$ rpki-client -vvvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/DD40AF5AA77E11F1AC50A9373F11F970.roa File: DD40AF5AA77E11F1AC50A9373F11F970.roa (raw, json) Hash identifier: 6Uowsef2jJ1DQ1gBAp/T7MapE+BFd720LL4HH47jr0Q= Subject key identifier: 7B:06:43:7B:B4:77:1C:35:35:4D:90:BA:CF:C7:44:EB:6E:5F:7D:CF Certificate issuer: /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Certificate serial: 0275 Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/DD40AF5AA77E11F1AC50A9373F11F970.roa Signing time: Thu 03 Sep 2026 10:04:35 +0000 ROA not before: Thu 03 Sep 2026 10:04:35 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 56030 IP address blocks: 192.100.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 18:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 629 (0x275) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252 Validity Not Before: Sep 3 10:04:35 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a994632-a833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:37:18:31:cd:63:0d:49:43:fb:0c:95:3a:6e: f8:54:2f:09:8e:47:af:93:10:ff:87:64:e2:e9:4f: c4:0f:b7:2c:f3:15:ff:5f:27:5c:29:9b:13:74:84: 28:25:75:e6:d4:d8:d1:5e:14:8d:be:a5:0a:f8:c4: 9d:57:28:d3:cd:4a:0a:24:eb:4c:c3:2f:cc:93:00: 55:05:87:57:b7:49:1b:f6:36:5a:34:66:e2:67:2a: f8:cc:bc:2b:73:ef:b1:c9:3c:6f:75:89:4f:2d:ed: 09:e1:9f:8e:87:7a:0f:24:8d:ac:9b:ca:96:c3:6d: e3:a2:c7:ca:1b:7d:28:68:fc:80:3f:88:cb:38:58: 6f:c6:46:5c:2c:22:ef:94:40:3a:2b:40:3c:cd:b9: 89:0c:70:a8:ad:8d:68:5c:81:ca:f8:8b:62:0d:07: 41:f8:95:ea:a7:e1:3c:45:da:b9:09:ea:3b:fe:6e: 78:ed:0a:b6:4b:df:1a:ea:4c:02:bb:e6:22:9a:46: bd:57:a6:c5:80:cb:e0:7b:75:1b:a5:9f:5f:48:68: c0:d4:3c:d6:d1:17:b3:06:13:21:b0:af:01:63:04: f7:4b:93:27:b0:18:07:73:86:a8:da:bb:90:05:d0: 9e:eb:9b:ac:43:49:eb:d0:e3:66:c3:48:c6:41:4f: 05:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:06:43:7B:B4:77:1C:35:35:4D:90:BA:CF:C7:44:EB:6E:5F:7D:CF X509v3 Authority Key Identifier: keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/DD40AF5AA77E11F1AC50A9373F11F970.roa sbgp-ipAddrBlock: critical IPv4: 192.100.53.0/24 Signature Algorithm: sha256WithRSAEncryption 34:d7:66:e1:59:1b:24:6f:80:90:ad:42:ff:95:b3:0f:94:7c: e7:20:d9:e9:da:92:43:01:fb:84:eb:18:cb:f6:4d:e9:9c:5d: fa:78:81:3d:40:71:0b:66:79:6f:2a:72:f0:a6:01:ce:f9:b3: 82:10:b3:04:c3:d0:ad:90:ea:e1:c2:73:df:49:04:69:8f:1d: 1a:33:0b:c9:fe:ae:cb:fb:bb:50:7a:a9:99:64:a4:10:ec:d5: f8:83:85:f0:49:0c:ee:3f:b7:2b:d7:5b:39:b5:4e:5c:e3:31: c4:70:d3:74:ee:be:47:0d:84:3c:7a:99:a6:71:c6:1e:8b:1c: 0d:5c:5b:01:6c:72:9b:0f:3f:b3:e8:76:61:7e:d4:77:3e:f1: 20:7c:a7:6a:33:cd:95:06:3c:84:8c:6f:41:08:43:15:28:66: 9c:19:94:65:fd:4e:c4:c4:0f:3b:93:80:4b:f4:1d:7e:3b:95: e1:ca:8e:42:ef:a1:66:57:9b:84:b9:ce:ee:89:63:fc:5d:fa: 46:09:64:3b:23:7e:b8:1c:f1:54:44:30:c7:9f:39:db:47:a7: a0:f6:93:c1:a7:90:a8:18:b2:5d:39:30:09:d3:e9:13:6a:e8: 29:1a:05:45:fd:a5:e5:a3:6d:14:2a:d8:98:28:ff:71:f3:34: f8:cb:46:31 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTc4RjQxMTAvBgNVBAUTKEI0ODNEQTA1RjgxMDhGQUQ1NkI5NjdBREFERDI1MUM2 Qzk2OUMyNTIwHhcNMjYwOTAzMTAwNDM1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5NDYzMi1hODMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDcYMc1jDUlD+wyVOm74VC8JjkevkxD/h2Ti6U/ED7cs8xX/XydcKZsTdIQo JXXm1NjRXhSNvqUK+MSdVyjTzUoKJOtMwy/MkwBVBYdXt0kb9jZaNGbiZyr4zLwr c++xyTxvdYlPLe0J4Z+Oh3oPJI2sm8qWw23josfKG30oaPyAP4jLOFhvxkZcLCLv lEA6K0A8zbmJDHCorY1oXIHK+ItiDQdB+JXqp+E8Rdq5Ceo7/m547Qq2S98a6kwC u+Yimka9V6bFgMvge3UbpZ9fSGjA1DzW0RezBhMhsK8BYwT3S5MnsBgHc4ao2ruQ BdCe65usQ0nr0ONmw0jGQU8FSwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFHsGQ3u0 dxw1NU2Qus/HROtuX33PMB8GA1UdIwQYMBaAFLSD2gX4EI+tVrlnra3SUcbJacJS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzhGNC9CRjBBMUU5QUYw QjYxMUVEQTg4MkU2MjhDNEY5QUUwMi90SVBhQmZnUWo2MVd1V2V0cmRKUnhzbHB3 bEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RJUGFCZmdRajYxV3VXZXRyZEpSeHNscHdsSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTc4RjQvQkYwQTFFOUFGMEI2MTFFREE4ODJFNjI4QzRGOUFFMDIvREQ0MEFGNUFB NzdFMTFGMUFDNTBBOTM3M0YxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwGQ1MA0GCSqGSIb3DQEBCwUAA4IBAQA012bhWRskb4CQrUL/lbMP lHznINnp2pJDAfuE6xjL9k3pnF36eIE9QHELZnlvKnLwpgHO+bOCELMEw9CtkOrh wnPfSQRpjx0aMwvJ/q7L+7tQeqmZZKQQ7NX4g4XwSQzuP7cr11s5tU5c4zHEcNN0 7r5HDYQ8epmmccYeixwNXFsBbHKbDz+z6HZhftR3PvEgfKdqM82VBjyEjG9BCEMV KGacGZRl/U7ExA87k4BL9B1+O5Xhyo5C76FmV5uEuc7uiWP8XfpGCWQ7I364HPFU RDDHnznbR6eg9pPBp5CoGLJdOTAJ0+kTaugpGgVF/aXlo20UKtiYKP9x8zT4y0Yx -----END CERTIFICATE-----Generated at Sat Sep 5 14:41:09 2026 by rpki-client