$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/DE2C490EFDDA11F08A9BDF026F6F56BC.roa File: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (raw, json) Hash identifier: dMqL0RXvcl4t2gqq+Dorzer6i+VmVso2r8Pwzf3DLMs= Subject key identifier: 4B:CA:B9:8F:2B:0C:7E:56:EF:F6:6F:6B:4D:67:9A:24:A1:71:0A:17 Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0D20 Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/DE2C490EFDDA11F08A9BDF026F6F56BC.roa Signing time: Sun 04 Oct 2026 20:38:50 +0000 ROA not before: Sun 04 Oct 2026 20:38:50 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 131275 IP address blocks: 223.29.232.0/24 maxlen: 24 223.29.233.0/24 maxlen: 24 223.29.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 19:35:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3360 (0xd20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Oct 4 20:38:50 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac2b95a-b869 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d7:fd:0e:da:44:31:86:81:9b:35:ad:9a:dc: cb:d4:c7:82:b1:94:3d:f8:d6:5f:0f:1d:c7:94:84: 75:91:a2:ed:f1:6d:e8:62:81:3f:77:f3:ea:15:b3: a9:83:50:c8:00:a5:e0:b1:ba:58:a4:51:0d:d4:18: ff:bd:b0:27:53:89:2c:38:f5:dc:b0:d6:b1:ff:df: a4:43:0e:23:54:21:22:4e:99:2f:ca:e0:e6:e6:7f: c7:f9:f5:da:16:de:52:10:b0:69:3c:27:4b:f4:07: 31:bc:c9:56:57:da:d1:e1:45:34:63:71:6d:cc:60: 09:89:93:ab:3f:42:77:ac:d9:93:3b:56:00:f8:c5: 52:29:82:92:a9:38:aa:94:23:ba:82:db:54:1b:80: 56:d3:5a:9f:bb:57:f5:c9:71:34:55:75:7e:02:0e: 64:8b:be:3d:f8:6d:46:ac:3f:a0:bd:fe:58:bc:45: c6:ae:26:86:22:4a:c4:ea:66:42:09:a0:1e:dd:23: 6a:e3:1b:3f:52:4b:db:c7:9f:32:e1:73:13:00:88: 5b:f7:ad:4b:6c:8a:7c:0e:c4:c8:46:a1:af:b2:09: 9e:74:dd:57:67:c1:da:64:ad:d6:bb:7e:2e:35:6b: c3:53:1e:7e:9a:54:aa:e9:17:0d:7a:44:ca:3d:64: 01:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:CA:B9:8F:2B:0C:7E:56:EF:F6:6F:6B:4D:67:9A:24:A1:71:0A:17 X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/DE2C490EFDDA11F08A9BDF026F6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 223.29.232.0-223.29.234.255 Signature Algorithm: sha256WithRSAEncryption 2e:39:ab:31:71:da:ea:91:eb:a3:42:3d:21:71:cd:8e:b2:82: 8f:0e:01:8b:f8:c5:39:77:f4:92:e3:3a:13:75:9f:20:65:19: 91:1d:04:e5:c0:fb:43:af:dd:5a:58:83:fb:b5:9c:fe:6d:7a: 16:fb:b6:19:a0:e8:e1:30:2c:38:a5:f7:41:b4:31:b8:17:44: 60:bf:c8:27:c2:36:db:58:04:15:8f:30:59:3b:9f:7e:e4:dd: 1e:8a:a6:b7:c4:97:1a:48:b9:ac:39:45:6d:43:7b:28:88:a7: 0e:ac:58:20:92:5f:f5:cd:76:c2:e5:8f:8b:95:33:11:0b:bb: 65:b9:4e:f6:97:16:ca:63:1d:c4:72:31:78:0c:ab:b3:fc:05: 4b:e1:a5:8e:78:74:a1:d7:ff:71:0b:4e:ed:25:ee:bf:4e:c8: 46:05:c9:c1:d8:cd:51:8d:1a:76:2c:58:24:72:ab:01:3c:52: 8c:5d:14:9e:0e:ce:11:81:45:46:29:76:db:dd:43:dc:88:b7: 45:77:e1:e9:84:aa:38:85:98:4e:42:2f:37:36:78:9a:45:1d: 6e:73:c5:d7:ce:8c:b0:d5:af:9d:75:2d:84:04:a7:e5:0f:88: b5:81:0a:9e:54:c5:10:4f:d6:15:56:e2:89:b9:27:ea:e4:d9: 56:c8:ac:af -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICDSAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYxMDA0MjAzODUwWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWMyYjk1YS1iODY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNf9DtpEMYaBmzWtmtzL1MeCsZQ9+NZfDx3HlIR1kaLt8W3oYoE/d/PqFbOp g1DIAKXgsbpYpFEN1Bj/vbAnU4ksOPXcsNax/9+kQw4jVCEiTpkvyuDm5n/H+fXa Ft5SELBpPCdL9AcxvMlWV9rR4UU0Y3FtzGAJiZOrP0J3rNmTO1YA+MVSKYKSqTiq lCO6gttUG4BW01qfu1f1yXE0VXV+Ag5ki749+G1GrD+gvf5YvEXGriaGIkrE6mZC CaAe3SNq4xs/Ukvbx58y4XMTAIhb961LbIp8DsTIRqGvsgmedN1XZ8HaZK3Wu34u NWvDUx5+mlSq6RcNekTKPWQBVQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFEvKuY8r DH5W7/Zva01nmiShcQoXMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY5RTcvNDZBQUQ2QjI5MDQwMTFFQUE2ODhCRTQ1QzRGOUFFMDIvREUyQzQ5MEVG RERBMTFGMDhBOUJERjAyNkY2RjU2QkMucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAPfHegDBADfHeowDQYJKoZIhvcNAQELBQADggEBAC45qzFx2uqR 66NCPSFxzY6ygo8OAYv4xTl39JLjOhN1nyBlGZEdBOXA+0Ov3VpYg/u1nP5tehb7 thmg6OEwLDil90G0MbgXRGC/yCfCNttYBBWPMFk7n37k3R6KprfElxpIuaw5RW1D eyiIpw6sWCCSX/XNdsLlj4uVMxELu2W5TvaXFspjHcRyMXgMq7P8BUvhpY54dKHX /3ELTu0l7r9OyEYFycHYzVGNGnYsWCRyqwE8UoxdFJ4OzhGBRUYpdtvdQ9yIt0V3 4emEqjiFmE5CLzc2eJpFHW5zxdfOjLDVr511LYQEp+UPiLWBCp5UxRBP1hVW4om5 J+rk2VbIrK8= -----END CERTIFICATE-----Generated at Tue Oct 27 04:38:09 2026 by rpki-client