$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2447645A29D711F19B6521AE99833773.roa File: 2447645A29D711F19B6521AE99833773.roa (raw, json) Hash identifier: bTkwjW+MQMWhkNVOvjMadZL5PfP34DVI/cxNUOw2IwM= Subject key identifier: F8:3D:AE:36:34:08:ED:E7:D6:D4:D1:3C:04:1B:69:83:A6:C3:B8:C8 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 1D Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2447645A29D711F19B6521AE99833773.roa Signing time: Fri 27 Mar 2026 12:19:03 +0000 ROA not before: Fri 27 Mar 2026 12:19:03 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 27947 IP address blocks: 207.226.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 17:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29 (0x1d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Mar 27 12:19:03 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69c675b7-d947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:dd:13:dd:77:8d:de:68:4f:f3:d1:35:69:b7: 4c:72:a1:3a:14:f3:de:ee:99:7b:ff:ec:fd:b3:22: 18:1e:af:4a:3e:14:b8:90:e8:15:be:b1:39:9b:aa: 37:33:3f:46:b1:7a:d6:24:64:17:2a:1e:cc:0f:b9: 94:30:7d:50:5a:19:67:84:f4:80:9a:bd:c5:ee:03: 4e:83:e4:68:e7:cc:75:03:df:0d:72:c3:85:b8:36: 65:2f:13:8e:a5:3d:15:0a:dd:10:24:be:4a:f3:73: 3a:11:25:65:23:61:a9:8b:6a:98:46:95:ea:cf:c4: 24:c1:15:9f:b5:ac:11:a3:8a:7b:af:4a:19:78:ad: 9b:74:cf:55:78:a7:76:cb:41:b0:cb:82:10:ea:c4: 31:3c:07:59:65:88:bf:59:9d:ea:f7:88:28:1d:30: 3a:2e:4f:65:87:42:2c:6e:ea:ba:2e:c3:fe:43:a0: 47:87:51:68:52:c0:0d:c8:5f:5a:2b:fc:63:77:fa: aa:a6:8a:80:08:58:ec:ae:05:9d:c3:91:95:41:5f: 07:2b:e9:43:f4:e4:f4:d1:5a:e7:d3:5f:fd:8c:df: ad:f2:e7:84:1a:70:e3:c8:a5:b0:96:be:22:66:2b: fb:88:7c:22:5f:cb:9b:51:e6:d6:14:90:62:06:fa: 83:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:3D:AE:36:34:08:ED:E7:D6:D4:D1:3C:04:1B:69:83:A6:C3:B8:C8 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/2447645A29D711F19B6521AE99833773.roa sbgp-ipAddrBlock: critical IPv4: 207.226.25.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:bb:7c:fe:14:c1:f9:86:fa:94:91:78:77:16:f8:76:6a:5c: ec:f0:0d:b2:85:54:5a:5f:2b:13:57:99:93:8b:af:61:55:8b: 85:1f:49:97:8e:6f:68:82:67:26:fc:6b:06:32:eb:06:eb:5c: fe:19:16:a7:91:d4:4d:5b:c7:5d:29:0d:e2:ef:e6:55:b5:a9: 4d:f6:a5:0d:fc:b9:45:66:8e:b2:14:8e:7d:60:3c:7a:49:39: 50:03:6d:09:94:af:ef:bc:51:e2:ae:2f:e1:5b:f8:5b:6a:5e: 7e:51:34:b6:f3:7c:b4:4a:f4:23:b6:87:40:f0:76:65:5b:c4: 32:00:2c:8b:16:b4:32:b5:41:36:7f:07:2e:c5:fd:64:58:1c: 4f:6a:c2:bd:a3:52:14:f3:c0:1b:47:3a:44:69:3a:af:f1:3d: 29:a1:18:6e:bc:62:90:9b:24:ed:fb:cd:b8:f8:b0:fd:a3:b6: e4:0d:d9:ad:6e:7b:d8:04:7f:ea:00:b8:95:4e:d7:8a:d3:fc: a0:fd:68:3d:0b:34:1d:56:32:ab:28:4b:bb:af:fe:80:7d:94: 41:85:46:1d:b9:63:68:06:ee:3a:9f:20:9b:07:91:83:e7:d4: ee:a8:34:91:6a:2b:20:73:53:b3:58:fe:2c:04:9d:df:16:9d: 68:21:39:39 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBHTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky OTFFNjgzQTAeFw0yNjAzMjcxMjE5MDNaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzY3NWI3LWQ5NDcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCK3RPdd43eaE/z0TVpt0xyoToU897umXv/7P2zIhger0o+FLiQ6BW+sTmbqjcz P0axetYkZBcqHswPuZQwfVBaGWeE9ICavcXuA06D5GjnzHUD3w1yw4W4NmUvE46l PRUK3RAkvkrzczoRJWUjYamLaphGlerPxCTBFZ+1rBGjinuvShl4rZt0z1V4p3bL QbDLghDqxDE8B1lliL9Zner3iCgdMDouT2WHQixu6rouw/5DoEeHUWhSwA3IX1or /GN3+qqmioAIWOyuBZ3DkZVBXwcr6UP05PTRWufTX/2M363y54QacOPIpbCWviJm K/uIfCJfy5tR5tYUkGIG+oPrAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU+D2uNjQI 7efW1NE8BBtpg6bDuMgwHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0 NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS8yNDQ3NjQ1QTI5 RDcxMUYxOUI2NTIxQUU5OTgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADP4hkwDQYJKoZIhvcNAQELBQADggEBAI27fP4UwfmG+pSReHcW+HZq XOzwDbKFVFpfKxNXmZOLr2FVi4UfSZeOb2iCZyb8awYy6wbrXP4ZFqeR1E1bx10p DeLv5lW1qU32pQ38uUVmjrIUjn1gPHpJOVADbQmUr++8UeKuL+Fb+FtqXn5RNLbz fLRK9CO2h0DwdmVbxDIALIsWtDK1QTZ/By7F/WRYHE9qwr2jUhTzwBtHOkRpOq/x PSmhGG68YpCbJO37zbj4sP2jtuQN2a1ue9gEf+oAuJVO14rT/KD9aD0LNB1WMqso S7uv/oB9lEGFRh25Y2gG7jqfIJsHkYPn1O6oNJFqKyBzU7NY/iwEnd8WnWghOTk= -----END CERTIFICATE-----Generated at Sat Mar 28 19:00:22 2026 by rpki-client