$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/09820DBA626411EEB46F7861C4F9AE02.roa File: 09820DBA626411EEB46F7861C4F9AE02.roa (raw, json) Hash identifier: dDxuC87LE2uDP4p1prsgTCHk6pn7i2T3T6rQrGM2lz4= Subject key identifier: D5:30:AF:D4:1D:9F:F9:A8:BA:FB:83:72:C0:B1:5B:01:26:7B:92:6F Certificate issuer: /CN=A91CFF62/serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Certificate serial: 01DA Authority key identifier: 58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/09820DBA626411EEB46F7861C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:00:48 +0000 ROA not before: Fri 21 Mar 2025 04:09:50 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 14618 IP address blocks: 192.245.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFF62, serialNumber=583CBC7BC966145790C9F6F223688ADAFE5AD3B8 Validity Not Before: Mar 21 04:09:50 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a41c5f-39eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ae:40:44:29:70:31:c7:4a:df:e8:c5:87:30: d8:c1:cb:79:c8:97:53:30:1e:97:4a:cf:01:75:1d: 9f:a0:9a:37:f9:52:1f:3c:e0:c6:2c:af:e9:a4:6a: 4a:92:77:bb:0d:d0:fa:bd:88:5a:ea:ba:a0:8f:ac: 77:ed:e1:a5:f5:39:42:f9:05:5b:8c:dc:25:ca:3d: 13:c4:89:fb:2e:bd:52:ab:14:49:bf:19:03:6b:4e: 94:a5:40:18:b3:fc:0c:52:a4:24:90:dc:28:88:e7: 12:d9:70:59:12:bc:80:3b:46:98:5e:23:2d:c8:f9: 32:a4:c3:ba:df:45:2d:a8:4e:d2:df:85:1e:4e:3c: f0:67:92:b1:59:62:31:5c:8a:2c:94:73:0b:11:6d: 43:b7:8c:bc:70:81:c2:b8:e7:3e:3f:bf:fd:e8:43: 62:54:19:f2:87:2a:b1:19:c4:ad:76:95:c4:42:c5: e4:f5:85:11:22:88:f0:08:3d:ae:11:c3:2b:aa:52: 3c:8e:12:45:88:56:e2:ff:9f:e7:ca:8d:3d:d6:e5: 30:b6:99:63:0c:9d:41:70:7a:45:bf:e4:0d:e1:1f: a5:a3:81:6b:95:c3:57:a0:ce:b9:b0:43:b2:91:02: 3d:28:51:1f:9c:ff:93:9b:6d:59:a8:a8:d1:a4:a6: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:30:AF:D4:1D:9F:F9:A8:BA:FB:83:72:C0:B1:5B:01:26:7B:92:6F X509v3 Authority Key Identifier: keyid:58:3C:BC:7B:C9:66:14:57:90:C9:F6:F2:23:68:8A:DA:FE:5A:D3:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/WDy8e8lmFFeQyfbyI2iK2v5a07g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WDy8e8lmFFeQyfbyI2iK2v5a07g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/11F4D8D0626211EE80BC855DC4F9AE02/09820DBA626411EEB46F7861C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.245.106.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:be:d5:7e:15:be:2e:16:ce:8d:1d:6e:e7:7a:0a:12:05:5f: 8f:5e:6e:75:6f:19:02:02:7d:40:6b:0c:ae:df:63:98:ba:f4: 3a:0d:02:94:37:fb:c3:54:4f:45:f0:b9:90:bb:a1:a6:58:f7: a8:04:7d:4d:45:ef:05:23:25:53:be:3d:01:a4:2f:38:92:b7: 1d:7c:8a:b3:45:b4:e8:e3:0a:7d:1d:ef:aa:da:36:99:2f:7e: 61:b1:24:dd:bd:4a:a0:7e:80:69:ef:2f:99:aa:54:2c:29:7c: 1a:8c:13:47:2f:9d:04:00:78:d3:a7:33:e6:a4:48:e9:1b:b5: 64:e3:b7:16:b6:89:7f:00:5b:bc:be:4e:51:ba:f2:31:71:03: 49:3c:ad:5e:0a:f7:a3:01:8f:dd:b2:41:1f:52:23:35:67:44: 20:37:5e:a2:9a:b8:d7:f2:49:e5:25:12:66:59:01:5a:39:f2: 00:51:2c:67:f3:80:fa:a2:1c:70:52:96:6a:86:71:72:c1:80: 2c:8d:fa:ed:17:e6:73:31:49:64:73:13:95:b9:3b:89:04:10: 93:7e:c3:a8:8f:d9:60:88:62:8d:6c:f1:82:d4:be:ac:8c:7d: f4:25:5b:cf:59:44:aa:d4:7c:0c:89:6c:04:62:ee:dc:3c:57: 07:69:18:13 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGNjIxMTAvBgNVBAUTKDU4M0NCQzdCQzk2NjE0NTc5MEM5RjZGMjIzNjg4QURB RkU1QUQzQjgwHhcNMjUwMzIxMDQwOTUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWM1Zi0zOWViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq65ARClwMcdK3+jFhzDYwct5yJdTMB6XSs8BdR2foJo3+VIfPODGLK/ppGpK kne7DdD6vYha6rqgj6x37eGl9TlC+QVbjNwlyj0TxIn7Lr1SqxRJvxkDa06UpUAY s/wMUqQkkNwoiOcS2XBZEryAO0aYXiMtyPkypMO630UtqE7S34UeTjzwZ5KxWWIx XIoslHMLEW1Dt4y8cIHCuOc+P7/96ENiVBnyhyqxGcStdpXEQsXk9YURIojwCD2u EcMrqlI8jhJFiFbi/5/nyo091uUwtpljDJ1BcHpFv+QN4R+lo4FrlcNXoM65sEOy kQI9KFEfnP+Tm21ZqKjRpKbU4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNUwr9Qd n/mouvuDcsCxWwEme5JvMB8GA1UdIwQYMBaAFFg8vHvJZhRXkMn28iNoitr+WtO4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkY2Mi8xMUY0RDhEMDYy NjIxMUVFODBCQzg1NURDNEY5QUUwMi9XRHk4ZThsbUZGZVF5ZmJ5STJpSzJ2NWEw N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1dEeThlOGxtRkZlUXlmYnlJMmlLMnY1YTA3Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGNjIvMTFGNEQ4RDA2MjYyMTFFRTgwQkM4NTVEQzRGOUFFMDIvMDk4MjBEQkE2 MjY0MTFFRUI0NkY3ODYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwPVqMA0GCSqGSIb3DQEBCwUAA4IBAQCMvtV+Fb4uFs6NHW7negoS BV+PXm51bxkCAn1Aawyu32OYuvQ6DQKUN/vDVE9F8LmQu6GmWPeoBH1NRe8FIyVT vj0BpC84krcdfIqzRbTo4wp9He+q2jaZL35hsSTdvUqgfoBp7y+ZqlQsKXwajBNH L50EAHjTpzPmpEjpG7Vk47cWtol/AFu8vk5RuvIxcQNJPK1eCvejAY/dskEfUiM1 Z0QgN16imrjX8knlJRJmWQFaOfIAUSxn84D6ohxwUpZqhnFywYAsjfrtF+ZzMUlk cxOVuTuJBBCTfsOoj9lgiGKNbPGC1L6sjH30JVvPWUSq1HwMiWwEYu7cPFcHaRgT -----END CERTIFICATE-----Generated at Mon Mar 2 09:01:32 2026 by rpki-client