$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/76C6BCF6B72811ECAEFC180DC4F9AE02.roa File: 76C6BCF6B72811ECAEFC180DC4F9AE02.roa (raw, json) Hash identifier: Ud5rGXdsvm2mwszq8gV1a3f93uHlsVz51C6UOk64thk= Subject key identifier: 5A:5B:D5:58:DF:5D:2B:2A:D6:6B:8B:2B:F4:AF:AA:5A:0C:8D:49:FA Certificate issuer: /CN=A91EA9BD/serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Certificate serial: 14CF Authority key identifier: DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/76C6BCF6B72811ECAEFC180DC4F9AE02.roa Signing time: Wed 26 Aug 2026 16:20:26 +0000 ROA not before: Wed 26 Aug 2026 16:20:25 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 4755 IP address blocks: 130.248.126.0/23 maxlen: 23 130.248.126.0/24 maxlen: 24 192.150.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5327 (0x14cf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9BD, serialNumber=DA4B5C2123BA9D0F802378DADDD4801B5670A3ED Validity Not Before: Aug 26 16:20:25 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8f1249-ab03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f0:c8:ab:13:95:0d:b9:85:d1:a9:bf:0f:ab: 98:a8:35:21:7b:20:a6:2b:3d:e1:13:6c:af:55:f2: 6f:58:d3:73:c0:aa:f6:60:c8:94:fd:70:d6:30:80: a1:74:79:ed:ac:5e:7b:d2:39:6c:f0:11:67:bd:87: 6d:38:f4:fb:7f:9e:67:76:11:0e:7b:28:41:56:12: 7c:cd:f4:a9:bb:95:46:14:de:cd:24:e9:5a:01:de: b2:90:11:f1:09:1f:ca:c5:02:f3:8f:9e:f7:74:3d: 7a:50:b8:6c:c3:de:62:91:d4:47:a1:84:56:13:5d: 2e:f4:14:d5:b1:a1:5b:0a:46:ca:fd:88:e3:d6:2a: 7d:64:dd:a8:0d:5d:ea:9f:42:e4:43:b9:8a:7f:7a: 2b:02:28:53:38:6c:94:2f:a3:39:22:1c:10:e6:82: e1:a7:eb:ab:5b:82:57:57:d0:d8:10:d1:9d:27:c4: f7:73:c7:ee:63:ad:12:f0:ce:bd:e6:14:da:e5:de: 1c:ed:83:12:79:98:c5:c5:f7:57:86:1f:cc:57:85: 53:22:b2:99:d2:db:b5:6e:70:55:7d:ae:78:34:0e: 62:7a:6a:16:42:3d:e8:26:fb:01:52:8c:2c:09:c8: c0:aa:f7:d3:d2:e2:34:fd:2a:30:24:0e:19:87:15: aa:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:5B:D5:58:DF:5D:2B:2A:D6:6B:8B:2B:F4:AF:AA:5A:0C:8D:49:FA X509v3 Authority Key Identifier: keyid:DA:4B:5C:21:23:BA:9D:0F:80:23:78:DA:DD:D4:80:1B:56:70:A3:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2ktcISO6nQ-AI3ja3dSAG1Zwo-0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/07495890918211E891C4EC10C4F9AE02/76C6BCF6B72811ECAEFC180DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 130.248.126.0/23 192.150.16.0/24 Signature Algorithm: sha256WithRSAEncryption 56:bd:df:24:f1:46:4d:c9:da:01:49:a1:d2:ef:53:ff:c5:94: 2f:8c:b7:76:c4:62:1a:50:d4:3d:90:8d:06:3f:c9:45:a9:25: 83:86:93:67:77:1b:76:18:0b:a8:6a:5f:95:fe:75:2a:53:e5: 07:c5:0e:a4:8c:f6:da:c7:52:b1:37:d9:6e:d8:7f:b4:f1:13: f1:76:cc:9d:d5:34:74:04:45:b8:3f:0f:50:5e:34:57:fa:85: 18:96:d6:f9:39:a1:32:da:55:e0:93:78:ac:cf:fc:30:bd:4d: 26:75:55:4c:96:0a:67:dd:2c:63:81:db:9d:38:a1:26:67:aa: 9f:bb:a5:2f:5b:e2:79:88:74:fe:1a:49:c2:c5:04:44:7c:e6: c9:68:7c:70:5a:9a:5c:89:38:da:16:02:1e:1f:e8:e1:1a:47: bb:67:96:df:ab:b4:dc:4c:0b:b0:49:3a:f5:f5:10:a0:07:26: 36:0d:18:32:32:4f:26:91:a2:8e:8f:cb:59:8d:d8:94:74:8b: 6a:ad:a3:e0:b2:7d:10:6a:a5:51:83:b4:e3:61:2d:f1:a2:2e: 76:77:6b:4e:d6:df:91:e8:36:17:fe:ae:98:2e:2d:30:5d:89: 98:b8:b0:11:fa:64:ed:10:98:76:de:f0:24:4d:c6:dd:00:ea: 79:1a:c7:f3 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICFM8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5QkQxMTAvBgNVBAUTKERBNEI1QzIxMjNCQTlEMEY4MDIzNzhEQURERDQ4MDFC NTY3MEEzRUQwHhcNMjYwODI2MTYyMDI1WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YThmMTI0OS1hYjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyPDIqxOVDbmF0am/D6uYqDUheyCmKz3hE2yvVfJvWNNzwKr2YMiU/XDWMICh dHntrF570jls8BFnvYdtOPT7f55ndhEOeyhBVhJ8zfSpu5VGFN7NJOlaAd6ykBHx CR/KxQLzj573dD16ULhsw95ikdRHoYRWE10u9BTVsaFbCkbK/Yjj1ip9ZN2oDV3q n0LkQ7mKf3orAihTOGyUL6M5IhwQ5oLhp+urW4JXV9DYENGdJ8T3c8fuY60S8M69 5hTa5d4c7YMSeZjFxfdXhh/MV4VTIrKZ0tu1bnBVfa54NA5iemoWQj3oJvsBUows CcjAqvfT0uI0/SowJA4ZhxWqPwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFFpb1Vjf XSsq1muLK/SvqloMjUn6MB8GA1UdIwQYMBaAFNpLXCEjup0PgCN42t3UgBtWcKPt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTlCRC8wNzQ5NTg5MDkx ODIxMUU4OTFDNEVDMTBDNEY5QUUwMi8ya3RjSVNPNm5RLUFJM2phM2RTQUcxWndv LTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJrdGNJU082blEtQUkzamEzZFNBRzFad28tMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE5QkQvMDc0OTU4OTA5MTgyMTFFODkxQzRFQzEwQzRGOUFFMDIvNzZDNkJDRjZC NzI4MTFFQ0FFRkMxODBEQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBgvh+AwQAwJYQMA0GCSqGSIb3DQEBCwUAA4IBAQBWvd8k8UZNydoB SaHS71P/xZQvjLd2xGIaUNQ9kI0GP8lFqSWDhpNndxt2GAuoal+V/nUqU+UHxQ6k jPbax1KxN9lu2H+08RPxdsyd1TR0BEW4Pw9QXjRX+oUYltb5OaEy2lXgk3isz/ww vU0mdVVMlgpn3SxjgdudOKEmZ6qfu6UvW+J5iHT+GknCxQREfObJaHxwWppciTja FgIeH+jhGke7Z5bfq7TcTAuwSTr19RCgByY2DRgyMk8mkaKOj8tZjdiUdItqraPg sn0QaqVRg7TjYS3xoi52d2tO1t+R6DYX/q6YLi0wXYmYuLAR+mTtEJh23vAkTcbd AOp5Gsfz -----END CERTIFICATE-----Generated at Sat Sep 5 04:04:31 2026 by rpki-client