$ rpki-client -vvvf rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/8558E5CABCD511F1A1D34A233511F970.roa File: 8558E5CABCD511F1A1D34A233511F970.roa (raw, json) Hash identifier: lM5d8k3rrRrnT/VDaZJoLEDG1leveh7J7n7gCZUeUJ0= Subject key identifier: E8:55:DE:B9:D5:48:2D:BD:4E:EF:17:0C:81:A4:B1:C7:76:D4:20:FA Certificate issuer: /CN=A91556B2/serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088 Certificate serial: 1D Authority key identifier: DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/8558E5CABCD511F1A1D34A233511F970.roa Signing time: Wed 30 Sep 2026 13:47:48 +0000 ROA not before: Wed 30 Sep 2026 13:47:48 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 402246 IP address blocks: 79.109.8.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 02:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91556B2, serialNumber=DFC93645B9E6F537725074E9B44AEA80A9F56088 Validity Not Before: Sep 30 13:47:48 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abd1304-b9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0a:22:0e:e0:45:5b:9f:77:0b:d0:a6:92:0b: cf:7d:14:2e:24:ec:ba:97:22:21:14:37:c3:83:3d: 7e:05:ce:d8:e6:c0:ea:c1:d9:82:bd:92:39:d0:de: 79:4e:e3:79:5f:53:99:e9:63:b5:fa:fd:9c:1c:03: b5:f3:a8:ca:c5:b5:9f:10:54:6f:40:6b:83:cd:98: a3:c7:d2:86:bd:1e:f5:d5:8c:51:aa:6e:9d:24:51: 6a:05:03:73:db:fa:76:d5:26:2d:f5:24:51:db:d3: 9a:54:83:d9:33:c4:13:8a:f8:d9:03:a4:44:2d:ee: 44:f2:05:8b:93:9a:33:03:15:77:fc:09:fa:d6:b7: ee:67:b2:bb:5f:7f:e1:32:c4:54:c2:99:45:79:de: 81:94:a5:2a:35:ae:6e:78:99:e3:4a:e8:35:22:47: ee:87:ba:6f:e1:e9:9a:4c:e7:9b:86:6a:7d:12:64: 85:e6:da:36:cc:6f:1d:17:cb:75:d3:35:ae:b4:30: b8:41:bc:5a:b1:15:80:b3:16:a6:df:4e:b8:a4:e3: ef:4d:b8:c0:ef:91:64:f6:7b:38:96:01:24:1b:d9: f2:15:28:5c:2c:09:80:f4:d0:e3:23:63:ac:53:21: ba:0e:d0:cb:02:e7:38:09:42:e2:31:26:72:4a:70: 53:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:55:DE:B9:D5:48:2D:BD:4E:EF:17:0C:81:A4:B1:C7:76:D4:20:FA X509v3 Authority Key Identifier: keyid:DF:C9:36:45:B9:E6:F5:37:72:50:74:E9:B4:4A:EA:80:A9:F5:60:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/38k2Rbnm9TdyUHTptErqgKn1YIg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/38k2Rbnm9TdyUHTptErqgKn1YIg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91556B2/D4A48EFCA5E911F18ED456753B11F970/8558E5CABCD511F1A1D34A233511F970.roa sbgp-ipAddrBlock: critical IPv4: 79.109.8.0/21 Signature Algorithm: sha256WithRSAEncryption 49:0b:f1:ae:bd:2a:08:99:77:ae:ec:ee:c7:35:2a:df:14:44: 58:0d:fa:05:dc:fb:f9:c6:0b:2f:af:a2:d8:e3:ef:6e:b1:1a: 02:cd:a9:81:b9:11:d9:89:5c:cd:c9:87:f9:46:d5:f1:54:40: d5:6a:68:0b:c7:c0:a8:79:3d:52:36:2e:74:1d:05:01:ee:8a: de:3a:a2:e9:21:a5:84:3e:82:6c:8f:4a:88:a9:f4:2c:cb:3a: f8:99:6e:98:f2:d2:e6:47:a7:f4:5e:c5:0a:f1:aa:f3:ce:c5: 45:66:34:ea:64:84:5a:af:7a:c2:9a:67:b7:45:a6:ab:53:87: 25:99:5c:a7:e5:b5:b2:80:e5:72:26:52:6d:b7:d4:29:fb:1b: d8:14:7c:ca:51:9d:27:66:96:a9:04:75:6c:9d:8e:f1:43:91: 6d:1a:6c:4d:cf:0f:ad:f0:b5:9f:ca:5a:95:ee:c9:bf:03:30: 27:b3:23:ee:ab:46:8f:a0:5a:b2:97:27:42:47:cd:d4:c0:61: e4:7f:7d:69:0f:3f:22:40:fe:a8:5e:ec:a1:c2:63:ba:9a:c2: e4:40:ac:ff:b8:4e:ba:85:13:52:92:5f:69:b6:f9:e1:70:9f: e9:b2:ab:26:06:dc:6f:c2:f6:b4:3f:4a:02:f1:ba:a0:c8:ca: 7a:a5:f4:d9 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NTZCMjExMC8GA1UEBRMoREZDOTM2NDVCOUU2RjUzNzcyNTA3NEU5QjQ0QUVBODBB OUY1NjA4ODAeFw0yNjA5MzAxMzQ3NDhaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYmQxMzA0LWI5ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDXCiIO4EVbn3cL0KaSC899FC4k7LqXIiEUN8ODPX4FztjmwOrB2YK9kjnQ3nlO 43lfU5npY7X6/ZwcA7XzqMrFtZ8QVG9Aa4PNmKPH0oa9HvXVjFGqbp0kUWoFA3Pb +nbVJi31JFHb05pUg9kzxBOK+NkDpEQt7kTyBYuTmjMDFXf8CfrWt+5nsrtff+Ey xFTCmUV53oGUpSo1rm54meNK6DUiR+6Hum/h6ZpM55uGan0SZIXm2jbMbx0Xy3XT Na60MLhBvFqxFYCzFqbfTrik4+9NuMDvkWT2eziWASQb2fIVKFwsCYD00OMjY6xT IboO0MsC5zgJQuIxJnJKcFNXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU6FXeudVI Lb1O7xcMgaSxx3bUIPowHwYDVR0jBBgwFoAU38k2Rbnm9TdyUHTptErqgKn1YIgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU1NkIyL0Q0QTQ4RUZDQTVF OTExRjE4RUQ0NTY3NTNCMTFGOTcwLzM4azJSYm5tOVRkeVVIVHB0RXJxZ0tuMVlJ Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMzhrMlJibm05VGR5VUhUcHRFcnFnS24xWUlnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NTZCMi9ENEE0OEVGQ0E1RTkxMUYxOEVENDU2NzUzQjExRjk3MC84NTU4RTVDQUJD RDUxMUYxQTFEMzRBMjMzNTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBANPbQgwDQYJKoZIhvcNAQELBQADggEBAEkL8a69KgiZd67s7sc1Kt8U RFgN+gXc+/nGCy+votjj726xGgLNqYG5EdmJXM3Jh/lG1fFUQNVqaAvHwKh5PVI2 LnQdBQHuit46oukhpYQ+gmyPSoip9CzLOviZbpjy0uZHp/RexQrxqvPOxUVmNOpk hFqvesKaZ7dFpqtThyWZXKfltbKA5XImUm231Cn7G9gUfMpRnSdmlqkEdWydjvFD kW0abE3PD63wtZ/KWpXuyb8DMCezI+6rRo+gWrKXJ0JHzdTAYeR/fWkPPyJA/qhe 7KHCY7qawuRArP+4TrqFE1KSX2m2+eFwn+myqyYG3G/C9rQ/SgLxuqDIynql9Nk= -----END CERTIFICATE-----Generated at Sun Oct 25 14:21:09 2026 by rpki-client