$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/496B4D269ADB11F1BF1E1EF44E11F970.roa File: 496B4D269ADB11F1BF1E1EF44E11F970.roa (raw, json) Hash identifier: fh/BeXR2R6tjsg0iValECUbjHi1DwLv88WZQ635Rg1A= Subject key identifier: CA:02:C7:C7:01:96:FD:B6:6C:A2:BA:B9:7A:C4:05:D8:0F:47:7C:8C Certificate issuer: /CN=A91DF859/serialNumber=CF4A9EF592730A6CAA140A1E7CB74ECD551CD26E Certificate serial: 43 Authority key identifier: CF:4A:9E:F5:92:73:0A:6C:AA:14:0A:1E:7C:B7:4E:CD:55:1C:D2:6E Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/z0qe9ZJzCmyqFAoefLdOzVUc0m4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/496B4D269ADB11F1BF1E1EF44E11F970.roa Signing time: Tue 18 Aug 2026 08:03:25 +0000 ROA not before: Tue 18 Aug 2026 08:03:25 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151622 IP address blocks: 195.253.236.0/24 maxlen: 24 195.253.237.0/24 maxlen: 24 195.253.238.0/24 maxlen: 24 195.253.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.crl rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/z0qe9ZJzCmyqFAoefLdOzVUc0m4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 00:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67 (0x43) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF859, serialNumber=CF4A9EF592730A6CAA140A1E7CB74ECD551CD26E Validity Not Before: Aug 18 08:03:25 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a8411cc-086b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7d:16:c3:ef:f3:70:1b:21:59:53:b7:e7:46: d1:66:d6:9e:b7:c2:63:6a:81:bd:c1:b3:24:fb:cc: 9d:95:8e:d6:41:15:f3:c1:ac:ea:6b:c4:0e:d1:97: 55:40:1d:b0:bc:cc:24:fa:0d:b4:7b:c5:03:41:0a: 70:d9:8c:0a:44:07:bb:2f:33:dd:8c:f3:ef:ab:d7: c8:0b:3e:56:f9:0d:eb:c7:c4:44:6c:c9:c6:73:02: c5:17:a3:1d:6b:a6:e1:ad:ab:f7:bb:3a:b0:bf:92: 66:2f:a6:12:54:05:44:c6:4a:d2:64:89:43:22:f6: 99:92:16:68:96:95:ac:26:1b:3c:2a:55:0b:36:25: f6:e2:d9:5f:df:57:99:0c:31:31:c9:92:18:00:bc: 66:9b:b5:83:13:83:f0:ad:ce:c7:a4:ee:2b:7e:54: 3b:bb:85:18:3e:a3:61:0b:0b:40:45:ae:c9:a7:5b: fe:55:6c:af:ad:0f:16:ba:17:d6:5a:ce:87:45:ed: 79:e5:a1:eb:9b:69:0e:e3:4e:f3:74:e7:18:60:4d: 70:1a:b1:1d:2f:14:41:d9:05:5d:57:53:30:fb:d4: c6:5d:4f:be:28:4d:66:fa:bc:71:69:bc:a9:fb:fd: 43:b2:97:27:5a:c0:19:fd:6c:6f:d7:ca:72:59:09: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:02:C7:C7:01:96:FD:B6:6C:A2:BA:B9:7A:C4:05:D8:0F:47:7C:8C X509v3 Authority Key Identifier: keyid:CF:4A:9E:F5:92:73:0A:6C:AA:14:0A:1E:7C:B7:4E:CD:55:1C:D2:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/z0qe9ZJzCmyqFAoefLdOzVUc0m4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/z0qe9ZJzCmyqFAoefLdOzVUc0m4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF859/B74508B2442011F1930303E7A6EE528E/496B4D269ADB11F1BF1E1EF44E11F970.roa sbgp-ipAddrBlock: critical IPv4: 195.253.236.0/22 Signature Algorithm: sha256WithRSAEncryption 67:ef:0e:4f:1e:2b:4b:47:a7:8f:13:ea:dd:8f:05:22:18:70: d6:6a:b1:fb:41:55:a0:da:8d:9e:63:5e:d4:a1:f6:10:1d:08: 13:a9:52:31:eb:3e:d1:35:ce:29:fc:2a:33:fc:b7:0d:ce:a0: 7f:a2:40:5e:52:eb:74:6e:6c:7e:12:a1:81:1d:2a:b0:fb:26: 0a:07:70:85:0e:05:3e:3c:29:50:df:45:b5:18:51:eb:e8:c0: fe:c8:20:b9:4f:11:b5:84:8c:04:ca:7e:d0:02:0a:b5:47:6e: 51:9b:b6:ca:10:4e:e5:29:14:9f:fa:be:9c:98:d2:ac:11:1c: ca:85:25:d3:b3:7f:f5:8e:1e:d7:95:28:81:ac:c1:2f:b8:69: d0:c3:b3:55:65:88:6b:ed:a8:c8:10:57:bc:ea:42:35:bd:4d: 6f:63:97:30:85:38:01:34:3a:a5:72:25:9b:ea:a6:5a:6f:54: e5:2e:56:4c:5c:74:c1:ef:bf:65:3b:0a:49:ad:5e:69:c0:49: b6:52:29:1c:c5:39:5f:c3:52:d6:00:c1:54:50:5f:75:cb:e4: c8:cc:b7:7c:16:50:5b:f9:1c:56:0f:a2:73:0d:eb:1c:7c:ff: cf:27:81:48:13:0c:9f:12:d3:98:89:ea:38:3a:27:c4:af:c0: 8b:49:ee:98 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBQzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE Rjg1OTExMC8GA1UEBRMoQ0Y0QTlFRjU5MjczMEE2Q0FBMTQwQTFFN0NCNzRFQ0Q1 NTFDRDI2RTAeFw0yNjA4MTgwODAzMjVaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhODQxMWNjLTA4NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDAfRbD7/NwGyFZU7fnRtFm1p63wmNqgb3BsyT7zJ2VjtZBFfPBrOprxA7Rl1VA HbC8zCT6DbR7xQNBCnDZjApEB7svM92M8++r18gLPlb5DevHxERsycZzAsUXox1r puGtq/e7OrC/kmYvphJUBUTGStJkiUMi9pmSFmiWlawmGzwqVQs2Jfbi2V/fV5kM MTHJkhgAvGabtYMTg/Ctzsek7it+VDu7hRg+o2ELC0BFrsmnW/5VbK+tDxa6F9Za zodF7XnloeubaQ7jTvN05xhgTXAasR0vFEHZBV1XUzD71MZdT74oTWb6vHFpvKn7 /UOylydawBn9bG/XynJZCWf3AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUygLHxwGW /bZsorq5esQF2A9HfIwwHwYDVR0jBBgwFoAUz0qe9ZJzCmyqFAoefLdOzVUc0m4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURGODU5L0I3NDUwOEIyNDQy MDExRjE5MzAzMDNFN0E2RUU1MjhFL3owcWU5Wkp6Q215cUZBb2VmTGRPelZVYzBt NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvejBxZTlaSnpDbXlxRkFvZWZMZE96VlVjMG00LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE Rjg1OS9CNzQ1MDhCMjQ0MjAxMUYxOTMwMzAzRTdBNkVFNTI4RS80OTZCNEQyNjlB REIxMUYxQkYxRTFFRjQ0RTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALD/ewwDQYJKoZIhvcNAQELBQADggEBAGfvDk8eK0tHp48T6t2PBSIY cNZqsftBVaDajZ5jXtSh9hAdCBOpUjHrPtE1zin8KjP8tw3OoH+iQF5S63RubH4S oYEdKrD7JgoHcIUOBT48KVDfRbUYUevowP7IILlPEbWEjATKftACCrVHblGbtsoQ TuUpFJ/6vpyY0qwRHMqFJdOzf/WOHteVKIGswS+4adDDs1VliGvtqMgQV7zqQjW9 TW9jlzCFOAE0OqVyJZvqplpvVOUuVkxcdMHvv2U7CkmtXmnASbZSKRzFOV/DUtYA wVRQX3XL5MjMt3wWUFv5HFYPonMN6xx8/88ngUgTDJ8S05iJ6jg6J8SvwItJ7pg= -----END CERTIFICATE-----Generated at Wed Aug 19 15:17:52 2026 by rpki-client