$ rpki-client -vvvf rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/2D427E0ABB0911F18830CCDB6011F970.roa File: 2D427E0ABB0911F18830CCDB6011F970.roa (raw, json) Hash identifier: ZbLhL0N+f89Rp2Z+4YZU9jSLIykZdH9coJ8l/xCesJM= Subject key identifier: D1:AE:32:9A:99:28:0A:8C:32:2A:9D:CB:CF:C2:78:85:55:4A:5B:55 Certificate issuer: /CN=A91853D3/serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Certificate serial: 0654 Authority key identifier: 4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/2D427E0ABB0911F18830CCDB6011F970.roa Signing time: Mon 28 Sep 2026 06:52:31 +0000 ROA not before: Mon 28 Sep 2026 06:52:31 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 2697 IP address blocks: 144.16.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 22:45:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1620 (0x654) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91853D3, serialNumber=4E1B840F5C66016CED7E62EEC61B8322A321B6B6 Validity Not Before: Sep 28 06:52:31 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6aba0eaf-d434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:bb:17:24:fb:95:35:06:81:c8:f4:4a:27:dc: 24:59:97:b8:7a:47:6f:c9:81:4e:d3:a3:35:e7:32: 48:de:60:c9:f3:bb:c6:01:23:48:0b:bb:84:e5:a2: ec:f9:31:30:8b:96:37:2f:e7:08:9e:29:dd:f7:df: 4a:93:16:62:c6:bb:67:f9:b4:04:89:a8:aa:df:25: 0e:b0:68:4c:9f:e9:10:c6:92:a3:94:ec:b0:4f:0e: 9b:93:69:d4:80:e9:62:8a:ed:57:e4:9c:62:ea:2d: da:60:b7:7c:40:bf:61:84:34:da:55:ce:03:91:d5: 85:d3:09:1e:8a:b0:87:d8:da:ce:51:0f:53:14:a9: 05:a4:65:14:38:b3:b1:0d:3d:ce:cc:a2:94:9f:69: 1e:60:ea:da:0a:05:0e:ce:c5:14:f8:83:d4:29:50: 27:8a:d4:f0:a0:bd:ad:fb:12:75:6d:00:a2:6f:d6: 16:a7:a1:e4:fe:60:cf:15:4c:9e:6e:52:94:a8:a0: 2c:a1:f9:20:a6:aa:32:81:ab:c2:ce:8c:c3:a3:00: 11:58:bd:91:98:aa:ab:45:39:d9:f3:d7:23:65:40: 57:12:b3:97:5f:d0:74:3e:bc:78:f5:63:a1:79:61: b1:b8:cc:c3:a3:13:9b:f7:92:d3:bd:b8:32:1c:17: fd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:AE:32:9A:99:28:0A:8C:32:2A:9D:CB:CF:C2:78:85:55:4A:5B:55 X509v3 Authority Key Identifier: keyid:4E:1B:84:0F:5C:66:01:6C:ED:7E:62:EE:C6:1B:83:22:A3:21:B6:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/ThuED1xmAWztfmLuxhuDIqMhtrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ThuED1xmAWztfmLuxhuDIqMhtrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91853D3/6482DB7C000A11EC8C287252C4F9AE02/2D427E0ABB0911F18830CCDB6011F970.roa sbgp-ipAddrBlock: critical IPv4: 144.16.140.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:bc:f2:07:0d:ae:d2:dd:38:c2:d4:5a:2f:c6:07:3f:ca:bf: 42:71:a1:39:60:da:2e:3e:55:20:9c:70:46:3b:8f:db:00:83: f8:fc:fd:f2:b4:99:b8:91:e5:c7:43:da:58:9e:dd:a5:29:a6: 19:f8:7f:0c:28:85:bc:1c:d4:69:ca:e8:ac:aa:5f:d2:11:82: 54:70:7f:af:43:16:04:77:9d:13:01:d1:1a:f9:a6:fd:70:41: 32:9f:0e:a5:f6:c7:33:29:47:f3:90:b9:a0:1f:36:64:d1:27: 17:7e:cb:ac:78:7a:c2:f9:ba:e7:de:98:4d:74:4e:d2:9f:4c: 49:17:7c:83:bd:7b:de:3c:94:06:fd:3d:3f:bc:4c:6a:d1:9e: 1a:5e:94:8c:b7:88:f0:61:4a:5d:03:2a:a8:97:9c:70:fa:36: 03:16:45:ae:dd:62:a6:5f:91:36:66:26:95:2a:f1:55:af:96: bf:e3:f1:01:5f:2a:54:4c:f6:ea:6b:09:f7:2e:47:4a:d8:a9: ec:62:78:39:29:af:e0:2f:01:88:28:b4:c5:11:9f:b4:a7:0c: e0:4b:c6:93:a8:aa:11:01:91:46:46:20:62:82:9f:d2:19:6d: 79:7d:f9:68:37:29:5f:2d:4c:28:e4:f7:77:6c:e1:87:7a:b1: 1f:c9:13:03 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBlQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUzRDMxMTAvBgNVBAUTKDRFMUI4NDBGNUM2NjAxNkNFRDdFNjJFRUM2MUI4MzIy QTMyMUI2QjYwHhcNMjYwOTI4MDY1MjMxWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJhMGVhZi1kNDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLsXJPuVNQaByPRKJ9wkWZe4ekdvyYFO06M15zJI3mDJ87vGASNIC7uE5aLs +TEwi5Y3L+cInind999KkxZixrtn+bQEiaiq3yUOsGhMn+kQxpKjlOywTw6bk2nU gOliiu1X5Jxi6i3aYLd8QL9hhDTaVc4DkdWF0wkeirCH2NrOUQ9TFKkFpGUUOLOx DT3OzKKUn2keYOraCgUOzsUU+IPUKVAnitTwoL2t+xJ1bQCib9YWp6Hk/mDPFUye blKUqKAsofkgpqoygavCzozDowARWL2RmKqrRTnZ89cjZUBXErOXX9B0Prx49WOh eWGxuMzDoxOb95LTvbgyHBf9qwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNGuMpqZ KAqMMiqdy8/CeIVVSltVMB8GA1UdIwQYMBaAFE4bhA9cZgFs7X5i7sYbgyKjIba2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTNEMy82NDgyREI3QzAw MEExMUVDOEMyODcyNTJDNEY5QUUwMi9UaHVFRDF4bUFXenRmbUx1eGh1RElxTWh0 clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RodUVEMXhtQVd6dGZtTHV4aHVESXFNaHRyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUzRDMvNjQ4MkRCN0MwMDBBMTFFQzhDMjg3MjUyQzRGOUFFMDIvMkQ0MjdFMEFC QjA5MTFGMTg4MzBDQ0RCNjAxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAkBCMMA0GCSqGSIb3DQEBCwUAA4IBAQAOvPIHDa7S3TjC1Fovxgc/ yr9CcaE5YNouPlUgnHBGO4/bAIP4/P3ytJm4keXHQ9pYnt2lKaYZ+H8MKIW8HNRp yuisql/SEYJUcH+vQxYEd50TAdEa+ab9cEEynw6l9sczKUfzkLmgHzZk0ScXfsus eHrC+brn3phNdE7Sn0xJF3yDvXvePJQG/T0/vExq0Z4aXpSMt4jwYUpdAyqol5xw +jYDFkWu3WKmX5E2ZiaVKvFVr5a/4/EBXypUTPbqawn3LkdK2KnsYng5Ka/gLwGI KLTFEZ+0pwzgS8aTqKoRAZFGRiBigp/SGW15ffloNylfLUwo5Pd3bOGHerEfyRMD -----END CERTIFICATE-----Generated at Mon Oct 26 09:51:34 2026 by rpki-client