$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/00756F7E63F011EC987F5B19C4F9AE02.roa File: 00756F7E63F011EC987F5B19C4F9AE02.roa (raw, json) Hash identifier: JgXv8es/pw1sE0Gc2Hw1RSuBorDwuU0kKpPxiQ9evCo= Subject key identifier: 0C:C9:9B:72:C7:BB:64:F0:7E:BD:29:C0:1F:9A:21:CB:3A:CB:AB:63 Certificate issuer: /CN=A91DDCB6/serialNumber=18DC531D44F05962E97F23845736141D3E02681B Certificate serial: 07AC Authority key identifier: 18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/00756F7E63F011EC987F5B19C4F9AE02.roa Signing time: Sat 26 Sep 2026 20:40:53 +0000 ROA not before: Sat 26 Sep 2026 20:40:53 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 132420 IP address blocks: 91.203.132.0/22 maxlen: 24 151.185.32.0/19 maxlen: 24 217.18.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 20:14:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1964 (0x7ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DDCB6, serialNumber=18DC531D44F05962E97F23845736141D3E02681B Validity Not Before: Sep 26 20:40:53 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6ab82dd5-a98f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:3b:cd:82:7b:d1:b9:43:66:95:bf:77:57:ed: ca:8f:a5:20:eb:d1:d2:82:42:ab:59:a1:75:8e:a2: 21:9c:dc:f6:fd:c6:3d:cf:54:5a:31:c9:9b:08:cb: 6b:c7:49:18:62:58:9e:81:23:15:5e:c1:4e:1c:b2: 5c:14:f3:b0:5b:17:29:5f:be:24:1a:a6:f4:39:b4: c1:03:bb:48:75:e5:cb:ea:07:00:5d:4a:6a:04:6d: 59:3c:4e:4e:cf:dd:44:f7:83:f2:0c:a2:bd:22:ca: df:cc:ab:bf:04:a7:5b:a2:f6:9d:53:1d:8b:19:b3: 39:bc:d7:9f:39:f3:c6:3c:de:e9:0d:dc:dd:d9:ff: 6f:c5:72:da:f4:8f:31:5f:9f:7d:66:f7:ab:32:3b: bb:a5:ba:48:e8:70:80:24:df:be:b9:49:5a:95:a4: e6:a2:57:7f:08:00:ed:ae:f2:d0:9b:02:a0:b0:00: 86:55:3d:2e:ea:30:f0:4d:5e:ad:af:e3:05:f4:9c: 4a:e5:41:ea:80:b8:8a:17:ba:10:93:83:dd:07:62: 1d:7b:ce:35:aa:0a:91:6c:7d:26:82:06:02:60:19: 52:64:4a:02:b5:0f:94:c3:16:37:84:42:39:e3:e3: 7b:8a:40:27:a7:dc:56:b1:f2:5d:93:b7:6f:a9:58: ab:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C9:9B:72:C7:BB:64:F0:7E:BD:29:C0:1F:9A:21:CB:3A:CB:AB:63 X509v3 Authority Key Identifier: keyid:18:DC:53:1D:44:F0:59:62:E9:7F:23:84:57:36:14:1D:3E:02:68:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/GNxTHUTwWWLpfyOEVzYUHT4CaBs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GNxTHUTwWWLpfyOEVzYUHT4CaBs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDCB6/6E9AC80671D811EB8047721DC4F9AE02/00756F7E63F011EC987F5B19C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 91.203.132.0/22 151.185.32.0/19 217.18.52.0/22 Signature Algorithm: sha256WithRSAEncryption 54:7e:03:ce:b9:15:cc:76:89:4d:06:9f:6d:2d:d7:30:75:16: 0d:40:1e:32:a1:1f:e3:c4:9b:d9:ba:96:85:5d:34:1f:e1:ed: 55:42:54:0f:84:44:8a:95:8e:23:28:8b:bd:f5:3a:25:f9:ce: 6e:ee:1f:ab:54:e4:04:c8:e1:5e:3a:83:33:91:02:6f:09:31: 6e:9d:82:f9:6d:91:0f:d4:89:89:6f:00:76:84:7c:cf:e9:83: dc:5a:95:32:f9:29:65:32:1f:85:0e:ab:4b:94:6d:1c:23:9e: e8:88:30:53:01:50:fd:eb:c0:1b:c0:f8:b8:85:2a:4c:a1:40: 7e:27:38:35:65:80:1f:03:d9:ef:81:aa:77:ca:22:72:e6:a4: 6e:a0:6a:44:da:1b:63:8d:bc:1b:6d:48:0d:d3:c7:8f:be:fe: 70:b5:cd:fd:19:4d:d0:13:f6:4b:68:1d:8a:38:e2:a5:8a:af: a2:eb:e9:f1:71:3e:36:63:13:bf:1c:dd:25:32:b6:ca:3b:f6: 4c:01:c6:6a:2a:7c:15:18:e8:7b:a1:ee:5a:c9:01:cf:3e:1f: 86:3f:9d:14:9b:b8:f5:f1:fd:06:95:b3:6c:10:c3:ac:0a:52: 41:b0:c4:29:e3:2f:4e:6c:18:ce:8e:86:2b:83:62:e7:98:69: 6d:32:61:b3 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICB6wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RERDQjYxMTAvBgNVBAUTKDE4REM1MzFENDRGMDU5NjJFOTdGMjM4NDU3MzYxNDFE M0UwMjY4MUIwHhcNMjYwOTI2MjA0MDUzWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI4MmRkNS1hOThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0TvNgnvRuUNmlb93V+3Kj6Ug69HSgkKrWaF1jqIhnNz2/cY9z1RaMcmbCMtr x0kYYliegSMVXsFOHLJcFPOwWxcpX74kGqb0ObTBA7tIdeXL6gcAXUpqBG1ZPE5O z91E94PyDKK9IsrfzKu/BKdbovadUx2LGbM5vNefOfPGPN7pDdzd2f9vxXLa9I8x X599ZverMju7pbpI6HCAJN++uUlalaTmold/CADtrvLQmwKgsACGVT0u6jDwTV6t r+MF9JxK5UHqgLiKF7oQk4PdB2Ide841qgqRbH0mggYCYBlSZEoCtQ+UwxY3hEI5 4+N7ikAnp9xWsfJdk7dvqVirPwIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFAzJm3LH u2Twfr0pwB+aIcs6y6tjMB8GA1UdIwQYMBaAFBjcUx1E8Fli6X8jhFc2FB0+Amgb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERENCNi82RTlBQzgwNjcx RDgxMUVCODA0NzcyMURDNEY5QUUwMi9HTnhUSFVUd1dXTHBmeU9FVnpZVUhUNENh QnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dOeFRIVVR3V1dMcGZ5T0VWellVSFQ0Q2FCcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RERDQjYvNkU5QUM4MDY3MUQ4MTFFQjgwNDc3MjFEQzRGOUFFMDIvMDA3NTZGN0U2 M0YwMTFFQzk4N0Y1QjE5QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQCW8uEAwQFl7kgAwQC2RI0MA0GCSqGSIb3DQEBCwUAA4IBAQBUfgPO uRXMdolNBp9tLdcwdRYNQB4yoR/jxJvZupaFXTQf4e1VQlQPhESKlY4jKIu99Tol +c5u7h+rVOQEyOFeOoMzkQJvCTFunYL5bZEP1ImJbwB2hHzP6YPcWpUy+SllMh+F DqtLlG0cI57oiDBTAVD968AbwPi4hSpMoUB+Jzg1ZYAfA9nvgap3yiJy5qRuoGpE 2htjjbwbbUgN08ePvv5wtc39GU3QE/ZLaB2KOOKliq+i6+nxcT42YxO/HN0lMrbK O/ZMAcZqKnwVGOh7oe5ayQHPPh+GP50Um7j18f0GlbNsEMOsClJBsMQp4y9ObBjO joYrg2LnmGltMmGz -----END CERTIFICATE-----Generated at Thu Oct 22 20:34:46 2026 by rpki-client