$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/7C76080E08D611EE82522448C4F9AE02.roa File: 7C76080E08D611EE82522448C4F9AE02.roa (raw, json) Hash identifier: R42a1XTZV+JT3ULvAq3AmV+IeV1nfk19HZc62DZHUKY= Subject key identifier: BD:0F:89:69:8F:FA:51:F9:A6:FE:2E:6E:81:12:12:49:EB:7E:D8:45 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 0883 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/7C76080E08D611EE82522448C4F9AE02.roa Signing time: Mon 24 Aug 2026 11:16:35 +0000 ROA not before: Mon 24 Aug 2026 11:16:35 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 15830 IP address blocks: 51.162.4.0/22 maxlen: 22 51.162.8.0/21 maxlen: 21 51.162.16.0/20 maxlen: 20 51.162.32.0/21 maxlen: 21 51.162.48.0/22 maxlen: 22 51.162.64.0/21 maxlen: 21 51.162.80.0/21 maxlen: 21 51.162.112.0/21 maxlen: 32 51.162.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Sep 2026 14:50:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2179 (0x883) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: Aug 24 11:16:35 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a8c2813-8cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:78:ef:d0:dc:d6:68:c5:06:08:2c:a6:66: d8:e5:72:f3:d8:11:a0:6a:81:f1:5d:ac:bb:aa:44: e5:f4:54:06:00:96:fe:06:17:67:69:19:79:c7:14: a2:6b:99:87:58:41:a4:8d:be:06:8e:1f:71:33:d8: 08:65:15:61:47:61:8e:34:23:0a:8a:e3:5d:1e:93: e6:d2:d6:91:ba:38:6f:18:06:46:26:ce:d4:34:1a: 22:ad:93:20:07:15:be:d5:b9:1b:2a:4c:8c:28:52: c2:63:b9:4c:e2:fe:81:c7:11:e0:0d:bc:1e:68:b7: a0:b0:be:dc:aa:7f:af:4a:8a:4d:f4:af:85:b6:05: 8d:53:b2:e7:ee:8a:fe:9c:99:72:91:34:fa:e8:4e: fd:a9:aa:a1:db:24:43:c0:af:29:bd:08:26:69:2b: 64:da:9b:20:8a:f6:af:73:4c:a2:25:86:b6:2c:2f: eb:ea:3a:d3:44:7a:e1:c5:72:7e:e3:fe:d9:6c:0e: 20:a2:87:11:22:e1:84:1f:26:53:e9:08:ca:ec:db: 70:e1:d8:08:ee:8e:d7:c7:6e:52:40:a4:f7:9e:a8: aa:21:02:55:5b:89:ec:08:86:f9:d3:af:6a:e9:88: e5:cd:f1:ec:a3:d7:18:7c:75:c0:22:35:c8:ee:f3: 66:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:0F:89:69:8F:FA:51:F9:A6:FE:2E:6E:81:12:12:49:EB:7E:D8:45 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/7C76080E08D611EE82522448C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 51.162.4.0-51.162.39.255 51.162.48.0/22 51.162.64.0/21 51.162.80.0/21 51.162.112.0/21 51.162.124.0/22 Signature Algorithm: sha256WithRSAEncryption 5d:8f:84:9c:cc:e9:7e:c8:b8:ec:ef:a6:1b:77:71:ce:f7:c9: 4d:a6:da:0a:a9:7d:dc:03:65:27:d5:78:49:0b:c6:02:88:96: 56:00:02:26:37:62:37:6b:cf:f3:44:9a:d4:24:e8:06:80:16: 33:97:d4:f1:c8:1e:af:30:4f:ea:db:57:c0:96:d9:a7:1d:25: 47:b1:c8:2f:44:55:a2:ea:f5:a8:bf:be:87:63:a5:8e:74:9b: 67:d5:61:20:a7:d3:c1:5c:4b:eb:7f:93:d5:bb:05:f3:75:b2: 7e:66:fc:04:91:0a:af:ec:e3:6d:29:2f:32:cc:a3:f5:3e:53: d8:f5:9c:7e:f7:c4:2e:06:4f:f5:ca:91:aa:c6:44:3b:b6:32: a0:42:5f:32:03:76:38:80:21:20:a4:85:a0:68:8e:c4:ea:e3: 19:2b:40:64:15:52:be:01:31:8f:6b:19:92:e7:47:1a:fb:da: 5e:ae:73:44:49:c3:3b:dc:28:30:84:15:7e:b2:56:24:ff:03: 25:d6:54:fe:ba:48:e9:11:a8:db:e9:5e:60:9e:a5:22:08:32: 91:5a:f7:09:5f:c5:e6:d5:18:b6:07:73:a4:6e:df:2b:f1:8e: 13:cb:e0:a9:38:3e:8f:bc:04:b6:97:97:c2:39:57:ea:61:30: e5:41:1e:c0 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICCIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjYwODI0MTExNjM1WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThjMjgxMy04Y2I1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu1p479Dc1mjFBggspmbY5XLz2BGgaoHxXay7qkTl9FQGAJb+BhdnaRl5xxSi a5mHWEGkjb4Gjh9xM9gIZRVhR2GONCMKiuNdHpPm0taRujhvGAZGJs7UNBoirZMg BxW+1bkbKkyMKFLCY7lM4v6BxxHgDbweaLegsL7cqn+vSopN9K+FtgWNU7Ln7or+ nJlykTT66E79qaqh2yRDwK8pvQgmaStk2psgivavc0yiJYa2LC/r6jrTRHrhxXJ+ 4/7ZbA4goocRIuGEHyZT6QjK7Ntw4dgI7o7Xx25SQKT3nqiqIQJVW4nsCIb5069q 6YjlzfHso9cYfHXAIjXI7vNm5wIDAQABo4IChjCCAoIwHQYDVR0OBBYEFL0PiWmP +lH5pv4uboESEknrfthFMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJBRjEvODZEQjJDQ0MyNDhFMTFFQkFCRUYyQjJGQzRGOUFFMDIvN0M3NjA4MEUw OEQ2MTFFRTgyNTIyNDQ4QzRGOUFFMDIucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsMAwDBAIzogQDBAMzoiADBAIzojADBAMzokADBAMzolADBAMzonADBAIz onwwDQYJKoZIhvcNAQELBQADggEBAF2PhJzM6X7IuOzvpht3cc73yU2m2gqpfdwD ZSfVeEkLxgKIllYAAiY3Yjdrz/NEmtQk6AaAFjOX1PHIHq8wT+rbV8CW2acdJUex yC9EVaLq9ai/vodjpY50m2fVYSCn08FcS+t/k9W7BfN1sn5m/ASRCq/s420pLzLM o/U+U9j1nH73xC4GT/XKkarGRDu2MqBCXzIDdjiAISCkhaBojsTq4xkrQGQVUr4B MY9rGZLnRxr72l6uc0RJwzvcKDCEFX6yViT/AyXWVP66SOkRqNvpXmCepSIIMpFa 9wlfxebVGLYHc6Ru3yvxjhPL4Kk4Po+8BLaXl8I5V+phMOVBHsA= -----END CERTIFICATE-----Generated at Sat Sep 5 00:56:47 2026 by rpki-client