$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa File: D66D72562EAB11EF9B369566C4F9AE02.roa (raw, json) Hash identifier: v/BMfsrtH9vlMNLps13uDARH8p9sMzAXp5Uv8NpJvXA= Subject key identifier: E3:51:93:83:3E:5C:0A:09:69:3F:13:16:FF:7D:51:F7:73:EC:56:3C Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Certificate serial: 01DA Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa Signing time: Mon 22 Jun 2026 04:11:17 +0000 ROA not before: Mon 22 Jun 2026 04:11:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132139 IP address blocks: 85.137.239.0/24 maxlen: 24 185.81.70.0/24 maxlen: 24 185.81.70.144/29 maxlen: 29 185.81.70.160/29 maxlen: 29 185.81.70.176/29 maxlen: 29 185.81.70.184/29 maxlen: 29 185.81.70.192/29 maxlen: 29 185.81.70.200/29 maxlen: 29 185.81.70.208/29 maxlen: 29 185.81.70.216/29 maxlen: 29 185.81.70.224/31 maxlen: 31 185.81.70.226/31 maxlen: 31 185.81.70.236/31 maxlen: 31 185.81.70.238/31 maxlen: 31 185.81.70.240/29 maxlen: 29 185.81.70.248/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 00:24:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 474 (0x1da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Validity Not Before: Jun 22 04:11:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a38b5e4-ab7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b1:98:54:8b:0a:41:dd:ac:a9:7e:1b:17:43: db:68:b9:9c:30:e5:c7:a6:17:60:9a:99:b9:fe:4c: e2:b0:55:ed:49:09:01:3e:ae:c9:6d:59:e9:8e:39: ec:81:e4:7d:19:92:07:69:26:e3:0d:a0:20:63:87: 73:35:49:4c:0b:38:cb:56:bc:32:9a:e7:af:9e:37: ed:88:45:22:ed:85:e3:ae:ac:f1:63:5a:d6:dd:f8: ba:e8:10:fd:b6:3e:f0:e5:0a:38:a7:80:d0:85:2f: dd:df:e9:a3:b9:f8:b0:57:9f:b6:70:bc:f9:9a:9a: 86:23:e4:39:6a:4a:49:f4:f5:71:a3:aa:c6:85:9b: d2:bd:41:fc:63:98:f9:9e:88:7c:6a:61:85:94:4e: 4a:cb:d3:81:0e:55:12:b2:5c:62:6d:ad:e3:01:b9: 1a:54:cd:38:41:18:a8:b0:bb:db:e9:36:94:af:6f: 18:3d:f1:53:93:b4:ba:8b:24:7e:40:3b:b3:bc:d9: 98:32:72:a5:83:2b:99:03:9b:9a:b2:55:a6:f1:90: 03:cf:17:d1:2a:91:16:50:f0:e5:40:4c:04:8b:9d: 86:79:09:03:ac:75:b6:89:b1:e5:67:6d:da:8d:e6: e9:65:2a:12:b1:dc:cd:dd:e8:85:85:00:b3:a9:2c: c2:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:51:93:83:3E:5C:0A:09:69:3F:13:16:FF:7D:51:F7:73:EC:56:3C X509v3 Authority Key Identifier: keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 85.137.239.0/24 185.81.70.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:ed:ca:72:61:db:16:b3:d9:4e:6e:f4:5e:c8:02:bf:42:bf: 90:df:b4:f9:f5:48:29:e5:0a:15:e1:ee:40:cd:39:bf:8e:3a: 86:da:d5:2d:ee:af:2f:75:f3:a7:19:91:66:3d:8b:75:1d:04: f1:d8:e4:98:7e:0b:51:72:84:98:03:bf:55:21:38:e0:e3:81: 45:5d:74:41:3b:a3:84:11:0e:7a:a4:1b:a9:96:9c:f0:bb:ef: 68:55:14:90:bb:b4:de:19:33:4d:ce:fb:61:65:a5:9b:65:fa: b6:ae:d8:32:a8:11:0e:80:ad:ae:bc:a5:8f:45:25:3d:0c:13: 68:6b:19:55:0c:b4:6a:aa:f2:37:67:5a:02:47:6b:11:c4:d2: 20:4a:0d:08:db:0f:61:fb:4d:a5:9c:24:d2:81:f8:5b:b0:c5: 5c:89:93:81:62:92:32:a3:8e:73:ee:7a:94:5c:a9:0a:1c:f8: 4b:77:31:3e:73:b5:96:9f:af:14:41:d6:21:3e:d5:69:4a:22: 1f:8c:c9:d1:1a:7b:c4:58:6d:e3:41:2a:5c:ea:cc:4b:91:fe: 39:4b:ce:86:5a:30:92:6b:0e:b9:c6:8e:9d:83:8e:b0:8c:42: af:fe:31:37:e6:1e:79:35:7e:5d:69:e6:d7:40:da:bf:43:d1: b5:5e:0c:2b -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAdowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEVGMjVBOTI1QkZCRDRDQkFFRjUyNDU2QUIzQjMwOUI3 NDcwNDBERkUwHhcNMjYwNjIyMDQxMTE3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTM4YjVlNC1hYjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsrGYVIsKQd2sqX4bF0PbaLmcMOXHphdgmpm5/kzisFXtSQkBPq7JbVnpjjns geR9GZIHaSbjDaAgY4dzNUlMCzjLVrwymuevnjftiEUi7YXjrqzxY1rW3fi66BD9 tj7w5Qo4p4DQhS/d3+mjufiwV5+2cLz5mpqGI+Q5akpJ9PVxo6rGhZvSvUH8Y5j5 noh8amGFlE5Ky9OBDlUSslxiba3jAbkaVM04QRiosLvb6TaUr28YPfFTk7S6iyR+ QDuzvNmYMnKlgyuZA5uaslWm8ZADzxfRKpEWUPDlQEwEi52GeQkDrHW2ibHlZ23a jebpZSoSsdzN3eiFhQCzqSzCwwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFONRk4M+ XAoJaT8TFv99Ufdz7FY8MB8GA1UdIwQYMBaAFO8lqSW/vUy671JFarOzCbdHBA3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy83OUVFMEJDNEUy NzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRMcnZVa1ZxczdNSnQwY0VE ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdCREMvNzlFRTBCQzRFMjcyMTFFRUI4M0Q2MDZCQzRGOUFFMDIvRDY2RDcyNTYy RUFCMTFFRjlCMzY5NTY2QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAVYnvAwQAuVFGMA0GCSqGSIb3DQEBCwUAA4IBAQAa7cpyYdsWs9lO bvReyAK/Qr+Q37T59Ugp5QoV4e5AzTm/jjqG2tUt7q8vdfOnGZFmPYt1HQTx2OSY fgtRcoSYA79VITjg44FFXXRBO6OEEQ56pBuplpzwu+9oVRSQu7TeGTNNzvthZaWb Zfq2rtgyqBEOgK2uvKWPRSU9DBNoaxlVDLRqqvI3Z1oCR2sRxNIgSg0I2w9h+02l nCTSgfhbsMVciZOBYpIyo45z7nqUXKkKHPhLdzE+c7WWn68UQdYhPtVpSiIfjMnR GnvEWG3jQSpc6sxLkf45S86GWjCSaw65xo6dg46wjEKv/jE35h55NX5daebXQNq/ Q9G1Xgwr -----END CERTIFICATE-----Generated at Tue Jul 21 20:18:49 2026 by rpki-client