$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F31C5/473D3AEAD79A11F1B93C06E50266CEF9/225BF026D79B11F1B4FB16EE0266CEF9.roa File: 225BF026D79B11F1B4FB16EE0266CEF9.roa (raw, json) Hash identifier: 4HymZitMP9IIZPjpnJDLCCJKml4AkeWBYNXJwE7CrQg= Subject key identifier: 57:07:8C:AD:8C:52:4A:D3:01:F4:F8:28:73:32:B5:87:2E:C9:92:D4 Certificate issuer: /CN=A91F31C5/serialNumber=2F885012E15E3DBFAB5CF6F89CA8F4A6B0A17206 Certificate serial: 02 Authority key identifier: 2F:88:50:12:E1:5E:3D:BF:AB:5C:F6:F8:9C:A8:F4:A6:B0:A1:72:06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L4hQEuFePb-rXPb4nKj0prChcgY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F31C5/473D3AEAD79A11F1B93C06E50266CEF9/225BF026D79B11F1B4FB16EE0266CEF9.roa Signing time: Tue 03 Nov 2026 15:27:52 +0000 ROA not before: Tue 03 Nov 2026 15:27:52 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 142007 IP address blocks: 74.114.168.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F31C5/473D3AEAD79A11F1B93C06E50266CEF9/L4hQEuFePb-rXPb4nKj0prChcgY.crl rsync://rpki.apnic.net/member_repository/A91F31C5/473D3AEAD79A11F1B93C06E50266CEF9/L4hQEuFePb-rXPb4nKj0prChcgY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L4hQEuFePb-rXPb4nKj0prChcgY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 15:27:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F31C5, serialNumber=2F885012E15E3DBFAB5CF6F89CA8F4A6B0A17206 Validity Not Before: Nov 3 15:27:52 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=6ae9fd78-845a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:23:f8:e0:2f:49:8c:ae:34:fb:59:8c:a7:f4: 5d:49:de:c5:5a:b6:4d:1f:e9:ef:05:c0:77:aa:ce: f1:8f:e1:b9:74:89:19:1e:ca:eb:2a:07:b2:75:7f: ca:92:be:11:5b:cd:50:af:9b:20:fb:05:e6:da:0d: c0:87:49:1a:77:f6:9d:d4:40:17:2a:1d:47:12:28: 88:20:16:f5:d5:75:64:26:27:a1:24:ef:c0:ad:6d: e9:2d:86:e7:ef:b1:bf:45:18:61:98:31:5a:cb:05: 6f:ad:fb:54:fe:d2:ec:7a:a5:60:7c:e7:ac:c3:ea: db:71:1d:4a:42:dd:65:51:98:b1:28:08:bb:bc:91: 8e:e8:a3:15:1e:83:3e:37:f7:e9:cc:30:e5:27:8f: 0f:d7:38:cd:4e:7e:96:8b:a0:00:3b:e6:c8:3d:86: e8:dd:2c:8a:c9:88:2c:f1:d1:04:f8:e0:49:78:43: 87:8e:ca:27:86:5d:29:7d:64:03:93:5d:06:eb:80: 47:c2:c5:59:aa:ab:ab:c0:b8:c0:71:f1:9b:c7:3a: d0:39:ff:37:e0:b6:ae:d8:5d:c9:10:ec:be:ab:d9: 20:00:39:d8:02:bb:36:10:a8:9d:6f:99:b1:fc:16: 04:8d:a7:8d:70:d1:9a:91:21:17:da:68:67:ed:39: ca:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:07:8C:AD:8C:52:4A:D3:01:F4:F8:28:73:32:B5:87:2E:C9:92:D4 X509v3 Authority Key Identifier: keyid:2F:88:50:12:E1:5E:3D:BF:AB:5C:F6:F8:9C:A8:F4:A6:B0:A1:72:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F31C5/473D3AEAD79A11F1B93C06E50266CEF9/L4hQEuFePb-rXPb4nKj0prChcgY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/L4hQEuFePb-rXPb4nKj0prChcgY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F31C5/473D3AEAD79A11F1B93C06E50266CEF9/225BF026D79B11F1B4FB16EE0266CEF9.roa sbgp-ipAddrBlock: critical IPv4: 74.114.168.0/22 Signature Algorithm: sha256WithRSAEncryption 21:d7:85:4a:11:34:7a:3c:89:0a:57:64:f7:8d:e0:56:03:6c: 95:f9:ff:66:09:4d:ea:d4:ec:c8:37:4e:89:a5:9b:50:25:08: 0e:1a:1a:b4:69:b3:3d:01:90:5f:24:5f:98:3e:b3:5e:4a:07: 09:21:d2:cd:b9:6b:c2:f4:e3:53:64:f5:91:52:00:60:d5:b7: 5e:6f:a2:c5:f8:ad:40:f3:36:78:2a:94:d7:59:10:18:7b:19: 3c:a2:30:ea:34:26:39:f6:5f:04:9e:b7:71:e2:69:16:89:9a: 0f:c9:db:b3:f7:a4:9c:32:65:d8:e1:57:30:c3:24:a2:6e:fe: dd:93:cf:7e:da:62:d6:14:5f:28:29:d3:0d:91:76:d9:db:60: d2:6c:65:28:b4:42:3c:b2:ad:4a:5b:c4:46:e7:37:c1:fd:5c: 71:32:f4:7f:ee:0a:e3:4e:de:58:b3:63:d6:8c:a2:0e:2b:0c: 6a:e2:28:55:55:f7:7e:36:1f:c7:4b:52:4a:fe:35:33:d9:c4: da:e4:09:40:6a:1e:fc:4e:5e:2a:cc:e3:a4:19:69:bd:35:0c: 26:de:9b:c3:83:1b:de:02:f4:f7:90:08:4a:05:99:90:eb:c7: 31:62:18:75:d8:4f:10:1a:f0:1f:38:f3:6e:8b:f7:a0:dc:81: cc:6f:be:a7 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG MzFDNTExMC8GA1UEBRMoMkY4ODUwMTJFMTVFM0RCRkFCNUNGNkY4OUNBOEY0QTZC MEExNzIwNjAeFw0yNjExMDMxNTI3NTJaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTZhZTlmZDc4LTg0NWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCdI/jgL0mMrjT7WYyn9F1J3sVatk0f6e8FwHeqzvGP4bl0iRkeyusqB7J1f8qS vhFbzVCvmyD7BebaDcCHSRp39p3UQBcqHUcSKIggFvXVdWQmJ6Ek78Ctbekthufv sb9FGGGYMVrLBW+t+1T+0ux6pWB856zD6ttxHUpC3WVRmLEoCLu8kY7ooxUegz43 9+nMMOUnjw/XOM1OfpaLoAA75sg9hujdLIrJiCzx0QT44El4Q4eOyieGXSl9ZAOT XQbrgEfCxVmqq6vAuMBx8ZvHOtA5/zfgtq7YXckQ7L6r2SAAOdgCuzYQqJ1vmbH8 FgSNp41w0ZqRIRfaaGftOcodAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUVweMrYxS StMB9PgoczK1hy7JktQwHwYDVR0jBBgwFoAUL4hQEuFePb+rXPb4nKj0prChcgYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzMUM1LzQ3M0QzQUVBRDc5 QTExRjFCOTNDMDZFNTAyNjZDRUY5L0w0aFFFdUZlUGItclhQYjRuS2owcHJDaGNn WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTDRoUUV1RmVQYi1yWFBiNG5LajBwckNoY2dZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG MzFDNS80NzNEM0FFQUQ3OUExMUYxQjkzQzA2RTUwMjY2Q0VGOS8yMjVCRjAyNkQ3 OUIxMUYxQjRGQjE2RUUwMjY2Q0VGOS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAJKcqgwDQYJKoZIhvcNAQELBQADggEBACHXhUoRNHo8iQpXZPeN4FYD bJX5/2YJTerU7Mg3Tomlm1AlCA4aGrRpsz0BkF8kX5g+s15KBwkh0s25a8L041Nk 9ZFSAGDVt15vosX4rUDzNngqlNdZEBh7GTyiMOo0Jjn2XwSet3HiaRaJmg/J27P3 pJwyZdjhVzDDJKJu/t2Tz37aYtYUXygp0w2RdtnbYNJsZSi0QjyyrUpbxEbnN8H9 XHEy9H/uCuNO3lizY9aMog4rDGriKFVV9342H8dLUkr+NTPZxNrkCUBqHvxOXirM 46QZab01DCbem8ODG94C9PeQCEoFmZDrxzFiGHXYTxAa8B84826L96Dcgcxvvqc= -----END CERTIFICATE-----Generated at Thu Nov 5 12:50:30 2026 by rpki-client