$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/E2B84D6C99FF11F1A9158CDB4B11F970.roa File: E2B84D6C99FF11F1A9158CDB4B11F970.roa (raw, json) Hash identifier: DHn76d22Jk3eP91ucVOK7OtumZBe4NWc4zR6YDdAtGQ= Subject key identifier: D5:B7:BA:62:11:65:80:38:46:46:00:C2:88:48:6E:C5:BE:2E:71:A5 Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Certificate serial: 01FC Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/E2B84D6C99FF11F1A9158CDB4B11F970.roa Signing time: Mon 17 Aug 2026 05:52:53 +0000 ROA not before: Mon 17 Aug 2026 05:52:53 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 132139 IP address blocks: 85.137.239.0/24 maxlen: 24 85.137.239.144/29 maxlen: 29 85.137.239.152/29 maxlen: 29 185.81.70.0/24 maxlen: 24 185.81.70.144/29 maxlen: 29 185.81.70.160/29 maxlen: 29 185.81.70.176/29 maxlen: 29 185.81.70.184/29 maxlen: 29 185.81.70.192/29 maxlen: 29 185.81.70.200/29 maxlen: 29 185.81.70.208/29 maxlen: 29 185.81.70.216/29 maxlen: 29 185.81.70.224/31 maxlen: 31 185.81.70.226/31 maxlen: 31 185.81.70.236/31 maxlen: 31 185.81.70.238/31 maxlen: 31 185.81.70.240/29 maxlen: 29 185.81.70.248/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 508 (0x1fc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Validity Not Before: Aug 17 05:52:53 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a82a1b5-4cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:14:34:3a:74:b9:71:89:75:c5:3a:fd:98: 70:2e:b3:65:98:61:98:80:a7:11:6e:7a:d0:7e:20: 64:ea:5a:e7:f0:e3:07:87:08:48:48:9f:6e:52:9b: c6:1f:21:56:c2:00:f8:6b:3b:9a:33:12:06:91:86: 7d:a8:02:8b:be:45:a6:14:20:fa:17:4e:ab:21:b1: dd:5a:1b:ef:9e:67:ca:b6:65:91:58:ef:00:2c:ca: 69:f0:e3:df:31:a3:ee:ff:d0:7b:fe:e9:cc:9a:b5: 10:9b:e9:10:1d:d7:83:e7:cb:ce:ed:12:c1:5f:8a: c9:e4:b7:f9:74:ba:1c:6a:1e:1b:5e:56:ed:61:ff: fd:b5:4b:50:96:de:2b:4b:ba:3a:5d:e9:3e:7a:8f: 14:89:0a:ea:61:88:62:88:e7:31:fc:76:1b:96:50: b6:2f:29:73:6b:8b:8f:c7:bb:63:f4:83:eb:a9:b0: 9c:1d:8a:c3:a6:b9:d5:4f:f8:4a:48:24:78:33:fd: 5b:52:e9:33:45:70:05:f8:ef:69:61:35:18:51:e6: e6:b5:26:df:20:0e:cf:b4:b2:78:0c:3b:04:f7:d8: 20:2a:8c:f2:06:60:2c:a2:5e:cc:f9:40:7b:de:c2: 84:14:b4:14:4a:74:79:23:ef:17:2b:7c:6e:d2:06: da:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:B7:BA:62:11:65:80:38:46:46:00:C2:88:48:6E:C5:BE:2E:71:A5 X509v3 Authority Key Identifier: keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/E2B84D6C99FF11F1A9158CDB4B11F970.roa sbgp-ipAddrBlock: critical IPv4: 85.137.239.0/24 185.81.70.0/24 Signature Algorithm: sha256WithRSAEncryption 14:19:93:42:cd:a6:ed:bf:b2:14:33:6a:b8:c9:36:ef:24:4a: 0e:93:24:e0:0a:32:e9:a6:16:bf:03:5e:4f:16:7d:ae:1a:36: c8:e7:c8:86:47:f0:63:50:d7:ec:eb:f2:40:8f:40:ea:85:00: d5:ad:a2:b4:c6:32:5f:84:9f:b4:c4:d0:10:c2:13:04:90:e2: 0c:88:48:ab:a9:f3:ea:bc:05:03:fd:fc:8b:a3:b2:83:1a:e6: f5:03:da:70:46:da:cc:3e:7d:23:a5:e1:e8:74:d8:77:33:c1: df:78:c9:0c:30:b1:38:d1:c2:6b:15:a7:e5:e7:c4:26:fd:d6: 65:bd:a4:23:4b:d8:2b:be:ad:b8:a1:d6:b8:a9:9e:2f:ef:71: 3c:5a:64:31:8d:b8:c0:56:0f:61:38:b4:7d:5b:65:2d:cf:3d: cb:f3:b0:27:98:7c:76:f4:45:bc:f7:62:35:52:0a:45:c1:3b: e2:e0:75:dc:43:fc:90:1e:51:5c:ca:72:56:33:07:ae:c5:df: bc:c6:ee:57:20:39:9c:a5:b0:3d:9d:9c:12:6b:28:02:34:e2: 9e:6c:0f:57:58:56:d3:9c:ae:c1:e2:83:30:f4:02:8e:d6:f8: 77:83:a2:c3:08:a4:6f:e5:3c:88:35:74:ce:73:30:49:dc:3a: 31:3c:64:89 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAfwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEVGMjVBOTI1QkZCRDRDQkFFRjUyNDU2QUIzQjMwOUI3 NDcwNDBERkUwHhcNMjYwODE3MDU1MjUzWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTgyYTFiNS00Y2FkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT8UNDp0uXGJdcU6/ZhwLrNlmGGYgKcRbnrQfiBk6lrn8OMHhwhISJ9uUpvG HyFWwgD4azuaMxIGkYZ9qAKLvkWmFCD6F06rIbHdWhvvnmfKtmWRWO8ALMpp8OPf MaPu/9B7/unMmrUQm+kQHdeD58vO7RLBX4rJ5Lf5dLocah4bXlbtYf/9tUtQlt4r S7o6Xek+eo8UiQrqYYhiiOcx/HYbllC2Lylza4uPx7tj9IPrqbCcHYrDprnVT/hK SCR4M/1bUukzRXAF+O9pYTUYUebmtSbfIA7PtLJ4DDsE99ggKozyBmAsol7M+UB7 3sKEFLQUSnR5I+8XK3xu0gbaTQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFNW3umIR ZYA4RkYAwohIbsW+LnGlMB8GA1UdIwQYMBaAFO8lqSW/vUy671JFarOzCbdHBA3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy83OUVFMEJDNEUy NzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRMcnZVa1ZxczdNSnQwY0VE ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdCREMvNzlFRTBCQzRFMjcyMTFFRUI4M0Q2MDZCQzRGOUFFMDIvRTJCODRENkM5 OUZGMTFGMUE5MTU4Q0RCNEIxMUY5NzAucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAVYnvAwQAuVFGMA0GCSqGSIb3DQEBCwUAA4IBAQAUGZNCzabtv7IU M2q4yTbvJEoOkyTgCjLppha/A15PFn2uGjbI58iGR/BjUNfs6/JAj0DqhQDVraK0 xjJfhJ+0xNAQwhMEkOIMiEirqfPqvAUD/fyLo7KDGub1A9pwRtrMPn0jpeHodNh3 M8HfeMkMMLE40cJrFafl58Qm/dZlvaQjS9grvq24oda4qZ4v73E8WmQxjbjAVg9h OLR9W2Utzz3L87AnmHx29EW892I1UgpFwTvi4HXcQ/yQHlFcynJWMweuxd+8xu5X IDmcpbA9nZwSaygCNOKebA9XWFbTnK7B4oMw9AKO1vh3g6LDCKRv5TyINXTOczBJ 3DoxPGSJ -----END CERTIFICATE-----Generated at Sat Sep 5 04:54:55 2026 by rpki-client