$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/38D21898F49411F08DD0DDBA746F56BC.roa File: 38D21898F49411F08DD0DDBA746F56BC.roa (raw, json) Hash identifier: 2TmQLP3BLhtpTJZcn16jZ9UXy19wv2rakTfjxerLpXo= Subject key identifier: 6C:03:49:03:D0:A0:19:BD:DE:E8:B2:DC:B2:7E:78:AC:69:6B:2F:D7 Certificate issuer: /CN=A91DE334/serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B Certificate serial: 2F Authority key identifier: AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/38D21898F49411F08DD0DDBA746F56BC.roa Signing time: Sun 01 Mar 2026 05:55:19 +0000 ROA not before: Sun 18 Jan 2026 17:36:29 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 133605 IP address blocks: 144.79.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE334, serialNumber=AD0532C6A86D4A231D00AE51FAD828F6A2B6AA8B Validity Not Before: Jan 18 17:36:29 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d4c7-0694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a8:49:2f:c5:df:b7:b0:93:98:f3:ce:91:17: d8:94:5b:4c:e6:1e:57:49:78:d3:5d:4a:c9:46:e7: d9:b8:bf:ab:2a:f4:7a:23:b7:bc:40:3a:47:dc:01: 1c:42:c5:23:f8:4e:b1:b8:3b:8e:9e:88:ba:f7:53: 4b:d7:5e:b6:ad:8e:e9:24:30:2a:09:41:69:70:ed: f6:e7:15:fc:42:07:f7:7d:2d:6d:66:1c:a2:f6:53: 30:64:b9:07:59:e8:f0:27:06:94:25:59:ba:a9:3d: 1f:7f:8d:55:ea:b9:81:d9:00:bd:47:e8:55:77:2d: 9d:8b:b8:3f:61:91:55:69:95:d0:06:7c:8e:2a:ea: 9f:ca:4b:08:20:72:63:89:3a:66:8f:8f:52:ae:ba: fa:46:7d:eb:ad:61:4c:d2:fa:3d:40:ce:b3:e4:3a: ec:69:a6:4c:99:9e:78:e0:1e:4a:8b:98:d4:fd:58: 4d:9a:80:41:7a:8a:ff:a0:7b:1e:64:39:85:76:16: a1:5d:0f:99:e6:18:3c:51:3f:9a:64:11:07:18:bf: dd:40:c2:04:79:ab:0e:c0:87:63:15:3d:9e:ab:7d: a8:52:2e:df:d3:ce:75:9f:a2:5e:34:72:d3:52:86: 0c:86:3b:b7:59:51:69:de:a4:48:c2:72:5c:45:31: fa:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:03:49:03:D0:A0:19:BD:DE:E8:B2:DC:B2:7E:78:AC:69:6B:2F:D7 X509v3 Authority Key Identifier: keyid:AD:05:32:C6:A8:6D:4A:23:1D:00:AE:51:FA:D8:28:F6:A2:B6:AA:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/rQUyxqhtSiMdAK5R-tgo9qK2qos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rQUyxqhtSiMdAK5R-tgo9qK2qos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/BC5B4BBEE57911F0836EEAA1416F56BC/38D21898F49411F08DD0DDBA746F56BC.roa sbgp-ipAddrBlock: critical IPv4: 144.79.217.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:25:a9:76:f7:1a:e3:a4:61:3a:ff:08:2b:25:f5:22:e7:c9: 07:68:6c:af:d3:d1:60:49:09:36:1c:15:2f:5a:42:8a:45:9c: 53:a5:3a:62:4c:5d:bf:00:2d:1e:b5:3b:09:4d:0e:fa:1f:cd: e2:1a:13:de:30:05:f0:ce:df:91:7f:4d:66:a1:f1:28:ec:00: 7a:a0:b1:c7:eb:e3:bb:d9:0a:cb:7d:13:29:43:2d:0b:fa:0e: 1c:1d:77:5b:60:93:da:80:d3:3f:02:a7:85:d7:eb:0c:a0:ba: b7:d9:c2:0c:52:c1:fc:54:3f:c4:3b:07:92:b6:ce:df:24:a0: d6:bf:4c:ca:ac:36:d2:8c:a0:a1:a4:a2:18:6d:f4:7d:b7:40: e6:3a:2d:c8:5d:41:bc:d3:44:4d:d4:33:00:1f:93:25:a3:cd: ce:45:f5:e0:21:0f:40:0d:6d:13:fa:a1:31:9a:97:49:74:04: f2:4a:96:2d:6f:2c:fb:27:a9:28:90:bc:ad:05:11:17:30:f6: 1a:1d:c7:36:0f:39:14:3d:91:7b:54:36:c6:ec:10:98:80:cd: a9:be:cc:05:93:01:24:af:35:4f:ce:62:01:4c:2c:0d:86:8f: a2:2c:78:ff:a6:89:7d:b6:fb:e9:33:1d:f8:e0:3c:89:fe:37: 70:97:4e:d6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RTMzNDExMC8GA1UEBRMoQUQwNTMyQzZBODZENEEyMzFEMDBBRTUxRkFEODI4RjZB MkI2QUE4QjAeFw0yNjAxMTgxNzM2MjlaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNGM3LTA2OTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDlqEkvxd+3sJOY886RF9iUW0zmHldJeNNdSslG59m4v6sq9Hojt7xAOkfcARxC xSP4TrG4O46eiLr3U0vXXratjukkMCoJQWlw7fbnFfxCB/d9LW1mHKL2UzBkuQdZ 6PAnBpQlWbqpPR9/jVXquYHZAL1H6FV3LZ2LuD9hkVVpldAGfI4q6p/KSwggcmOJ OmaPj1KuuvpGfeutYUzS+j1AzrPkOuxppkyZnnjgHkqLmNT9WE2agEF6iv+gex5k OYV2FqFdD5nmGDxRP5pkEQcYv91AwgR5qw7Ah2MVPZ6rfahSLt/TznWfol40ctNS hgyGO7dZUWnepEjCclxFMfoTAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUbANJA9Cg Gb3e6LLcsn54rGlrL9cwHwYDVR0jBBgwFoAUrQUyxqhtSiMdAK5R+tgo9qK2qosw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzM0L0JDNUI0QkJFRTU3 OTExRjA4MzZFRUFBMTQxNkY1NkJDL3JRVXl4cWh0U2lNZEFLNVItdGdvOXFLMnFv cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvclFVeXhxaHRTaU1kQUs1Ui10Z285cUsycW9zLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RTMzNC9CQzVCNEJCRUU1NzkxMUYwODM2RUVBQTE0MTZGNTZCQy8zOEQyMTg5OEY0 OTQxMUYwOEREMEREQkE3NDZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACQT9kwDQYJKoZIhvcNAQELBQADggEBAAwlqXb3GuOkYTr/CCsl9SLn yQdobK/T0WBJCTYcFS9aQopFnFOlOmJMXb8ALR61OwlNDvofzeIaE94wBfDO35F/ TWah8SjsAHqgscfr47vZCst9EylDLQv6Dhwdd1tgk9qA0z8Cp4XX6wygurfZwgxS wfxUP8Q7B5K2zt8koNa/TMqsNtKMoKGkohht9H23QOY6LchdQbzTRE3UMwAfkyWj zc5F9eAhD0ANbRP6oTGal0l0BPJKli1vLPsnqSiQvK0FERcw9hodxzYPORQ9kXtU NsbsEJiAzam+zAWTASSvNU/OYgFMLA2Gj6IseP+miX22++kzHfjgPIn+N3CXTtY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:10:38 2026 by rpki-client