$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/B3598D60B58E11F1A2B2E4956C11F970.roa File: B3598D60B58E11F1A2B2E4956C11F970.roa (raw, json) Hash identifier: PTbcFT3tPgE1Nv0Y3QWVYbUfneVmNyIpN0txrIvRut4= Subject key identifier: 66:B5:04:F5:90:0C:0C:4E:85:E9:AC:95:C6:C4:3E:47:20:11:96:59 Certificate issuer: /CN=A91CEA40/serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D Certificate serial: 49 Authority key identifier: B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/B3598D60B58E11F1A2B2E4956C11F970.roa Signing time: Mon 21 Sep 2026 07:33:13 +0000 ROA not before: Mon 21 Sep 2026 07:33:13 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 139898 IP address blocks: 207.241.186.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 Oct 2026 22:18:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73 (0x49) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEA40, serialNumber=B47850C467FECB419D7A59D811AC5E6A27A00F1D Validity Not Before: Sep 21 07:33:13 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6ab0ddb9-efe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:e5:e8:ce:28:1f:b5:8a:2e:da:bd:64:d8:68: 5b:0b:18:03:30:67:29:90:14:13:f0:13:80:7c:a7: 45:a9:64:a2:fc:f9:1f:6a:6f:ea:6e:78:e0:bc:7f: 26:85:94:ae:f4:cd:ed:92:56:6a:9e:9c:d6:93:9c: fe:7e:a5:2e:7d:00:dd:c2:81:ea:3a:86:d6:36:1d: b0:d0:f2:0f:45:72:0c:a6:bc:99:10:e5:8c:58:5b: 7e:50:04:bf:e4:ad:e4:a5:f6:f6:8f:54:9e:3e:0e: 4e:09:5b:c3:95:8b:b2:9b:48:0b:f5:72:90:89:71: 2d:ef:a7:e6:b5:b9:37:b4:32:62:2a:d7:f2:ed:ff: cb:e1:07:c5:1c:17:d8:cc:19:7b:bf:94:27:22:5b: 86:3a:5a:46:7a:74:a7:6a:5e:9a:d6:be:8f:e1:ec: 8d:b5:98:6e:e3:11:34:42:ba:05:93:64:ba:e4:60: 8f:6c:10:64:58:6b:5e:16:44:95:1e:dc:5e:04:27: e4:99:df:13:8e:d2:7b:29:e6:c7:e6:96:a9:cc:fe: df:56:8b:b9:15:cd:1f:09:12:22:2f:0e:cb:0a:43: ae:25:54:84:66:dc:1d:02:7f:d2:ad:1a:97:01:c0: e3:b1:7c:55:33:c9:3e:d5:11:1d:9a:e7:41:8b:da: 40:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B5:04:F5:90:0C:0C:4E:85:E9:AC:95:C6:C4:3E:47:20:11:96:59 X509v3 Authority Key Identifier: keyid:B4:78:50:C4:67:FE:CB:41:9D:7A:59:D8:11:AC:5E:6A:27:A0:0F:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/tHhQxGf-y0GdelnYEaxeaiegDx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tHhQxGf-y0GdelnYEaxeaiegDx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEA40/4EEEA1A6490C11F1AF633C9181EE528E/B3598D60B58E11F1A2B2E4956C11F970.roa sbgp-ipAddrBlock: critical IPv4: 207.241.186.0/23 Signature Algorithm: sha256WithRSAEncryption a1:ac:12:2e:ab:31:6e:6c:ea:40:b5:0c:41:d9:da:24:c2:55: 76:13:57:48:4b:20:73:fc:24:e6:37:c9:67:22:ab:cf:b7:15: 6f:17:46:82:00:e2:9e:b8:ca:a0:2f:0b:a8:db:f3:3e:b9:e3: 9d:07:0c:97:78:bf:f7:04:b3:94:e9:67:23:41:9e:7b:44:78: fe:a4:44:fa:c0:27:63:7c:0d:bd:59:ff:61:1c:70:43:1a:cd: 3b:98:58:74:5f:a8:81:61:25:29:dc:a8:64:64:2f:ad:75:b3: 6c:85:89:2b:ef:04:3e:f6:4f:d4:13:0c:89:50:9a:92:9b:aa: 53:72:b4:3c:b9:f9:ea:92:c3:e7:96:51:fc:9f:e3:14:60:ae: d7:d4:29:0d:90:76:26:86:28:4d:3a:b5:4f:3f:2a:99:6a:47: de:7d:4f:3d:dc:16:58:5c:08:dc:41:e5:db:6e:84:3b:74:e3: cd:0e:9c:8e:68:4e:ff:0e:4b:0a:ec:72:01:7b:82:27:18:46: 8a:ec:2b:7d:77:b0:4b:d0:f4:6f:9a:2e:33:90:f8:1e:ed:6f: 3a:64:dc:a6:07:37:3e:93:ff:cf:6f:ae:fb:af:69:3b:2d:1a: 74:fb:51:90:6b:32:38:d1:6e:a4:8a:99:57:ce:b7:6a:26:79: e2:90:84:11 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBSTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RUE0MDExMC8GA1UEBRMoQjQ3ODUwQzQ2N0ZFQ0I0MTlEN0E1OUQ4MTFBQzVFNkEy N0EwMEYxRDAeFw0yNjA5MjEwNzMzMTNaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYjBkZGI5LWVmZTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZ5ejOKB+1ii7avWTYaFsLGAMwZymQFBPwE4B8p0WpZKL8+R9qb+pueOC8fyaF lK70ze2SVmqenNaTnP5+pS59AN3Cgeo6htY2HbDQ8g9FcgymvJkQ5YxYW35QBL/k reSl9vaPVJ4+Dk4JW8OVi7KbSAv1cpCJcS3vp+a1uTe0MmIq1/Lt/8vhB8UcF9jM GXu/lCciW4Y6WkZ6dKdqXprWvo/h7I21mG7jETRCugWTZLrkYI9sEGRYa14WRJUe 3F4EJ+SZ3xOO0nsp5sfmlqnM/t9Wi7kVzR8JEiIvDssKQ64lVIRm3B0Cf9KtGpcB wOOxfFUzyT7VER2a50GL2kDFAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUZrUE9ZAM DE6F6ayVxsQ+RyARllkwHwYDVR0jBBgwFoAUtHhQxGf+y0GdelnYEaxeaiegDx0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFQTQwLzRFRUVBMUE2NDkw QzExRjFBRjYzM0M5MTgxRUU1MjhFL3RIaFF4R2YteTBHZGVsbllFYXhlYWllZ0R4 MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdEhoUXhHZi15MEdkZWxuWUVheGVhaWVnRHgwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RUE0MC80RUVFQTFBNjQ5MEMxMUYxQUY2MzNDOTE4MUVFNTI4RS9CMzU5OEQ2MEI1 OEUxMUYxQTJCMkU0OTU2QzExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAHP8bowDQYJKoZIhvcNAQELBQADggEBAKGsEi6rMW5s6kC1DEHZ2iTC VXYTV0hLIHP8JOY3yWciq8+3FW8XRoIA4p64yqAvC6jb8z65450HDJd4v/cEs5Tp ZyNBnntEeP6kRPrAJ2N8Db1Z/2EccEMazTuYWHRfqIFhJSncqGRkL611s2yFiSvv BD72T9QTDIlQmpKbqlNytDy5+eqSw+eWUfyf4xRgrtfUKQ2QdiaGKE06tU8/Kplq R959Tz3cFlhcCNxB5dtuhDt0480OnI5oTv8OSwrscgF7gicYRorsK313sEvQ9G+a LjOQ+B7tbzpk3KYHNz6T/89vrvuvaTstGnT7UZBrMjjRbqSKmVfOt2omeeKQhBE= -----END CERTIFICATE-----Generated at Sun Sep 27 06:40:07 2026 by rpki-client