$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/AD94C92242BA11ECB1E8FF11C4F9AE02.roa File: AD94C92242BA11ECB1E8FF11C4F9AE02.roa (raw, json) Hash identifier: pPVg90RNjRjphrQIpFi1Dtq7Yfiqt2CKG2uE/Sw0pBw= Subject key identifier: F7:77:01:0A:62:C6:4B:45:6C:76:63:44:1D:5C:F4:CE:98:E5:9B:2E Certificate issuer: /CN=A917D9FC/serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Certificate serial: 0522 Authority key identifier: D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/AD94C92242BA11ECB1E8FF11C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:30:40 +0000 ROA not before: Tue 24 Feb 2026 17:14:22 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 9287 IP address blocks: 185.54.88.0/22 maxlen: 22 185.54.88.0/24 maxlen: 24 185.54.89.0/24 maxlen: 24 185.54.90.0/24 maxlen: 24 185.54.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 16:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1314 (0x522) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917D9FC, serialNumber=D1A1EFD224135AEB09839EA8BDB8CDC599CE657F Validity Not Before: Feb 24 17:14:22 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69a45ba0-7773 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:0f:82:72:8a:79:8f:8f:11:19:1d:0f:7f:2c: 5c:12:e9:76:99:f4:f8:74:6c:49:02:c6:93:0f:0d: a7:92:be:65:7d:d1:5e:78:b2:1e:de:13:41:50:c8: ae:8e:12:9b:9d:44:7c:e2:9d:3b:5c:84:ae:19:44: 89:10:dd:1a:f1:ac:a9:24:d0:64:f2:b1:90:ec:4a: e5:db:74:ca:c9:77:eb:fa:bf:95:d2:37:9a:c9:79: 30:72:cf:8e:42:b4:bb:82:3d:39:82:ea:6b:60:ab: 04:da:e0:e4:77:b8:8a:42:4d:55:e9:ff:d6:8e:76: 9b:6f:ce:b9:ed:d0:75:ef:24:03:8f:0a:79:0f:ba: 78:7a:b7:35:8c:a5:88:a7:08:2d:72:c1:07:96:18: 78:27:54:37:b8:eb:21:cf:c0:01:f5:58:88:9e:85: e7:88:38:85:d1:ab:b7:2c:00:a8:4a:87:59:aa:05: 8d:98:a7:dd:8b:b2:a6:bd:2c:5a:7f:94:e2:c9:ab: a9:5b:40:60:c6:13:61:24:62:75:e1:49:a9:3e:73: d5:3b:66:68:83:33:7d:28:87:d2:bf:93:e2:97:7f: 6b:26:ee:c5:b4:ac:c3:76:d4:e8:61:5c:a4:d7:db: a3:9e:67:df:a4:d0:64:58:0e:6e:d6:2c:6f:cd:fd: cb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:77:01:0A:62:C6:4B:45:6C:76:63:44:1D:5C:F4:CE:98:E5:9B:2E X509v3 Authority Key Identifier: keyid:D1:A1:EF:D2:24:13:5A:EB:09:83:9E:A8:BD:B8:CD:C5:99:CE:65:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/0aHv0iQTWusJg56ovbjNxZnOZX8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0aHv0iQTWusJg56ovbjNxZnOZX8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/7A302D0042B111EC9F24A06EC4F9AE02/AD94C92242BA11ECB1E8FF11C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 185.54.88.0/22 Signature Algorithm: sha256WithRSAEncryption 0a:f1:65:7b:20:b0:4b:f7:14:aa:ac:d7:57:29:0e:d0:f3:15: 25:b8:df:a5:dd:7d:d1:f2:e9:ad:e2:14:20:66:80:72:81:b1: 89:3c:20:cf:54:88:75:22:17:45:f1:48:0e:dd:4c:0f:be:dd: 5f:ab:cc:7a:50:e6:6d:12:84:6a:7c:ba:e8:3d:4c:6a:b9:94: f1:6f:b3:4d:ba:19:ec:8a:5f:78:15:19:bb:b1:4f:61:82:3c: ec:a5:16:40:45:d4:42:d8:94:3f:35:1a:ec:ab:56:9b:b3:e1: 10:40:08:ff:31:c0:6e:99:5b:c6:20:a8:eb:ad:69:30:f6:9e: dc:fd:09:cd:97:6b:fd:2f:1b:7a:4f:83:c3:64:1e:dd:55:46: a2:fe:e7:31:0a:52:e5:4b:76:94:bf:ec:ca:d3:5b:a0:cb:df: fd:07:72:c8:5d:4c:78:c1:c9:fa:1f:35:b5:f2:4f:bd:a7:bb: fc:6a:bd:09:76:96:2f:a9:38:be:c3:7e:5b:ad:d1:56:88:29: 3f:90:c6:02:1b:d8:5f:24:b8:d1:dd:90:7e:5f:f1:2b:2c:33: ce:6a:83:0d:81:6b:46:5c:b0:0d:4d:d8:db:9e:48:1b:d9:f1: f0:b4:60:f5:cd:19:ab:60:f3:34:fb:bd:91:73:ea:0a:17:c2: 41:9e:2c:a4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBSIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0Q5RkMxMTAvBgNVBAUTKEQxQTFFRkQyMjQxMzVBRUIwOTgzOUVBOEJEQjhDREM1 OTlDRTY1N0YwHhcNMjYwMjI0MTcxNDIyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWJhMC03NzczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAng+Ccop5j48RGR0PfyxcEul2mfT4dGxJAsaTDw2nkr5lfdFeeLIe3hNBUMiu jhKbnUR84p07XISuGUSJEN0a8aypJNBk8rGQ7Erl23TKyXfr+r+V0jeayXkwcs+O QrS7gj05guprYKsE2uDkd7iKQk1V6f/Wjnabb8657dB17yQDjwp5D7p4erc1jKWI pwgtcsEHlhh4J1Q3uOshz8AB9ViInoXniDiF0au3LACoSodZqgWNmKfdi7KmvSxa f5TiyaupW0BgxhNhJGJ14UmpPnPVO2ZogzN9KIfSv5Pil39rJu7FtKzDdtToYVyk 19ujnmffpNBkWA5u1ixvzf3LZwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPd3AQpi xktFbHZjRB1c9M6Y5ZsuMB8GA1UdIwQYMBaAFNGh79IkE1rrCYOeqL24zcWZzmV/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDlGQy83QTMwMkQwMDQy QjExMUVDOUYyNEEwNkVDNEY5QUUwMi8wYUh2MGlRVFd1c0pnNTZvdmJqTnhabk9a WDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBhSHYwaVFUV3VzSmc1Nm92YmpOeFpuT1pYOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0Q5RkMvN0EzMDJEMDA0MkIxMTFFQzlGMjRBMDZFQzRGOUFFMDIvQUQ5NEM5MjI0 MkJBMTFFQ0IxRThGRjExQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCuTZYMA0GCSqGSIb3DQEBCwUAA4IBAQAK8WV7ILBL9xSqrNdXKQ7Q 8xUluN+l3X3R8umt4hQgZoBygbGJPCDPVIh1IhdF8UgO3UwPvt1fq8x6UOZtEoRq fLroPUxquZTxb7NNuhnsil94FRm7sU9hgjzspRZARdRC2JQ/NRrsq1abs+EQQAj/ McBumVvGIKjrrWkw9p7c/QnNl2v9Lxt6T4PDZB7dVUai/ucxClLlS3aUv+zK01ug y9/9B3LIXUx4wcn6HzW18k+9p7v8ar0JdpYvqTi+w35brdFWiCk/kMYCG9hfJLjR 3ZB+X/ErLDPOaoMNgWtGXLANTdjbnkgb2fHwtGD1zRmrYPM0+72Rc+oKF8JBniyk -----END CERTIFICATE-----Generated at Sat Mar 7 16:16:23 2026 by rpki-client