$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/E7491B5C29D111F18231948697833773.roa File: E7491B5C29D111F18231948697833773.roa (raw, json) Hash identifier: BFFEi9ufTmCq18ajvoBLUoVzM2eGlPTiY5+08StrtsA= Subject key identifier: 9C:A5:4A:93:BB:08:D3:CF:E7:C5:64:29:2E:98:E7:ED:62:1E:C6:CC Certificate issuer: /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Certificate serial: 13 Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/E7491B5C29D111F18231948697833773.roa Signing time: Fri 27 Mar 2026 11:41:33 +0000 ROA not before: Fri 27 Mar 2026 11:41:33 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 29944 IP address blocks: 209.9.224.0/20 maxlen: 20 209.9.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 17:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A Validity Not Before: Mar 27 11:41:33 2026 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69c66ced-d60b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:29:6f:4c:4a:f4:5c:89:49:5e:0c:be:4b:3a: 0e:65:2f:6e:0d:b9:5f:63:60:f8:89:99:0b:84:44: fe:c7:65:8c:63:5d:cd:ba:90:59:52:13:f9:cf:61: ba:09:52:63:64:09:45:3a:2b:aa:9c:34:0e:4c:0c: d8:a0:43:e0:96:02:f2:87:8f:c7:4a:a9:5d:aa:f8: 6a:ce:a6:78:f7:3e:d5:94:50:17:95:6b:da:35:a9: dd:ea:6e:45:dd:11:16:30:6e:2b:97:5c:75:04:b6: 2a:b3:80:89:78:b1:5e:48:53:26:91:4e:9f:27:d0: 41:c8:22:58:08:17:92:e2:c7:63:61:c5:5f:54:38: c7:fc:e7:0e:ba:74:b0:af:f7:4c:ee:22:47:16:8a: 01:ff:aa:ce:9f:f9:79:ef:40:53:4c:60:69:8e:c7: a8:f1:b7:1a:d9:8a:2a:4b:a3:b4:6e:49:8a:d4:f8: a1:a8:d6:de:4a:67:6e:52:39:2b:7d:40:f7:99:e7: ac:a6:48:ad:e3:3f:d2:b5:04:da:04:8c:ae:df:55: a3:21:1d:85:06:3d:07:23:3a:cf:ae:27:bc:96:26: bd:9d:bd:c5:f0:88:78:3a:a3:75:4b:05:23:a4:d8: 4f:35:cd:08:ca:c8:0f:1e:1d:99:12:ee:d6:74:c0: bf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A5:4A:93:BB:08:D3:CF:E7:C5:64:29:2E:98:E7:ED:62:1E:C6:CC X509v3 Authority Key Identifier: keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/E7491B5C29D111F18231948697833773.roa sbgp-ipAddrBlock: critical IPv4: 209.9.224.0/20 Signature Algorithm: sha256WithRSAEncryption bf:5d:2a:0d:4e:45:ea:21:6a:9a:b9:6e:2d:77:ad:86:1b:2d: ea:13:3b:d5:1d:c7:59:fa:33:9f:88:f3:87:9d:73:2a:ca:bb: 65:75:ab:c3:c0:05:24:f9:25:9e:36:82:02:97:37:9b:0c:f8: f7:b6:83:57:38:99:b6:31:32:77:f6:c1:a5:e9:ec:3c:00:54: 7f:14:ab:2c:1b:5d:1d:ad:06:dc:1b:9d:1c:5c:b6:d5:08:61: bd:38:8e:fd:90:6f:9f:f3:d1:0c:9f:19:62:d8:99:4a:d2:e3: f5:ff:de:da:35:f3:67:39:4b:f5:bc:5f:17:27:21:01:6f:f2: 74:d7:44:27:95:d4:d6:c7:b5:38:6c:6f:0c:b9:06:be:55:78: 53:48:67:cb:1f:80:02:65:d2:d2:f4:ba:6a:1f:58:96:f7:d4: d4:3f:4d:11:66:91:3e:ac:a7:65:f3:44:8d:a9:39:3b:26:1c: 7d:73:32:59:9a:a7:e0:01:1e:30:e1:39:a7:e8:91:0e:67:0a: 6d:25:c8:c7:ab:3d:26:7d:64:3b:fa:0c:42:25:aa:5d:a0:70: fb:91:ec:68:b7:02:34:8d:33:54:2f:45:33:d7:cd:bf:01:e2: 11:fe:b8:15:f7:12:0b:f3:e3:b2:f6:ef:f1:08:9f:3e:ef:ae: 9f:64:79:01 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz MDRBOTExMC8GA1UEBRMoM0Q3QjE1QkQ3N0Q5Qjk3NEUzNzM1OERBNzU0REZFQTky OTFFNjgzQTAeFw0yNjAzMjcxMTQxMzNaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzY2Y2VkLWQ2MGIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCoKW9MSvRciUleDL5LOg5lL24NuV9jYPiJmQuERP7HZYxjXc26kFlSE/nPYboJ UmNkCUU6K6qcNA5MDNigQ+CWAvKHj8dKqV2q+GrOpnj3PtWUUBeVa9o1qd3qbkXd ERYwbiuXXHUEtiqzgIl4sV5IUyaRTp8n0EHIIlgIF5Lix2NhxV9UOMf85w66dLCv 90zuIkcWigH/qs6f+XnvQFNMYGmOx6jxtxrZiipLo7RuSYrU+KGo1t5KZ25SOSt9 QPeZ56ymSK3jP9K1BNoEjK7fVaMhHYUGPQcjOs+uJ7yWJr2dvcXwiHg6o3VLBSOk 2E81zQjKyA8eHZkS7tZ0wL+pAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUnKVKk7sI 08/nxWQpLpjn7WIexswwHwYDVR0jBBgwFoAUPXsVvXfZuXTjc1jadU3+qSkeaDow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTMwNEE5L0ZEMzcyRTRBMjk0 NTExRjFBN0FBM0VCRDg0RUU1MjhFL1BYc1Z2WGZadVhUamMxamFkVTMtcVNrZWFE by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUFhzVnZYZlp1WFRqYzFqYWRVMy1xU2tlYURvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz MDRBOS9GRDM3MkU0QTI5NDUxMUYxQTdBQTNFQkQ4NEVFNTI4RS9FNzQ5MUI1QzI5 RDExMUYxODIzMTk0ODY5NzgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBATRCeAwDQYJKoZIhvcNAQELBQADggEBAL9dKg1OReohapq5bi13rYYb LeoTO9Udx1n6M5+I84edcyrKu2V1q8PABST5JZ42ggKXN5sM+Pe2g1c4mbYxMnf2 waXp7DwAVH8UqywbXR2tBtwbnRxcttUIYb04jv2Qb5/z0QyfGWLYmUrS4/X/3to1 82c5S/W8XxcnIQFv8nTXRCeV1NbHtThsbwy5Br5VeFNIZ8sfgAJl0tL0umofWJb3 1NQ/TRFmkT6sp2XzRI2pOTsmHH1zMlmap+ABHjDhOafokQ5nCm0lyMerPSZ9ZDv6 DEIlql2gcPuR7Gi3AjSNM1QvRTPXzb8B4hH+uBX3Egvz47L27/EInz7vrp9keQE= -----END CERTIFICATE-----Generated at Sat Mar 28 18:55:05 2026 by rpki-client