$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/FE8AECB2607511F0901D374BC4F9AE02.roa File: FE8AECB2607511F0901D374BC4F9AE02.roa (raw, json) Hash identifier: cVJ6MvA/GWz5prsZvSjMnc4ruMNdwieFGWa8BnQJoyI= Subject key identifier: 71:D5:89:B2:51:16:A5:8B:74:30:FB:6E:2B:4A:DB:44:65:59:FC:FD Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 07FE Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/FE8AECB2607511F0901D374BC4F9AE02.roa Signing time: Sun 01 Mar 2026 21:25:32 +0000 ROA not before: Fri 27 Feb 2026 09:41:51 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131445 IP address blocks: 14.207.0.0/21 maxlen: 21 14.207.0.0/24 maxlen: 24 14.207.1.0/24 maxlen: 24 14.207.2.0/24 maxlen: 24 14.207.3.0/24 maxlen: 24 14.207.4.0/24 maxlen: 24 14.207.5.0/24 maxlen: 24 14.207.6.0/24 maxlen: 24 14.207.32.0/24 maxlen: 24 14.207.33.0/24 maxlen: 24 14.207.34.0/24 maxlen: 24 14.207.35.0/24 maxlen: 24 14.207.36.0/24 maxlen: 24 14.207.37.0/24 maxlen: 24 14.207.38.0/24 maxlen: 24 14.207.39.0/24 maxlen: 24 14.207.40.0/24 maxlen: 24 14.207.41.0/24 maxlen: 24 14.207.42.0/24 maxlen: 24 14.207.43.0/24 maxlen: 24 14.207.44.0/24 maxlen: 24 14.207.45.0/24 maxlen: 24 14.207.46.0/24 maxlen: 24 14.207.47.0/24 maxlen: 24 14.207.48.0/24 maxlen: 24 14.207.49.0/24 maxlen: 24 14.207.50.0/24 maxlen: 24 14.207.51.0/24 maxlen: 24 14.207.52.0/24 maxlen: 24 14.207.53.0/24 maxlen: 24 14.207.54.0/24 maxlen: 24 14.207.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2046 (0x7fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: Feb 27 09:41:51 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4aecc-9a09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:8b:da:dd:09:68:5d:a0:42:45:81:d3:c0:4e: d5:a8:83:41:e6:0f:aa:73:7a:ab:25:35:94:e3:3f: 57:58:ae:6e:d5:39:35:5a:97:f5:da:9c:16:ed:8d: 81:bd:43:34:01:db:c5:d9:82:fa:b0:e5:f5:ee:93: 24:98:e5:20:23:bc:fc:ad:c1:23:6b:30:54:94:44: 3c:4f:a9:03:dc:34:78:35:48:22:8b:f0:8b:03:57: 90:02:02:57:e0:36:e6:6f:23:76:b4:7f:8d:33:03: 5e:c5:86:9f:1b:7e:84:5c:1e:8c:b5:24:60:12:4e: ce:20:77:36:81:a5:07:59:ba:dd:f4:f4:14:74:53: a1:fc:10:dd:e8:1e:f2:88:31:1a:ef:8d:86:ac:8d: f0:b3:9a:2f:30:28:cf:f0:ac:44:de:2f:f9:b3:05: 77:46:a4:55:fa:00:0a:62:c5:bb:73:1c:50:b7:65: 8f:07:e7:de:53:52:3e:74:c0:9f:f3:da:34:ed:52: fa:3a:6b:f4:87:99:a5:29:c9:e7:69:e9:c3:62:b6: 26:60:e3:06:5c:18:33:ba:bd:34:8b:30:d1:79:1a: ad:09:6a:27:04:d9:e0:cc:ac:9b:2e:16:8a:e4:25: a5:be:4b:b3:69:8b:1f:b1:bb:0a:1b:08:6c:e1:10: 6b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:D5:89:B2:51:16:A5:8B:74:30:FB:6E:2B:4A:DB:44:65:59:FC:FD X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/FE8AECB2607511F0901D374BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.207.0.0/21 14.207.32.0-14.207.55.255 Signature Algorithm: sha256WithRSAEncryption 0b:fc:44:9f:9a:be:ea:bc:3e:d0:6b:6e:e1:5a:a8:5d:17:a3: 46:58:09:ac:c4:2b:a7:38:93:1b:d7:18:95:9d:99:e1:95:dd: f5:51:4c:c3:ba:d8:ae:a4:25:7d:6b:d2:a9:00:f5:40:c4:3a: 31:29:be:ea:fb:92:94:f2:68:ca:65:72:f6:57:ee:32:97:cf: 36:ad:ad:b4:2c:9c:c2:1f:cf:f4:9f:10:99:13:6f:ab:97:3d: 4d:72:17:d1:0e:8c:b8:38:d0:da:e4:57:dc:2e:dc:5d:d1:18: 5c:30:bc:4b:62:3e:03:85:86:ca:06:e4:d0:e4:08:71:e1:1f: 97:3b:e8:80:b4:58:5b:ff:d2:64:77:67:c5:f0:44:2d:d1:55: 2a:65:5f:fb:96:5e:a2:0a:6d:91:8f:82:5e:96:4d:55:ad:6f: 65:70:4b:5f:47:4f:cf:aa:3c:bd:6e:6d:b5:3f:5b:66:7f:38: be:88:bf:f6:1a:a2:e2:ce:04:7d:95:78:9b:fa:b7:c5:71:19: 6e:3d:96:b9:1d:d1:03:f5:49:ad:78:bf:bb:91:7d:4b:2d:f7: 4e:36:b6:63:c0:0d:92:62:0c:02:4d:63:31:4b:18:1c:6f:bf: c4:a1:4c:ee:94:5e:ec:07:b6:c9:77:4f:bc:79:1a:a7:42:f8: 36:ef:da:e3 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICB/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjYwMjI3MDk0MTUxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWVjYy05YTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5Yva3QloXaBCRYHTwE7VqINB5g+qc3qrJTWU4z9XWK5u1Tk1Wpf12pwW7Y2B vUM0AdvF2YL6sOX17pMkmOUgI7z8rcEjazBUlEQ8T6kD3DR4NUgii/CLA1eQAgJX 4DbmbyN2tH+NMwNexYafG36EXB6MtSRgEk7OIHc2gaUHWbrd9PQUdFOh/BDd6B7y iDEa742GrI3ws5ovMCjP8KxE3i/5swV3RqRV+gAKYsW7cxxQt2WPB+feU1I+dMCf 89o07VL6Omv0h5mlKcnnaenDYrYmYOMGXBgzur00izDReRqtCWonBNngzKybLhaK 5CWlvkuzaYsfsbsKGwhs4RBrCwIDAQABo4ICbjCCAmowHQYDVR0OBBYEFHHVibJR FqWLdDD7bitK20RlWfz9MB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvRkU4QUVDQjI2 MDc1MTFGMDkwMUQzNzRCQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQDDs8AMAwDBAUOzyADBAMOzzAwDQYJKoZIhvcNAQELBQADggEBAAv8 RJ+avuq8PtBrbuFaqF0Xo0ZYCazEK6c4kxvXGJWdmeGV3fVRTMO62K6kJX1r0qkA 9UDEOjEpvur7kpTyaMplcvZX7jKXzzatrbQsnMIfz/SfEJkTb6uXPU1yF9EOjLg4 0NrkV9wu3F3RGFwwvEtiPgOFhsoG5NDkCHHhH5c76IC0WFv/0mR3Z8XwRC3RVSpl X/uWXqIKbZGPgl6WTVWtb2VwS19HT8+qPL1ubbU/W2Z/OL6Iv/YaouLOBH2VeJv6 t8VxGW49lrkd0QP1Sa14v7uRfUst9042tmPADZJiDAJNYzFLGBxvv8ShTO6UXuwH tsl3T7x5GqdC+Dbv2uM= -----END CERTIFICATE-----Generated at Mon Mar 2 05:44:59 2026 by rpki-client