$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/41E1B62C439B11F1B25C79F98F833773.roa File: 41E1B62C439B11F1B25C79F98F833773.roa (raw, json) Hash identifier: 36yi6gPTHzcQX8APfBzmKqBXbIwiIVFpcf4UMN/XwEA= Subject key identifier: 33:A7:10:43:38:7D:39:55:79:30:E1:4E:2B:8E:72:59:0E:F8:5A:49 Certificate issuer: /CN=A91A622F/serialNumber=2B19F455F4D3069477E01941F742149FB9000D81 Certificate serial: 58 Authority key identifier: 2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/41E1B62C439B11F1B25C79F98F833773.roa Signing time: Tue 01 Sep 2026 07:47:36 +0000 ROA not before: Tue 01 Sep 2026 07:47:36 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23674 IP address blocks: 89.126.240.0/21 maxlen: 24 151.123.128.0/20 maxlen: 20 151.123.128.0/24 maxlen: 24 151.123.129.0/24 maxlen: 24 151.123.130.0/24 maxlen: 24 151.123.131.0/24 maxlen: 24 151.123.132.0/24 maxlen: 24 151.123.133.0/24 maxlen: 24 151.123.134.0/24 maxlen: 24 151.123.135.0/24 maxlen: 24 151.123.136.0/24 maxlen: 24 151.123.137.0/24 maxlen: 24 151.123.138.0/24 maxlen: 24 151.123.139.0/24 maxlen: 24 151.123.140.0/24 maxlen: 24 151.123.141.0/24 maxlen: 24 151.123.142.0/24 maxlen: 24 151.123.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 15:36:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A622F, serialNumber=2B19F455F4D3069477E01941F742149FB9000D81 Validity Not Before: Sep 1 07:47:36 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a968318-ed97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:54:92:4a:28:6e:7e:7c:04:c1:68:20:19:c1: 5a:e3:31:37:9f:f8:07:b6:18:aa:d1:69:ee:ab:29: f7:36:18:1a:2c:2e:75:51:aa:7b:24:de:1b:76:a0: 00:a1:69:5a:1d:65:49:7f:19:a4:09:a0:fb:2b:a1: a3:3e:6d:e9:77:06:3a:80:2a:9e:13:f4:22:d8:d3: 87:7a:4d:da:78:01:85:8f:88:77:4e:a1:f6:d7:4a: 5e:6b:2e:1e:49:ff:0f:e9:7e:bb:4e:12:3f:fd:2e: 3f:91:0a:5a:ae:3e:ce:8d:23:6a:34:98:8f:42:49: 70:95:15:40:63:c9:e1:00:22:bb:d1:97:7d:6b:db: 46:6e:82:21:ad:f4:a4:a3:5f:4e:ba:06:1e:35:f8: 8e:58:2f:6e:45:fd:58:8e:98:f6:0b:83:69:60:21: c2:54:94:21:42:26:c6:04:2a:ea:2c:c5:4e:9c:da: da:57:93:21:fb:b6:4e:10:9f:9e:aa:3d:7d:2d:b7: 12:0e:0d:f8:1f:e0:38:ca:cd:0e:06:68:0a:82:68: 8c:43:70:53:a4:95:77:17:30:a8:51:9f:72:7a:75: a0:c3:69:41:eb:10:11:a7:79:05:93:73:1e:5f:a6: 79:f7:54:ec:51:b6:ff:e0:6c:ac:ef:1f:b9:91:5e: 19:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A7:10:43:38:7D:39:55:79:30:E1:4E:2B:8E:72:59:0E:F8:5A:49 X509v3 Authority Key Identifier: keyid:2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/41E1B62C439B11F1B25C79F98F833773.roa sbgp-ipAddrBlock: critical IPv4: 89.126.240.0/21 151.123.128.0/20 Signature Algorithm: sha256WithRSAEncryption 66:02:e8:cd:3c:9f:ec:5f:69:06:35:6d:ba:fe:d7:03:92:e4: 2c:79:af:6e:91:50:db:ac:a7:3c:fa:51:01:fb:13:3d:c6:5a: a2:12:31:c4:d8:f9:b7:06:35:fe:9e:69:28:d2:7b:b0:4f:ef: 79:2e:c7:9a:32:8d:cf:6a:d4:a9:fa:40:98:4b:c2:c7:34:cd: 07:22:05:e5:5b:09:30:ab:bc:a9:53:cf:93:79:a3:e4:45:2e: e1:23:1b:d0:f6:ed:1c:74:e6:ea:68:d3:d2:c9:70:7d:57:63: 84:f5:1b:dc:98:4d:d8:9d:ca:c6:40:e5:82:00:78:6c:ce:4f: aa:b3:9a:84:b9:b7:a8:4e:13:ce:30:f0:69:82:2c:c9:de:db: 52:b5:73:0e:0b:8e:46:48:e1:7a:48:7e:69:63:b0:1c:8f:e8: 57:e7:2c:ee:02:44:1a:a4:83:37:7f:f7:52:b8:e6:99:26:3d: 39:7b:95:2a:9e:41:24:c0:0d:e4:ef:21:f0:22:38:ad:06:77: 82:d4:0a:83:ec:e6:a1:45:4e:a7:33:6c:2a:b9:21:79:6a:fa: 6c:bc:05:85:1d:18:e7:2d:62:2d:18:a6:7d:34:bd:b3:81:0c: cc:2c:0e:30:39:0a:9c:36:58:5a:8d:44:9c:48:11:f8:f0:b2: 5c:af:88:60 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NjIyRjExMC8GA1UEBRMoMkIxOUY0NTVGNEQzMDY5NDc3RTAxOTQxRjc0MjE0OUZC OTAwMEQ4MTAeFw0yNjA5MDEwNzQ3MzZaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhOTY4MzE4LWVkOTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDQVJJKKG5+fATBaCAZwVrjMTef+Ae2GKrRae6rKfc2GBosLnVRqnsk3ht2oACh aVodZUl/GaQJoPsroaM+bel3BjqAKp4T9CLY04d6Tdp4AYWPiHdOofbXSl5rLh5J /w/pfrtOEj/9Lj+RClquPs6NI2o0mI9CSXCVFUBjyeEAIrvRl31r20ZugiGt9KSj X066Bh41+I5YL25F/ViOmPYLg2lgIcJUlCFCJsYEKuosxU6c2tpXkyH7tk4Qn56q PX0ttxIODfgf4DjKzQ4GaAqCaIxDcFOklXcXMKhRn3J6daDDaUHrEBGneQWTcx5f pnn3VOxRtv/gbKzvH7mRXhl9AgMBAAGjggJmMIICYjAdBgNVHQ4EFgQUM6cQQzh9 OVV5MOFOK45yWQ74WkkwHwYDVR0jBBgwFoAUKxn0VfTTBpR34BlB90IUn7kADYEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2MjJGLzJDQUU2MjZDM0U2 MTExRjE4Qjk0RDIwQkIyRUU1MjhFL0t4bjBWZlRUQnBSMzRCbEI5MElVbjdrQURZ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS3huMFZmVFRCcFIzNEJsQjkwSVVuN2tBRFlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIyRi8yQ0FFNjI2QzNFNjExMUYxOEI5NEQyMEJCMkVFNTI4RS80MUUxQjYyQzQz OUIxMUYxQjI1Qzc5Rjk4RjgzMzc3My5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBANZfvADBASXe4AwDQYJKoZIhvcNAQELBQADggEBAGYC6M08n+xfaQY1 bbr+1wOS5Cx5r26RUNuspzz6UQH7Ez3GWqISMcTY+bcGNf6eaSjSe7BP73kux5oy jc9q1Kn6QJhLwsc0zQciBeVbCTCrvKlTz5N5o+RFLuEjG9D27Rx05upo09LJcH1X Y4T1G9yYTdidysZA5YIAeGzOT6qzmoS5t6hOE84w8GmCLMne21K1cw4LjkZI4XpI fmljsByP6FfnLO4CRBqkgzd/91K45pkmPTl7lSqeQSTADeTvIfAiOK0Gd4LUCoPs 5qFFTqczbCq5IXlq+my8BYUdGOctYi0Ypn00vbOBDMwsDjA5Cpw2WFqNRJxIEfjw slyviGA= -----END CERTIFICATE-----Generated at Sat Sep 5 06:18:23 2026 by rpki-client