$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/BFA0334C01EA11F192D3B8D33A6F56BC.roa File: BFA0334C01EA11F192D3B8D33A6F56BC.roa (raw, json) Hash identifier: XjlVmV8NgohpXMWVwien7pyrDDxq3Y5kxsjfkRxixjk= Subject key identifier: D3:9F:77:08:67:B5:38:7B:4F:6F:FA:72:0F:6E:76:CA:5D:3E:8F:D6 Certificate issuer: /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C Certificate serial: E6 Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/BFA0334C01EA11F192D3B8D33A6F56BC.roa Signing time: Mon 31 Aug 2026 07:56:38 +0000 ROA not before: Mon 31 Aug 2026 07:56:38 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 154086 IP address blocks: 192.188.86.0/24 maxlen: 24 192.188.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 230 (0xe6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C Validity Not Before: Aug 31 07:56:38 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a9533b6-cb65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e7:8a:63:cf:60:c4:c0:c3:44:ca:0e:2c:59: 67:80:ef:15:78:a2:56:c4:b3:08:29:e1:64:b5:e4: c2:3d:0c:8b:f4:1f:f6:2b:f9:48:f3:0f:e4:f0:45: 56:13:6b:e8:58:cb:b0:a3:0b:a6:b1:d1:f5:68:2c: ab:19:9d:a6:9d:36:d2:d2:02:d7:2e:e5:ed:41:6b: 93:37:12:b5:0c:86:eb:bd:cd:96:bb:f2:0d:d8:d8: dc:3a:6c:2e:a0:e2:89:24:50:02:fa:5f:cf:d2:7a: 96:95:b2:9b:c9:7c:93:db:1f:6f:6f:0a:57:c1:ed: a1:75:36:bc:05:6d:02:19:3f:c6:49:b5:ec:02:ed: 16:1b:12:08:d3:b3:66:09:7f:52:d1:2b:0a:2a:8e: 3b:80:59:f6:2c:13:60:b0:58:2b:c5:04:e0:e9:8c: 4d:5d:ec:65:00:43:15:04:b2:65:15:5e:5b:c0:dc: 40:4d:ad:10:a7:db:e2:64:1e:3e:90:87:8c:0f:a7: 89:99:af:01:27:33:09:17:be:22:ff:95:c4:d6:e6: 52:f0:4c:4e:41:33:b9:29:2d:f4:15:df:8c:7e:56: c8:95:df:3d:3b:66:c1:49:88:e8:8e:1f:4e:b5:43: d3:19:24:c1:6e:31:9e:b3:b4:cf:49:f2:5a:c8:8b: bc:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9F:77:08:67:B5:38:7B:4F:6F:FA:72:0F:6E:76:CA:5D:3E:8F:D6 X509v3 Authority Key Identifier: keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/BFA0334C01EA11F192D3B8D33A6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 192.188.86.0/23 Signature Algorithm: sha256WithRSAEncryption 41:46:b0:32:fb:11:7d:16:53:25:0b:5f:dd:5e:f0:d5:61:98: cf:cb:9d:a5:87:d2:c8:d5:95:18:63:00:45:9d:30:86:ed:c1: b9:be:01:fd:37:1f:a4:fb:44:35:c2:4e:22:23:e4:4a:1d:f6: a0:ec:04:d5:f7:17:e8:1d:03:cc:da:e6:de:7e:06:9f:56:84: ae:a4:41:52:9b:db:79:f6:6f:5b:14:23:60:44:b5:e5:af:9f: 09:af:70:14:3a:e9:be:86:74:91:48:ca:be:d1:06:13:77:5a: da:17:42:cb:e4:d9:03:52:02:e6:19:6f:a3:e4:9d:e4:18:d8: 22:94:37:84:23:ab:35:03:c1:d8:ce:55:b7:30:b5:ed:71:b6: e9:ae:d3:78:77:b1:9e:f6:cc:ca:c1:15:23:93:d8:ba:3d:f8: fc:9c:94:8f:53:2f:68:bd:31:e8:4b:eb:39:d7:87:81:aa:aa: e4:e4:eb:ea:c1:22:6d:bf:75:1e:81:f0:04:5e:0c:8e:6d:ee: 86:0f:9d:7a:8b:81:4e:4e:91:f5:f0:e5:92:3b:24:e4:22:5a: d8:bb:a6:2d:9f:3a:c2:d2:b5:34:fa:82:a6:cc:68:a2:cb:a0: 49:10:02:40:f8:25:a9:7e:5e:4d:53:8b:9c:e9:9f:02:8e:25: 7d:c2:49:48 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCM0MxMTAvBgNVBAUTKDgyNkI0NDc0QkM2RjRGM0JFNDBCNUU3NTExRjEwNUNB RTdGRThDMEMwHhcNMjYwODMxMDc1NjM4WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk1MzNiNi1jYjY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAweeKY89gxMDDRMoOLFlngO8VeKJWxLMIKeFkteTCPQyL9B/2K/lI8w/k8EVW E2voWMuwowumsdH1aCyrGZ2mnTbS0gLXLuXtQWuTNxK1DIbrvc2Wu/IN2NjcOmwu oOKJJFAC+l/P0nqWlbKbyXyT2x9vbwpXwe2hdTa8BW0CGT/GSbXsAu0WGxII07Nm CX9S0SsKKo47gFn2LBNgsFgrxQTg6YxNXexlAEMVBLJlFV5bwNxATa0Qp9viZB4+ kIeMD6eJma8BJzMJF74i/5XE1uZS8ExOQTO5KS30Fd+MflbIld89O2bBSYjojh9O tUPTGSTBbjGes7TPSfJayIu86wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNOfdwhn tTh7T2/6cg9udspdPo/WMB8GA1UdIwQYMBaAFIJrRHS8b0875AtedRHxBcrn/owM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUIzQy85OTFFQURGRTY5 NEExMUYwQTc3NDFBNDNDNEY5QUUwMi9nbXRFZEx4dlR6dmtDMTUxRWZFRnl1Zi1q QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dtdEVkTHh2VHp2a0MxNTFFZkVGeXVmLWpBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkFCM0MvOTkxRUFERkU2OTRBMTFGMEE3NzQxQTQzQzRGOUFFMDIvQkZBMDMzNEMw MUVBMTFGMTkyRDNCOEQzM0E2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBwLxWMA0GCSqGSIb3DQEBCwUAA4IBAQBBRrAy+xF9FlMlC1/dXvDV YZjPy52lh9LI1ZUYYwBFnTCG7cG5vgH9Nx+k+0Q1wk4iI+RKHfag7ATV9xfoHQPM 2ubefgafVoSupEFSm9t59m9bFCNgRLXlr58Jr3AUOum+hnSRSMq+0QYTd1raF0LL 5NkDUgLmGW+j5J3kGNgilDeEI6s1A8HYzlW3MLXtcbbprtN4d7Ge9szKwRUjk9i6 Pfj8nJSPUy9ovTHoS+s514eBqqrk5OvqwSJtv3UegfAEXgyObe6GD516i4FOTpH1 8OWSOyTkIlrYu6YtnzrC0rU0+oKmzGiiy6BJEAJA+CWpfl5NU4uc6Z8CjiV9wklI -----END CERTIFICATE-----Generated at Tue Sep 22 13:02:04 2026 by rpki-client