$ rpki-client -vvvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/807395488FDD11F195BE82A73211F970.roa File: 807395488FDD11F195BE82A73211F970.roa (raw, json) Hash identifier: BU7K+VvzWJLMxSs9elkeme33blAxmlXtFe8kkWOD/8A= Subject key identifier: 87:C3:A7:65:97:18:9C:6C:22:10:B3:C4:C8:05:09:75:30:E4:E3:0D Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1F19 Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/807395488FDD11F195BE82A73211F970.roa Signing time: Tue 04 Aug 2026 08:21:33 +0000 ROA not before: Tue 04 Aug 2026 08:21:33 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134963 IP address blocks: 8.208.0.0/12 maxlen: 15 8.208.0.0/16 maxlen: 24 8.209.0.0/16 maxlen: 24 8.210.0.0/16 maxlen: 24 8.211.0.0/16 maxlen: 24 8.212.0.0/16 maxlen: 24 8.213.0.0/16 maxlen: 24 8.214.0.0/16 maxlen: 24 8.215.0.0/16 maxlen: 24 8.216.0.0/16 maxlen: 24 8.217.0.0/16 maxlen: 24 8.218.0.0/16 maxlen: 24 8.219.0.0/16 maxlen: 24 8.220.0.0/16 maxlen: 24 8.221.0.0/16 maxlen: 24 8.222.0.0/16 maxlen: 24 8.223.0.0/16 maxlen: 24 149.129.0.0/16 maxlen: 24 161.117.0.0/16 maxlen: 24 170.33.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 16:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7961 (0x1f19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Validity Not Before: Aug 4 08:21:33 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=6a71a10d-aae1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c7:bd:26:45:b3:6a:4a:e8:ba:12:0d:c4:cf: 6d:30:0f:98:81:6b:29:52:f2:07:99:91:c6:81:c0: 67:2c:20:86:c2:18:58:d8:d1:bd:46:d8:4b:1c:c8: e4:73:11:50:ca:22:17:15:b9:70:35:14:bb:ce:67: 6d:99:a0:de:5b:be:c2:a9:25:02:4f:9c:97:13:43: 3c:c3:a4:b0:e5:59:7c:f8:c6:53:f8:94:cf:11:47: 34:0e:49:96:35:5a:78:7a:8b:6d:0e:92:59:2a:e8: b7:44:ba:39:fb:df:26:6b:17:35:fb:16:b9:5c:2a: 7d:df:d5:4e:d1:9f:75:88:08:44:bc:bc:5d:30:9a: 95:21:fe:3e:46:0f:b6:34:ea:57:48:99:97:95:d9: 97:33:dd:08:35:36:22:de:f8:19:81:ea:88:da:88: 88:f3:f2:ee:c6:5e:af:bd:b7:c9:50:83:2c:21:52: f5:01:0a:a7:49:2c:2a:7e:ea:29:35:c9:39:8a:fe: f5:0c:78:60:46:f8:ba:7b:1f:cf:d5:03:14:cf:cd: 8c:d4:28:87:81:7d:5a:bc:6d:60:78:c3:1c:39:4d: cf:60:b9:49:6a:84:fb:24:e5:fc:6a:55:39:43:ff: 16:1b:9f:24:dc:e3:78:07:3c:e2:44:4f:b0:51:2f: 9b:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:C3:A7:65:97:18:9C:6C:22:10:B3:C4:C8:05:09:75:30:E4:E3:0D X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/807395488FDD11F195BE82A73211F970.roa sbgp-ipAddrBlock: critical IPv4: 8.208.0.0/12 149.129.0.0/16 161.117.0.0/16 170.33.0.0/16 Signature Algorithm: sha256WithRSAEncryption 82:02:e2:1e:75:6e:10:97:da:32:55:16:d6:82:45:60:3b:ec: 76:c9:56:09:11:d5:6a:4f:bc:28:6c:60:ac:5f:a8:7c:f4:2d: ca:ea:b2:21:90:9a:f7:e9:0c:0d:8d:30:d9:8a:8e:0a:78:9c: 19:d1:2d:39:d5:df:4f:a4:da:84:d9:a1:1b:ab:bf:e8:cf:71: c9:9a:bf:aa:71:63:71:ea:f3:10:88:de:83:3f:f0:53:f5:c1: cc:88:bf:ff:a2:dd:2d:e0:0a:84:13:7b:fd:e4:0b:90:2e:b6: 47:0a:c4:2a:aa:e6:1b:8a:49:09:88:f2:46:c6:94:fd:6e:3a: 24:64:9a:04:66:47:5f:4d:ce:f3:79:c0:11:13:27:ba:1d:15: b8:c6:75:66:03:46:98:1b:b7:3b:66:2e:ef:b0:6e:6b:ff:a5: a0:5b:42:16:eb:8b:01:9c:39:19:30:4e:b3:82:05:16:31:1d: f3:a2:f7:06:30:d4:6a:1a:f9:04:45:06:2a:4c:e4:96:e1:ab: ab:4f:b3:8f:f0:26:07:c7:cb:42:5e:94:b9:2b:9d:82:57:3e: c0:4c:d7:5c:8d:0e:7b:2d:ec:35:6e:61:a5:ec:18:8c:2a:26: 5a:63:da:30:d7:8b:fd:70:44:2c:98:52:28:c9:25:1f:ce:7f: 13:9b:16:6b -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICHxkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjYwODA0MDgyMTMzWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcxYTEwZC1hYWUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA18e9JkWzakrouhINxM9tMA+YgWspUvIHmZHGgcBnLCCGwhhY2NG9RthLHMjk cxFQyiIXFblwNRS7zmdtmaDeW77CqSUCT5yXE0M8w6Sw5Vl8+MZT+JTPEUc0DkmW NVp4eottDpJZKui3RLo5+98maxc1+xa5XCp939VO0Z91iAhEvLxdMJqVIf4+Rg+2 NOpXSJmXldmXM90INTYi3vgZgeqI2oiI8/Luxl6vvbfJUIMsIVL1AQqnSSwqfuop Nck5iv71DHhgRvi6ex/P1QMUz82M1CiHgX1avG1geMMcOU3PYLlJaoT7JOX8alU5 Q/8WG58k3ON4BzziRE+wUS+bPQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFIfDp2WX GJxsIhCzxMgFCXUw5OMNMB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUExOTgvQUQ2MjkyMjJCNTI1MTFFNkFGNkM4OTVFQzRGOUFFMDIvODA3Mzk1NDg4 RkREMTFGMTk1QkU4MkE3MzIxMUY5NzAucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwMECNADAwCVgQMDAKF1AwMAqiEwDQYJKoZIhvcNAQELBQADggEBAIIC 4h51bhCX2jJVFtaCRWA77HbJVgkR1WpPvChsYKxfqHz0LcrqsiGQmvfpDA2NMNmK jgp4nBnRLTnV30+k2oTZoRurv+jPccmav6pxY3Hq8xCI3oM/8FP1wcyIv/+i3S3g CoQTe/3kC5AutkcKxCqq5huKSQmI8kbGlP1uOiRkmgRmR19NzvN5wBETJ7odFbjG dWYDRpgbtztmLu+wbmv/paBbQhbriwGcORkwTrOCBRYxHfOi9wYw1Goa+QRFBipM 5Jbhq6tPs4/wJgfHy0JelLkrnYJXPsBM11yNDnst7DVuYaXsGIwqJlpj2jDXi/1w RCyYUijJJR/OfxObFms= -----END CERTIFICATE-----Generated at Tue Sep 1 04:56:34 2026 by rpki-client