$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/DE2C490EFDDA11F08A9BDF026F6F56BC.roa File: DE2C490EFDDA11F08A9BDF026F6F56BC.roa (raw, json) Hash identifier: Z3tocqDvxgNFiVLEFGrW231lwMOw2lUJRT3l/w/+dQM= Subject key identifier: 37:79:06:21:83:5F:52:9B:7F:6B:03:02:2D:8D:33:90:33:5F:A0:8A Certificate issuer: /CN=A91F69E7/serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Certificate serial: 0CFC Authority key identifier: 5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/DE2C490EFDDA11F08A9BDF026F6F56BC.roa Signing time: Fri 21 Aug 2026 06:01:06 +0000 ROA not before: Fri 30 Jan 2026 12:54:52 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 131275 IP address blocks: 223.29.232.0/24 maxlen: 24 223.29.233.0/24 maxlen: 24 223.29.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:34:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3324 (0xcfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F69E7, serialNumber=5E105E0EF90D18B9FA4B88FAE3410C6A1DEF7190 Validity Not Before: Jan 30 12:54:52 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a87e9a2-522c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a7:69:54:d3:6d:73:63:ab:bc:12:43:c5:52: cd:d2:41:f9:6a:bd:e9:08:ea:95:b6:7e:2a:b4:5e: 40:83:a3:fa:c6:89:78:ba:45:a1:38:2f:d5:f7:2b: 46:a7:37:01:49:0e:22:de:b5:0e:a9:33:3d:1a:75: f1:d3:06:1d:42:13:ea:b5:da:06:f5:10:9f:b0:a8: 79:a7:c5:cf:ad:6a:ee:f7:22:4f:0f:66:01:4f:41: 62:57:68:b2:92:32:49:66:b4:ee:25:59:7e:d3:d2: 3a:48:44:18:36:90:bb:93:7f:69:85:78:53:62:e3: be:50:49:5f:34:5a:b1:5a:d4:e2:b9:b8:e4:39:63: 6a:c9:81:d3:3c:1a:71:6e:01:82:e9:45:6d:04:94: db:4a:4a:80:aa:77:e3:c3:1c:55:28:2d:87:ef:18: 5e:75:52:95:e6:37:3a:36:6c:c0:2b:e4:08:6c:2e: f2:c5:aa:35:b0:93:da:6a:8d:8d:26:30:a5:33:02: 0a:3f:49:eb:cf:5b:2e:78:f6:b7:4c:c6:cd:3c:32: 53:ae:57:79:a4:84:63:51:40:86:5f:a1:28:09:ae: a0:b8:eb:74:72:d6:4e:a3:57:e8:f2:98:e6:6d:f7: cf:e1:0c:e7:a6:a1:98:6b:45:14:64:b0:41:73:b9: 0c:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:79:06:21:83:5F:52:9B:7F:6B:03:02:2D:8D:33:90:33:5F:A0:8A X509v3 Authority Key Identifier: keyid:5E:10:5E:0E:F9:0D:18:B9:FA:4B:88:FA:E3:41:0C:6A:1D:EF:71:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/XhBeDvkNGLn6S4j640EMah3vcZA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XhBeDvkNGLn6S4j640EMah3vcZA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F69E7/46AAD6B2904011EAA688BE45C4F9AE02/DE2C490EFDDA11F08A9BDF026F6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 223.29.232.0-223.29.234.255 Signature Algorithm: sha256WithRSAEncryption 1a:d3:c7:91:f1:59:02:b0:ca:94:8f:24:8f:db:16:e8:29:15: c6:9c:04:4b:d2:22:36:c8:6d:da:84:68:53:0f:03:7e:63:e2: 24:7a:d1:f8:b8:0a:c8:23:5d:b8:32:85:74:74:5c:81:f9:6f: d8:1b:7d:ef:b1:85:54:90:ec:ae:53:53:b4:5f:0f:da:c3:96: 27:b3:56:1a:6f:35:4e:e2:71:cb:a5:0a:d9:ef:cb:7d:47:c4: 3c:11:cb:ef:e5:9f:f6:0e:6b:27:e1:65:83:03:75:d3:cd:fd: d2:78:22:33:cb:5f:94:5a:5f:a8:43:05:27:69:0a:6b:29:8f: 07:fe:2b:13:32:eb:a2:15:dc:18:5c:ac:7a:02:5e:e6:cd:92: 33:f0:c9:d1:fd:1f:ce:fe:2e:3d:8f:a2:f6:05:a5:ce:77:a0: f7:4e:8b:bd:fc:2c:9d:00:72:d1:a9:43:46:f6:bd:49:9e:ea: cf:3e:e2:91:c3:4b:2f:a3:1d:3b:e6:42:54:92:cf:63:ea:ec: 1f:71:15:29:92:33:dd:83:dd:3b:e2:86:42:9e:6e:01:5c:e3: 9c:a9:83:09:b2:43:a1:c2:d1:14:c8:8b:4f:67:b1:53:b7:f4: 15:9e:6b:56:2d:d0:0b:95:c9:bb:d7:8d:3c:78:18:e5:4d:c0: 5b:1e:b2:4c -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICDPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjY5RTcxMTAvBgNVBAUTKDVFMTA1RTBFRjkwRDE4QjlGQTRCODhGQUUzNDEwQzZB MURFRjcxOTAwHhcNMjYwMTMwMTI1NDUyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTg3ZTlhMi01MjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtadpVNNtc2OrvBJDxVLN0kH5ar3pCOqVtn4qtF5Ag6P6xol4ukWhOC/V9ytG pzcBSQ4i3rUOqTM9GnXx0wYdQhPqtdoG9RCfsKh5p8XPrWru9yJPD2YBT0FiV2iy kjJJZrTuJVl+09I6SEQYNpC7k39phXhTYuO+UElfNFqxWtTiubjkOWNqyYHTPBpx bgGC6UVtBJTbSkqAqnfjwxxVKC2H7xhedVKV5jc6NmzAK+QIbC7yxao1sJPaao2N JjClMwIKP0nrz1suePa3TMbNPDJTrld5pIRjUUCGX6EoCa6guOt0ctZOo1fo8pjm bffP4QznpqGYa0UUZLBBc7kMgQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFDd5BiGD X1Kbf2sDAi2NM5AzX6CKMB8GA1UdIwQYMBaAFF4QXg75DRi5+kuI+uNBDGod73GQ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNjlFNy80NkFBRDZCMjkw NDAxMUVBQTY4OEJFNDVDNEY5QUUwMi9YaEJlRHZrTkdMbjZTNGo2NDBFTWFoM3Zj WkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hoQmVEdmtOR0xuNlM0ajY0MEVNYWgzdmNaQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjY5RTcvNDZBQUQ2QjI5MDQwMTFFQUE2ODhCRTQ1QzRGOUFFMDIvREUyQzQ5MEVG RERBMTFGMDhBOUJERjAyNkY2RjU2QkMucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBAPfHegDBADfHeowDQYJKoZIhvcNAQELBQADggEBABrTx5HxWQKw ypSPJI/bFugpFcacBEvSIjbIbdqEaFMPA35j4iR60fi4CsgjXbgyhXR0XIH5b9gb fe+xhVSQ7K5TU7RfD9rDliezVhpvNU7icculCtnvy31HxDwRy+/ln/YOayfhZYMD ddPN/dJ4IjPLX5RaX6hDBSdpCmspjwf+KxMy66IV3BhcrHoCXubNkjPwydH9H87+ Lj2PovYFpc53oPdOi738LJ0ActGpQ0b2vUme6s8+4pHDSy+jHTvmQlSSz2Pq7B9x FSmSM92D3TvihkKebgFc45ypgwmyQ6HC0RTIi09nsVO39BWea1Yt0AuVybvXjTx4 GOVNwFseskw= -----END CERTIFICATE-----Generated at Fri Sep 11 09:05:50 2026 by rpki-client