$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/CF2B394C01EA11F190A04A823B6F56BC.roa File: CF2B394C01EA11F190A04A823B6F56BC.roa (raw, json) Hash identifier: rTvAf6dpPCKk56C1vD7o94oTi+zGUzL5wM5zHdMv5WY= Subject key identifier: 9B:BB:E5:03:13:E5:4E:32:C3:06:D2:69:EA:07:A7:FA:B5:42:A1:A8 Certificate issuer: /CN=A91FAB3C/serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C Certificate serial: 82 Authority key identifier: 82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/CF2B394C01EA11F190A04A823B6F56BC.roa Signing time: Sun 01 Mar 2026 16:14:48 +0000 ROA not before: Wed 04 Feb 2026 16:59:03 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 134489 IP address blocks: 192.188.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:29:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 130 (0x82) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FAB3C, serialNumber=826B4474BC6F4F3BE40B5E7511F105CAE7FE8C0C Validity Not Before: Feb 4 16:59:03 2026 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a465f8-14d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:26:49:6a:8e:de:18:bc:15:af:d8:8f:a7:80: a3:1f:86:f9:0e:33:7c:78:31:f3:36:68:55:d6:2b: 2a:29:87:2e:13:62:ec:c1:af:d2:d8:26:ff:80:07: a4:46:33:e8:bc:12:4b:77:a8:3b:6a:c9:97:f0:39: 5b:f9:20:24:53:b7:c2:35:36:00:0f:a9:15:c8:72: b4:2b:c1:c5:7a:4d:41:e6:8e:a8:df:c8:95:74:8f: 3d:79:72:87:53:9d:32:4e:9c:ba:f0:f8:55:38:e8: 81:ee:f2:f5:ae:0b:1c:0b:93:d9:a2:33:e4:f9:e0: 30:88:19:48:8d:a4:3a:dd:ab:7a:32:77:ec:45:bd: 4e:15:55:c8:c3:4b:85:41:d6:f0:fd:ec:92:3f:b7: 85:f5:aa:3f:db:da:a5:b8:40:a3:20:74:4c:45:db: e9:83:d7:aa:c4:39:e5:8f:9c:1a:38:a6:6a:66:70: da:3b:a3:b2:79:ad:21:70:d0:5c:37:4e:fa:ea:90: a3:34:ba:15:07:57:24:8b:97:8b:de:09:2d:a1:91: 71:4b:4c:c4:3e:29:e2:b0:73:85:08:34:7d:d0:6f: 53:e9:37:be:89:a6:34:71:d4:37:16:de:ca:76:26: e9:f3:1c:2d:08:22:3e:7e:7b:d3:e2:3e:32:19:94: d6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BB:E5:03:13:E5:4E:32:C3:06:D2:69:EA:07:A7:FA:B5:42:A1:A8 X509v3 Authority Key Identifier: keyid:82:6B:44:74:BC:6F:4F:3B:E4:0B:5E:75:11:F1:05:CA:E7:FE:8C:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/gmtEdLxvTzvkC151EfEFyuf-jAw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/gmtEdLxvTzvkC151EfEFyuf-jAw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAB3C/991EADFE694A11F0A7741A43C4F9AE02/CF2B394C01EA11F190A04A823B6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 192.188.86.0/24 Signature Algorithm: sha256WithRSAEncryption 08:d4:c8:f0:a9:d2:fb:84:f8:3f:74:55:19:91:15:71:4e:c7: 43:1b:9f:ff:2e:e7:d2:c3:91:cd:87:42:85:0a:2e:ff:14:8b: 8a:f3:74:0e:e1:d1:57:8c:84:1b:24:87:45:10:b4:57:63:4e: 86:61:f7:1d:1a:d6:bc:6f:e4:9d:48:4a:3a:d0:a7:e3:6b:60: 0c:e8:11:f4:45:ac:29:51:a1:9d:14:c2:91:05:8c:07:ee:e7: 69:26:e0:6d:0d:96:77:28:9e:8e:52:0c:ec:1c:fe:6b:56:9f: 95:58:4a:d9:3f:53:6c:d8:eb:11:62:8c:e5:74:cf:04:eb:4d: 22:d4:19:ef:72:5d:b6:5e:b8:e3:4f:74:d0:f5:78:f2:79:b5: 91:33:13:78:41:b4:f6:43:dc:ce:a2:95:ba:1d:b1:a7:a5:7c: ec:da:9f:41:31:55:90:00:4c:5a:54:6f:4a:3d:65:56:2b:6b: ee:e8:53:5d:6c:a0:71:03:87:32:e5:3f:35:46:ff:27:74:5e: 0f:5e:ac:11:bc:e5:41:2a:88:10:72:7c:98:66:0d:70:15:ee: 68:cc:f9:bf:54:16:95:78:7a:b7:24:75:a8:92:5d:b1:bd:09: ee:a7:7a:4e:3f:88:39:d8:81:90:39:93:82:ec:82:6c:98:9b: 81:92:fb:bd -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkFCM0MxMTAvBgNVBAUTKDgyNkI0NDc0QkM2RjRGM0JFNDBCNUU3NTExRjEwNUNB RTdGRThDMEMwHhcNMjYwMjA0MTY1OTAzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NjVmOC0xNGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsCZJao7eGLwVr9iPp4CjH4b5DjN8eDHzNmhV1isqKYcuE2Lswa/S2Cb/gAek RjPovBJLd6g7asmX8Dlb+SAkU7fCNTYAD6kVyHK0K8HFek1B5o6o38iVdI89eXKH U50yTpy68PhVOOiB7vL1rgscC5PZojPk+eAwiBlIjaQ63at6MnfsRb1OFVXIw0uF Qdbw/eySP7eF9ao/29qluECjIHRMRdvpg9eqxDnlj5waOKZqZnDaO6Oyea0hcNBc N0766pCjNLoVB1cki5eL3gktoZFxS0zEPinisHOFCDR90G9T6Te+iaY0cdQ3Ft7K dibp8xwtCCI+fnvT4j4yGZTWTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJu75QMT 5U4ywwbSaeoHp/q1QqGoMB8GA1UdIwQYMBaAFIJrRHS8b0875AtedRHxBcrn/owM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQUIzQy85OTFFQURGRTY5 NEExMUYwQTc3NDFBNDNDNEY5QUUwMi9nbXRFZEx4dlR6dmtDMTUxRWZFRnl1Zi1q QXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2dtdEVkTHh2VHp2a0MxNTFFZkVGeXVmLWpBdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkFCM0MvOTkxRUFERkU2OTRBMTFGMEE3NzQxQTQzQzRGOUFFMDIvQ0YyQjM5NEMw MUVBMTFGMTkwQTA0QTgyM0I2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwLxWMA0GCSqGSIb3DQEBCwUAA4IBAQAI1MjwqdL7hPg/dFUZkRVx TsdDG5//LufSw5HNh0KFCi7/FIuK83QO4dFXjIQbJIdFELRXY06GYfcdGta8b+Sd SEo60Kfja2AM6BH0RawpUaGdFMKRBYwH7udpJuBtDZZ3KJ6OUgzsHP5rVp+VWErZ P1Ns2OsRYozldM8E600i1Bnvcl22XrjjT3TQ9XjyebWRMxN4QbT2Q9zOopW6HbGn pXzs2p9BMVWQAExaVG9KPWVWK2vu6FNdbKBxA4cy5T81Rv8ndF4PXqwRvOVBKogQ cnyYZg1wFe5ozPm/VBaVeHq3JHWokl2xvQnup3pOP4g52IGQOZOC7IJsmJuBkvu9 -----END CERTIFICATE-----Generated at Wed Mar 4 11:31:04 2026 by rpki-client