$ rpki-client -vvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/23D7B1B81EDD11ED83B7963BC4F9AE02.roa File: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (raw, json) Hash identifier: RE9x/m6mlo2vJzH32XxtuTi0P6Gpv9n9izH4NHfwP6Q= Subject key identifier: 45:CB:EC:2E:0D:D1:98:A4:4F:A9:20:AC:B6:36:9D:D9:87:EA:7D:54 Certificate issuer: /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B Certificate serial: 03E8 Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/23D7B1B81EDD11ED83B7963BC4F9AE02.roa Signing time: Sun 01 Mar 2026 12:02:37 +0000 ROA not before: Fri 05 Sep 2025 01:37:53 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134111 IP address blocks: 146.118.0.0/16 maxlen: 24 192.65.130.0/24 maxlen: 24 192.102.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:04:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1000 (0x3e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B Validity Not Before: Sep 5 01:37:53 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a42add-6659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:3d:f8:05:77:82:ab:51:3a:4c:51:b0:17:3a: 33:67:57:c0:dd:a6:cd:08:92:d6:23:9e:54:ab:6c: 8c:ee:6f:ea:f3:eb:25:a2:c9:c2:41:0f:8a:d4:65: 22:5f:53:d1:a5:d2:a5:8b:77:60:33:02:85:d3:88: 99:4d:fd:57:ac:03:c1:7b:8a:ad:58:48:75:e7:78: 15:c1:79:4d:2a:7d:52:37:77:14:ab:22:f9:73:eb: 0b:9d:ce:bf:55:d1:0c:db:93:c1:49:65:51:7d:2d: ca:16:fc:20:26:5e:01:e2:58:64:b3:3e:6a:52:17: 1b:0c:56:7f:44:ec:38:cc:d6:cd:73:8e:2a:0c:42: 6e:9b:28:48:68:69:36:b2:2f:07:c5:76:b6:6a:c8: c2:2f:a0:ca:4e:fc:14:9f:dd:35:99:5d:ad:ff:6f: ce:1f:cf:56:9a:42:da:0a:84:6d:c0:75:87:42:f3: 84:4d:2e:65:0a:44:92:57:28:32:21:dd:0e:20:b9: 38:29:67:7c:33:45:91:6f:11:c9:59:f7:68:ad:93: 56:53:8b:6c:31:1f:5e:9e:8b:c7:df:f9:45:f2:fc: 3a:ec:81:55:ac:f7:4f:4c:73:75:69:58:a3:95:77: a7:bb:65:de:e9:67:0c:c0:da:50:6f:51:d4:df:2c: a9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:CB:EC:2E:0D:D1:98:A4:4F:A9:20:AC:B6:36:9D:D9:87:EA:7D:54 X509v3 Authority Key Identifier: keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/23D7B1B81EDD11ED83B7963BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 146.118.0.0/16 192.65.130.0/24 192.102.250.0/23 Signature Algorithm: sha256WithRSAEncryption 56:76:3d:e2:5c:1c:4b:2b:e8:fd:b8:09:1d:a9:2f:eb:c8:bc: 3a:d6:8e:7b:c3:46:dc:44:f2:36:d2:48:8a:6f:20:8b:2f:34: a6:73:ef:db:c6:e3:bf:f7:d4:aa:da:fc:eb:01:b6:1b:fb:67: 68:8c:42:7c:bc:11:55:a4:94:b5:e2:2f:4a:6f:42:5d:d3:b7: a3:ec:7d:82:e7:80:c6:93:d8:cd:5d:0d:ea:b8:29:19:4c:7e: ca:0a:0b:ec:20:34:83:89:50:17:5b:9e:99:c9:9d:77:77:e5: 05:3a:07:9f:9c:24:af:85:cd:2d:1f:e3:a1:20:91:54:ac:76: 62:ed:dd:da:4f:b3:ad:2d:c5:aa:2e:37:fd:df:36:18:87:9a: 12:e5:0a:be:2e:33:a6:f4:c9:2f:9a:2b:92:fc:3d:35:df:c8: a9:51:41:9e:9b:dd:d7:f6:ca:7d:b9:73:b4:a3:c3:05:48:43: 4d:fd:d1:1b:c5:c1:b9:c4:b3:62:8d:a6:8a:08:06:1f:07:3e: bb:eb:e3:20:12:4f:80:ee:68:0a:78:7f:64:ad:5b:40:37:05: 97:18:8c:1c:0e:9e:ef:57:50:14:30:35:73:74:d2:57:59:de: b5:5f:84:aa:2b:85:d1:ff:74:a1:35:2d:28:70:fb:ec:cb:af: c0:94:6d:10 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICA+gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKDRGRjUyODQ3MjE1QzRBMjJFOUYxMTQ5RTZDQkZFREY3 NEQ2MUNFOEIwHhcNMjUwOTA1MDEzNzUzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MmFkZC02NjU5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtj34BXeCq1E6TFGwFzozZ1fA3abNCJLWI55Uq2yM7m/q8+slosnCQQ+K1GUi X1PRpdKli3dgMwKF04iZTf1XrAPBe4qtWEh153gVwXlNKn1SN3cUqyL5c+sLnc6/ VdEM25PBSWVRfS3KFvwgJl4B4lhksz5qUhcbDFZ/ROw4zNbNc44qDEJumyhIaGk2 si8HxXa2asjCL6DKTvwUn901mV2t/2/OH89WmkLaCoRtwHWHQvOETS5lCkSSVygy Id0OILk4KWd8M0WRbxHJWfdorZNWU4tsMR9enovH3/lF8vw67IFVrPdPTHN1aVij lXenu2Xe6WcMwNpQb1HU3yyp9QIDAQABo4ICazCCAmcwHQYDVR0OBBYEFEXL7C4N 0ZikT6kgrLY2ndmH6n1UMB8GA1UdIwQYMBaAFE/1KEchXEoi6fEUnmy/7fdNYc6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xMTg3MDk3MkQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1NpTHA4UlNlYkxfdDkwMWh6 b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RfVW9SeUZjU2lMcDhSU2ViTF90OTAxaHpvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMzQTUvMTE4NzA5NzJENEQ4MTFFQ0E0MjQ1RjEwQzRGOUFFMDIvMjNEN0IxQjgx RUREMTFFRDgzQjc5NjNCQzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX BAIAATARAwMAknYDBADAQYIDBAHAZvowDQYJKoZIhvcNAQELBQADggEBAFZ2PeJc HEsr6P24CR2pL+vIvDrWjnvDRtxE8jbSSIpvIIsvNKZz79vG47/31Kra/OsBthv7 Z2iMQny8EVWklLXiL0pvQl3Tt6PsfYLngMaT2M1dDeq4KRlMfsoKC+wgNIOJUBdb npnJnXd35QU6B5+cJK+FzS0f46EgkVSsdmLt3dpPs60txaouN/3fNhiHmhLlCr4u M6b0yS+aK5L8PTXfyKlRQZ6b3df2yn25c7SjwwVIQ0390RvFwbnEs2KNpooIBh8H Prvr4yAST4DuaAp4f2StW0A3BZcYjBwOnu9XUBQwNXN00ldZ3rVfhKorhdH/dKE1 LShw++zLr8CUbRA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:56 2026 by rpki-client