$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/96FAA6BA2DBF11F1A3BE1D0DAB833773.roa File: 96FAA6BA2DBF11F1A3BE1D0DAB833773.roa (raw, json) Hash identifier: e8yxWxSmmRPk+ltdy8gP6pzlZlCCw4QZs3be9NGpjEQ= Subject key identifier: 06:AF:54:67:67:2A:93:3B:78:6C:DF:1E:31:D0:57:A9:6F:C1:A1:E8 Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 024B Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/96FAA6BA2DBF11F1A3BE1D0DAB833773.roa Signing time: Wed 01 Apr 2026 11:40:32 +0000 ROA not before: Wed 01 Apr 2026 11:40:32 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 34985 IP address blocks: 185.254.240.0/24 maxlen: 24 194.246.40.0/24 maxlen: 24 194.246.41.0/24 maxlen: 24 194.246.42.0/24 maxlen: 24 194.246.43.0/24 maxlen: 24 213.139.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 12 Apr 2026 01:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 587 (0x24b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Apr 1 11:40:32 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69cd0430-ef1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1a:35:15:4a:39:0c:c9:8f:35:60:cd:3b:99: e7:51:65:ce:2d:02:f0:9b:65:6e:26:d3:e3:df:39: 99:e7:45:f9:6f:1f:34:55:f1:0a:ff:cb:fd:6c:67: f5:a5:f8:a5:db:74:b1:53:f8:ef:b0:dc:59:26:6b: fe:48:77:f3:5a:f0:97:3d:5c:25:53:a5:20:7e:c0: 4d:51:6a:4e:5f:d7:a2:09:d1:1a:82:28:aa:43:95: 79:3c:11:b0:b9:63:71:30:9c:72:60:8f:11:43:a7: 71:93:a5:46:62:3f:f3:d7:4e:fe:c9:89:5f:aa:5f: 98:54:d5:98:eb:68:8a:41:ae:e6:87:99:30:2b:c0: 0f:2d:18:f5:aa:8d:05:44:41:a9:b3:66:44:b1:db: 07:a3:db:70:89:ea:70:4f:bd:b1:c2:e3:c5:63:89: 35:47:fa:ac:49:b2:77:7d:ce:ce:34:15:79:a7:87: 5f:fe:b4:c1:f3:60:31:2b:b3:b3:9a:92:fd:7c:4b: 44:c1:96:0a:08:00:aa:1d:a0:0e:1d:04:74:3b:e4: b9:c1:a1:b7:05:e9:3f:13:21:18:79:02:b4:c4:e9: 4e:6b:6b:cf:80:a9:24:35:10:d1:a7:53:df:70:6c: 38:ad:a1:7b:c8:e5:fa:de:38:d2:44:ae:cd:dd:b6: 0e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AF:54:67:67:2A:93:3B:78:6C:DF:1E:31:D0:57:A9:6F:C1:A1:E8 X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/96FAA6BA2DBF11F1A3BE1D0DAB833773.roa sbgp-ipAddrBlock: critical IPv4: 185.254.240.0/24 194.246.40.0/22 213.139.233.0/24 Signature Algorithm: sha256WithRSAEncryption d5:54:ed:4f:b7:bd:94:b0:47:3d:c8:03:ca:36:d9:85:10:80: 50:72:37:23:5d:4f:9d:85:54:29:8a:2f:38:d8:6b:dc:62:04: 06:6b:64:16:05:35:da:3c:64:8f:08:a0:18:33:19:de:4f:de: df:37:af:6d:0c:0c:c0:68:86:34:22:7d:9e:26:38:a7:e1:94: 45:c6:a7:1c:ce:d9:4c:f4:47:d4:25:5f:6f:82:7e:41:b2:5a: ee:3b:89:23:07:28:e6:40:8e:e5:9d:5f:12:00:d8:ed:17:e1: e3:ea:a3:8b:ee:02:cf:fb:bf:2a:a4:ed:e7:de:6e:7b:66:d0: ac:21:d8:a2:14:04:57:79:13:07:03:80:bc:6a:b7:5d:93:7c: 8b:0a:45:ea:12:61:7b:98:b2:8a:83:86:46:fb:1b:94:65:1a: 05:27:67:3c:03:f0:bf:29:55:56:6d:93:45:89:82:4a:f1:e8: a5:e3:b0:cf:2f:60:fa:13:d9:b9:1c:8a:27:d7:de:0b:1d:5c: b9:95:31:67:55:e5:2b:eb:54:9a:a5:9e:7b:30:09:1b:7b:4c: 74:4f:c8:82:f2:a6:4a:31:b4:84:d1:0e:e2:6a:85:23:1a:20: 9c:e0:06:e4:db:50:c9:e4:74:0b:f3:01:6b:ea:a3:75:b1:df: 5a:72:71:8b -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICAkswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjYwNDAxMTE0MDMyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWNkMDQzMC1lZjFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsBo1FUo5DMmPNWDNO5nnUWXOLQLwm2VuJtPj3zmZ50X5bx80VfEK/8v9bGf1 pfil23SxU/jvsNxZJmv+SHfzWvCXPVwlU6UgfsBNUWpOX9eiCdEagiiqQ5V5PBGw uWNxMJxyYI8RQ6dxk6VGYj/z107+yYlfql+YVNWY62iKQa7mh5kwK8APLRj1qo0F REGps2ZEsdsHo9twiepwT72xwuPFY4k1R/qsSbJ3fc7ONBV5p4df/rTB82AxK7Oz mpL9fEtEwZYKCACqHaAOHQR0O+S5waG3Bek/EyEYeQK0xOlOa2vPgKkkNRDRp1Pf cGw4raF7yOX63jjSRK7N3bYOQwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAavVGdn KpM7eGzfHjHQV6lvwaHoMB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkxRDMvNjI5RThCMjAzQjIzMTFFRUE0M0IwMjE5QzRGOUFFMDIvOTZGQUE2QkEy REJGMTFGMUEzQkUxRDBEQUI4MzM3NzMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQAuf7wAwQCwvYoAwQA1YvpMA0GCSqGSIb3DQEBCwUAA4IBAQDVVO1P t72UsEc9yAPKNtmFEIBQcjcjXU+dhVQpii842GvcYgQGa2QWBTXaPGSPCKAYMxne T97fN69tDAzAaIY0In2eJjin4ZRFxqccztlM9EfUJV9vgn5BslruO4kjByjmQI7l nV8SANjtF+Hj6qOL7gLP+78qpO3n3m57ZtCsIdiiFARXeRMHA4C8arddk3yLCkXq EmF7mLKKg4ZG+xuUZRoFJ2c8A/C/KVVWbZNFiYJK8eil47DPL2D6E9m5HIon194L HVy5lTFnVeUr61SapZ57MAkbe0x0T8iC8qZKMbSE0Q7iaoUjGiCc4Abk21DJ5HQL 8wFr6qN1sd9acnGL -----END CERTIFICATE-----Generated at Mon Apr 6 15:08:12 2026 by rpki-client