$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa File: 7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa (raw, json) Hash identifier: eUu0YI5RvwOuU8WQrDLws3SaPG5sdW45J6cqPQDU5jg= Subject key identifier: 58:1D:6E:AD:8D:BC:5F:75:40:F6:10:38:2D:75:1E:4F:F7:A4:1F:A0 Certificate issuer: /CN=A91EC9A5/serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640 Certificate serial: 094F Authority key identifier: E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa Signing time: Wed 08 Apr 2026 20:26:14 +0000 ROA not before: Wed 08 Apr 2026 20:26:13 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 136246 IP address blocks: 14.128.12.0/24 maxlen: 24 14.128.13.0/24 maxlen: 24 14.128.14.0/24 maxlen: 24 14.128.15.0/24 maxlen: 24 103.84.172.0/24 maxlen: 24 103.84.173.0/24 maxlen: 24 103.84.174.0/24 maxlen: 24 103.84.175.0/24 maxlen: 24 2400:a2c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 20:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2383 (0x94f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9A5, serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640 Validity Not Before: Apr 8 20:26:13 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69d6b9e5-06c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ee:77:6e:60:97:76:99:01:1f:d4:7f:b5:22: 19:7e:ef:86:79:34:92:bb:75:a0:33:3f:2c:70:26: eb:58:17:af:ff:9c:bb:44:be:77:92:09:55:cf:3f: 32:87:1a:a2:b0:79:8f:0b:6f:5a:55:c7:b3:bc:5f: 0b:a6:92:ec:23:88:c1:23:b9:2d:24:36:91:4a:6d: 5f:c8:c4:65:be:64:c5:22:d6:d6:50:08:45:db:0a: 86:65:19:45:95:e1:24:b0:9e:f5:0f:93:85:a1:0d: 10:12:34:b2:9f:ce:b6:29:ab:57:ec:6c:22:47:71: 23:18:01:64:b4:77:d7:b5:c0:21:22:e6:89:67:36: 78:80:e4:d8:6b:4a:aa:34:93:44:85:6f:6e:10:31: 63:a6:08:06:47:e6:c2:9a:90:48:79:f7:e5:07:0e: eb:13:63:0f:6c:2d:66:f1:63:e1:58:6c:27:2a:86: 35:34:48:16:f6:a6:02:dd:fb:c5:89:fd:97:61:cf: 20:35:fd:d7:f9:94:4e:59:37:32:22:0c:03:89:df: bc:2e:63:48:59:81:e2:c1:63:49:fe:54:84:ac:28: cf:09:d9:cd:f9:63:90:4a:62:58:f5:6e:76:4c:0d: d3:bc:68:bd:dd:a2:c8:21:c8:a8:21:ea:f0:cf:8f: 8f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1D:6E:AD:8D:BC:5F:75:40:F6:10:38:2D:75:1E:4F:F7:A4:1F:A0 X509v3 Authority Key Identifier: keyid:E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 14.128.12.0/22 103.84.172.0/22 IPv6: 2400:a2c0::/32 Signature Algorithm: sha256WithRSAEncryption 00:c7:12:52:c6:ca:d0:43:60:59:ed:f5:97:3d:66:b8:6e:e7: dc:0b:18:c3:cd:3b:4e:16:ca:32:9b:1e:cb:87:ee:10:ab:bc: e3:cb:04:79:82:b8:43:b2:b6:c9:36:40:af:9a:61:db:e5:f1: 01:7c:37:de:64:8d:c8:3a:80:0c:5d:34:de:95:e0:80:68:53: 40:79:d7:65:91:6a:08:bf:17:28:85:f9:59:11:e6:76:51:bf: 95:fe:ef:21:64:00:58:54:9d:9f:36:5c:0c:1b:11:f3:b7:c1: ca:99:a3:bf:91:77:12:d7:a7:31:a1:bb:51:62:ff:99:bc:e2: 0f:9e:fc:4d:8a:7f:33:92:da:43:1b:68:1e:b0:82:1d:27:b8: 46:b7:c8:e4:e1:0c:33:46:0c:2b:9f:17:f2:c6:71:23:b9:6e: f2:89:63:f8:6b:14:47:81:8d:4c:fe:57:b3:c5:2c:39:23:e8: 1f:b0:cc:96:d6:80:b0:d4:3d:e4:2b:c2:51:cb:cc:6e:53:7e: 92:90:e6:c6:9f:8d:69:ed:8f:3d:86:58:f7:a2:3d:31:ac:bf: b4:10:66:99:f3:77:e1:f9:7d:02:78:85:f4:78:d2:e4:6b:e0: 32:64:3a:0c:ee:2f:23:19:ec:fd:a8:eb:20:e5:1c:23:ba:b7: 5f:92:52:ce -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgICCU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QTUxMTAvBgNVBAUTKEU4M0ZDRjRDNkZDOEQ3NEYzQjZBQjQyNTYwNkUyQkM3 NzQ2RDY2NDAwHhcNMjYwNDA4MjAyNjEzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQ2YjllNS0wNmM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnu53bmCXdpkBH9R/tSIZfu+GeTSSu3WgMz8scCbrWBev/5y7RL53kglVzz8y hxqisHmPC29aVcezvF8LppLsI4jBI7ktJDaRSm1fyMRlvmTFItbWUAhF2wqGZRlF leEksJ71D5OFoQ0QEjSyn862KatX7GwiR3EjGAFktHfXtcAhIuaJZzZ4gOTYa0qq NJNEhW9uEDFjpggGR+bCmpBIefflBw7rE2MPbC1m8WPhWGwnKoY1NEgW9qYC3fvF if2XYc8gNf3X+ZROWTcyIgwDid+8LmNIWYHiwWNJ/lSErCjPCdnN+WOQSmJY9W52 TA3TvGi93aLIIcioIerwz4+PPwIDAQABo4ICdTCCAnEwHQYDVR0OBBYEFFgdbq2N vF91QPYQOC11Hk/3pB+gMB8GA1UdIwQYMBaAFOg/z0xvyNdPO2q0JWBuK8d0bWZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBNS8wRTgyQzJFQ0M0 RjAxMUVBOTFEQ0RGNzdDNEY5QUUwMi82RF9QVEdfSTEwODdhclFsWUc0cngzUnRa a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZEX1BUR19JMTA4N2FyUWxZRzRyeDNSdFprQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM5QTUvMEU4MkMyRUNDNEYwMTFFQTkxRENERjc3QzRGOUFFMDIvN0FCQzNBRThF M0RGMTFFRjgzRENGQjA5QzRGOUFFMDIucm9hMDQGCCsGAQUFBwEHAQH/BCUwIzAS BAIAATAMAwQCDoAMAwQCZ1SsMA0EAgACMAcDBQAkAKLAMA0GCSqGSIb3DQEBCwUA A4IBAQAAxxJSxsrQQ2BZ7fWXPWa4bufcCxjDzTtOFsoymx7Lh+4Qq7zjywR5grhD srbJNkCvmmHb5fEBfDfeZI3IOoAMXTTeleCAaFNAeddlkWoIvxcohflZEeZ2Ub+V /u8hZABYVJ2fNlwMGxHzt8HKmaO/kXcS16cxobtRYv+ZvOIPnvxNin8zktpDG2ge sIIdJ7hGt8jk4QwzRgwrnxfyxnEjuW7yiWP4axRHgY1M/lezxSw5I+gfsMyW1oCw 1D3kK8JRy8xuU36SkObGn41p7Y89hlj3oj0xrL+0EGaZ83fh+X0CeIX0eNLka+Ay ZDoM7i8jGez9qOsg5RwjurdfklLO -----END CERTIFICATE-----Generated at Fri Apr 17 17:32:27 2026 by rpki-client