$ rpki-client -vvvf rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/DF8DD8A098C411F19E6AA2476D11F970.roa File: DF8DD8A098C411F19E6AA2476D11F970.roa (raw, json) Hash identifier: 14F9WTUD/PfBJg487TPSNTEElC9rBzCL/zbpZ86aXZw= Subject key identifier: 71:7E:48:B8:16:C7:FF:E7:74:24:C9:D2:81:D0:D2:83:60:36:B5:F5 Certificate issuer: /CN=A91AF5F7/serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Certificate serial: 06F9 Authority key identifier: 0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/DF8DD8A098C411F19E6AA2476D11F970.roa Signing time: Thu 08 Oct 2026 22:44:09 +0000 ROA not before: Thu 08 Oct 2026 22:44:09 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 213607 IP address blocks: 39.109.49.0/24 maxlen: 24 39.109.52.0/24 maxlen: 24 39.109.55.0/24 maxlen: 24 39.109.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 22:21:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1785 (0x6f9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF5F7, serialNumber=0A277D26A9C2402B8A1CD4577935E4F3C259C19F Validity Not Before: Oct 8 22:44:09 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ac81cb9-6034 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c9:5e:84:9f:df:c2:86:00:53:2a:7b:24:0f: 64:45:5b:3c:86:e1:60:8e:bf:e9:73:a2:82:12:a3: ec:a2:f2:56:66:61:76:1d:bc:ab:72:c9:98:4b:b9: 92:fe:77:22:85:5b:e9:14:b1:80:cf:4b:1f:f8:e4: 5a:0c:ed:ea:15:35:8d:12:87:85:1e:64:85:12:96: fb:2f:f7:66:53:a9:32:3c:b0:76:95:91:cc:5c:73: 8f:ed:b4:f2:12:f9:c2:1c:99:7e:74:e8:5a:11:52: bd:ad:90:cf:cb:52:03:50:55:bc:d2:a7:21:74:69: fe:a5:ee:a0:1d:34:63:25:72:ff:d6:df:a5:67:ee: c8:d5:47:9e:9f:ec:63:02:26:aa:7f:f7:b9:d3:96: 69:67:5e:5f:c6:81:1b:89:72:98:52:27:b4:a2:05: 5f:0f:b8:91:eb:b0:4f:31:7e:90:88:8a:e1:f3:03: c4:cd:b6:6d:66:d3:c3:83:dd:21:f4:35:57:3f:53: a7:24:08:49:1c:b4:e2:a5:da:86:17:88:4f:67:49: 5f:4f:a6:48:6f:bb:fc:d7:b0:f2:27:9a:3c:6e:6b: 8a:02:e2:bd:5f:24:14:80:05:08:d1:25:63:e4:62: 8c:08:bf:dd:c3:8c:da:47:45:de:d4:81:e9:33:ee: 25:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:7E:48:B8:16:C7:FF:E7:74:24:C9:D2:81:D0:D2:83:60:36:B5:F5 X509v3 Authority Key Identifier: keyid:0A:27:7D:26:A9:C2:40:2B:8A:1C:D4:57:79:35:E4:F3:C2:59:C1:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/Cid9JqnCQCuKHNRXeTXk88JZwZ8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cid9JqnCQCuKHNRXeTXk88JZwZ8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF5F7/44FCE568C78411EBAD4C9659C4F9AE02/DF8DD8A098C411F19E6AA2476D11F970.roa sbgp-ipAddrBlock: critical IPv4: 39.109.49.0/24 39.109.52.0/24 39.109.55.0/24 39.109.105.0/24 Signature Algorithm: sha256WithRSAEncryption 85:b7:f2:ea:72:a7:be:e1:a1:3a:11:90:86:ba:e6:08:b4:ce: 68:56:59:ff:b7:06:8b:0f:94:f1:d7:bb:e6:a2:40:84:25:9f: e3:7c:0b:fb:1a:46:a9:40:bf:da:05:01:e9:b8:03:b5:32:d5: c9:a9:50:7a:21:c9:dd:84:8a:de:ab:fd:3c:45:fd:0a:17:c7: 03:dc:ca:fd:72:bd:f9:10:0a:34:84:50:d6:34:14:20:f5:eb: 17:f5:62:84:0f:75:c6:58:51:a3:cb:a9:6f:33:a2:40:d9:1d: c5:be:00:38:2e:9f:48:10:45:c8:a3:a0:15:35:9a:6e:5b:2e: 20:ba:0d:fa:fb:aa:b7:8e:1e:0c:7b:c5:74:7d:0f:08:12:52: 70:81:2d:19:9d:b6:0d:d4:b8:0d:0a:ca:a3:89:c4:0c:91:d3: 30:50:c7:6b:9a:25:bf:be:6a:9d:c7:0b:14:ba:e1:44:16:7b: 79:ef:6a:7a:9a:d0:24:b0:dc:76:f7:c0:76:f2:b8:15:bc:0c: 3b:a9:f3:4e:95:f3:e9:a3:52:98:ee:86:d4:c8:f2:9a:95:7d: 3f:76:08:62:5d:53:a4:05:b6:84:21:03:7f:dc:95:f7:45:46: a2:8a:b8:79:5a:34:58:f4:70:64:66:30:14:9f:4e:6e:04:7e: 3c:88:64:5b -----BEGIN CERTIFICATE----- MIIFTjCCBDagAwIBAgICBvkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUY1RjcxMTAvBgNVBAUTKDBBMjc3RDI2QTlDMjQwMkI4QTFDRDQ1Nzc5MzVFNEYz QzI1OUMxOUYwHhcNMjYxMDA4MjI0NDA5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM4MWNiOS02MDM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7slehJ/fwoYAUyp7JA9kRVs8huFgjr/pc6KCEqPsovJWZmF2HbyrcsmYS7mS /ncihVvpFLGAz0sf+ORaDO3qFTWNEoeFHmSFEpb7L/dmU6kyPLB2lZHMXHOP7bTy EvnCHJl+dOhaEVK9rZDPy1IDUFW80qchdGn+pe6gHTRjJXL/1t+lZ+7I1Ueen+xj Aiaqf/e505ZpZ15fxoEbiXKYUie0ogVfD7iR67BPMX6QiIrh8wPEzbZtZtPDg90h 9DVXP1OnJAhJHLTipdqGF4hPZ0lfT6ZIb7v817DyJ5o8bmuKAuK9XyQUgAUI0SVj 5GKMCL/dw4zaR0Xe1IHpM+4lhQIDAQABo4ICcjCCAm4wHQYDVR0OBBYEFHF+SLgW x//ndCTJ0oHQ0oNgNrX1MB8GA1UdIwQYMBaAFAonfSapwkArihzUV3k15PPCWcGf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjVGNy80NEZDRTU2OEM3 ODQxMUVCQUQ0Qzk2NTlDNEY5QUUwMi9DaWQ5SnFuQ1FDdUtITlJYZVRYazg4Slp3 WjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0NpZDlKcW5DUUN1S0hOUlhlVFhrODhKWndaOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUY1RjcvNDRGQ0U1NjhDNzg0MTFFQkFENEM5NjU5QzRGOUFFMDIvREY4REQ4QTA5 OEM0MTFGMTlFNkFBMjQ3NkQxMUY5NzAucm9hMDEGCCsGAQUFBwEHAQH/BCIwIDAe BAIAATAYAwQAJ20xAwQAJ200AwQAJ203AwQAJ21pMA0GCSqGSIb3DQEBCwUAA4IB AQCFt/Lqcqe+4aE6EZCGuuYItM5oVln/twaLD5Tx17vmokCEJZ/jfAv7GkapQL/a BQHpuAO1MtXJqVB6IcndhIreq/08Rf0KF8cD3Mr9cr35EAo0hFDWNBQg9esX9WKE D3XGWFGjy6lvM6JA2R3FvgA4Lp9IEEXIo6AVNZpuWy4gug36+6q3jh4Me8V0fQ8I ElJwgS0ZnbYN1LgNCsqjicQMkdMwUMdrmiW/vmqdxwsUuuFEFnt572p6mtAksNx2 98B28rgVvAw7qfNOlfPpo1KY7obUyPKalX0/dghiXVOkBbaEIQN/3JX3RUaiirh5 WjRY9HBkZjAUn05uBH48iGRb -----END CERTIFICATE-----Generated at Sun Oct 25 11:47:15 2026 by rpki-client