13:de: 46:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:64:E6:66:5D:A7:21:A4:30:12:3A:D5:16:4D:FC:31:E4:8F:72:9D X509v3 Authority Key Identifier: keyid:16:33:16:76:21:1A:EE:67:73:48:5B:65:23:3C:62:C3:A4:58:7A:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/FjMWdiEa7mdzSFtlIzxiw6RYev0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/FjMWdiEa7mdzSFtlIzxiw6RYev0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A86D0/8D8F0ABE0B5A11EA90923066C4F9AE02/CF1B3152CCE111EB90AF2C7AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 185.205.140.0/22 Signature Algorithm: sha256WithRSAEncryption b2:30:25:bd:0e:f0:18:66:b0:3a:bb:74:9b:2f:fb:2b:e0:9d: 6f:bc:78:80:7d:2c:c7:4f:bf:71:20:85:b7:a3:86:5e:dc:36: 89:6c:04:4b:97:20:3f:2d:cd:db:11:ac:44:b9:42:0a:ab:1d: d3:62:2a:ea:08:35:c7:4c:a7:f3:8b:7d:79:0d:de:be:9b:e7: 8e:f2:c3:dd:5a:a2:b4:7d:97:0d:13:f4:62:09:40:5b:42:77: 5d:4a:a7:5e:c4:54:ad:e9:59:68:46:a4:03:36:3e:d8:28:93: 20:3c:d3:56:c5:1c:fc:2a:78:99:9f:76:e8:e4:a2:ee:29:b7: 7d:f2:ca:8c:47:9a:7c:88:86:c1:2d:1c:50:32:18:53:75:23: e9:e8:28:63:0c:cf:bc:56:9b:80:57:8a:5a:66:f9:56:ba:41: 5f:91:2f:bf:87:d0:88:25:3f:e8:a4:ee:93:ce:cf:57:cd:c5: e7:36:a9:2a:ce:54:f2:fa:1d:10:86:d8:67:83:48:b1:aa:f6: 1d:de:c3:f7:5e:d7:dd:3e:b7:4b:cd:59:50:f2:07:16:66:e3: 3f:c7:fc:23:08:e0:a2:e1:42:69:e5:9c:fc:b3:45:4f:21:ea: 2e:ce:e2:e4:5f:97:a0:94:10:44:d5:9a:f4:c7:10:ff:0a:cf: 3a:29:18:eb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTg2RDAxMTAvBgNVBAUTKDE2MzMxNjc2MjExQUVFNjc3MzQ4NUI2NTIzM0M2MkMz QTQ1ODdBRkQwHhcNMjUxMjAyMTcxNzU4WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzBkYi04MGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwE0XZPAVBW/ZZPWg6wp8ovurkGXF2l8haArlIjeHAelgxFuNihpkAGZdgBeH zzBJkvN+YgTtiD3lOp2JFRVt1bNXVlhbRx25Z7we3nTBgXH/IhN4PFSA5rTe8pCG tsMl8rOUWQZm6MeOOKkvHsmBbd98+Au64qblPGBTCavJO8cUXBwTFF8zkNPU5ruU IXYpKbE31OJDiNSgg/jhUz4UTF0Nqa0gzAAdqYavBcK6bq+ATIudh7VIeJGdZgd6 P8bVVdNcy4s9v3Kijg6bvR1pI4dLH4SJ8+V43XO/4m477FxoQUD4dK5YFjwwRqaN R2xvCPY64lmAzio+mOIwE95GuQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNZk5mZd pyGkMBI61RZN/DHkj3KdMB8GA1UdIwQYMBaAFBYzFnYhGu5nc0hbZSM8YsOkWHr9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBODZEMC84RDhGMEFCRTBC NUExMUVBOTA5MjMwNjZDNEY5QUUwMi9Gak1XZGlFYTdtZHpTRnRsSXp4aXc2Ulll djAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0ZqTVdkaUVhN21kelNGdGxJenhpdzZSWWV2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTg2RDAvOEQ4RjBBQkUwQjVBMTFFQTkwOTIzMDY2QzRGOUFFMDIvQ0YxQjMxNTJD Q0UxMTFFQjkwQUYyQzdBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCuc2MMA0GCSqGSIb3DQEBCwUAA4IBAQCyMCW9DvAYZrA6u3SbL/sr 4J1vvHiAfSzHT79xIIW3o4Ze3DaJbARLlyA/Lc3bEaxEuUIKqx3TYirqCDXHTKfz i315Dd6+m+eO8sPdWqK0fZcNE/RiCUBbQnddSqdexFSt6VloRqQDNj7YKJMgPNNW xRz8KniZn3bo5KLuKbd98sqMR5p8iIbBLRxQMhhTdSPp6ChjDM+8VpuAV4paZvlW ukFfkS+/h9CIJT/opO6Tzs9XzcXnNqkqzlTy+h0Qhthng0ixqvYd3sP3XtfdPrdL zVlQ8gcWZuM/x/wjCOCi4UJp5Zz8s0VPIeouzuLkX5eglBBE1Zr0xxD/Cs86KRjr -----END CERTIFICATE-----Generated at Mon Mar 2 07:38:38 2026 by rpki-client