$ rpki-client -vvf rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/423B6B5E5DB811F1966FAE05AC833773.roa File: 423B6B5E5DB811F1966FAE05AC833773.roa (raw, json) Hash identifier: TIfZzZzg/QXy0NCiF0a1I+19CdyJj4ReyDwnAPzzoOM= Subject key identifier: 80:66:FD:AF:35:19:03:1C:B7:3C:AB:88:08:05:22:97:23:05:89:8F Certificate issuer: /CN=A91E10B0/serialNumber=9E8FFB4E0553D07ED0DF9B7DFED0B53C44CBFE04 Certificate serial: 0C Authority key identifier: 9E:8F:FB:4E:05:53:D0:7E:D0:DF:9B:7D:FE:D0:B5:3C:44:CB:FE:04 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/423B6B5E5DB811F1966FAE05AC833773.roa Signing time: Mon 01 Jun 2026 12:48:59 +0000 ROA not before: Mon 01 Jun 2026 12:48:59 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 154692 IP address blocks: 162.4.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.crl rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Jun 2026 12:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12 (0xc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E10B0, serialNumber=9E8FFB4E0553D07ED0DF9B7DFED0B53C44CBFE04 Validity Not Before: Jun 1 12:48:59 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a1d7fbb-efd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:73:c1:bf:11:92:00:50:53:5d:f7:c4:16:28: c1:8b:33:27:4f:c3:1b:cc:0b:5f:ec:f7:aa:73:ac: cb:8a:ce:fc:e0:2d:00:35:8b:6f:d2:8c:99:88:d6: c1:33:d6:33:ad:95:26:81:82:c3:35:60:0c:f8:8a: 34:ba:03:2e:48:22:20:41:85:b9:b1:b4:d2:2b:5e: ae:30:bf:58:ac:c5:19:b4:58:48:e2:fe:ba:d8:2b: 84:44:13:1c:f1:7c:c0:da:03:8c:bb:2e:45:a7:30: 90:1f:ac:3e:59:f9:d7:5d:ef:b2:ff:c2:2d:e5:cc: 99:cb:c3:69:f0:0a:3d:3c:5f:45:9b:97:00:c6:47: 38:b4:d6:24:e1:08:ef:d3:1b:50:93:a1:6f:83:fb: 01:73:51:85:6a:ae:b7:e1:89:ac:85:7f:dc:2a:ff: fb:a5:d8:c2:0a:77:fb:22:7d:f9:48:80:46:e3:ce: 76:c4:64:01:ec:7a:74:46:e0:90:a2:54:06:cf:60: 3d:ec:94:8f:0c:29:2f:57:bd:de:64:f9:c6:40:ff: c8:7c:90:37:8f:0b:43:f6:b2:83:3d:4d:c4:16:30: 9d:e1:0b:d8:ab:41:5b:f2:b6:aa:7f:23:f5:8d:02: 0e:ba:10:1b:94:01:8d:d1:ef:31:9b:74:c0:5d:ad: 99:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:66:FD:AF:35:19:03:1C:B7:3C:AB:88:08:05:22:97:23:05:89:8F X509v3 Authority Key Identifier: keyid:9E:8F:FB:4E:05:53:D0:7E:D0:DF:9B:7D:FE:D0:B5:3C:44:CB:FE:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/no_7TgVT0H7Q35t9_tC1PETL_gQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/no_7TgVT0H7Q35t9_tC1PETL_gQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E10B0/00F8A278571F11F18340C26C91833773/423B6B5E5DB811F1966FAE05AC833773.roa sbgp-ipAddrBlock: critical IPv4: 162.4.174.0/23 Signature Algorithm: sha256WithRSAEncryption 01:1c:b1:eb:8a:db:d4:99:ec:96:ca:8a:34:f4:1c:e7:f1:d8: bb:f9:69:6a:c1:6a:a6:f7:f8:12:cc:b2:a1:6b:62:2e:98:ab: 8f:73:70:2b:89:6c:71:24:db:36:68:0f:c7:ac:97:52:18:17: 03:bf:73:36:94:2e:f2:0e:6c:9a:1e:93:54:25:16:13:c6:aa: 8a:85:6d:10:20:35:e8:d1:99:cb:b8:eb:22:23:d1:2c:53:f1: 85:07:c9:ff:e7:55:a6:2e:49:d7:4e:e1:e2:f5:ed:28:ae:e0: 2e:ce:ca:32:cb:12:99:35:ff:95:a9:db:da:fd:80:b9:1a:7d: ed:2b:60:37:73:bd:ad:40:43:b6:95:df:f8:7c:1b:0b:89:e4: d3:83:30:c8:f7:72:36:15:66:d7:5d:f3:7b:5c:27:7d:36:bc: 33:87:80:fb:b0:77:ec:3d:30:46:fe:ce:99:26:e9:81:d5:ea: 4c:8a:70:40:ac:70:62:42:a3:32:28:0a:0a:b0:33:ec:88:9c: 5d:23:df:20:cc:40:e3:8b:b6:1d:c1:f5:4c:63:40:9a:17:c3: d1:3e:e1:bb:fb:32:cf:ff:f0:10:40:73:52:7c:9d:c0:4d:94: dc:7b:f4:34:58:ae:84:cc:3b:d4:21:7d:3c:39:ec:83:be:80: 1a:fd:f7:43 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBDDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MTBCMDExMC8GA1UEBRMoOUU4RkZCNEUwNTUzRDA3RUQwREY5QjdERkVEMEI1M0M0 NENCRkUwNDAeFw0yNjA2MDExMjQ4NTlaFw0yNzA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMWQ3ZmJiLWVmZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC5c8G/EZIAUFNd98QWKMGLMydPwxvMC1/s96pzrMuKzvzgLQA1i2/SjJmI1sEz 1jOtlSaBgsM1YAz4ijS6Ay5IIiBBhbmxtNIrXq4wv1isxRm0WEji/rrYK4REExzx fMDaA4y7LkWnMJAfrD5Z+ddd77L/wi3lzJnLw2nwCj08X0WblwDGRzi01iThCO/T G1CToW+D+wFzUYVqrrfhiayFf9wq//ul2MIKd/sifflIgEbjznbEZAHsenRG4JCi VAbPYD3slI8MKS9Xvd5k+cZA/8h8kDePC0P2soM9TcQWMJ3hC9irQVvytqp/I/WN Ag66EBuUAY3R7zGbdMBdrZnNAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUgGb9rzUZ Axy3PKuICAUilyMFiY8wHwYDVR0jBBgwFoAUno/7TgVT0H7Q35t9/tC1PETL/gQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxMEIwLzAwRjhBMjc4NTcx RjExRjE4MzQwQzI2QzkxODMzNzczL25vXzdUZ1ZUMEg3UTM1dDlfdEMxUEVUTF9n US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbm9fN1RnVlQwSDdRMzV0OV90QzFQRVRMX2dRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MTBCMC8wMEY4QTI3ODU3MUYxMUYxODM0MEMyNkM5MTgzMzc3My80MjNCNkI1RTVE QjgxMUYxOTY2RkFFMDVBQzgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGiBK4wDQYJKoZIhvcNAQELBQADggEBAAEcseuK29SZ7JbKijT0HOfx 2Lv5aWrBaqb3+BLMsqFrYi6Yq49zcCuJbHEk2zZoD8esl1IYFwO/czaULvIObJoe k1QlFhPGqoqFbRAgNejRmcu46yIj0SxT8YUHyf/nVaYuSddO4eL17Siu4C7OyjLL Epk1/5Wp29r9gLkafe0rYDdzva1AQ7aV3/h8GwuJ5NODMMj3cjYVZtdd83tcJ302 vDOHgPuwd+w9MEb+zpkm6YHV6kyKcECscGJCozIoCgqwM+yInF0j3yDMQOOLth3B 9UxjQJoXw9E+4bv7Ms//8BBAc1J8ncBNlNx79DRYroTMO9QhfTw57IO+gBr990M= -----END CERTIFICATE-----Generated at Tue Jun 2 21:25:01 2026 by rpki-client