$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/50DA994A29D411F1916B319D97833773.roa File: 50DA994A29D411F1916B319D97833773.roa (raw, json) Hash identifier: gmHEru1uu8y3YOU5nRC5sPjqCKvPX8MQZIxdZyPZ8m8= Subject key identifier: 66:B1:9A:EC:A6:16:D6:82:38:82:93:2C:97:A5:A1:B1:20:72:C4:64 Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 2E Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/50DA994A29D411F1916B319D97833773.roa Signing time: Fri 27 Mar 2026 14:14:36 +0000 ROA not before: Fri 27 Mar 2026 14:14:36 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 135357 IP address blocks: 206.161.216.0/24 maxlen: 24 206.161.217.0/24 maxlen: 24 206.161.218.0/24 maxlen: 24 207.226.136.0/24 maxlen: 24 207.226.137.0/24 maxlen: 24 207.226.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 17:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Mar 27 14:14:36 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69c690cc-b5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:96:c8:4a:db:f7:d2:72:f8:b2:76:5b:b0: d3:bd:0b:fb:d8:03:54:84:24:e0:ff:86:79:ff:bf: 6c:52:e8:b3:20:e4:96:c6:8a:6a:89:f7:c9:a8:b8: 76:13:c2:16:21:0f:23:4a:e9:f6:6a:96:4a:7e:a6: 28:1b:f6:b9:d2:a9:00:7a:74:a1:d9:2b:2b:6c:8c: 25:62:8a:8a:08:c4:04:28:51:99:40:f8:e8:59:69: 38:99:c9:8c:0a:b6:39:1d:94:64:3b:2c:d7:7d:5d: 74:90:ec:56:19:37:b9:59:aa:2f:5a:e8:28:94:42: a6:5f:00:08:c1:45:1c:a5:02:9f:b2:9a:a2:1f:f3: 43:e6:f3:e9:c0:92:a8:29:13:5a:8b:34:7b:cf:75: 15:7c:dc:40:ed:92:9e:c8:00:32:84:e2:60:3a:42: e2:44:81:e9:44:f7:b6:90:9d:ae:92:f5:0d:85:13: fe:52:ba:50:82:86:3a:9e:5f:85:b3:7f:02:75:7c: 47:e8:22:83:f8:37:dc:b1:f1:d3:6e:60:47:5b:17: 83:ba:91:7a:e8:c3:cf:69:41:25:69:94:0e:bd:79: d3:62:a8:15:1d:36:b0:1e:7a:ed:c8:4c:19:c2:4f: ca:33:b2:57:8f:a5:07:a4:da:9e:1c:fa:ff:3c:cb: 7d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B1:9A:EC:A6:16:D6:82:38:82:93:2C:97:A5:A1:B1:20:72:C4:64 X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/50DA994A29D411F1916B319D97833773.roa sbgp-ipAddrBlock: critical IPv4: 206.161.216.0-206.161.218.255 207.226.136.0-207.226.138.255 Signature Algorithm: sha256WithRSAEncryption 0a:3c:c2:cb:aa:da:96:1e:2b:9b:0e:0c:1a:af:f8:62:0e:0b: 06:f1:c3:42:2a:d0:a1:14:e2:0d:b9:cb:41:d0:cb:99:bf:06: c3:ef:f3:c3:c7:3b:16:3a:d5:4f:13:78:29:8a:87:e8:74:0b: 15:d3:9b:9d:de:86:93:27:c1:88:df:8b:25:2b:27:28:e1:e4: e3:af:58:68:9a:66:18:24:32:1d:19:cb:f3:29:a1:82:34:5b: 95:2f:00:40:c8:02:8a:43:67:95:5d:9b:65:f7:66:6b:73:58: ba:35:1a:0d:36:76:bc:f7:27:c0:ef:c4:e2:59:25:00:da:b8: 67:5c:3e:e2:37:4c:c0:a3:83:ff:d0:aa:73:04:7f:db:12:c7: 22:d4:f2:ff:7d:8a:16:98:e2:70:e6:f9:21:ca:56:53:d5:d1: b5:69:9d:6c:22:97:79:4d:ee:d2:f8:e8:d3:6d:3e:d4:e0:f9: 75:57:ca:88:66:58:a5:69:f1:7a:36:af:57:8a:41:14:8d:ec: 77:47:9e:0d:bb:ca:4d:25:7b:de:6a:70:d0:3e:0c:1d:aa:76: 99:a2:8e:de:e1:fb:09:6a:6e:a1:2a:b2:9e:b1:8b:b2:0e:70: 7d:d2:80:d8:d8:42:7f:53:d7:c3:7e:ae:b3:84:70:02:31:e4: 16:ba:98:e0 -----BEGIN CERTIFICATE----- MIIFUTCCBDmgAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky OTFFNjgzQTAeFw0yNjAzMjcxNDE0MzZaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzY5MGNjLWI1YTMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoUZbIStv30nL4snZbsNO9C/vYA1SEJOD/hnn/v2xS6LMg5JbGimqJ98mouHYT whYhDyNK6fZqlkp+pigb9rnSqQB6dKHZKytsjCViiooIxAQoUZlA+OhZaTiZyYwK tjkdlGQ7LNd9XXSQ7FYZN7lZqi9a6CiUQqZfAAjBRRylAp+ymqIf80Pm8+nAkqgp E1qLNHvPdRV83EDtkp7IADKE4mA6QuJEgelE97aQna6S9Q2FE/5SulCChjqeX4Wz fwJ1fEfoIoP4N9yx8dNuYEdbF4O6kXrow89pQSVplA69edNiqBUdNrAeeu3ITBnC T8ozslePpQek2p4c+v88y32fAgMBAAGjggJ2MIICcjAdBgNVHQ4EFgQUZrGa7KYW 1oI4gpMsl6WhsSByxGQwHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0 NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS81MERBOTk0QTI5 RDQxMUYxOTE2QjMxOUQ5NzgzMzc3My5yb2EwNQYIKwYBBQUHAQcBAf8EJjAkMCIE AgABMBwwDAMEA86h2AMEAM6h2jAMAwQDz+KIAwQAz+KKMA0GCSqGSIb3DQEBCwUA A4IBAQAKPMLLqtqWHiubDgwar/hiDgsG8cNCKtChFOINuctB0MuZvwbD7/PDxzsW OtVPE3gpiofodAsV05ud3oaTJ8GI34slKyco4eTjr1hommYYJDIdGcvzKaGCNFuV LwBAyAKKQ2eVXZtl92Zrc1i6NRoNNna89yfA78TiWSUA2rhnXD7iN0zAo4P/0Kpz BH/bEsci1PL/fYoWmOJw5vkhylZT1dG1aZ1sIpd5Te7S+OjTbT7U4Pl1V8qIZlil afF6Nq9XikEUjex3R54Nu8pNJXveanDQPgwdqnaZoo7e4fsJam6hKrKesYuyDnB9 0oDY2EJ/U9fDfq6zhHACMeQWupjg -----END CERTIFICATE-----Generated at Sat Mar 28 19:00:21 2026 by rpki-client