$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/DF8DD8A098C411F19E6AA2476D11F970.roa File: DF8DD8A098C411F19E6AA2476D11F970.roa (raw, json) Hash identifier: AHI17Y99lS0m1pu4f9i1rlfgUH330F3GganWYeEqayY= Subject key identifier: 23:81:CB:D5:B7:70:43:5B:2C:35:14:2D:97:4D:2A:37:7A:6F:7A:1D Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 06CC Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/DF8DD8A098C411F19E6AA2476D11F970.roa Signing time: Sat 15 Aug 2026 16:19:54 +0000 ROA not before: Sat 15 Aug 2026 16:19:54 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 213607 IP address blocks: 39.109.49.0/24 maxlen: 24 39.109.52.0/24 maxlen: 24 39.109.55.0/24 maxlen: 24 39.109.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 22:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1740 (0x6cc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Validity Not Before: Aug 15 16:19:54 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6a8091aa-3fee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b8:25:4f:db:ec:48:4c:da:41:2a:2f:ca:23: 60:06:21:3f:2c:8f:d7:62:da:75:1d:eb:41:a9:7d: ea:fc:a2:ec:12:ce:26:01:cc:2b:b2:de:75:d2:b2: 10:ed:ba:30:2a:e0:c0:fb:71:4b:b2:ea:b2:cc:f4: c4:25:b5:80:84:f3:07:92:dc:b8:f6:53:e0:03:22: 96:11:de:e2:98:92:b4:74:87:9d:96:96:fb:42:5d: 93:2a:64:3f:0d:63:6a:d1:98:12:0e:26:45:b8:51: 70:86:1c:36:26:ed:e2:8e:7f:25:14:e0:18:92:d5: f5:94:0c:2f:04:69:7f:86:4e:87:b9:15:a8:be:5d: de:ae:e2:fd:12:ea:7e:9b:d5:cf:7d:a7:6a:9f:0a: b4:6a:a3:9e:a1:96:90:a8:22:36:52:01:c2:49:c9: 2f:71:5f:73:30:f1:99:54:5d:b4:11:47:18:e4:37: 46:f0:56:15:7a:da:91:d3:74:24:3a:84:79:ab:a2: e4:cd:09:af:5c:a6:60:fa:f1:85:71:d6:8a:87:d4: 01:2d:ab:73:15:b2:6f:9e:b0:12:18:e3:7b:58:23: c6:9a:5d:ba:73:d3:b7:7e:c8:50:43:6b:b0:53:d4: f8:24:61:24:0c:07:c8:5b:18:6d:a5:a5:4b:6e:e6: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:81:CB:D5:B7:70:43:5B:2C:35:14:2D:97:4D:2A:37:7A:6F:7A:1D X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/DF8DD8A098C411F19E6AA2476D11F970.roa sbgp-ipAddrBlock: critical IPv4: 39.109.49.0/24 39.109.52.0/24 39.109.55.0/24 39.109.105.0/24 Signature Algorithm: sha256WithRSAEncryption 6d:c1:b8:ab:6d:1e:4f:4f:58:e0:45:aa:3c:70:48:fa:43:ad: 34:a4:81:2b:2f:37:6b:9b:05:22:16:85:93:37:64:63:a6:e8: 9f:dd:df:36:2c:88:f9:36:e3:d5:4f:22:be:f2:09:5c:c0:fe: d4:20:4e:7c:5e:b5:56:8b:c3:d4:64:20:ab:8e:65:58:63:4d: 8f:d0:77:0d:fc:fe:ff:18:bb:69:56:0b:ad:37:b8:a2:dc:99: 57:13:58:21:b8:bc:44:4f:84:59:89:b0:5c:ce:34:d0:a2:cf: 84:c0:bf:a6:ea:72:e9:8d:60:88:72:34:59:60:b4:4f:40:98: 43:cf:fe:7b:4f:b8:85:17:64:e5:82:46:29:d5:1b:b5:b7:38: 82:97:4d:52:a8:e6:fb:97:bc:86:be:1f:ae:af:97:1c:c6:02: 72:46:c0:5b:fa:8a:16:59:01:71:9d:04:82:eb:8e:97:4d:6a: e8:f1:5c:bb:7f:9f:eb:d1:8e:f4:b5:1b:47:1a:b6:cf:5e:c5: 9c:eb:bd:93:9d:54:ec:87:23:4f:6c:e4:92:f2:04:19:52:98: d8:0a:41:fe:c0:8b:d8:2a:70:2a:4e:b4:44:bf:5b:23:ed:d7: 4a:3b:69:f0:ab:74:8d:9a:83:ea:5c:38:6b:00:f1:bf:41:be: ce:d8:9c:c3 -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBswwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjYwODE1MTYxOTU0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgwOTFhYS0zZmVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrglT9vsSEzaQSovyiNgBiE/LI/XYtp1HetBqX3q/KLsEs4mAcwrst510rIQ 7bowKuDA+3FLsuqyzPTEJbWAhPMHkty49lPgAyKWEd7imJK0dIedlpb7Ql2TKmQ/ DWNq0ZgSDiZFuFFwhhw2Ju3ijn8lFOAYktX1lAwvBGl/hk6HuRWovl3eruL9Eup+ m9XPfadqnwq0aqOeoZaQqCI2UgHCSckvcV9zMPGZVF20EUcY5DdG8FYVetqR03Qk OoR5q6LkzQmvXKZg+vGFcdaKh9QBLatzFbJvnrASGON7WCPGml26c9O3fshQQ2uw U9T4JGEkDAfIWxhtpaVLbub6HQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFCOBy9W3 cENbLDUULZdNKjd6b3odMB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUY1RjcvNDRGQ0U1NjhDNzg0MTFFQkFENEM5NjU5QzRGOUFFMDIvREY4REQ4QTA5 OEM0MTFGMTlFNkFBMjQ3NkQxMUY5NzAucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAJ20xAwQAJ200AwQAJ203AwQAJ21pMA0GCSqGSIb3DQEBCwUAA4IB AQBtwbirbR5PT1jgRao8cEj6Q600pIErLzdrmwUiFoWTN2Rjpuif3d82LIj5NuPV TyK+8glcwP7UIE58XrVWi8PUZCCrjmVYY02P0HcN/P7/GLtpVgutN7ii3JlXE1gh uLxET4RZibBczjTQos+EwL+m6nLpjWCIcjRZYLRPQJhDz/57T7iFF2TlgkYp1Ru1 tziCl01SqOb7l7yGvh+ur5ccxgJyRsBb+ooWWQFxnQSC646XTWro8Vy7f5/r0Y70 tRtHGrbPXsWc672TnVTshyNPbOSS8gQZUpjYCkH+wIvYKnAqTrREv1sj7ddKO2nw q3SNmoPqXDhrAPG/Qb7O2JzD -----END CERTIFICATE-----Generated at Sat Sep 5 07:02:39 2026 by rpki-client