$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/AFC035669D3111F1992D1A564911F970.roa File: AFC035669D3111F1992D1A564911F970.roa (raw, json) Hash identifier: yreAz5amTvN5ouWtoFad7yVbaRVHOOIswLn/c43044w= Subject key identifier: F9:D3:75:54:7D:53:92:26:AD:F1:7D:64:C2:BD:44:1B:E3:29:4E:B8 Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 06F7 Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/AFC035669D3111F1992D1A564911F970.roa Signing time: Thu 08 Oct 2026 22:44:06 +0000 ROA not before: Thu 08 Oct 2026 22:44:06 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 152179 IP address blocks: 39.109.64.0/23 maxlen: 24 39.109.98.0/23 maxlen: 24 39.109.106.0/23 maxlen: 24 39.109.118.0/23 maxlen: 24 39.109.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 22:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1783 (0x6f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Validity Not Before: Oct 8 22:44:06 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac81cb6-e1e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:54:b2:87:45:d3:c2:1e:0d:13:fb:f4:fb:78: 3a:6e:0c:79:00:d5:f6:25:c4:ee:fe:96:db:90:cd: 9e:74:39:e9:6d:75:e5:8f:d6:1d:c4:2e:ef:15:d0: 97:ac:c3:cd:29:b3:1d:06:77:d2:1c:68:ea:e1:eb: 87:07:c6:12:cc:6a:e4:df:99:d2:a6:bb:b1:c0:c7: 60:16:05:01:4e:6e:31:0d:5b:73:99:2e:e7:24:08: a1:2b:e1:79:6b:e0:45:61:a4:b8:14:e6:07:8f:05: 47:fa:96:22:db:e5:a5:e3:df:d3:0d:73:78:54:56: e8:0e:dd:38:a5:2d:68:97:d9:25:0a:0e:8a:40:c6: 5d:f1:f5:46:22:61:ae:f8:12:3a:ae:42:4d:df:93: 96:44:f4:eb:87:db:0e:11:cf:56:db:89:de:52:10: 73:98:6b:f2:7b:55:f0:20:69:7e:70:ac:a5:21:97: 5f:3a:cd:03:67:8a:d6:0f:ee:71:74:18:f0:1d:bf: 3c:45:fb:f5:5b:8c:14:73:5a:54:8c:08:db:d8:f6: e5:d5:63:31:9c:06:4d:9d:18:3e:33:84:94:a2:e9: 7a:cd:dc:3e:9e:5c:16:f8:6f:0b:1c:75:21:29:ad: b8:4b:6b:0a:4a:a0:8b:b7:03:ac:c6:3a:36:2b:10: 6d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D3:75:54:7D:53:92:26:AD:F1:7D:64:C2:BD:44:1B:E3:29:4E:B8 X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/AFC035669D3111F1992D1A564911F970.roa sbgp-ipAddrBlock: critical IPv4: 39.109.64.0/23 39.109.98.0/23 39.109.106.0/23 39.109.118.0-39.109.121.255 Signature Algorithm: sha256WithRSAEncryption 55:8d:e9:cf:1b:9b:8a:1c:eb:a8:08:74:7a:8a:de:b2:e3:fd: 55:10:36:00:10:c5:bf:05:e9:a1:75:29:df:8c:e9:25:46:50: e1:1c:3f:dd:9d:e4:9a:39:58:e4:57:bd:7b:39:de:d9:70:9a: 48:6d:6c:7d:cc:fb:48:ad:d2:a3:2d:86:7c:3d:fa:e9:12:6e: a7:83:49:3a:d4:7d:8f:29:09:f4:cf:f6:09:57:65:ce:bc:93: 8c:4b:12:a5:a6:71:69:87:ed:88:04:16:2f:5c:f5:84:c9:5e: 38:41:1d:d3:0c:ac:9f:cf:29:28:86:de:ed:e9:98:0d:1d:43: be:58:ae:62:ac:a1:bc:33:c0:e9:10:9f:b3:95:83:74:f8:1a: 8c:68:eb:a8:f3:b6:09:1f:c2:3e:6d:e9:6a:ab:ab:6e:a5:62: 50:ef:63:18:bd:8f:b7:49:78:d6:fc:cb:ec:1e:49:a9:1f:71: 01:50:f4:31:3b:11:cf:ff:c3:be:9d:2b:98:51:de:fe:36:fd: aa:88:18:82:25:2f:1d:44:e3:97:b8:42:d2:d1:bb:2f:70:a1: 8f:b9:3c:f9:84:a3:87:8b:be:5f:6d:c1:cc:69:39:a2:bf:70: c9:61:1a:a0:b5:f9:4f:52:ee:35:14:3d:82:30:a4:a3:19:c4: d2:1c:5a:41 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjYxMDA4MjI0NDA2WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM4MWNiNi1lMWU1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1lSyh0XTwh4NE/v0+3g6bgx5ANX2JcTu/pbbkM2edDnpbXXlj9YdxC7vFdCX rMPNKbMdBnfSHGjq4euHB8YSzGrk35nSpruxwMdgFgUBTm4xDVtzmS7nJAihK+F5 a+BFYaS4FOYHjwVH+pYi2+Wl49/TDXN4VFboDt04pS1ol9klCg6KQMZd8fVGImGu +BI6rkJN35OWRPTrh9sOEc9W24neUhBzmGvye1XwIGl+cKylIZdfOs0DZ4rWD+5x dBjwHb88Rfv1W4wUc1pUjAjb2Pbl1WMxnAZNnRg+M4SUoul6zdw+nlwW+G8LHHUh Ka24S2sKSqCLtwOsxjo2KxBtUQIDAQABo4ICejCCAnYwHQYDVR0OBBYEFPnTdVR9 U5ImrfF9ZMK9RBvjKU64MB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUY1RjcvNDRGQ0U1NjhDNzg0MTFFQkFENEM5NjU5QzRGOUFFMDIvQUZDMDM1NjY5 RDMxMTFGMTk5MkQxQTU2NDkxMUY5NzAucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQBJ21AAwQBJ21iAwQBJ21qMAwDBAEnbXYDBAEnbXgwDQYJKoZIhvcN AQELBQADggEBAFWN6c8bm4oc66gIdHqK3rLj/VUQNgAQxb8F6aF1Kd+M6SVGUOEc P92d5Jo5WORXvXs53tlwmkhtbH3M+0it0qMthnw9+ukSbqeDSTrUfY8pCfTP9glX Zc68k4xLEqWmcWmH7YgEFi9c9YTJXjhBHdMMrJ/PKSiG3u3pmA0dQ75YrmKsobwz wOkQn7OVg3T4Goxo66jztgkfwj5t6Wqrq26lYlDvYxi9j7dJeNb8y+weSakfcQFQ 9DE7Ec//w76dK5hR3v42/aqIGIIlLx1E45e4QtLRuy9woY+5PPmEo4eLvl9twcxp OaK/cMlhGqC1+U9S7jUUPYIwpKMZxNIcWkE= -----END CERTIFICATE-----Generated at Mon Oct 19 22:20:43 2026 by rpki-client