$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/7677A43AF8C511EBA498E771C4F9AE02.roa File: 7677A43AF8C511EBA498E771C4F9AE02.roa (raw, json) Hash identifier: M2Is52Wa86uDs+DSqcpShPrDtjRDZ0zOUga6AJANsq8= Subject key identifier: E1:3A:B9:86:BD:1B:B5:2E:B4:1C:25:10:5A:F8:A7:DC:92:D7:85:26 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 13D2 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/7677A43AF8C511EBA498E771C4F9AE02.roa Signing time: Mon 02 Mar 2026 17:20:09 +0000 ROA not before: Mon 02 Mar 2026 17:20:09 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 55002 IP address blocks: 159.196.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 16:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5074 (0x13d2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Mar 2 17:20:09 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a5c6c9-89df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:12:62:ca:40:42:61:07:4e:a0:4b:6a:a9:4f: d4:d3:a5:89:fc:7e:b3:5e:a5:65:64:cf:45:57:95: 82:9c:fc:ac:84:72:79:78:fc:b1:76:1e:75:29:75: f7:33:3d:d7:bc:a9:f9:19:c8:be:a7:9b:ef:cc:41: aa:bd:29:b4:df:79:0d:e5:a1:47:ef:ab:20:aa:80: 86:f5:aa:c9:6c:81:9a:f8:9d:4c:c9:1d:b8:2e:30: c0:d1:b0:b0:90:32:ca:16:ee:43:7e:a8:9c:92:b6: 49:e1:f2:69:bc:b0:1a:b3:39:d6:eb:51:0e:3f:36: 80:54:68:61:3d:3a:83:fd:be:94:cf:6e:24:f3:05: d8:af:8a:be:eb:c8:49:26:b8:d5:74:a0:70:ad:09: e0:33:92:cd:61:5b:7f:ee:5d:8c:f6:bf:36:bd:01: 05:01:67:ad:05:43:49:48:1a:08:65:67:4f:14:3b: 6c:98:b5:ad:04:66:71:8c:e6:ed:d2:24:ac:df:6f: bd:97:d6:e0:45:83:8f:7e:7f:f5:02:2a:5d:09:0c: 37:d4:61:68:6c:46:03:2f:12:2b:c9:37:d8:f1:8e: bf:23:9a:4c:0a:5a:a7:6e:61:df:7b:57:d0:fa:59: 4f:87:6f:ca:4a:04:89:d8:94:e8:62:4c:77:bd:65: be:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3A:B9:86:BD:1B:B5:2E:B4:1C:25:10:5A:F8:A7:DC:92:D7:85:26 X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/7677A43AF8C511EBA498E771C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 159.196.220.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:2d:bc:6a:3e:f1:87:af:f3:fa:81:87:dc:93:43:fb:89:36: 6f:67:0b:30:22:d6:17:d3:9b:77:0e:3d:d3:3c:51:3f:7f:0d: 4f:46:50:fa:7b:a7:8b:77:79:ff:d9:b2:c0:db:e7:27:19:fe: 42:72:99:a9:c6:d1:cb:d2:65:32:ac:d3:e3:d7:1e:ef:09:89: 5f:89:18:07:eb:05:33:ff:73:0b:a4:3e:6e:05:d1:92:a3:9b: 10:06:e3:e8:c5:0d:e9:61:79:46:70:a9:c2:44:68:e5:a4:58: 27:32:ec:22:74:7b:95:01:c7:61:67:8c:58:10:a2:c4:e8:3d: 6b:bd:19:37:6d:01:6b:d8:12:5d:de:b7:91:78:63:b8:a1:4b: de:f1:4f:db:07:3d:ab:ed:d2:9f:38:b9:28:db:02:87:c8:dd: b2:4c:b7:3c:04:d8:ee:03:fa:7c:fa:c9:c5:bf:1e:46:02:4a: 3c:b1:ce:d3:5e:10:34:0d:10:89:60:9a:9c:a7:19:e3:95:aa: c2:5a:c4:cb:df:2b:7a:b4:1f:4a:37:25:dc:41:15:93:0a:f4: fb:85:78:a5:66:fe:61:cd:8f:66:80:c4:ee:e0:6d:b4:b6:d9: 4b:d9:70:38:d5:0b:8d:4e:97:9e:66:b0:2f:c2:ae:d1:e0:3e: 39:1f:4a:19 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICE9IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjYwMzAyMTcyMDA5WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YzZjOS04OWRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxJiykBCYQdOoEtqqU/U06WJ/H6zXqVlZM9FV5WCnPyshHJ5ePyxdh51KXX3 Mz3XvKn5Gci+p5vvzEGqvSm033kN5aFH76sgqoCG9arJbIGa+J1MyR24LjDA0bCw kDLKFu5DfqickrZJ4fJpvLAasznW61EOPzaAVGhhPTqD/b6Uz24k8wXYr4q+68hJ JrjVdKBwrQngM5LNYVt/7l2M9r82vQEFAWetBUNJSBoIZWdPFDtsmLWtBGZxjObt 0iSs32+9l9bgRYOPfn/1AipdCQw31GFobEYDLxIryTfY8Y6/I5pMClqnbmHfe1fQ +llPh2/KSgSJ2JToYkx3vWW+XwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOE6uYa9 G7UutBwlEFr4p9yS14UmMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjFGQTgvREY0NzA5MDJBRkQ5MTFFOEIyRUQ0QzdGQzRGOUFFMDIvNzY3N0E0M0FG OEM1MTFFQkE0OThFNzcxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCn8TcMA0GCSqGSIb3DQEBCwUAA4IBAQCbLbxqPvGHr/P6gYfck0P7 iTZvZwswItYX05t3Dj3TPFE/fw1PRlD6e6eLd3n/2bLA2+cnGf5CcpmpxtHL0mUy rNPj1x7vCYlfiRgH6wUz/3MLpD5uBdGSo5sQBuPoxQ3pYXlGcKnCRGjlpFgnMuwi dHuVAcdhZ4xYEKLE6D1rvRk3bQFr2BJd3reReGO4oUve8U/bBz2r7dKfOLko2wKH yN2yTLc8BNjuA/p8+snFvx5GAko8sc7TXhA0DRCJYJqcpxnjlarCWsTL3yt6tB9K NyXcQRWTCvT7hXilZv5hzY9mgMTu4G20ttlL2XA41QuNTpeeZrAvwq7R4D45H0oZ -----END CERTIFICATE-----Generated at Sun Mar 8 02:07:06 2026 by rpki-client