$ rpki-client -vvf rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/F526FD64F20611F0B4D6054A4A6F56BC.roa File: F526FD64F20611F0B4D6054A4A6F56BC.roa (raw, json) Hash identifier: Gbi/liXaTJ25LBNVoW8OXNj5S66g3SHNzd+jBQM9W+U= Subject key identifier: 62:BF:07:40:51:2C:77:AF:89:FC:B7:B9:A5:71:7A:EA:90:82:E9:AC Certificate issuer: /CN=A91E585B/serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5 Certificate serial: 1B Authority key identifier: 31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/F526FD64F20611F0B4D6054A4A6F56BC.roa Signing time: Sun 01 Mar 2026 05:42:58 +0000 ROA not before: Thu 15 Jan 2026 11:40:14 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 17479 IP address blocks: 192.203.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:26:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E585B, serialNumber=31C8E4D438974EDD0E87A1C7EBD909CA1C1D12A5 Validity Not Before: Jan 15 11:40:14 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d1e2-ed79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:41:38:fa:b2:c8:b4:76:44:e7:48:51:52:93: 70:d4:bc:75:48:83:eb:3d:33:d3:61:e3:4f:37:57: 57:34:ca:e9:9e:b8:b5:34:e8:37:05:95:7f:1e:89: 41:f1:59:49:68:51:1c:d1:9a:59:ad:a7:29:1a:b1: 38:41:03:27:8a:fc:fa:e5:28:5a:46:7e:46:a3:79: 9b:53:00:9c:4e:7f:d3:10:2b:70:01:36:bf:ee:16: bf:16:5c:2a:19:50:f2:5d:3f:f3:74:be:f0:5e:aa: 89:4e:b7:03:f1:a8:9e:55:c2:5f:c5:57:a5:6f:75: c6:1c:89:35:c1:7b:4b:90:28:28:c4:90:55:c0:fe: e7:44:f2:98:9b:1f:1d:00:73:55:53:1f:b8:45:ce: 26:54:9b:09:2c:5b:ab:a3:5e:39:a5:76:43:c9:62: 97:c8:c0:d1:04:5b:ee:f9:6b:1d:f9:1b:ad:13:28: 8a:e7:ad:fb:7b:bc:f4:5c:e4:29:56:e7:b7:e0:96: de:91:d1:09:52:d2:ab:ea:49:be:71:d5:cd:cf:07: 4f:8c:b8:83:16:7a:c0:5c:00:0f:de:42:33:dc:74: 6b:e3:c7:c4:85:60:cf:13:9d:11:d0:3e:d6:c5:14: 02:fd:db:4a:cd:63:d3:94:48:cc:db:f3:3e:c0:f0: 56:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:BF:07:40:51:2C:77:AF:89:FC:B7:B9:A5:71:7A:EA:90:82:E9:AC X509v3 Authority Key Identifier: keyid:31:C8:E4:D4:38:97:4E:DD:0E:87:A1:C7:EB:D9:09:CA:1C:1D:12:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Mcjk1DiXTt0Oh6HH69kJyhwdEqU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E585B/AFD1B502F20511F0818B77324A6F56BC/F526FD64F20611F0B4D6054A4A6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 192.203.247.0/24 Signature Algorithm: sha256WithRSAEncryption 75:58:c4:78:d9:4a:49:92:12:74:1d:f1:47:b1:3b:9c:e2:18: c8:20:af:99:da:5d:e9:e3:6b:c4:34:b7:2a:0c:7d:3d:c3:32: b5:32:15:e8:b5:83:79:69:5d:e0:6d:45:1f:a3:41:ad:38:ed: 4b:38:05:d7:e9:6a:61:79:b2:d0:e9:53:3d:a3:62:ba:ac:c6: 66:c3:c5:38:dd:b8:a5:16:ff:6e:36:09:f1:72:ef:2e:2a:4f: c1:53:c1:cf:8d:c9:9e:d2:c6:32:9b:63:8a:04:f5:83:a3:68: 64:84:d5:45:70:02:ca:54:78:ba:f5:5b:7a:00:fd:0f:9f:45: 1a:b0:6f:5b:73:b2:de:5e:e9:23:db:6d:2a:4d:c5:c6:0e:99: 30:d3:6e:bc:34:42:c2:96:55:8a:d9:be:a7:3d:68:a3:4f:f1: fa:52:0d:4c:c6:6f:86:bf:8c:f8:34:e2:6c:09:bc:2b:10:51: 00:65:39:a7:b1:32:35:f1:1d:30:ac:15:f5:19:27:d8:1d:5f: a4:5c:ab:1f:6e:5f:c6:41:ab:51:f8:a9:6f:eb:22:a8:84:a8: 26:76:82:42:0e:2b:b6:22:27:75:f8:be:1f:01:85:f9:eb:e9: a3:8d:6e:45:60:1e:d1:04:66:8b:9d:05:35:bd:2d:be:7e:12: 77:6d:02:73 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NTg1QjExMC8GA1UEBRMoMzFDOEU0RDQzODk3NEVERDBFODdBMUM3RUJEOTA5Q0Ex QzFEMTJBNTAeFw0yNjAxMTUxMTQwMTRaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMWUyLWVkNzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCGQTj6ssi0dkTnSFFSk3DUvHVIg+s9M9Nh4083V1c0yumeuLU06DcFlX8eiUHx WUloURzRmlmtpykasThBAyeK/PrlKFpGfkajeZtTAJxOf9MQK3ABNr/uFr8WXCoZ UPJdP/N0vvBeqolOtwPxqJ5Vwl/FV6VvdcYciTXBe0uQKCjEkFXA/udE8pibHx0A c1VTH7hFziZUmwksW6ujXjmldkPJYpfIwNEEW+75ax35G60TKIrnrft7vPRc5ClW 57fglt6R0QlS0qvqSb5x1c3PB0+MuIMWesBcAA/eQjPcdGvjx8SFYM8TnRHQPtbF FAL920rNY9OUSMzb8z7A8FYXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUYr8HQFEs d6+J/Le5pXF66pCC6awwHwYDVR0jBBgwFoAUMcjk1DiXTt0Oh6HH69kJyhwdEqUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU1ODVCL0FGRDFCNTAyRjIw NTExRjA4MThCNzczMjRBNkY1NkJDL01jamsxRGlYVHQwT2g2SEg2OWtKeWh3ZEVx VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTWNqazFEaVhUdDBPaDZISDY5a0p5aHdkRXFVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NTg1Qi9BRkQxQjUwMkYyMDUxMUYwODE4Qjc3MzI0QTZGNTZCQy9GNTI2RkQ2NEYy MDYxMUYwQjRENjA1NEE0QTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADAy/cwDQYJKoZIhvcNAQELBQADggEBAHVYxHjZSkmSEnQd8UexO5zi GMggr5naXenja8Q0tyoMfT3DMrUyFei1g3lpXeBtRR+jQa047Us4BdfpamF5stDp Uz2jYrqsxmbDxTjduKUW/242CfFy7y4qT8FTwc+NyZ7SxjKbY4oE9YOjaGSE1UVw AspUeLr1W3oA/Q+fRRqwb1tzst5e6SPbbSpNxcYOmTDTbrw0QsKWVYrZvqc9aKNP 8fpSDUzGb4a/jPg04mwJvCsQUQBlOaexMjXxHTCsFfUZJ9gdX6Rcqx9uX8ZBq1H4 qW/rIqiEqCZ2gkIOK7YiJ3X4vh8Bhfnr6aONbkVgHtEEZoudBTW9Lb5+EndtAnM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:45:26 2026 by rpki-client