$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/D798F0A0C04B11F0A85A7449C4F9AE02.roa File: D798F0A0C04B11F0A85A7449C4F9AE02.roa (raw, json) Hash identifier: D1XVMH1vA5La0IfiYGXEnqhzX2rQW9q2kW1yPmg2KPU= Subject key identifier: E3:EF:4F:64:1F:72:9E:A5:CC:74:27:82:AF:00:27:C5:EF:BF:D4:85 Certificate issuer: /CN=A91C9E82/serialNumber=D16681673F118A100EC201474CCFBB518783D960 Certificate serial: 3C Authority key identifier: D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/D798F0A0C04B11F0A85A7449C4F9AE02.roa Signing time: Sun 01 Mar 2026 06:04:01 +0000 ROA not before: Thu 13 Nov 2025 04:47:22 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 20473 IP address blocks: 91.204.80.0/24 maxlen: 24 91.222.132.0/24 maxlen: 24 91.222.133.0/24 maxlen: 24 91.222.134.0/24 maxlen: 24 91.222.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 03:03:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60 (0x3c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C9E82, serialNumber=D16681673F118A100EC201474CCFBB518783D960 Validity Not Before: Nov 13 04:47:22 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3d6d1-1663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:1f:3b:d8:86:68:6f:25:ab:fa:ad:50:16: 0a:e3:1d:16:5e:66:ed:d6:14:07:bd:5f:4d:7c:9e: 08:7d:94:6e:ae:5d:b2:6d:2c:49:a0:b2:07:59:ed: 10:4d:fb:f4:7f:21:06:24:86:71:a5:ff:29:a5:d1: 15:01:55:5b:cd:60:ca:21:73:0e:0c:09:dc:b7:05: b6:24:1d:5b:5c:4e:fe:42:83:e4:ca:5b:bd:3e:0c: 58:b4:a3:1d:b0:c6:9b:61:b3:51:54:6b:67:90:06: 63:c0:8a:55:9c:90:a3:e4:45:ce:c8:65:43:98:a5: e3:51:5d:8d:7b:25:3f:3b:fd:ed:56:fc:7c:d8:b0: 6b:88:b4:c3:e7:1b:0a:db:f8:e5:7e:69:ef:90:2a: 95:d4:8c:c7:83:f0:44:09:2d:60:1c:22:eb:94:8b: 59:ce:6b:66:a6:d3:bc:d9:69:cd:68:e3:c5:37:ef: b6:11:54:69:e7:b3:e4:9e:20:14:a4:d2:58:18:bc: c0:9a:03:81:36:08:58:2a:58:99:51:6e:99:0f:df: d1:75:1a:5a:9f:e3:d6:22:b2:fb:69:29:e0:61:57: 0c:2f:42:39:3b:34:ed:36:64:3b:7d:55:6a:ad:71: c8:b1:6c:ad:50:d6:92:fe:cd:8c:75:5b:db:f2:36: 18:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:EF:4F:64:1F:72:9E:A5:CC:74:27:82:AF:00:27:C5:EF:BF:D4:85 X509v3 Authority Key Identifier: keyid:D1:66:81:67:3F:11:8A:10:0E:C2:01:47:4C:CF:BB:51:87:83:D9:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/0WaBZz8RihAOwgFHTM-7UYeD2WA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0WaBZz8RihAOwgFHTM-7UYeD2WA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/B37B784ABE9E11F0981B4C32C4F9AE02/D798F0A0C04B11F0A85A7449C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 91.204.80.0/24 91.222.132.0/22 Signature Algorithm: sha256WithRSAEncryption 59:0f:34:3e:d2:38:e0:00:71:7e:92:c7:44:42:4c:c5:f5:5a: b9:e7:ec:8b:3f:07:d5:65:15:79:54:73:b6:97:f0:f3:da:c2: b8:3b:b0:5f:25:91:f1:46:56:b7:24:ec:98:1c:c2:7a:10:4f: a9:59:9f:4b:94:39:ca:ae:c9:0e:8e:39:e9:f5:a3:18:1a:aa: 5d:ec:4c:fb:ca:64:41:2c:b5:c4:00:52:c0:1c:ad:49:15:3c: cb:52:22:ee:48:40:38:4b:58:9c:2f:24:29:33:04:4d:8d:3e: 0e:8b:87:fc:a6:89:95:52:aa:04:e7:d1:42:68:78:c6:f4:0a: 59:fc:63:11:74:17:eb:5e:db:4b:06:f2:6f:9c:0c:a1:1d:51: 77:52:a2:56:61:e0:d8:f5:88:72:b1:8f:00:bb:96:0b:2f:75: 53:b2:4e:3b:f7:e4:4c:27:c3:f8:cc:75:35:3d:ea:87:fe:16: 9a:91:09:a5:41:31:34:12:08:d2:dc:14:dc:b5:7b:e8:86:8a: f6:56:03:01:aa:41:f6:3c:b2:06:ca:17:36:0f:83:9d:ee:1a: 5b:16:8c:5b:66:f5:de:1f:31:85:26:41:24:18:cf:b3:5d:70: 6f:cb:b6:94:d2:dc:bb:45:37:74:16:e0:61:2f:9d:11:10:3a: 9b:67:bc:f4 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBPDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD OUU4MjExMC8GA1UEBRMoRDE2NjgxNjczRjExOEExMDBFQzIwMTQ3NENDRkJCNTE4 NzgzRDk2MDAeFw0yNTExMTMwNDQ3MjJaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNmQxLTE2NjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9yh872IZobyWr+q1QFgrjHRZeZu3WFAe9X018ngh9lG6uXbJtLEmgsgdZ7RBN +/R/IQYkhnGl/yml0RUBVVvNYMohcw4MCdy3BbYkHVtcTv5Cg+TKW70+DFi0ox2w xpths1FUa2eQBmPAilWckKPkRc7IZUOYpeNRXY17JT87/e1W/HzYsGuItMPnGwrb +OV+ae+QKpXUjMeD8EQJLWAcIuuUi1nOa2am07zZac1o48U377YRVGnns+SeIBSk 0lgYvMCaA4E2CFgqWJlRbpkP39F1Glqf49YisvtpKeBhVwwvQjk7NO02ZDt9VWqt ccixbK1Q1pL+zYx1W9vyNhgxAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQU4+9PZB9y nqXMdCeCrwAnxe+/1IUwHwYDVR0jBBgwFoAU0WaBZz8RihAOwgFHTM+7UYeD2WAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM5RTgyL0IzN0I3ODRBQkU5 RTExRjA5ODFCNEMzMkM0RjlBRTAyLzBXYUJaejhSaWhBT3dnRkhUTS03VVllRDJX QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMFdhQlp6OFJpaEFPd2dGSFRNLTdVWWVEMldBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD OUU4Mi9CMzdCNzg0QUJFOUUxMUYwOTgxQjRDMzJDNEY5QUUwMi9ENzk4RjBBMEMw NEIxMUYwQTg1QTc0NDlDNEY5QUUwMi5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBABbzFADBAJb3oQwDQYJKoZIhvcNAQELBQADggEBAFkPND7SOOAAcX6S x0RCTMX1Wrnn7Is/B9VlFXlUc7aX8PPawrg7sF8lkfFGVrck7JgcwnoQT6lZn0uU OcquyQ6OOen1oxgaql3sTPvKZEEstcQAUsAcrUkVPMtSIu5IQDhLWJwvJCkzBE2N Pg6Lh/ymiZVSqgTn0UJoeMb0Cln8YxF0F+te20sG8m+cDKEdUXdSolZh4Nj1iHKx jwC7lgsvdVOyTjv35Ewnw/jMdTU96of+FpqRCaVBMTQSCNLcFNy1e+iGivZWAwGq QfY8sgbKFzYPg53uGlsWjFtm9d4fMYUmQSQYz7NdcG/LtpTS3LtFN3QW4GEvnREQ OptnvPQ= -----END CERTIFICATE-----Generated at Sat Mar 7 16:14:33 2026 by rpki-client