$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/304D9EDEF13A11F0A5B04E41566F56BC.roa File: 304D9EDEF13A11F0A5B04E41566F56BC.roa (raw, json) Hash identifier: AC/jIeXBOHw70y2QOJSmCZ+NDE9I0e7M9WpwuYpLz9U= Subject key identifier: DB:DB:15:2E:29:14:7A:D8:3F:E5:11:96:6E:CC:F2:B3:FB:FE:E2:62 Certificate issuer: /CN=A91E4EEF/serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B Certificate serial: 4B Authority key identifier: 1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/304D9EDEF13A11F0A5B04E41566F56BC.roa Signing time: Mon 02 Mar 2026 14:23:20 +0000 ROA not before: Wed 14 Jan 2026 11:14:27 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 137967 IP address blocks: 144.79.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.crl rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:23:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75 (0x4b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EEF, serialNumber=1CB95F3F7BDE6E199B740B9282AC722A4EDA999B Validity Not Before: Jan 14 11:14:27 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a59d58-c44e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a4:1a:08:7b:ac:f1:7c:6f:d1:f3:17:a0:94: 3f:f2:44:90:91:fe:ce:04:84:1f:67:44:51:03:fa: 08:71:f6:f1:2a:8e:07:35:ba:90:cc:d5:eb:55:2f: ed:72:f7:ad:4a:e2:22:26:15:d3:80:51:b0:ba:91: e1:f6:26:e5:ec:72:25:cc:20:01:91:bc:60:ba:e1: c6:a1:c1:e2:a2:10:21:d7:60:69:b7:a3:ff:32:0a: 2c:32:8c:63:52:60:05:d0:75:23:7c:a2:95:02:7f: c4:ed:a1:5c:e3:d6:57:a7:3f:84:31:b4:53:08:c4: 01:53:8b:49:c5:fa:f2:82:52:73:59:6c:e2:29:3e: 02:4d:e9:63:ea:cf:05:fd:85:07:be:71:59:71:87: 87:fd:c9:c0:8e:c4:35:a7:7c:20:5a:a8:3c:fd:66: d8:ad:58:f5:e0:67:4b:9f:44:cc:e2:08:a2:e6:43: c2:b3:54:48:b6:65:92:47:ed:a4:28:c9:f4:b7:c4: 0f:20:6c:ee:28:30:00:6f:b9:99:7d:79:9b:14:6a: 11:5c:d5:6c:31:60:e4:1a:70:25:69:72:77:58:9e: cc:1d:89:97:23:00:b4:48:1b:e5:3a:df:22:2b:20: 28:96:78:39:98:92:a5:6a:f5:eb:6b:8e:2d:49:2a: e7:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:DB:15:2E:29:14:7A:D8:3F:E5:11:96:6E:CC:F2:B3:FB:FE:E2:62 X509v3 Authority Key Identifier: keyid:1C:B9:5F:3F:7B:DE:6E:19:9B:74:0B:92:82:AC:72:2A:4E:DA:99:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/HLlfP3vebhmbdAuSgqxyKk7amZs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/HLlfP3vebhmbdAuSgqxyKk7amZs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EEF/CEA836BADEF311F09ED41296576F56BC/304D9EDEF13A11F0A5B04E41566F56BC.roa sbgp-ipAddrBlock: critical IPv4: 144.79.185.0/24 Signature Algorithm: sha256WithRSAEncryption 59:3f:90:da:f2:98:03:db:40:ac:ef:d1:94:34:74:7b:83:38: bb:ae:db:0d:0a:4c:71:54:71:ed:42:4c:76:3f:d1:18:bf:3e: 39:2b:d6:ed:8a:b9:1c:d1:85:7a:06:52:0a:c4:66:ba:2f:9b: ab:bd:cf:1a:ad:41:45:64:88:f1:d2:ea:35:aa:c7:ca:73:c4: 97:b2:58:56:4c:33:b2:32:d0:99:10:a5:43:89:8f:7a:01:b5: 49:b8:c9:75:13:6a:53:10:2d:24:cb:52:55:9e:6b:7d:2b:32: 55:44:e2:9e:e5:83:c0:4b:b0:68:2a:39:0e:db:f2:7b:7c:f2: 58:67:4c:37:1b:fa:4a:97:78:93:03:82:84:7d:7a:64:01:e1: 8f:ea:77:79:3d:68:13:b4:34:4b:36:fd:36:8b:a6:7f:2e:db: d5:fc:cb:36:6c:33:c9:fb:3c:31:51:32:69:bd:12:80:b7:b0: 22:c1:a4:9a:b5:08:56:ed:0c:06:21:3f:0b:e1:95:7a:db:52: 34:9a:d0:34:a3:03:92:1a:66:30:e4:c4:17:a7:5e:4d:94:5a: 5f:56:11:9b:ff:90:a9:44:b7:30:ac:21:1c:f3:96:70:72:e5: 66:41:30:a6:fa:02:5d:7a:a3:d3:7d:04:52:18:eb:f8:3a:79: 70:69:46:fe -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBSzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NEVFRjExMC8GA1UEBRMoMUNCOTVGM0Y3QkRFNkUxOTlCNzQwQjkyODJBQzcyMkE0 RURBOTk5QjAeFw0yNjAxMTQxMTE0MjdaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTU5ZDU4LWM0NGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQClpBoIe6zxfG/R8xeglD/yRJCR/s4EhB9nRFED+ghx9vEqjgc1upDM1etVL+1y 961K4iImFdOAUbC6keH2JuXsciXMIAGRvGC64cahweKiECHXYGm3o/8yCiwyjGNS YAXQdSN8opUCf8TtoVzj1lenP4QxtFMIxAFTi0nF+vKCUnNZbOIpPgJN6WPqzwX9 hQe+cVlxh4f9ycCOxDWnfCBaqDz9ZtitWPXgZ0ufRMziCKLmQ8KzVEi2ZZJH7aQo yfS3xA8gbO4oMABvuZl9eZsUahFc1WwxYOQacCVpcndYnswdiZcjALRIG+U63yIr ICiWeDmYkqVq9etrji1JKudhAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU29sVLikU etg/5RGWbszys/v+4mIwHwYDVR0jBBgwFoAUHLlfP3vebhmbdAuSgqxyKk7amZsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU0RUVGL0NFQTgzNkJBREVG MzExRjA5RUQ0MTI5NjU3NkY1NkJDL0hMbGZQM3ZlYmhtYmRBdVNncXh5S2s3YW1a cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSExsZlAzdmViaG1iZEF1U2dxeHlLazdhbVpzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVFRi9DRUE4MzZCQURFRjMxMUYwOUVENDEyOTY1NzZGNTZCQy8zMDREOUVERUYx M0ExMUYwQTVCMDRFNDE1NjZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACQT7kwDQYJKoZIhvcNAQELBQADggEBAFk/kNrymAPbQKzv0ZQ0dHuD OLuu2w0KTHFUce1CTHY/0Ri/Pjkr1u2KuRzRhXoGUgrEZrovm6u9zxqtQUVkiPHS 6jWqx8pzxJeyWFZMM7Iy0JkQpUOJj3oBtUm4yXUTalMQLSTLUlWea30rMlVE4p7l g8BLsGgqOQ7b8nt88lhnTDcb+kqXeJMDgoR9emQB4Y/qd3k9aBO0NEs2/TaLpn8u 29X8yzZsM8n7PDFRMmm9EoC3sCLBpJq1CFbtDAYhPwvhlXrbUjSa0DSjA5IaZjDk xBenXk2UWl9WEZv/kKlEtzCsIRzzlnBy5WZBMKb6Al16o9N9BFIY6/g6eXBpRv4= -----END CERTIFICATE-----Generated at Mon Mar 2 19:21:13 2026 by rpki-client