$ rpki-client -vvf rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/D5BFBE9E591811EF80AA9F21C4F9AE02.roa File: D5BFBE9E591811EF80AA9F21C4F9AE02.roa (raw, json) Hash identifier: lJ8a2BmLR6pDdgSaGE66enyNc/gqE+gsClVSBRvWGto= Subject key identifier: FD:B7:9D:D7:80:97:EA:43:51:CB:ED:DE:47:A3:25:CE:C9:60:98:78 Certificate issuer: /CN=A91D462A/serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Certificate serial: 0137 Authority key identifier: 0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/D5BFBE9E591811EF80AA9F21C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:29:31 +0000 ROA not before: Mon 10 Nov 2025 16:04:37 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 9484 IP address blocks: 192.82.88.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:29:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 311 (0x137) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D462A, serialNumber=0DAF4F1AC58198931AD5C0007F5255A79DD0E4C7 Validity Not Before: Nov 10 16:04:37 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45b5b-dfee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:a6:cc:0a:63:3d:1b:f4:3d:dd:97:58:af:75: 66:2d:17:d6:fa:a2:55:39:a4:a2:dc:27:3e:2c:75: 82:8c:bb:ed:ae:95:65:53:80:d1:d1:b7:80:82:1c: e3:67:29:d6:9c:de:18:8e:97:6e:af:21:3a:96:4f: 19:c2:ec:f5:71:8c:d7:8f:49:21:d2:c2:b2:53:95: d3:80:f3:0b:33:9c:b3:2f:72:07:11:45:5c:66:31: ca:da:7f:98:d7:a1:dd:1c:6a:96:25:15:0b:ca:71: d7:f4:c6:c6:cc:d7:b4:48:7b:58:ee:7e:cd:bb:2e: 91:b1:fb:d7:a4:bd:0c:35:57:b2:5c:fc:85:35:ca: 0b:fa:56:07:b1:e9:72:42:c0:0f:29:b0:54:4d:df: 26:3a:71:77:ec:38:47:39:97:1e:a9:b5:92:f2:fa: 8e:d6:65:55:49:29:e9:9f:4f:19:7f:4f:32:48:32: 70:2b:ca:73:3b:94:6e:71:88:b1:ca:ef:57:74:05: 24:6b:03:c6:cc:55:3b:42:36:d1:52:0d:34:11:ed: 42:58:b3:be:a7:df:a4:2a:ea:16:bd:57:c3:47:55: 35:d4:74:b0:d8:d6:bc:fc:d8:11:17:2e:3a:f1:76: eb:8e:17:6d:0c:93:5c:28:e7:23:f6:0f:3f:37:8a: 4a:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:B7:9D:D7:80:97:EA:43:51:CB:ED:DE:47:A3:25:CE:C9:60:98:78 X509v3 Authority Key Identifier: keyid:0D:AF:4F:1A:C5:81:98:93:1A:D5:C0:00:7F:52:55:A7:9D:D0:E4:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Da9PGsWBmJMa1cAAf1JVp53Q5Mc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D462A/4EBA846E585611EF9414455FC4F9AE02/D5BFBE9E591811EF80AA9F21C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.82.88.0/22 Signature Algorithm: sha256WithRSAEncryption 48:f3:8e:f5:09:46:6f:cc:ba:d3:82:ae:41:ec:30:ef:74:7e: e1:b6:44:3d:61:70:f7:3c:3c:a4:02:de:6c:4a:7d:e7:4a:c4: 2b:d9:ac:34:b0:16:96:75:b8:13:e4:27:ec:3c:ee:28:20:90: 4f:1d:0c:c1:f2:75:69:fa:f7:21:ff:09:cc:37:14:22:c5:88: d9:30:e6:71:8b:89:d2:94:8c:05:b9:5b:7d:1c:a7:92:07:1e: 9f:27:06:6e:f7:11:60:9f:9c:5a:36:74:47:29:ba:47:27:43: 74:6b:6f:2f:b4:49:64:42:20:29:ce:24:bd:8d:8a:0e:89:49: a3:42:68:bc:87:18:3e:1b:36:72:e4:8e:04:f2:c4:3e:6b:2f: cb:3e:a3:bd:51:8e:e4:f7:01:3a:c7:2e:a7:93:65:0f:09:0a: 57:56:be:99:f1:58:b1:4b:a9:5d:d3:fc:92:35:4e:3c:c4:b7: 78:57:c5:c8:64:17:c5:fe:40:e6:ca:72:77:4a:59:37:23:f5: 84:ef:3a:b2:44:c7:8a:52:73:6b:57:02:be:e9:f0:69:bc:8c: 33:75:9f:b1:08:d5:ad:fe:cc:92:1a:08:e0:9e:2d:da:f6:76: 96:9c:86:0c:50:3c:d7:f1:07:21:76:95:c0:84:be:5f:53:33: 71:e9:2d:54 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICATcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ2MkExMTAvBgNVBAUTKDBEQUY0RjFBQzU4MTk4OTMxQUQ1QzAwMDdGNTI1NUE3 OUREMEU0QzcwHhcNMjUxMTEwMTYwNDM3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWI1Yi1kZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+abMCmM9G/Q93ZdYr3VmLRfW+qJVOaSi3Cc+LHWCjLvtrpVlU4DR0beAghzj ZynWnN4YjpduryE6lk8Zwuz1cYzXj0kh0sKyU5XTgPMLM5yzL3IHEUVcZjHK2n+Y 16HdHGqWJRULynHX9MbGzNe0SHtY7n7Nuy6RsfvXpL0MNVeyXPyFNcoL+lYHsely QsAPKbBUTd8mOnF37DhHOZceqbWS8vqO1mVVSSnpn08Zf08ySDJwK8pzO5RucYix yu9XdAUkawPGzFU7QjbRUg00Ee1CWLO+p9+kKuoWvVfDR1U11HSw2Na8/NgRFy46 8XbrjhdtDJNcKOcj9g8/N4pKJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFP23ndeA l+pDUcvt3kejJc7JYJh4MB8GA1UdIwQYMBaAFA2vTxrFgZiTGtXAAH9SVaed0OTH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDYyQS80RUJBODQ2RTU4 NTYxMUVGOTQxNDQ1NUZDNEY5QUUwMi9EYTlQR3NXQm1KTWExY0FBZjFKVnA1M1E1 TWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RhOVBHc1dCbUpNYTFjQUFmMUpWcDUzUTVNYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ2MkEvNEVCQTg0NkU1ODU2MTFFRjk0MTQ0NTVGQzRGOUFFMDIvRDVCRkJFOUU1 OTE4MTFFRjgwQUE5RjIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCwFJYMA0GCSqGSIb3DQEBCwUAA4IBAQBI8471CUZvzLrTgq5B7DDv dH7htkQ9YXD3PDykAt5sSn3nSsQr2aw0sBaWdbgT5CfsPO4oIJBPHQzB8nVp+vch /wnMNxQixYjZMOZxi4nSlIwFuVt9HKeSBx6fJwZu9xFgn5xaNnRHKbpHJ0N0a28v tElkQiApziS9jYoOiUmjQmi8hxg+GzZy5I4E8sQ+ay/LPqO9UY7k9wE6xy6nk2UP CQpXVr6Z8VixS6ld0/ySNU48xLd4V8XIZBfF/kDmynJ3Slk3I/WE7zqyRMeKUnNr VwK+6fBpvIwzdZ+xCNWt/sySGgjgni3a9naWnIYMUDzX8QchdpXAhL5fUzNx6S1U -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:25 2026 by rpki-client