$ rpki-client -vvvf rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/797EB474C15C11F1A32C9D3E5611F970.roa File: 797EB474C15C11F1A32C9D3E5611F970.roa (raw, json) Hash identifier: ER1/UdD9v/dxtBgb8kVY6LLz4SFub7fm7YxT6sicMQY= Subject key identifier: 5C:C8:97:95:79:93:09:59:C4:56:2F:55:BF:37:72:99:B1:C3:D2:90 Certificate issuer: /CN=A912598D/serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Certificate serial: AA Authority key identifier: A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/797EB474C15C11F1A32C9D3E5611F970.roa Signing time: Tue 06 Oct 2026 08:03:55 +0000 ROA not before: Tue 06 Oct 2026 08:03:55 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139591 IP address blocks: 141.140.56.0/24 maxlen: 24 141.140.57.0/24 maxlen: 24 141.140.58.0/24 maxlen: 24 141.140.59.0/24 maxlen: 24 141.140.60.0/24 maxlen: 24 141.140.61.0/24 maxlen: 24 141.140.62.0/24 maxlen: 24 141.140.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 170 (0xaa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912598D, serialNumber=A25697512AA26527CE4AD61ACC09A10BED3C9719 Validity Not Before: Oct 6 08:03:55 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6ac4ab6a-82d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:01:68:5d:de:08:f5:ff:ea:ea:0c:13:28:93: 6a:64:48:da:39:e6:10:cf:f5:a7:f9:b4:82:4c:68: 32:1c:f1:ca:e4:4e:34:c3:16:5d:17:f2:77:4b:60: ec:ee:b2:b5:16:9b:11:ec:05:ba:57:ec:e9:3f:c9: 8d:21:4e:4b:a4:d5:27:96:44:b5:cd:4f:9e:9b:fc: 4b:75:cd:57:65:22:2e:f0:1f:c7:56:08:0d:ac:e9: c3:03:6d:db:6c:73:d8:67:2b:23:b7:9f:6f:00:62: 10:24:1a:ab:d9:40:96:3c:1e:47:f6:38:91:f8:7b: 6f:ec:16:33:f7:4d:3b:ef:b5:84:15:a2:99:46:a8: b1:d0:db:04:57:0f:67:f7:13:16:95:66:17:a7:a6: d7:de:33:33:3f:9b:f3:d8:48:7d:b7:c3:c7:44:67: 9f:51:65:03:08:3c:01:32:73:96:3f:6f:e9:37:83: e4:e2:0e:d3:20:ea:43:49:8b:c9:72:19:d6:09:a0: 6e:43:b3:7e:9d:11:9f:39:e7:92:1f:1e:3e:96:57: a7:aa:91:ff:2f:64:f5:df:5c:cf:87:03:9b:7c:eb: 5f:99:ba:eb:8d:e1:13:f5:dc:7b:db:fd:6f:66:b8: 9f:df:25:1e:6a:63:6f:7e:c3:32:bf:5f:50:e3:7e: 89:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:C8:97:95:79:93:09:59:C4:56:2F:55:BF:37:72:99:B1:C3:D2:90 X509v3 Authority Key Identifier: keyid:A2:56:97:51:2A:A2:65:27:CE:4A:D6:1A:CC:09:A1:0B:ED:3C:97:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/olaXUSqiZSfOStYazAmhC-08lxk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/olaXUSqiZSfOStYazAmhC-08lxk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912598D/E39D8E0CC8EC11F08C78AB45C4F9AE02/797EB474C15C11F1A32C9D3E5611F970.roa sbgp-ipAddrBlock: critical IPv4: 141.140.56.0/21 Signature Algorithm: sha256WithRSAEncryption 05:de:10:3e:96:8b:58:3e:62:02:5b:b2:45:19:e2:3c:3a:90: a9:ec:46:8a:8e:01:31:fe:97:c0:13:d6:ba:f9:98:5d:b3:16: 9f:3d:ba:98:f4:97:f8:a8:f9:2f:a9:95:c1:58:b0:c8:d9:f0: 9a:e8:89:66:c4:ef:ce:ce:a1:9a:41:41:0d:74:29:b6:50:b0: 4f:f0:5c:68:04:d2:80:53:68:8b:a8:e5:4e:4d:56:3c:f2:be: 43:24:e5:3f:36:b5:07:9a:a0:37:e1:b1:16:be:50:a0:bf:5b: 6c:fe:38:76:05:61:9f:77:61:7b:0f:01:db:b2:64:f2:72:0d: b0:54:56:35:80:24:06:1b:bd:80:1c:cf:68:14:14:90:9f:47: 88:4e:44:f7:d4:eb:7d:5e:33:87:d5:40:72:f7:c9:d4:d4:2f: 4a:b5:11:ba:01:34:dc:20:ad:e5:90:6c:1f:44:2e:57:4d:8d: a0:fc:78:e6:09:41:20:ed:32:ca:7e:e3:ee:f1:41:cd:76:6d: 55:b1:36:a3:ea:36:63:b2:01:e7:af:2d:18:bb:8b:c0:76:87: 48:3d:4d:2f:22:cb:21:92:bf:77:ae:11:c4:28:a7:b4:d5:c5: a8:93:03:c2:d4:07:67:35:8e:d3:7c:09:38:44:83:a2:d3:34: 72:a9:ae:71 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAKowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjU5OEQxMTAvBgNVBAUTKEEyNTY5NzUxMkFBMjY1MjdDRTRBRDYxQUNDMDlBMTBC RUQzQzk3MTkwHhcNMjYxMDA2MDgwMzU1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM0YWI2YS04MmQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlwFoXd4I9f/q6gwTKJNqZEjaOeYQz/Wn+bSCTGgyHPHK5E40wxZdF/J3S2Ds 7rK1FpsR7AW6V+zpP8mNIU5LpNUnlkS1zU+em/xLdc1XZSIu8B/HVggNrOnDA23b bHPYZysjt59vAGIQJBqr2UCWPB5H9jiR+Htv7BYz900777WEFaKZRqix0NsEVw9n 9xMWlWYXp6bX3jMzP5vz2Eh9t8PHRGefUWUDCDwBMnOWP2/pN4Pk4g7TIOpDSYvJ chnWCaBuQ7N+nRGfOeeSHx4+llenqpH/L2T131zPhwObfOtfmbrrjeET9dx72/1v Zrif3yUeamNvfsMyv19Q436JqQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFzIl5V5 kwlZxFYvVb83cpmxw9KQMB8GA1UdIwQYMBaAFKJWl1EqomUnzkrWGswJoQvtPJcZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNTk4RC9FMzlEOEUwQ0M4 RUMxMUYwOEM3OEFCNDVDNEY5QUUwMi9vbGFYVVNxaVpTZk9TdFlhekFtaEMtMDhs eGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL29sYVhVU3FpWlNmT1N0WWF6QW1oQy0wOGx4ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjU5OEQvRTM5RDhFMENDOEVDMTFGMDhDNzhBQjQ1QzRGOUFFMDIvNzk3RUI0NzRD MTVDMTFGMUEzMkM5RDNFNTYxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDjYw4MA0GCSqGSIb3DQEBCwUAA4IBAQAF3hA+lotYPmICW7JFGeI8 OpCp7EaKjgEx/pfAE9a6+ZhdsxafPbqY9Jf4qPkvqZXBWLDI2fCa6IlmxO/OzqGa QUENdCm2ULBP8FxoBNKAU2iLqOVOTVY88r5DJOU/NrUHmqA34bEWvlCgv1ts/jh2 BWGfd2F7DwHbsmTycg2wVFY1gCQGG72AHM9oFBSQn0eITkT31Ot9XjOH1UBy98nU 1C9KtRG6ATTcIK3lkGwfRC5XTY2g/HjmCUEg7TLKfuPu8UHNdm1VsTaj6jZjsgHn ry0Yu4vAdodIPU0vIsshkr93rhHEKKe01cWokwPC1AdnNY7TfAk4RIOi0zRyqa5x -----END CERTIFICATE-----Generated at Thu Oct 22 20:23:46 2026 by rpki-client