$ rpki-client -vvvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/D0227C4675E111F1AB3948A26FA30FBC.roa File: D0227C4675E111F1AB3948A26FA30FBC.roa (raw, json) Hash identifier: gvT92MJSyIfFzraP7LuCFSafjpEM74hg/zOAy+W0p8I= Subject key identifier: 6B:C8:C2:20:57:9E:8B:70:88:A2:4A:50:4B:6D:A9:49:93:D9:5F:EB Certificate issuer: /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A Certificate serial: 0109 Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A Authority info access: rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/D0227C4675E111F1AB3948A26FA30FBC.roa Signing time: Thu 03 Sep 2026 07:05:57 +0000 ROA not before: Thu 03 Sep 2026 07:05:57 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 9304 IP address blocks: 177.211.224.0/19 maxlen: 24 191.214.0.0/19 maxlen: 24 191.219.160.0/20 maxlen: 24 191.223.240.0/20 maxlen: 24 200.102.224.0/20 maxlen: 24 200.103.160.0/20 maxlen: 24 200.219.64.0/20 maxlen: 24 201.5.0.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 06:37:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 265 (0x109) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A Validity Not Before: Sep 3 07:05:57 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a991c55-549b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bd:ef:45:50:5c:e3:34:5d:1a:6b:a7:86:0e: 00:d6:39:61:91:5b:c1:1d:36:e1:d3:ed:13:39:0e: 1b:56:62:10:ed:88:7d:11:d4:c3:f9:ad:b8:91:42: f3:a5:9e:bf:30:f9:12:9e:d1:26:df:b5:35:fa:b2: 2b:39:09:a3:42:69:ca:7e:b5:37:56:67:04:55:3d: 37:68:73:ee:48:72:77:8f:ad:78:f7:bb:00:aa:53: 3b:c6:24:e2:ec:68:32:a6:7b:98:d6:3b:d2:3c:62: 7f:c1:7c:e4:b9:4a:8d:91:87:a1:8a:e6:b6:23:da: 99:32:94:98:7a:c5:c4:8e:86:c3:01:f2:05:9c:99: 88:c5:98:ac:91:46:34:23:fe:7c:99:74:2b:17:3e: 4a:b6:21:b3:8e:e2:78:88:3b:5e:91:a7:73:ec:57: 4a:16:e9:18:76:92:43:2d:bc:a2:6b:be:a0:94:34: fc:25:0f:8e:2f:1d:2a:85:a1:e9:f3:d1:95:1a:fd: 88:93:84:b0:c2:b9:f8:b3:6f:87:f9:fe:dd:e5:5f: 6c:ee:f7:ce:d5:27:b6:de:9e:b2:85:af:e9:3a:24: 40:5b:68:c0:27:b6:12:0d:90:80:b6:a4:e3:f8:93: 17:17:6f:84:f0:86:88:56:b8:77:a2:7f:01:6c:00: 05:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C8:C2:20:57:9E:8B:70:88:A2:4A:50:4B:6D:A9:49:93:D9:5F:EB X509v3 Authority Key Identifier: keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/D0227C4675E111F1AB3948A26FA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 177.211.224.0/19 191.214.0.0/19 191.219.160.0/20 191.223.240.0/20 200.102.224.0/20 200.103.160.0/20 200.219.64.0/20 201.5.0.0/19 Signature Algorithm: sha256WithRSAEncryption 5f:db:d0:31:14:44:d8:ea:07:d7:b7:7f:7d:15:1b:9b:10:13: 05:b9:3d:02:64:8c:c4:11:7c:9e:c4:a0:d9:db:93:dd:04:07: f4:ce:a1:7f:fb:ec:79:86:95:9e:10:de:be:ca:e2:1b:c1:49: 07:c0:7f:da:c9:b6:65:ff:30:ad:98:06:50:b1:17:a0:d8:c5: 26:66:ff:38:82:2b:73:12:81:97:cf:4e:85:74:56:f5:fd:7b: 16:83:0c:00:50:bc:e5:2d:78:8c:2e:d2:e3:dd:fd:a3:84:f2: 67:0d:12:8f:2d:c4:f0:bf:4c:81:30:e2:5c:2b:a5:f1:34:67: 7e:72:f4:a2:bf:5f:7b:61:04:32:54:f9:0f:f3:31:07:e4:3b: 7d:26:0b:79:59:d3:54:80:fe:9b:9a:2d:bb:64:46:8c:a3:73: d3:b4:d0:0b:bb:22:dd:08:7f:c5:76:6b:8d:0f:e6:5a:ca:db: 48:89:fc:29:fc:9c:45:6c:4c:8e:0d:d6:a1:70:77:d8:b7:dc: ea:e8:a9:33:7e:e9:14:6e:cf:d2:5f:b8:4a:63:dc:4c:c3:3c: cf:83:fd:f9:29:d0:9d:8d:92:e2:7c:05:6d:3a:90:12:18:9a: f3:b9:a0:1a:b6:7c:2a:c1:d1:d2:59:1a:d1:00:6a:f0:37:95: 0d:61:fb:31 -----BEGIN CERTIFICATE----- MIIFZjCCBE6gAwIBAgICAQkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA4OUIxMTAvBgNVBAUTKDlCQzQ4REFDMTAwRTc1NEVFOEUxQ0E2QUJBOTQyNEUz M0QzNURFNkEwHhcNMjYwOTAzMDcwNTU3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk5MWM1NS01NDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAur3vRVBc4zRdGmunhg4A1jlhkVvBHTbh0+0TOQ4bVmIQ7Yh9EdTD+a24kULz pZ6/MPkSntEm37U1+rIrOQmjQmnKfrU3VmcEVT03aHPuSHJ3j61497sAqlM7xiTi 7GgypnuY1jvSPGJ/wXzkuUqNkYehiua2I9qZMpSYesXEjobDAfIFnJmIxZiskUY0 I/58mXQrFz5KtiGzjuJ4iDtekadz7FdKFukYdpJDLbyia76glDT8JQ+OLx0qhaHp 89GVGv2Ik4Swwrn4s2+H+f7d5V9s7vfO1Se23p6yha/pOiRAW2jAJ7YSDZCAtqTj +JMXF2+E8IaIVrh3on8BbAAF5QIDAQABo4ICijCCAoYwHQYDVR0OBBYEFGvIwiBX notwiKJKUEttqUmT2V/rMB8GA1UdIwQYMBaAFJvEjawQDnVO6OHKarqUJOM9Nd5q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDg5Qi9ENTRBMkUzRTAw Q0IxMUYxQkY3NDkxMDM4RUVFNTI4RS9tOFNOckJBT2RVN280Y3BxdXBRazR6MDEz bW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I0QTFCRUE2MUQ2NjExRTJCMkNEOEI3Qzcy RkQxRkYyL204U05yQkFPZFU3bzRjcHF1cFFrNHowMTNtby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA4OUIvRDU0QTJFM0UwMENCMTFGMUJGNzQ5MTAzOEVFRTUyOEUvRDAyMjdDNDY3 NUUxMTFGMUFCMzk0OEEyNkZBMzBGQkMucm9hMEkGCCsGAQUFBwEHAQH/BDowODA2 BAIAATAwAwQFsdPgAwQFv9YAAwQEv9ugAwQEv9/wAwQEyGbgAwQEyGegAwQEyNtA AwQFyQUAMA0GCSqGSIb3DQEBCwUAA4IBAQBf29AxFETY6gfXt399FRubEBMFuT0C ZIzEEXyexKDZ25PdBAf0zqF/++x5hpWeEN6+yuIbwUkHwH/aybZl/zCtmAZQsReg 2MUmZv84gitzEoGXz06FdFb1/XsWgwwAULzlLXiMLtLj3f2jhPJnDRKPLcTwv0yB MOJcK6XxNGd+cvSiv197YQQyVPkP8zEH5Dt9Jgt5WdNUgP6bmi27ZEaMo3PTtNAL uyLdCH/FdmuND+ZayttIifwp/JxFbEyODdahcHfYt9zq6KkzfukUbs/SX7hKY9xM wzzPg/35KdCdjZLifAVtOpASGJrzuaAatnwqwdHSWRrRAGrwN5UNYfsx -----END CERTIFICATE-----Generated at Sat Sep 26 20:48:10 2026 by rpki-client