$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/D798F0A0C04B11F0A85A7449C4F9AE02.roa File: D798F0A0C04B11F0A85A7449C4F9AE02.roa (raw, json) Hash identifier: j8RPUxU1i8jQNbwP8gL4o72qQiyb5SB1xrhWEeZuKzw= Subject key identifier: B3:87:32:D0:49:F0:4F:52:A1:4D:29:AE:96:8D:CC:92:51:E8:0C:C2 Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960 Certificate serial: 90 Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/D798F0A0C04B11F0A85A7449C4F9AE02.roa Signing time: Fri 07 Aug 2026 02:54:09 +0000 ROA not before: Fri 07 Aug 2026 02:54:09 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 20473 IP address blocks: 91.204.80.0/24 maxlen: 24 91.222.132.0/24 maxlen: 24 91.222.133.0/24 maxlen: 24 91.222.134.0/24 maxlen: 24 91.222.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 02:56:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960 Validity Not Before: Aug 7 02:54:09 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7548d1-927a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:01:24:38:4a:2b:b0:dc:eb:ed:0d:84:ac:a2: a8:b0:b7:af:65:6a:95:08:be:96:61:8a:aa:b9:bb: 42:d5:98:e9:b4:70:dc:1e:7e:af:06:72:03:e5:9f: b2:09:54:46:72:3f:84:7c:ac:53:4d:63:d0:ef:6e: ac:72:04:33:6c:b9:9b:b1:b3:f9:7e:b7:6a:de:98: 02:87:1c:47:bc:11:57:50:34:da:a1:65:3e:7f:ee: 56:b9:c8:3d:80:79:a3:60:40:f7:73:f2:5e:32:27: 44:f7:4d:fd:64:08:a4:c4:5d:a3:fe:7a:7c:97:de: ff:9d:78:75:e9:54:dc:8a:88:91:03:ba:f3:4b:9d: 98:a4:4f:6a:79:76:2b:cd:9d:e7:49:bb:eb:13:7b: f7:50:57:1a:cc:03:12:c1:6f:52:25:52:2e:7b:f8: 02:06:dc:db:08:1a:c3:5a:74:7e:aa:8b:9f:07:a2: 67:9b:a1:30:65:c5:1e:4b:3d:38:7c:a9:9e:9e:49: 40:bd:e9:f9:0f:6a:d3:cc:c5:32:62:44:2a:ed:1e: 1d:5b:1f:70:a9:99:7f:d8:d3:8f:8c:c8:f1:e1:9d: d1:14:7d:a2:97:3e:26:d4:01:6a:bb:95:9d:e3:32: b3:43:99:40:63:5b:69:96:fa:56:2b:e8:cf:09:ac: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:87:32:D0:49:F0:4F:52:A1:4D:29:AE:96:8D:CC:92:51:E8:0C:C2 X509v3 Authority Key Identifier: keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/D798F0A0C04B11F0A85A7449C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 91.204.80.0/24 91.222.132.0/22 Signature Algorithm: sha256WithRSAEncryption 5b:ae:76:10:f2:b8:9c:d6:82:4d:97:d5:69:39:ef:87:e1:7b: 85:31:9b:83:f0:21:8d:67:68:26:dd:4f:59:50:03:f7:f5:4b: 2f:bc:de:46:e0:db:6e:ee:b5:5d:0a:79:08:de:fe:d9:10:c4: 64:9e:5c:0f:b4:41:f2:5a:31:4c:55:bd:36:a7:74:8a:12:ca: aa:32:da:a6:dd:7b:a7:9d:1d:09:92:dd:cb:06:47:2a:f2:65: 77:70:83:8f:0e:fb:a5:7d:10:51:5b:fc:c3:cd:4c:73:a7:bb: 8e:ac:e4:35:1d:41:e8:ea:83:c4:10:3e:0f:ed:46:8d:86:02: ab:37:a9:b8:58:ca:e0:47:2e:1f:8e:ed:5d:d2:44:cc:d9:36: 12:42:ac:38:8f:28:5a:fd:bf:c8:74:d5:f0:ac:18:ba:73:91: 09:58:8a:29:fa:26:b1:e9:7f:e8:90:29:3b:cf:ba:83:f3:d4: 36:69:9c:40:14:8a:45:e3:0f:27:1b:b5:66:ed:6f:b7:83:2b: db:dd:9d:a9:c7:ec:06:8e:e4:aa:ce:3d:bc:22:a0:06:20:7d: 72:00:6b:cf:ba:77:77:1a:48:a6:dc:1c:d4:b1:89:50:70:ea: b1:3a:66:3f:ce:25:34:ff:f0:67:c9:ea:0a:91:ea:65:ea:20: 62:70:ba:ef -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzlFODIxMTAvBgNVBAUTKEQxNjY4MTY3M0YxMThBMTAwRUMyMDE0NzRDQ0ZCQjUx ODc4M0Q5NjAwHhcNMjYwODA3MDI1NDA5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTc1NDhkMS05MjdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjAEkOEorsNzr7Q2ErKKosLevZWqVCL6WYYqqubtC1ZjptHDcHn6vBnID5Z+y CVRGcj+EfKxTTWPQ726scgQzbLmbsbP5frdq3pgChxxHvBFXUDTaoWU+f+5Wucg9 gHmjYED3c/JeMidE9039ZAikxF2j/np8l97/nXh16VTcioiRA7rzS52YpE9qeXYr zZ3nSbvrE3v3UFcazAMSwW9SJVIue/gCBtzbCBrDWnR+qoufB6Jnm6EwZcUeSz04 fKmenklAven5D2rTzMUyYkQq7R4dWx9wqZl/2NOPjMjx4Z3RFH2ilz4m1AFqu5Wd 4zKzQ5lAY1tplvpWK+jPCayVLwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFLOHMtBJ 8E9SoU0prpaNzJJR6AzCMB8GA1UdIwQYMBaAFNFmgWc/EYoQDsIBR0zPu1GHg9lg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOUU4Mi9CMzdCNzg0QUJF OUUxMUYwOTgxQjRDMzJDNEY5QUUwMi8wV2FCWno4UmloQU93Z0ZIVE0tN1VZZUQy V0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzBXYUJaejhSaWhBT3dnRkhUTS03VVllRDJXQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzlFODIvQjM3Qjc4NEFCRTlFMTFGMDk4MUI0QzMyQzRGOUFFMDIvRDc5OEYwQTBD MDRCMTFGMEE4NUE3NDQ5QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQAW8xQAwQCW96EMA0GCSqGSIb3DQEBCwUAA4IBAQBbrnYQ8ric1oJN l9VpOe+H4XuFMZuD8CGNZ2gm3U9ZUAP39UsvvN5G4Ntu7rVdCnkI3v7ZEMRknlwP tEHyWjFMVb02p3SKEsqqMtqm3XunnR0Jkt3LBkcq8mV3cIOPDvulfRBRW/zDzUxz p7uOrOQ1HUHo6oPEED4P7UaNhgKrN6m4WMrgRy4fju1d0kTM2TYSQqw4jyha/b/I dNXwrBi6c5EJWIop+iax6X/okCk7z7qD89Q2aZxAFIpF4w8nG7Vm7W+3gyvb3Z2p x+wGjuSqzj28IqAGIH1yAGvPund3Gkim3BzUsYlQcOqxOmY/ziU0//BnyeoKkepl 6iBicLrv -----END CERTIFICATE-----Generated at Sat Sep 5 02:37:52 2026 by rpki-client