$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A1C0742EFDF811EEA4D57274C4F9AE02.roa File: A1C0742EFDF811EEA4D57274C4F9AE02.roa (raw, json) Hash identifier: weDayyeYutvx0b8e1SLUbhE0mFruNtfvUzk0Kx4AkzY= Subject key identifier: D0:75:09:09:D7:4B:26:02:17:AC:47:9F:F3:6C:D6:D1:E6:9A:CE:56 Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0216 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A1C0742EFDF811EEA4D57274C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:00:31 +0000 ROA not before: Sun 29 Jun 2025 02:50:49 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 36184 IP address blocks: 217.10.226.0/24 maxlen: 24 217.10.229.0/24 maxlen: 24 217.10.230.0/24 maxlen: 24 217.10.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 534 (0x216) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Jun 29 02:50:49 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a4386f-0ac0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:45:28:9b:b1:c4:f5:f9:bf:5c:76:c7:61:88: 9f:f5:fc:04:4d:1e:ce:10:b1:26:af:db:b3:dc:9a: 0b:e7:b8:ad:4a:5e:9e:c3:0b:1d:0b:22:6d:f7:3d: 69:e8:c2:8a:4a:17:15:b6:98:af:fd:82:87:f3:7a: 23:8a:04:fc:84:f4:91:05:7f:03:90:d3:a8:5b:38: 45:1a:d7:b2:c0:f3:e4:54:d4:c9:89:79:26:54:e5: d8:3f:fe:15:9f:76:44:63:7e:03:ea:6a:e8:13:bd: 84:0f:fd:ea:55:fc:d5:4c:6d:88:39:06:88:a4:e3: d0:a9:9f:4f:b8:88:7c:e9:34:59:5b:ae:b4:8b:b3: 1f:48:00:66:77:90:55:91:b3:f7:8d:21:fd:98:fe: a0:08:9e:16:c9:5d:15:51:d7:b2:f6:d1:40:b1:cd: 87:b7:c6:ab:77:2f:19:ee:9c:75:64:23:13:51:26: 99:f9:41:1d:d2:78:21:18:56:59:33:d3:97:e3:95: b5:e8:e1:5e:a9:bf:59:e5:d3:84:b0:11:f1:e7:de: a0:fa:93:75:9c:6f:28:a8:a6:6f:7f:bf:38:99:53: b6:21:00:a0:8b:34:6b:58:ba:8c:61:95:d5:70:38: f8:b3:1d:19:05:54:c6:39:45:dd:35:21:d8:28:19: 0f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:75:09:09:D7:4B:26:02:17:AC:47:9F:F3:6C:D6:D1:E6:9A:CE:56 X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A1C0742EFDF811EEA4D57274C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 217.10.226.0/24 217.10.229.0-217.10.231.255 Signature Algorithm: sha256WithRSAEncryption a7:35:33:75:1c:3b:d2:a9:33:85:f6:33:94:dd:80:94:fa:78: 8d:4e:24:a0:3d:50:9f:9a:48:f3:fd:8f:35:b8:d8:db:6c:e1: bf:0e:6b:b1:ee:56:05:9b:66:5d:9f:1b:cb:5c:56:9d:9d:78: 35:72:a8:a2:2f:a1:5e:f8:fd:8c:2c:e4:8f:b4:71:c0:4e:01: 57:e3:b2:a8:ca:11:bc:37:6c:1d:e5:8f:28:47:05:8b:0b:e2: 79:aa:fc:3a:46:a2:1d:3b:6b:ca:a7:fb:b4:88:00:2d:ca:39: 3c:15:37:8a:8b:a1:36:8b:9a:18:d1:6f:09:b7:7a:8d:f5:e1: d9:27:46:88:2f:9a:30:21:2c:0f:c3:81:11:62:7f:92:61:9f: 1e:5a:2e:09:d4:36:e8:f6:2d:29:89:c7:08:8f:10:45:4e:dd: 30:77:3d:fb:31:b4:44:40:89:2b:b0:eb:7d:88:2c:cb:d3:d7: fb:5b:b3:00:27:57:be:bc:08:06:eb:0f:ad:4e:b0:14:b8:d6: 74:a7:ce:af:62:7d:38:74:96:75:99:22:32:f1:d7:60:5c:2f: 49:bf:f0:c7:53:66:4e:38:99:ee:07:94:0d:3d:7e:51:c6:1f: 05:59:4e:46:cb:be:55:07:e1:06:7b:dd:4e:13:96:ae:9d:8f: 89:85:58:6c -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAhYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjUwNjI5MDI1MDQ5WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0Mzg2Zi0wYWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvkUom7HE9fm/XHbHYYif9fwETR7OELEmr9uz3JoL57itSl6ewwsdCyJt9z1p 6MKKShcVtpiv/YKH83ojigT8hPSRBX8DkNOoWzhFGteywPPkVNTJiXkmVOXYP/4V n3ZEY34D6mroE72ED/3qVfzVTG2IOQaIpOPQqZ9PuIh86TRZW660i7MfSABmd5BV kbP3jSH9mP6gCJ4WyV0VUdey9tFAsc2Ht8ardy8Z7px1ZCMTUSaZ+UEd0nghGFZZ M9OX45W16OFeqb9Z5dOEsBHx596g+pN1nG8oqKZvf784mVO2IQCgizRrWLqMYZXV cDj4sx0ZBVTGOUXdNSHYKBkPRwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFNB1CQnX SyYCF6xHn/Ns1tHmms5WMB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkVCRTkvOTRDOUI4NzgwMDVEMTFFRUJFN0E5MjQxQzRGOUFFMDIvQTFDMDc0MkVG REY4MTFFRUE0RDU3Mjc0QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQA2QriMAwDBADZCuUDBAPZCuAwDQYJKoZIhvcNAQELBQADggEBAKc1 M3UcO9KpM4X2M5TdgJT6eI1OJKA9UJ+aSPP9jzW42Nts4b8Oa7HuVgWbZl2fG8tc Vp2deDVyqKIvoV74/Yws5I+0ccBOAVfjsqjKEbw3bB3ljyhHBYsL4nmq/DpGoh07 a8qn+7SIAC3KOTwVN4qLoTaLmhjRbwm3eo314dknRogvmjAhLA/DgRFif5Jhnx5a LgnUNuj2LSmJxwiPEEVO3TB3PfsxtERAiSuw632ILMvT1/tbswAnV768CAbrD61O sBS41nSnzq9ifTh0lnWZIjLx12BcL0m/8MdTZk44me4HlA09flHGHwVZTkbLvlUH 4QZ73U4Tlq6dj4mFWGw= -----END CERTIFICATE-----Generated at Mon Mar 2 10:38:32 2026 by rpki-client