$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/F9722F8255C411E9A0FEF781C4F9AE02.roa File: F9722F8255C411E9A0FEF781C4F9AE02.roa (raw, json) Hash identifier: qeOImN/OPXFrmVSnTa/uFkjmKzAD8SUjcGoXbzqtLu8= Subject key identifier: FF:5F:CD:3D:F4:7E:47:E6:57:2B:9C:18:E9:F4:3C:35:51:B7:C4:A3 Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2A9A Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/F9722F8255C411E9A0FEF781C4F9AE02.roa Signing time: Sun 01 Mar 2026 12:10:33 +0000 ROA not before: Mon 30 Jun 2025 15:00:22 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 7575 IP address blocks: 138.44.0.0/16 maxlen: 24 160.250.178.0/23 maxlen: 24 192.203.235.0/24 maxlen: 24 192.207.33.0/24 maxlen: 24 192.207.113.0/24 maxlen: 24 192.207.161.0/24 maxlen: 24 192.231.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10906 (0x2a9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: Jun 30 15:00:22 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a42cb9-0cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:df:42:ea:14:d1:a6:4f:a0:f9:68:bf:e2:08: 8e:1e:61:fe:a1:be:03:7d:db:e4:b3:d6:c0:cc:a7: 15:ef:59:a9:ab:02:c3:42:4c:b0:72:4e:cf:8b:12: 61:87:43:35:43:75:1e:6c:3a:ee:b8:d7:b6:38:2a: 5e:33:e3:c1:c1:70:69:64:f5:46:a8:a6:0d:35:cb: 49:69:2c:00:3f:26:5b:99:e7:94:14:dd:8d:0d:c5: b1:91:9c:ed:3a:dc:c7:fa:9e:91:13:52:07:2d:64: 08:26:67:9b:f3:3c:28:21:98:c4:7b:f3:25:c2:33: f8:3c:7f:dd:28:75:98:f4:0f:c8:70:fa:7a:b4:7d: 89:cb:a8:c6:3a:c1:1e:47:c4:4a:6d:6c:f7:5b:4b: 60:af:f7:9a:b9:03:b3:bf:d3:dc:13:ce:56:91:bb: 4d:08:86:85:63:2e:5d:6d:09:c1:4b:2c:7a:7c:2e: a9:e1:12:ee:20:54:69:f3:5c:c8:7f:68:95:4d:fb: b4:e0:73:47:fb:2c:28:d6:9f:45:a3:13:9a:d7:d5: b2:45:d0:6d:a5:c9:17:96:8a:ba:6f:2d:ae:f0:b2: 04:47:66:72:70:1e:23:4a:31:a7:d7:c4:68:31:0c: df:67:6e:8b:dc:87:46:e0:75:42:6e:96:48:f1:d0: 83:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:5F:CD:3D:F4:7E:47:E6:57:2B:9C:18:E9:F4:3C:35:51:B7:C4:A3 X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/F9722F8255C411E9A0FEF781C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.44.0.0/16 160.250.178.0/23 192.203.235.0/24 192.207.33.0/24 192.207.113.0/24 192.207.161.0/24 192.231.212.0/24 Signature Algorithm: sha256WithRSAEncryption 69:5a:ee:81:99:13:23:9d:4b:59:76:39:24:cb:40:33:1b:08: 7a:62:02:3a:e3:79:4c:d9:05:95:78:3b:46:78:30:89:84:36: f2:92:91:27:72:ca:5a:fd:b3:83:8f:40:0f:3c:de:46:0a:51: a8:87:8f:5c:d9:90:0b:8b:10:fb:9d:2d:34:95:c7:ab:c0:cd: 73:58:80:5a:01:62:10:31:e6:4d:7f:a5:74:f7:21:0a:89:59: 71:a9:76:3b:76:e3:70:99:94:b5:06:5f:5c:75:57:c8:49:4b: 4f:0f:05:6f:4e:d8:1d:46:ed:e2:4e:76:1d:6e:77:8e:4e:1b: 17:7d:b0:7f:1a:6e:7a:a2:a8:3f:d8:9a:72:61:95:89:4a:69: 3d:d9:7f:1e:58:36:9e:9d:43:f3:d0:14:dc:06:a2:8d:33:0b: cc:ca:67:44:19:b5:de:da:ad:ed:e7:3f:3a:7b:91:bd:5a:e4: b6:6d:ec:cb:6f:14:9b:54:3b:85:5f:1c:81:e3:92:18:27:64: d9:bf:80:86:5b:7c:b3:46:c0:2d:57:ef:95:c7:09:3f:53:a0: a3:e8:9b:71:1b:3d:10:ff:4e:0d:ae:cd:99:08:32:ba:f1:7d: 85:83:e4:a1:c7:29:02:e6:71:33:dd:71:79:48:e6:63:57:62: c0:9f:fb:15 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICKpowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjUwNjMwMTUwMDIyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmNiOS0wY2QzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnt9C6hTRpk+g+Wi/4giOHmH+ob4Dfdvks9bAzKcV71mpqwLDQkywck7PixJh h0M1Q3UebDruuNe2OCpeM+PBwXBpZPVGqKYNNctJaSwAPyZbmeeUFN2NDcWxkZzt OtzH+p6RE1IHLWQIJmeb8zwoIZjEe/MlwjP4PH/dKHWY9A/IcPp6tH2Jy6jGOsEe R8RKbWz3W0tgr/eauQOzv9PcE85WkbtNCIaFYy5dbQnBSyx6fC6p4RLuIFRp81zI f2iVTfu04HNH+ywo1p9FoxOa19WyRdBtpckXloq6by2u8LIER2ZycB4jSjGn18Ro MQzfZ26L3IdG4HVCbpZI8dCDzwIDAQABo4ICgzCCAn8wHQYDVR0OBBYEFP9fzT30 fkfmVyucGOn0PDVRt8SjMB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUYxOUUvQTkzRTk5M0UzNDBEMTFFNDlFQzk4MTYzQzRGOUFFMDIvRjk3MjJGODI1 NUM0MTFFOUEwRkVGNzgxQzRGOUFFMDIucm9hMEIGCCsGAQUFBwEHAQH/BDMwMTAv BAIAATApAwMAiiwDBAGg+rIDBADAy+sDBADAzyEDBADAz3EDBADAz6EDBADA59Qw DQYJKoZIhvcNAQELBQADggEBAGla7oGZEyOdS1l2OSTLQDMbCHpiAjrjeUzZBZV4 O0Z4MImENvKSkSdyylr9s4OPQA883kYKUaiHj1zZkAuLEPudLTSVx6vAzXNYgFoB YhAx5k1/pXT3IQqJWXGpdjt243CZlLUGX1x1V8hJS08PBW9O2B1G7eJOdh1ud45O Gxd9sH8abnqiqD/YmnJhlYlKaT3Zfx5YNp6dQ/PQFNwGoo0zC8zKZ0QZtd7are3n Pzp7kb1a5LZt7MtvFJtUO4VfHIHjkhgnZNm/gIZbfLNGwC1X75XHCT9ToKPom3Eb PRD/Tg2uzZkIMrrxfYWD5KHHKQLmcTPdcXlI5mNXYsCf+xU= -----END CERTIFICATE-----Generated at Mon Mar 2 02:40:29 2026 by rpki-client