$ rpki-client -vvf rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09799D96F36811F0BB995E0C666F56BC.roa File: 09799D96F36811F0BB995E0C666F56BC.roa (raw, json) Hash identifier: k3tbTsuNd/0VaZo35U6WBx+uMYBIhVnOPOnYzqjLUfs= Subject key identifier: 2E:4A:D3:D7:3E:F9:33:80:1D:76:61:22:DC:9A:9E:7E:F7:B9:79:56 Certificate issuer: /CN=A91E782F/serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Certificate serial: 014A Authority key identifier: C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09799D96F36811F0BB995E0C666F56BC.roa Signing time: Sun 01 Mar 2026 16:54:26 +0000 ROA not before: Sat 17 Jan 2026 05:47:41 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 24084 IP address blocks: 192.8.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:41:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 330 (0x14a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E782F, serialNumber=C8603657552448ED5BBAED71724D2220F03BF7C6 Validity Not Before: Jan 17 05:47:41 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a46f42-478d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:63:0d:72:96:91:b7:97:e3:c2:35:6c:58:b4: 98:e8:5f:5a:57:5f:8e:55:65:05:cb:0d:fb:f8:8b: af:f1:a7:9b:b7:22:37:ac:97:71:24:47:32:8b:ce: 22:3e:ce:bf:9a:14:0c:99:0f:2e:94:53:cd:d4:c3: cc:fe:f9:3c:3c:8f:99:c4:01:ea:6b:3d:8c:9c:cf: 3b:58:8b:56:86:b0:06:fa:9b:11:65:7d:6e:65:1d: 8e:cc:0b:30:be:04:08:bc:84:80:48:7b:19:81:a6: bd:ea:99:50:34:1d:f2:64:81:4f:4d:95:77:db:9d: 00:d0:dc:6e:60:be:4d:f9:4f:1c:99:93:b6:fe:b3: c4:20:07:c9:f7:19:6d:b8:2f:d2:9b:e7:cd:e5:71: b6:e4:e3:42:1d:21:73:3a:bd:03:48:df:8d:da:16: 1a:82:7d:3e:6d:f5:71:3f:e5:ae:36:00:ff:98:d2: dc:fb:d9:88:7b:da:cf:66:96:92:28:8f:5b:20:ce: 75:b2:98:82:a8:2a:25:bf:a7:ce:b9:8a:97:da:00: b1:5a:b8:cd:da:6f:7a:16:1d:bc:0d:64:05:95:5a: 0c:f6:26:da:0c:95:13:49:3c:91:a2:cc:40:20:83: da:2e:c4:b2:3f:a9:f0:2d:4e:f5:50:75:30:ae:f1: 75:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4A:D3:D7:3E:F9:33:80:1D:76:61:22:DC:9A:9E:7E:F7:B9:79:56 X509v3 Authority Key Identifier: keyid:C8:60:36:57:55:24:48:ED:5B:BA:ED:71:72:4D:22:20:F0:3B:F7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/yGA2V1UkSO1buu1xck0iIPA798Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/yGA2V1UkSO1buu1xck0iIPA798Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E782F/6D2075F6407011EFBDA9D66FC4F9AE02/09799D96F36811F0BB995E0C666F56BC.roa sbgp-ipAddrBlock: critical IPv4: 192.8.33.0/24 Signature Algorithm: sha256WithRSAEncryption 37:33:07:c8:f1:89:d1:e9:da:fb:e1:22:f8:9d:e6:2c:54:8c: 87:a6:92:34:01:ac:be:0f:0f:f3:23:f0:33:af:cc:f2:64:c8: 74:f2:82:54:3c:fc:bc:79:39:75:d4:04:0c:d4:1f:51:9b:c6: c5:a3:22:2b:e3:45:2a:c9:0c:c6:2f:6e:49:d2:df:ff:1f:0f: f6:09:1b:88:30:29:8c:17:30:e3:89:ff:69:3b:b1:08:e3:66: 96:f1:1d:17:36:ad:d7:73:f2:08:46:1a:e8:dc:d0:b0:6d:19: 7c:28:a6:be:ee:c4:eb:8e:1e:67:0a:10:ae:25:db:93:34:87: aa:54:b7:98:8a:e8:33:9e:e9:53:9c:c1:e0:9d:ca:e2:d3:6a: ab:8c:79:48:1c:64:40:cb:b7:81:6a:83:14:dd:47:f6:3e:f4: 71:89:ea:dc:e7:ca:17:b3:32:cb:75:64:67:88:af:df:3a:f1: 7f:57:81:5e:94:20:16:5f:50:23:52:97:14:21:9b:04:c0:2c: bf:88:bc:77:9d:94:0a:41:9d:95:34:1b:2f:d1:6e:a4:5b:43: 2f:fe:1f:79:7c:09:65:ee:59:fa:9f:8e:f0:98:c3:60:49:dc: 52:33:25:e1:44:0e:74:71:76:44:37:24:98:de:31:0d:10:eb: f8:ee:3b:d0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAUowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc4MkYxMTAvBgNVBAUTKEM4NjAzNjU3NTUyNDQ4RUQ1QkJBRUQ3MTcyNEQyMjIw RjAzQkY3QzYwHhcNMjYwMTE3MDU0NzQxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmY0Mi00NzhkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAymMNcpaRt5fjwjVsWLSY6F9aV1+OVWUFyw37+Iuv8aebtyI3rJdxJEcyi84i Ps6/mhQMmQ8ulFPN1MPM/vk8PI+ZxAHqaz2MnM87WItWhrAG+psRZX1uZR2OzAsw vgQIvISASHsZgaa96plQNB3yZIFPTZV3250A0NxuYL5N+U8cmZO2/rPEIAfJ9xlt uC/Sm+fN5XG25ONCHSFzOr0DSN+N2hYagn0+bfVxP+WuNgD/mNLc+9mIe9rPZpaS KI9bIM51spiCqColv6fOuYqX2gCxWrjN2m96Fh28DWQFlVoM9ibaDJUTSTyRosxA IIPaLsSyP6nwLU71UHUwrvF1xQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC5K09c+ +TOAHXZhItyann73uXlWMB8GA1UdIwQYMBaAFMhgNldVJEjtW7rtcXJNIiDwO/fG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzgyRi82RDIwNzVGNjQw NzAxMUVGQkRBOUQ2NkZDNEY5QUUwMi95R0EyVjFVa1NPMWJ1dTF4Y2swaUlQQTc5 OFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3lHQTJWMVVrU08xYnV1MXhjazBpSVBBNzk4WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc4MkYvNkQyMDc1RjY0MDcwMTFFRkJEQTlENjZGQzRGOUFFMDIvMDk3OTlEOTZG MzY4MTFGMEJCOTk1RTBDNjY2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwAghMA0GCSqGSIb3DQEBCwUAA4IBAQA3MwfI8YnR6dr74SL4neYs VIyHppI0Aay+Dw/zI/Azr8zyZMh08oJUPPy8eTl11AQM1B9Rm8bFoyIr40UqyQzG L25J0t//Hw/2CRuIMCmMFzDjif9pO7EI42aW8R0XNq3Xc/IIRhro3NCwbRl8KKa+ 7sTrjh5nChCuJduTNIeqVLeYiugznulTnMHgncri02qrjHlIHGRAy7eBaoMU3Uf2 PvRxierc58oXszLLdWRniK/fOvF/V4FelCAWX1AjUpcUIZsEwCy/iLx3nZQKQZ2V NBsv0W6kW0Mv/h95fAll7ln6n47wmMNgSdxSMyXhRA50cXZENySY3jENEOv47jvQ -----END CERTIFICATE-----Generated at Mon Mar 2 12:30:10 2026 by rpki-client