$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/8D5261CEB23611F193647F1D6011F970.roa File: 8D5261CEB23611F193647F1D6011F970.roa (raw, json) Hash identifier: Swyj/xtXs6B4h5z1HMQ81Ug9t/0dfmEs33ixMbbL9hc= Subject key identifier: 0F:DD:CB:18:1B:E8:7C:77:9A:29:32:4C:05:41:B1:E6:FA:67:DD:6E Certificate issuer: /CN=A91D2DDF/serialNumber=0C74FC00F56477B30DC63C589439422ABC868883 Certificate serial: 08 Authority key identifier: 0C:74:FC:00:F5:64:77:B3:0D:C6:3C:58:94:39:42:2A:BC:86:88:83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/8D5261CEB23611F193647F1D6011F970.roa Signing time: Mon 21 Sep 2026 10:34:57 +0000 ROA not before: Mon 21 Sep 2026 10:34:57 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 138681 IP address blocks: 144.55.6.0/23 maxlen: 23 144.55.66.0/23 maxlen: 23 144.55.67.0/24 maxlen: 24 144.55.68.0/23 maxlen: 24 144.55.70.0/23 maxlen: 24 144.55.134.0/23 maxlen: 23 144.55.135.0/24 maxlen: 24 144.55.136.0/23 maxlen: 24 144.55.138.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.crl rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D2DDF, serialNumber=0C74FC00F56477B30DC63C589439422ABC868883 Validity Not Before: Sep 21 10:34:57 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6ab10850-5a9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ba:cb:e8:d4:42:ae:32:62:35:ba:44:fe:16: 46:c7:8b:3f:68:d2:a0:15:79:80:40:67:44:5a:3e: 9f:4d:1f:48:c9:0b:eb:85:6f:b3:a3:55:62:8c:36: e3:4c:b8:1c:21:0b:85:73:bb:8d:70:bc:30:1f:bb: 06:9c:89:82:83:d5:c0:1d:bb:99:76:b6:03:ab:82: 42:47:7b:61:79:1d:19:a4:92:dc:72:e7:08:3d:f3: cc:9c:85:32:42:50:a8:5b:09:53:82:7c:9e:39:58: 52:8c:8e:8d:82:05:6f:f0:78:0f:4c:95:85:2d:5c: d2:c8:a6:05:5d:0b:9e:fd:7c:f6:4e:07:8b:37:6f: b3:b9:8d:a8:0f:ab:ca:9c:a6:0f:1c:92:26:3c:8f: 0f:fe:65:1f:ed:3d:0f:c6:77:2f:67:76:f9:66:76: 01:8c:2d:d8:96:1b:b0:1b:32:a1:4a:e9:73:f5:ce: 03:8e:f3:0f:17:b5:4d:8a:58:af:64:0c:b6:72:78: eb:c9:1f:6e:af:1a:65:5d:68:a9:75:c0:6d:99:5e: 71:c1:ce:b1:20:20:5a:0a:a6:fc:b7:17:6a:13:a2: a1:cb:4a:ea:11:cf:7f:7e:76:48:37:74:11:aa:36: 02:5a:a8:77:a2:00:be:aa:53:6c:ef:7d:39:02:3e: 75:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:DD:CB:18:1B:E8:7C:77:9A:29:32:4C:05:41:B1:E6:FA:67:DD:6E X509v3 Authority Key Identifier: keyid:0C:74:FC:00:F5:64:77:B3:0D:C6:3C:58:94:39:42:2A:BC:86:88:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/DHT8APVkd7MNxjxYlDlCKryGiIM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/DHT8APVkd7MNxjxYlDlCKryGiIM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D2DDF/4F86F596B23411F1826349B35E11F970/8D5261CEB23611F193647F1D6011F970.roa sbgp-ipAddrBlock: critical IPv4: 144.55.6.0/23 144.55.66.0-144.55.71.255 144.55.134.0-144.55.139.255 Signature Algorithm: sha256WithRSAEncryption 8f:82:25:30:5e:d7:70:a8:2e:61:82:77:e4:b1:f5:ce:e1:f4: dd:11:f2:4a:cd:d8:e7:b0:81:2f:b5:47:89:83:6d:2e:7f:fe: 86:bd:97:3b:8e:34:7c:37:fe:4b:0b:af:7e:02:ca:4f:c9:4d: a1:d8:9a:f4:55:d5:2b:fa:96:ce:3a:35:9d:9d:68:11:da:6d: a5:8a:ea:56:c9:d4:5e:88:82:98:84:ea:b2:f0:55:06:90:55: b1:0e:44:ec:91:39:1d:ef:33:9d:9a:3a:e3:5b:0b:09:45:5a: 30:08:41:37:fd:7b:08:ed:37:2b:c0:dd:54:c1:89:57:bc:9b: 23:1a:4c:ea:eb:36:89:f9:a7:23:b4:91:99:4e:87:3d:06:a6: 3c:77:b1:39:1f:b1:8d:fe:32:c9:64:48:3d:27:86:33:b7:b5: 88:0a:c7:66:a1:1a:14:27:b7:02:71:cb:bb:dc:01:1e:1f:8e: b9:00:44:cf:ad:2c:b3:af:48:e4:a0:e4:03:e9:94:8a:2e:41: f7:14:25:e0:eb:19:56:94:8d:ee:71:38:93:31:8f:9c:75:04: c4:f3:e5:d0:8c:c8:6f:7f:44:de:e9:ce:d3:49:b5:b1:98:4c: 68:fd:28:63:8e:2f:b8:5a:d0:b3:00:7b:17:1c:3d:e1:61:3e: 6d:10:13:4d -----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MkRERjExMC8GA1UEBRMoMEM3NEZDMDBGNTY0NzdCMzBEQzYzQzU4OTQzOTQyMkFC Qzg2ODg4MzAeFw0yNjA5MjExMDM0NTdaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYjEwODUwLTVhOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCbusvo1EKuMmI1ukT+FkbHiz9o0qAVeYBAZ0RaPp9NH0jJC+uFb7OjVWKMNuNM uBwhC4Vzu41wvDAfuwaciYKD1cAdu5l2tgOrgkJHe2F5HRmkktxy5wg988ychTJC UKhbCVOCfJ45WFKMjo2CBW/weA9MlYUtXNLIpgVdC579fPZOB4s3b7O5jagPq8qc pg8ckiY8jw/+ZR/tPQ/Gdy9ndvlmdgGMLdiWG7AbMqFK6XP1zgOO8w8XtU2KWK9k DLZyeOvJH26vGmVdaKl1wG2ZXnHBzrEgIFoKpvy3F2oToqHLSuoRz39+dkg3dBGq NgJaqHeiAL6qU2zvfTkCPnUFAgMBAAGjggJ8MIICeDAdBgNVHQ4EFgQUD93LGBvo fHeaKTJMBUGx5vpn3W4wHwYDVR0jBBgwFoAUDHT8APVkd7MNxjxYlDlCKryGiIMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQyRERGLzRGODZGNTk2QjIz NDExRjE4MjYzNDlCMzVFMTFGOTcwL0RIVDhBUFZrZDdNTnhqeFlsRGxDS3J5R2lJ TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvREhUOEFQVmtkN01OeGp4WWxEbENLcnlHaUlNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MkRERi80Rjg2RjU5NkIyMzQxMUYxODI2MzQ5QjM1RTExRjk3MC84RDUyNjFDRUIy MzYxMUYxOTM2NDdGMUQ2MDExRjk3MC5yb2EwOwYIKwYBBQUHAQcBAf8ELDAqMCgE AgABMCIDBAGQNwYwDAMEAZA3QgMEA5A3QDAMAwQBkDeGAwQCkDeIMA0GCSqGSIb3 DQEBCwUAA4IBAQCPgiUwXtdwqC5hgnfksfXO4fTdEfJKzdjnsIEvtUeJg20uf/6G vZc7jjR8N/5LC69+AspPyU2h2Jr0VdUr+pbOOjWdnWgR2m2liupWydReiIKYhOqy 8FUGkFWxDkTskTkd7zOdmjrjWwsJRVowCEE3/XsI7TcrwN1UwYlXvJsjGkzq6zaJ +acjtJGZToc9BqY8d7E5H7GN/jLJZEg9J4Yzt7WICsdmoRoUJ7cCccu73AEeH465 AETPrSyzr0jkoOQD6ZSKLkH3FCXg6xlWlI3ucTiTMY+cdQTE8+XQjMhvf0Te6c7T SbWxmExo/Shjji+4WtCzAHsXHD3hYT5tEBNN -----END CERTIFICATE-----Generated at Mon Sep 21 14:59:29 2026 by rpki-client