$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1018/340A818AA27511F1A59D5388ADEE528E/13CDB8E6A85211F183567FDB3E11F970.roa File: 13CDB8E6A85211F183567FDB3E11F970.roa (raw, json) Hash identifier: riz+DWf+qj0hl3M3jtEzf6TB7PxWlM7KcWmqWYYcDfc= Subject key identifier: E4:E0:F7:DE:4F:99:39:69:91:B9:2B:48:70:C5:88:13:12:07:36:3C Certificate issuer: /CN=A91B1018/serialNumber=615AFB751E3281297217773285CE60E62630F6F6 Certificate serial: 06 Authority key identifier: 61:5A:FB:75:1E:32:81:29:72:17:77:32:85:CE:60:E6:26:30:F6:F6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YVr7dR4ygSlyF3cyhc5g5iYw9vY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1018/340A818AA27511F1A59D5388ADEE528E/13CDB8E6A85211F183567FDB3E11F970.roa Signing time: Fri 04 Sep 2026 11:16:30 +0000 ROA not before: Fri 04 Sep 2026 11:16:30 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 131562 IP address blocks: 134.49.240.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1018/340A818AA27511F1A59D5388ADEE528E/YVr7dR4ygSlyF3cyhc5g5iYw9vY.crl rsync://rpki.apnic.net/member_repository/A91B1018/340A818AA27511F1A59D5388ADEE528E/YVr7dR4ygSlyF3cyhc5g5iYw9vY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YVr7dR4ygSlyF3cyhc5g5iYw9vY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 23:40:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1018, serialNumber=615AFB751E3281297217773285CE60E62630F6F6 Validity Not Before: Sep 4 11:16:30 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6a9aa88e-90e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:28:ac:b6:be:98:ff:42:ac:f6:1c:1a:b1:5e: d7:16:fd:d8:63:a2:17:f3:6f:e1:78:61:c5:e1:4f: 59:ac:80:c6:c0:c9:3c:5c:c7:fe:48:af:f5:d0:29: 72:eb:17:0d:6b:e4:54:f0:0b:05:9b:97:04:2e:b0: 01:5d:1f:54:25:5c:85:82:77:aa:2e:e5:4f:25:23: f4:8b:d4:d7:8a:b3:b8:1f:3a:22:c5:e1:c9:91:ad: 86:c2:6d:81:75:7d:c5:e3:d4:60:04:13:1a:0e:4d: c1:17:b2:8f:75:71:76:37:1d:c4:8e:0a:ac:ff:b4: 00:8f:db:81:9d:ef:d6:b4:f4:2e:e7:59:1d:92:15: 42:be:c4:cb:d8:bf:72:c1:38:10:2f:96:06:55:1b: 49:be:b6:4e:4f:23:10:11:72:b0:71:9c:24:c4:e1: 2d:5c:b4:21:9a:6a:d1:e2:66:6b:d4:7f:da:af:7b: 4a:0e:6a:a0:c2:c5:4a:6c:ca:1d:fc:d0:cd:2f:d8: 3f:fe:61:7d:1e:35:0f:8d:ac:fa:ff:61:f4:b1:55: d5:89:e6:24:27:5e:44:70:6e:f5:34:39:74:6b:4c: 78:08:3b:85:07:86:03:ec:8e:b9:96:d2:c5:1e:0a: 23:60:b2:60:2b:c6:4a:3f:02:48:7f:74:cb:f2:50: c8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E0:F7:DE:4F:99:39:69:91:B9:2B:48:70:C5:88:13:12:07:36:3C X509v3 Authority Key Identifier: keyid:61:5A:FB:75:1E:32:81:29:72:17:77:32:85:CE:60:E6:26:30:F6:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1018/340A818AA27511F1A59D5388ADEE528E/YVr7dR4ygSlyF3cyhc5g5iYw9vY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YVr7dR4ygSlyF3cyhc5g5iYw9vY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1018/340A818AA27511F1A59D5388ADEE528E/13CDB8E6A85211F183567FDB3E11F970.roa sbgp-ipAddrBlock: critical IPv4: 134.49.240.0/22 Signature Algorithm: sha256WithRSAEncryption 73:b9:0c:74:d5:b6:67:a3:c3:b6:40:bf:71:6e:32:5d:c0:67: 92:f6:1b:2f:c0:86:00:92:e8:06:f0:2d:87:19:2f:4d:4c:84: 36:9c:c0:11:34:7f:cf:c6:35:69:cc:7b:77:ad:ca:e1:50:01: 2f:86:bc:17:f0:e8:1d:1f:95:06:61:0a:11:49:47:85:1c:77: e5:3d:de:29:ce:67:34:76:42:62:a0:d5:32:cf:a3:2d:bb:2b: e1:ae:77:66:b8:80:a7:67:0d:4f:bb:22:24:e4:f9:d5:cf:ed: 91:eb:eb:8c:29:e6:b0:ac:35:67:44:70:4f:a6:a6:f0:50:00: 30:f3:a6:1b:8f:b9:ab:e5:89:4b:d5:57:b0:dc:0f:4f:ea:4c: b2:a4:28:64:b3:d3:c0:b8:53:d7:86:ea:58:63:af:04:3d:4c: 07:79:27:e2:67:21:86:12:2e:96:4d:2d:19:89:ce:b2:91:3e: 21:ec:92:41:f1:5d:3d:da:83:03:8f:48:c8:93:c4:0e:12:7a: af:a7:0d:ec:dc:c0:c1:43:5e:90:9f:93:f7:af:ce:21:df:32: 28:ff:a8:2b:77:e7:4f:4e:33:2e:7b:14:11:62:c6:f5:f7:e9: 75:98:7f:ba:42:f3:76:b4:43:ea:90:bd:af:37:4b:a4:6e:43: 25:a6:43:e6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTAxODExMC8GA1UEBRMoNjE1QUZCNzUxRTMyODEyOTcyMTc3NzMyODVDRTYwRTYy NjMwRjZGNjAeFw0yNjA5MDQxMTE2MzBaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOWFhODhlLTkwZTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC0KKy2vpj/Qqz2HBqxXtcW/dhjohfzb+F4YcXhT1msgMbAyTxcx/5Ir/XQKXLr Fw1r5FTwCwWblwQusAFdH1QlXIWCd6ou5U8lI/SL1NeKs7gfOiLF4cmRrYbCbYF1 fcXj1GAEExoOTcEXso91cXY3HcSOCqz/tACP24Gd79a09C7nWR2SFUK+xMvYv3LB OBAvlgZVG0m+tk5PIxARcrBxnCTE4S1ctCGaatHiZmvUf9qve0oOaqDCxUpsyh38 0M0v2D/+YX0eNQ+NrPr/YfSxVdWJ5iQnXkRwbvU0OXRrTHgIO4UHhgPsjrmW0sUe CiNgsmArxko/Akh/dMvyUMgdAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU5OD33k+Z OWmRuStIcMWIExIHNjwwHwYDVR0jBBgwFoAUYVr7dR4ygSlyF3cyhc5g5iYw9vYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxMDE4LzM0MEE4MThBQTI3 NTExRjFBNTlENTM4OEFERUU1MjhFL1lWcjdkUjR5Z1NseUYzY3loYzVnNWlZdzl2 WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWVZyN2RSNHlnU2x5RjNjeWhjNWc1aVl3OXZZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTAxOC8zNDBBODE4QUEyNzUxMUYxQTU5RDUzODhBREVFNTI4RS8xM0NEQjhFNkE4 NTIxMUYxODM1NjdGREIzRTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAKGMfAwDQYJKoZIhvcNAQELBQADggEBAHO5DHTVtmejw7ZAv3FuMl3A Z5L2Gy/AhgCS6AbwLYcZL01MhDacwBE0f8/GNWnMe3etyuFQAS+GvBfw6B0flQZh ChFJR4Ucd+U93inOZzR2QmKg1TLPoy27K+Gud2a4gKdnDU+7IiTk+dXP7ZHr64wp 5rCsNWdEcE+mpvBQADDzphuPuavliUvVV7DcD0/qTLKkKGSz08C4U9eG6lhjrwQ9 TAd5J+JnIYYSLpZNLRmJzrKRPiHskkHxXT3agwOPSMiTxA4Seq+nDezcwMFDXpCf k/evziHfMij/qCt3509OMy57FBFixvX36XWYf7pC83a0Q+qQva83S6RuQyWmQ+Y= -----END CERTIFICATE-----Generated at Tue Sep 22 22:52:45 2026 by rpki-client