$ rpki-client -vvf rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/CD7290AA136F11F1982A4804323D8C67.roa File: CD7290AA136F11F1982A4804323D8C67.roa (raw, json) Hash identifier: CCP9/OeftiKfulV8qYHt+suPF/2fOVKP+J3q0O5BU9c= Subject key identifier: 0C:49:B9:A5:BB:08:AE:A5:FF:5C:73:06:70:D4:B0:BD:E0:9D:9B:C2 Certificate issuer: /CN=A911F587/serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655 Certificate serial: 0F Authority key identifier: 37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/CD7290AA136F11F1982A4804323D8C67.roa Signing time: Mon 02 Mar 2026 04:54:44 +0000 ROA not before: Fri 27 Feb 2026 00:03:54 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 133427 IP address blocks: 192.51.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 08:52:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15 (0xf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F587, serialNumber=37B0F0100D3BC3DEE65D9BEB0AECC4CEE1FB3655 Validity Not Before: Feb 27 00:03:54 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a51814-fd61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:f9:1f:44:01:5d:a1:c0:35:d4:76:93:7f:00: b5:50:f6:01:39:d1:ba:96:99:3d:0e:81:ca:89:2a: e3:9c:b8:9b:47:ca:95:6c:25:26:9b:94:00:40:7a: 40:0c:ea:74:d6:fa:fc:39:00:b0:88:53:69:1d:d9: 38:a1:76:16:1a:cc:a1:b4:b2:e4:ff:c0:7a:a6:9d: ea:b7:6f:de:80:cd:81:bf:51:81:8c:4d:e9:ef:39: fc:fa:07:de:ab:a8:e2:33:76:e3:6a:30:a9:fe:48: a4:33:88:68:47:be:4e:ba:f2:17:7a:a2:da:89:c6: 9a:e7:b6:cd:90:62:e5:e5:bd:d3:f1:60:f7:69:35: 70:d0:ff:56:b3:58:f4:02:42:e0:36:53:30:22:70: 2d:51:2b:d6:5d:aa:07:56:4c:e8:0e:2e:b3:a4:c1: 41:80:1f:cb:8a:7b:1e:2e:bc:ec:1b:27:6c:90:29: 8c:23:ab:26:9d:f0:e8:0b:75:54:80:36:e5:1e:df: fd:ee:cf:ca:e3:5a:c0:17:8f:04:3e:3d:fd:e8:fb: df:23:ab:37:a2:22:e7:4b:45:89:ef:46:35:ae:0b: f4:04:8b:69:57:4b:53:46:ac:d0:37:0e:f8:7c:d7: ea:60:08:b2:aa:1e:50:94:94:f8:4f:cb:5a:cd:52: 68:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:49:B9:A5:BB:08:AE:A5:FF:5C:73:06:70:D4:B0:BD:E0:9D:9B:C2 X509v3 Authority Key Identifier: keyid:37:B0:F0:10:0D:3B:C3:DE:E6:5D:9B:EB:0A:EC:C4:CE:E1:FB:36:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/N7DwEA07w97mXZvrCuzEzuH7NlU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/N7DwEA07w97mXZvrCuzEzuH7NlU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F587/B840ED86136E11F1AD791BA3313D8C67/CD7290AA136F11F1982A4804323D8C67.roa sbgp-ipAddrBlock: critical IPv4: 192.51.254.0/24 Signature Algorithm: sha256WithRSAEncryption a2:56:07:e8:bf:7c:37:2a:20:69:88:6f:fc:80:55:b8:84:6d: 97:5c:46:b0:cf:d1:dd:59:b6:a5:c5:62:f4:11:40:c2:f6:2f: b7:18:02:03:da:64:87:a1:c4:db:78:c1:d1:58:d8:c5:63:a3: 7b:42:c7:3f:fb:40:5f:b0:93:67:80:6d:47:70:13:b3:52:39: 02:33:e9:df:ee:b5:32:f4:e9:ab:b2:f7:df:f7:76:73:68:6b: 5e:ee:62:68:2d:bc:ab:79:48:14:86:e7:d1:b9:30:64:70:31: 27:8b:b4:18:99:b3:b4:6e:99:ea:d7:46:a5:d2:0c:ef:1f:bf: 3b:92:a2:6a:10:f9:d1:50:11:b0:82:f2:af:11:54:10:ea:17: 23:1a:1f:cb:6d:6b:66:5e:13:bd:06:ee:9d:9f:0e:65:ed:0e: af:a1:dd:f4:23:61:11:98:36:50:1a:e3:b2:2b:25:66:49:4b: 88:43:93:07:13:a8:36:11:b0:be:c8:f7:52:40:81:cf:e4:e8: 8c:07:b1:4d:a5:45:fa:b0:da:f7:d2:2a:b3:d0:80:42:65:b7: 87:61:73:95:3f:e8:9f:fc:2f:70:01:6d:ce:0a:a5:f1:cf:70: 4d:e3:d8:76:68:0f:6f:e0:fa:e2:21:0e:b8:f5:a9:cc:4c:00: 07:16:ac:3b -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBDzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx RjU4NzExMC8GA1UEBRMoMzdCMEYwMTAwRDNCQzNERUU2NUQ5QkVCMEFFQ0M0Q0VF MUZCMzY1NTAeFw0yNjAyMjcwMDAzNTRaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTUxODE0LWZkNjEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDU+R9EAV2hwDXUdpN/ALVQ9gE50bqWmT0OgcqJKuOcuJtHypVsJSablABAekAM 6nTW+vw5ALCIU2kd2TihdhYazKG0suT/wHqmneq3b96AzYG/UYGMTenvOfz6B96r qOIzduNqMKn+SKQziGhHvk668hd6otqJxprnts2QYuXlvdPxYPdpNXDQ/1azWPQC QuA2UzAicC1RK9ZdqgdWTOgOLrOkwUGAH8uKex4uvOwbJ2yQKYwjqyad8OgLdVSA NuUe3/3uz8rjWsAXjwQ+Pf3o+98jqzeiIudLRYnvRjWuC/QEi2lXS1NGrNA3Dvh8 1+pgCLKqHlCUlPhPy1rNUmgJAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUDEm5pbsI rqX/XHMGcNSwveCdm8IwHwYDVR0jBBgwFoAUN7DwEA07w97mXZvrCuzEzuH7NlUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTFGNTg3L0I4NDBFRDg2MTM2 RTExRjFBRDc5MUJBMzMxM0Q4QzY3L043RHdFQTA3dzk3bVhadnJDdXpFenVIN05s VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTjdEd0VBMDd3OTdtWFp2ckN1ekV6dUg3TmxVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx RjU4Ny9CODQwRUQ4NjEzNkUxMUYxQUQ3OTFCQTMzMTNEOEM2Ny9DRDcyOTBBQTEz NkYxMUYxOTgyQTQ4MDQzMjNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADAM/4wDQYJKoZIhvcNAQELBQADggEBAKJWB+i/fDcqIGmIb/yAVbiE bZdcRrDP0d1ZtqXFYvQRQML2L7cYAgPaZIehxNt4wdFY2MVjo3tCxz/7QF+wk2eA bUdwE7NSOQIz6d/utTL06auy99/3dnNoa17uYmgtvKt5SBSG59G5MGRwMSeLtBiZ s7RumerXRqXSDO8fvzuSomoQ+dFQEbCC8q8RVBDqFyMaH8tta2ZeE70G7p2fDmXt Dq+h3fQjYRGYNlAa47IrJWZJS4hDkwcTqDYRsL7I91JAgc/k6IwHsU2lRfqw2vfS KrPQgEJlt4dhc5U/6J/8L3ABbc4KpfHPcE3j2HZoD2/g+uIhDrj1qcxMAAcWrDs= -----END CERTIFICATE-----Generated at Wed Mar 4 09:32:28 2026 by rpki-client