$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/ACC1DEB0960A11EC8BB4F586C4F9AE02.roa File: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (raw, json) Hash identifier: glYctxlo8gx3BenqS2wSFdBXN3gLXFdiT5hyE/Vu8Ww= Subject key identifier: C3:FF:8D:F8:67:9C:D9:CF:F7:92:2F:F5:F5:8C:A8:8D:A8:ED:10:AF Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 04C9 Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/ACC1DEB0960A11EC8BB4F586C4F9AE02.roa Signing time: Mon 02 Mar 2026 12:31:29 +0000 ROA not before: Fri 01 Aug 2025 02:07:35 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133199 IP address blocks: 217.194.132.0/24 maxlen: 24 217.194.133.0/24 maxlen: 24 217.194.134.0/24 maxlen: 24 217.194.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 12:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1225 (0x4c9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Aug 1 02:07:35 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a58321-3a9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:f9:0b:1e:16:a7:cc:db:85:69:83:98:f8:8d: 67:ac:72:71:50:24:65:a9:87:25:94:d8:56:4b:25: f3:cb:1c:cc:e3:d7:e5:44:91:6e:1a:79:6d:70:24: e2:99:e4:28:d8:e2:5c:07:e1:96:93:a7:d5:f8:f0: d0:22:e6:9c:40:04:09:97:40:ba:02:ff:ca:3e:ed: 3d:27:7b:33:a6:47:6f:c8:ef:cc:5d:f2:d7:f7:38: be:d6:e4:b8:c5:75:b0:57:bb:eb:fa:bb:5f:a0:d7: ac:af:97:83:2f:fe:b5:5d:d7:7d:f3:68:28:b0:dc: c0:75:ce:67:10:98:2c:1d:cd:94:5c:bb:50:2a:58: 91:61:f9:9b:a1:69:e3:81:1a:90:fa:48:ce:66:5c: 9e:97:f9:3a:8a:c5:cb:38:e8:cd:ff:9b:db:e6:35: f1:68:c6:ee:d2:6e:3c:19:c6:48:38:47:02:22:4c: fe:db:ad:2f:e4:45:7e:b0:7e:a4:4b:d6:5c:9b:a8: 2f:9a:31:29:cf:4b:6f:33:45:09:2b:17:82:55:00: 30:0d:43:ae:39:37:5d:07:a8:1d:0d:1e:a6:ef:dd: 51:1f:f9:6d:40:3d:f2:0d:d4:12:d2:62:78:60:27: f2:70:ea:1a:55:34:81:8b:ff:5e:5b:dd:f3:d1:d6: c6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FF:8D:F8:67:9C:D9:CF:F7:92:2F:F5:F5:8C:A8:8D:A8:ED:10:AF X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/ACC1DEB0960A11EC8BB4F586C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 217.194.132.0/22 Signature Algorithm: sha256WithRSAEncryption ca:51:4d:95:e5:b2:f7:28:7d:a0:56:65:2f:8e:13:ae:a3:29: 51:b1:5c:05:a1:06:12:f6:4c:ef:65:b4:30:83:60:c5:38:13: bf:86:ad:0a:cd:8c:bf:1e:c8:97:37:77:17:f2:b6:47:fd:2e: 53:6c:3f:e3:01:4b:78:a9:83:f4:40:2e:90:4e:5d:b9:aa:72: f6:fe:f4:d4:23:54:59:3d:1d:48:44:4d:5c:b6:ff:24:a2:21: 20:12:e5:ca:7e:e9:a8:d0:53:2a:b6:48:e9:65:fd:50:5c:09: 2b:a2:64:66:4d:9f:0e:18:59:56:1a:72:dc:81:06:e0:82:15: d1:33:82:94:85:6f:4c:e4:64:93:d6:77:82:4e:b8:5e:0b:fb: fc:bb:1d:a0:9c:ef:21:9a:b0:e4:ca:05:47:fa:42:6d:c1:bc: a9:dd:9e:2d:01:bc:14:38:35:39:66:49:91:00:6e:3b:c7:e0: 4f:a9:4b:3f:40:27:e1:f6:20:5c:84:ec:60:ee:71:4d:0d:65: 1b:dd:25:40:65:51:2e:7c:0b:ec:7d:7e:ec:91:2f:17:4b:d8: d8:3a:2a:06:f9:6d:b4:18:80:52:c4:e2:0e:48:53:62:a9:4a: 54:d1:b5:10:17:a4:34:4d:2d:70:8b:eb:d9:cc:6b:10:1e:cf: d6:3c:67:5c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBMkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjUwODAxMDIwNzM1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODMyMS0zYTlhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk/kLHhanzNuFaYOY+I1nrHJxUCRlqYcllNhWSyXzyxzM49flRJFuGnltcCTi meQo2OJcB+GWk6fV+PDQIuacQAQJl0C6Av/KPu09J3szpkdvyO/MXfLX9zi+1uS4 xXWwV7vr+rtfoNesr5eDL/61Xdd982gosNzAdc5nEJgsHc2UXLtQKliRYfmboWnj gRqQ+kjOZlyel/k6isXLOOjN/5vb5jXxaMbu0m48GcZIOEcCIkz+260v5EV+sH6k S9Zcm6gvmjEpz0tvM0UJKxeCVQAwDUOuOTddB6gdDR6m791RH/ltQD3yDdQS0mJ4 YCfycOoaVTSBi/9eW93z0dbGywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMP/jfhn nNnP95Iv9fWMqI2o7RCvMB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTUwNEUvNDRBNTE5NDg5NjA4MTFFQ0EwNEEwMDg2QzRGOUFFMDIvQUNDMURFQjA5 NjBBMTFFQzhCQjRGNTg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQC2cKEMA0GCSqGSIb3DQEBCwUAA4IBAQDKUU2V5bL3KH2gVmUvjhOu oylRsVwFoQYS9kzvZbQwg2DFOBO/hq0KzYy/HsiXN3cX8rZH/S5TbD/jAUt4qYP0 QC6QTl25qnL2/vTUI1RZPR1IRE1ctv8koiEgEuXKfumo0FMqtkjpZf1QXAkromRm TZ8OGFlWGnLcgQbgghXRM4KUhW9M5GST1neCTrheC/v8ux2gnO8hmrDkygVH+kJt wbyp3Z4tAbwUODU5ZkmRAG47x+BPqUs/QCfh9iBchOxg7nFNDWUb3SVAZVEufAvs fX7skS8XS9jYOioG+W20GIBSxOIOSFNiqUpU0bUQF6Q0TS1wi+vZzGsQHs/WPGdc -----END CERTIFICATE-----Generated at Mon Mar 2 18:36:18 2026 by rpki-client