$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/00CEF3C805F911F1BB5A205A1A3D8C67.roa File: 00CEF3C805F911F1BB5A205A1A3D8C67.roa (raw, json) Hash identifier: pL0a4n/xbwb/7ldCyV+DkeXgBlSEcBB9ELR4HhBbKlc= Subject key identifier: 9F:57:9A:B4:EC:DD:17:CE:F2:18:8A:22:B9:3C:E8:9C:73:37:C5:1A Certificate issuer: /CN=A91F1451/serialNumber=1153407EE0BFB062713C5BFE6FB822E13B33E013 Certificate serial: 34 Authority key identifier: 11:53:40:7E:E0:BF:B0:62:71:3C:5B:FE:6F:B8:22:E1:3B:33:E0:13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/00CEF3C805F911F1BB5A205A1A3D8C67.roa Signing time: Sun 01 Mar 2026 05:58:00 +0000 ROA not before: Mon 09 Feb 2026 20:50:44 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 203662 IP address blocks: 144.79.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.crl rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52 (0x34) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F1451, serialNumber=1153407EE0BFB062713C5BFE6FB822E13B33E013 Validity Not Before: Feb 9 20:50:44 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3d568-cc44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6c:5a:b2:06:3c:dc:2d:17:dd:81:98:b4:3a: b1:c7:b9:5e:ad:56:4a:01:35:c1:c6:fe:99:97:d8: a2:ef:15:8c:c0:54:04:a4:5b:f2:43:6f:55:3c:f2: 4c:cc:90:2a:09:65:c0:1e:b4:71:39:f7:3c:5c:3a: 96:72:01:ef:16:b4:3f:12:f0:99:11:b0:45:1d:88: b2:22:3e:6c:d4:87:67:7e:ea:a9:1e:a1:21:2e:5a: 55:f6:9f:08:7f:f6:80:ef:05:53:d8:1d:65:f6:05: a9:3c:e9:59:66:5b:e4:79:f8:62:bd:5c:53:f6:5b: 78:07:55:eb:02:6d:53:b8:c1:72:60:eb:76:c0:bb: 1d:57:fe:01:89:ce:84:9a:dd:2a:1e:ee:7c:0e:81: fe:3d:dc:b8:81:7c:51:67:7f:ed:51:a2:0d:b1:e0: 40:30:61:8a:95:89:12:77:c4:54:2a:af:92:cc:9c: b8:68:46:14:16:e8:fd:ec:08:e9:be:a6:00:b2:02: 2e:f3:5e:ca:36:32:ad:a0:db:2a:db:9c:f9:73:20: 47:3f:a4:50:5a:67:a3:5a:01:6c:54:b6:57:0f:46: 8e:5d:c9:4c:d0:51:f5:45:28:47:c5:82:51:8c:3f: 5e:cf:d0:07:6e:95:ed:36:e5:bc:85:af:ec:cb:4e: ff:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:57:9A:B4:EC:DD:17:CE:F2:18:8A:22:B9:3C:E8:9C:73:37:C5:1A X509v3 Authority Key Identifier: keyid:11:53:40:7E:E0:BF:B0:62:71:3C:5B:FE:6F:B8:22:E1:3B:33:E0:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EVNAfuC_sGJxPFv-b7gi4Tsz4BM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1451/56EF682CCFF411F0ABF97A3FC4F9AE02/00CEF3C805F911F1BB5A205A1A3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 144.79.59.0/24 Signature Algorithm: sha256WithRSAEncryption 07:6c:6f:4d:4a:33:6a:9c:c0:7b:30:b7:41:0d:85:76:ab:ec: 02:8e:f4:96:7a:4a:5c:fe:b3:f9:ef:bc:15:e0:df:7b:f4:28: 46:e8:4d:f9:13:e4:92:b4:d9:69:bd:57:bd:28:a8:ab:63:86: 87:c2:16:24:95:52:dd:93:64:85:85:99:8c:49:07:ea:f1:1e: 72:8a:ad:de:81:43:21:58:3a:90:60:42:86:7f:f5:f3:d5:ad: 5d:6e:8a:ba:14:46:4a:81:62:10:e1:63:71:c6:55:19:5f:09: d3:60:92:1d:62:23:67:8c:c7:d3:14:1f:63:c4:c9:ec:88:48: aa:60:e3:dc:74:bb:b1:95:f9:5a:25:69:6e:91:15:61:68:ac: 67:3f:08:44:b2:26:41:5e:ca:40:9a:d9:0c:17:d9:c9:e8:05: ce:41:15:29:2f:9c:5e:eb:e6:0f:27:be:46:bd:87:52:77:f4: 2c:6d:5d:81:ad:e7:ea:8c:aa:e9:9f:6d:44:d4:74:c3:68:8b: 43:57:82:47:c9:78:f4:f1:09:89:e8:96:07:43:72:cd:f4:56: e4:86:36:16:f9:ec:82:37:25:63:7f:80:d5:0d:82:7b:1f:8b: ea:5a:94:41:f3:93:99:e1:5b:9f:4b:46:4f:d2:7d:44:91:44: 3f:12:18:47 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBNDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MTQ1MTExMC8GA1UEBRMoMTE1MzQwN0VFMEJGQjA2MjcxM0M1QkZFNkZCODIyRTEz QjMzRTAxMzAeFw0yNjAyMDkyMDUwNDRaFw0yNzAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNTY4LWNjNDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsbFqyBjzcLRfdgZi0OrHHuV6tVkoBNcHG/pmX2KLvFYzAVASkW/JDb1U88kzM kCoJZcAetHE59zxcOpZyAe8WtD8S8JkRsEUdiLIiPmzUh2d+6qkeoSEuWlX2nwh/ 9oDvBVPYHWX2Bak86VlmW+R5+GK9XFP2W3gHVesCbVO4wXJg63bAux1X/gGJzoSa 3Soe7nwOgf493LiBfFFnf+1Rog2x4EAwYYqViRJ3xFQqr5LMnLhoRhQW6P3sCOm+ pgCyAi7zXso2Mq2g2yrbnPlzIEc/pFBaZ6NaAWxUtlcPRo5dyUzQUfVFKEfFglGM P17P0Adule025byFr+zLTv+9AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUn1eatOzd F87yGIoiuTzonHM3xRowHwYDVR0jBBgwFoAUEVNAfuC/sGJxPFv+b7gi4Tsz4BMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYxNDUxLzU2RUY2ODJDQ0ZG NDExRjBBQkY5N0EzRkM0RjlBRTAyL0VWTkFmdUNfc0dKeFBGdi1iN2dpNFRzejRC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRVZOQWZ1Q19zR0p4UEZ2LWI3Z2k0VHN6NEJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MTQ1MS81NkVGNjgyQ0NGRjQxMUYwQUJGOTdBM0ZDNEY5QUUwMi8wMENFRjNDODA1 RjkxMUYxQkI1QTIwNUExQTNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACQTzswDQYJKoZIhvcNAQELBQADggEBAAdsb01KM2qcwHswt0ENhXar 7AKO9JZ6Slz+s/nvvBXg33v0KEboTfkT5JK02Wm9V70oqKtjhofCFiSVUt2TZIWF mYxJB+rxHnKKrd6BQyFYOpBgQoZ/9fPVrV1uiroURkqBYhDhY3HGVRlfCdNgkh1i I2eMx9MUH2PEyeyISKpg49x0u7GV+VolaW6RFWForGc/CESyJkFeykCa2QwX2cno Bc5BFSkvnF7r5g8nvka9h1J39CxtXYGt5+qMqumfbUTUdMNoi0NXgkfJePTxCYno lgdDcs30VuSGNhb57II3JWN/gNUNgnsfi+palEHzk5nhW59LRk/SfUSRRD8SGEc= -----END CERTIFICATE-----Generated at Sun Mar 1 22:32:19 2026 by rpki-client