$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/DF4EFA76CA7811EE838E0A73C4F9AE02.roa File: DF4EFA76CA7811EE838E0A73C4F9AE02.roa (raw, json) Hash identifier: DTZjvcop6RbUK3I8jOrrlZ7Of6WNd9BwpOwSxOrA3eA= Subject key identifier: 12:03:85:BA:E3:D6:86:5C:5F:67:F2:26:DF:8A:E8:82:EF:B0:93:CA Certificate issuer: /CN=A91C40D6/serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Certificate serial: 01F5 Authority key identifier: 76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/DF4EFA76CA7811EE838E0A73C4F9AE02.roa Signing time: Mon 14 Sep 2026 10:49:45 +0000 ROA not before: Mon 14 Sep 2026 10:49:45 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139750 IP address blocks: 138.99.216.0/22 maxlen: 22 138.99.216.0/24 maxlen: 24 138.99.217.0/24 maxlen: 24 138.99.218.0/24 maxlen: 24 138.99.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 19:35:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C40D6, serialNumber=76EF193957A86D64D3C3CDEB9E0746746EF4290A Validity Not Before: Sep 14 10:49:45 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6aa7d149-b947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:ee:4a:c7:76:63:bf:74:af:a9:3a:68:b4:86: 3b:30:1a:a6:07:71:e4:5e:c4:7c:fd:4e:56:06:75: 1f:c3:98:38:57:7d:46:11:de:13:0d:1f:2f:2f:cc: ae:ef:76:ee:3d:ba:58:d2:ad:98:3f:24:c6:f8:7c: 87:e9:8c:e7:f9:54:0a:a5:2b:95:16:2b:e7:11:e6: 24:88:de:e7:be:05:c4:ec:e1:58:4c:74:91:45:80: 71:4f:ae:0d:1d:74:d1:49:cd:64:aa:b1:56:79:fc: 6e:e1:26:11:4e:3c:1d:bd:fa:35:c7:e3:ae:ad:8f: c3:e2:73:66:43:e9:3b:31:e3:54:b7:4b:92:ee:51: 45:8d:63:c2:d7:02:ca:67:9e:5f:dd:c3:7b:ba:50: 55:53:be:12:fa:90:50:11:03:e7:51:bc:c5:24:0c: b1:bc:16:8b:15:9a:1a:0b:e9:19:53:ea:5a:f9:d6: f0:1b:a8:9b:13:14:c7:16:0f:b6:9f:c2:fc:54:f5: 06:1c:d0:85:71:0b:5c:65:c7:f0:09:a5:54:e5:4d: 95:0b:8a:9b:99:a6:07:12:be:e5:7f:c5:80:87:07: cd:d1:e4:95:63:9b:f1:6b:35:13:ea:ad:fd:ec:2a: 30:1b:83:7d:31:c1:12:6a:c8:d2:98:08:da:9a:29: c4:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:03:85:BA:E3:D6:86:5C:5F:67:F2:26:DF:8A:E8:82:EF:B0:93:CA X509v3 Authority Key Identifier: keyid:76:EF:19:39:57:A8:6D:64:D3:C3:CD:EB:9E:07:46:74:6E:F4:29:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/du8ZOVeobWTTw83rngdGdG70KQo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/du8ZOVeobWTTw83rngdGdG70KQo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D6/05F86014C53711EEB67AEB79C4F9AE02/DF4EFA76CA7811EE838E0A73C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.99.216.0/22 Signature Algorithm: sha256WithRSAEncryption 3a:62:16:f4:6f:9b:59:81:6f:26:c5:97:23:a4:f4:2e:76:c5: 92:e4:c2:83:10:5e:4c:ef:01:00:2d:8a:22:e2:00:48:74:e9: 5e:d4:2c:7d:85:90:0b:32:dd:85:03:e2:c7:8a:e8:62:c1:82: 9f:84:4c:2d:c2:d9:c8:d4:16:a1:78:62:60:50:36:00:81:4f: 02:21:33:92:f3:26:5b:16:88:a7:e0:cf:fd:ee:6c:12:d4:72: 42:1f:c8:32:d0:79:3a:da:31:57:60:e7:98:a3:64:8f:0a:b9: 0b:78:ec:54:ab:d2:75:70:02:d2:bf:1d:7c:98:9e:ec:20:c0: c6:ef:64:36:91:63:89:39:e3:c3:c3:90:83:29:9a:5c:f1:6d: 59:b6:ac:4f:7e:af:96:cc:6f:c4:08:7a:29:24:73:96:70:ee: e5:a2:2e:15:23:c7:46:3c:ff:e9:27:ea:20:0e:ab:1d:45:16: f4:d7:0a:ce:c1:a2:c7:49:c5:c8:18:f4:6c:3a:90:ef:e9:36: 82:41:9b:f0:ac:50:08:ea:5c:8a:b1:62:ca:2a:b3:c0:e1:a9: 64:29:a0:8c:79:a0:4f:74:d0:f1:a7:76:15:c4:d7:b0:7b:7b: 71:bd:5e:b3:b9:2a:a9:38:bb:4b:56:d8:c5:fb:65:f3:bb:51: cd:c2:eb:86 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzQwRDYxMTAvBgNVBAUTKDc2RUYxOTM5NTdBODZENjREM0MzQ0RFQjlFMDc0Njc0 NkVGNDI5MEEwHhcNMjYwOTE0MTA0OTQ1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE3ZDE0OS1iOTQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7e5Kx3Zjv3SvqTpotIY7MBqmB3HkXsR8/U5WBnUfw5g4V31GEd4TDR8vL8yu 73buPbpY0q2YPyTG+HyH6Yzn+VQKpSuVFivnEeYkiN7nvgXE7OFYTHSRRYBxT64N HXTRSc1kqrFWefxu4SYRTjwdvfo1x+OurY/D4nNmQ+k7MeNUt0uS7lFFjWPC1wLK Z55f3cN7ulBVU74S+pBQEQPnUbzFJAyxvBaLFZoaC+kZU+pa+dbwG6ibExTHFg+2 n8L8VPUGHNCFcQtcZcfwCaVU5U2VC4qbmaYHEr7lf8WAhwfN0eSVY5vxazUT6q39 7CowG4N9McESasjSmAjaminEVQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBIDhbrj 1oZcX2fyJt+K6ILvsJPKMB8GA1UdIwQYMBaAFHbvGTlXqG1k08PN654HRnRu9CkK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNDBENi8wNUY4NjAxNEM1 MzcxMUVFQjY3QUVCNzlDNEY5QUUwMi9kdThaT1Zlb2JXVFR3ODNybmdkR2RHNzBL UW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2R1OFpPVmVvYldUVHc4M3JuZ2RHZEc3MEtRby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzQwRDYvMDVGODYwMTRDNTM3MTFFRUI2N0FFQjc5QzRGOUFFMDIvREY0RUZBNzZD QTc4MTFFRTgzOEUwQTczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCimPYMA0GCSqGSIb3DQEBCwUAA4IBAQA6Yhb0b5tZgW8mxZcjpPQu dsWS5MKDEF5M7wEALYoi4gBIdOle1Cx9hZALMt2FA+LHiuhiwYKfhEwtwtnI1Bah eGJgUDYAgU8CITOS8yZbFoin4M/97mwS1HJCH8gy0Hk62jFXYOeYo2SPCrkLeOxU q9J1cALSvx18mJ7sIMDG72Q2kWOJOePDw5CDKZpc8W1ZtqxPfq+WzG/ECHopJHOW cO7loi4VI8dGPP/pJ+ogDqsdRRb01wrOwaLHScXIGPRsOpDv6TaCQZvwrFAI6lyK sWLKKrPA4alkKaCMeaBPdNDxp3YVxNewe3txvV6zuSqpOLtLVtjF+2Xzu1HNwuuG -----END CERTIFICATE-----Generated at Thu Sep 24 20:23:13 2026 by rpki-client