$ rpki-client -vvf rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/A7FBA00E778811EDAE39280CC4F9AE02.roa File: A7FBA00E778811EDAE39280CC4F9AE02.roa (raw, json) Hash identifier: NtIL0Ds6f0ZS7MHa9CMEFQcx6i11Pda/8hAwPCcExQg= Subject key identifier: 5C:07:4E:8A:8C:2A:62:BA:EC:27:03:F4:B5:45:4C:11:60:0E:7F:5A Certificate issuer: /CN=A91342C5/serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Certificate serial: 0457 Authority key identifier: 85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/A7FBA00E778811EDAE39280CC4F9AE02.roa Signing time: Sun 19 Apr 2026 00:33:02 +0000 ROA not before: Sun 19 Apr 2026 00:33:02 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 142005 IP address blocks: 64.25.32.0/20 maxlen: 24 206.127.144.0/20 maxlen: 24 209.35.96.0/23 maxlen: 24 209.35.114.0/23 maxlen: 24 209.35.156.0/23 maxlen: 24 209.35.188.0/23 maxlen: 24 216.107.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 00:22:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1111 (0x457) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91342C5, serialNumber=85F2BAF1B7DF1DAA8C88AB6C5E78C1FCC3F78D08 Validity Not Before: Apr 19 00:33:02 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69e422be-93dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:be:bf:67:29:fb:e2:c8:6b:c4:1e:33:af:e9: d2:3e:96:d5:5c:80:82:b3:fe:23:3a:c4:51:cf:c3: 3f:c8:7a:42:4e:1f:23:ed:70:74:64:82:4e:85:15: bd:c0:d8:4a:44:ca:55:93:ad:01:c7:8f:1c:71:f1: 5f:a5:fe:fa:6a:39:4b:76:26:54:a0:79:23:eb:bd: 74:83:c0:a5:dd:3f:33:b6:7f:2b:ce:80:aa:f9:13: 0d:41:b3:d1:5e:db:99:48:12:6f:9d:13:37:d1:54: 50:bc:63:6c:69:89:bb:b9:54:52:e4:a3:ba:ec:4e: 17:d7:1a:0b:c7:c0:87:2e:47:9a:bd:c9:da:88:13: 6e:dc:54:e4:79:9f:cc:a1:2e:a5:95:09:e4:ca:e6: 8d:9d:a9:9e:ad:ac:97:e3:0e:29:40:06:86:f3:4f: 9c:22:44:f3:6e:85:73:ba:e3:73:31:b8:c2:70:23: 19:f5:14:5d:cd:33:34:e1:b7:13:e8:36:b1:e8:27: 60:ad:24:04:c6:bc:6b:62:45:fc:87:59:3e:d0:6a: bb:a9:cc:83:d5:99:5c:e1:d5:67:a8:f3:bd:96:3f: e6:4b:56:80:67:c4:ce:e3:7a:d7:7f:59:7a:44:34: ea:fc:a1:77:e7:57:73:cd:29:8d:d4:3a:f5:63:ec: b2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:07:4E:8A:8C:2A:62:BA:EC:27:03:F4:B5:45:4C:11:60:0E:7F:5A X509v3 Authority Key Identifier: keyid:85:F2:BA:F1:B7:DF:1D:AA:8C:88:AB:6C:5E:78:C1:FC:C3:F7:8D:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/hfK68bffHaqMiKtsXnjB_MP3jQg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hfK68bffHaqMiKtsXnjB_MP3jQg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91342C5/1F404E30A4E911ECAF3FB152C4F9AE02/A7FBA00E778811EDAE39280CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 64.25.32.0/20 206.127.144.0/20 209.35.96.0/23 209.35.114.0/23 209.35.156.0/23 209.35.188.0/23 216.107.240.0/20 Signature Algorithm: sha256WithRSAEncryption 22:d8:5e:f8:e2:ea:25:d3:e5:9f:57:cd:44:25:64:a4:cd:42: 72:5a:c1:d7:18:63:ca:ba:41:08:f0:2d:05:1d:e8:f3:43:7c: fb:1c:39:6a:47:f3:68:92:9f:0a:47:06:83:79:65:c8:6b:ab: ac:23:c8:f9:0a:83:de:e3:c6:04:ba:ca:e2:dd:36:e9:af:90: 7c:fb:7c:f3:fa:6d:ee:f6:8b:c6:5a:37:37:20:f2:c5:cd:1c: 62:3f:42:ec:1c:28:48:6e:96:68:2f:79:e0:34:af:8e:85:32: b8:bf:d1:9d:60:f7:9b:b6:ee:a6:dd:a4:cb:be:26:02:b5:93: b6:6a:c2:a5:e4:2e:3b:f2:1f:2c:96:ef:c0:86:0f:3a:d9:ae: df:0b:e4:6f:50:38:30:c7:89:aa:de:83:5a:7b:6e:ad:a2:9f: bc:3f:20:32:5b:ac:c3:32:eb:db:c5:39:20:fe:70:b0:3d:4e: 46:bd:1f:1b:46:6e:55:35:bf:69:53:ed:54:2e:4f:6e:76:c3: 06:05:e3:48:9d:af:0d:bb:a5:04:e0:3e:e0:07:53:73:ba:6a: 32:aa:f5:92:ac:03:cd:29:c0:18:e4:89:93:f6:2b:27:1e:56: 11:f8:97:42:46:2b:2a:4f:0b:9e:09:68:06:35:69:15:eb:50: 94:0c:aa:64 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICBFcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzQyQzUxMTAvBgNVBAUTKDg1RjJCQUYxQjdERjFEQUE4Qzg4QUI2QzVFNzhDMUZD QzNGNzhEMDgwHhcNMjYwNDE5MDAzMzAyWhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWU0MjJiZS05M2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnL6/Zyn74shrxB4zr+nSPpbVXICCs/4jOsRRz8M/yHpCTh8j7XB0ZIJOhRW9 wNhKRMpVk60Bx48ccfFfpf76ajlLdiZUoHkj6710g8Cl3T8ztn8rzoCq+RMNQbPR XtuZSBJvnRM30VRQvGNsaYm7uVRS5KO67E4X1xoLx8CHLkeavcnaiBNu3FTkeZ/M oS6llQnkyuaNnamerayX4w4pQAaG80+cIkTzboVzuuNzMbjCcCMZ9RRdzTM04bcT 6Dax6CdgrSQExrxrYkX8h1k+0Gq7qcyD1Zlc4dVnqPO9lj/mS1aAZ8TO43rXf1l6 RDTq/KF351dzzSmN1Dr1Y+yyFwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFFwHToqM KmK67CcD9LVFTBFgDn9aMB8GA1UdIwQYMBaAFIXyuvG33x2qjIirbF54wfzD940I MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDJDNS8xRjQwNEUzMEE0 RTkxMUVDQUYzRkIxNTJDNEY5QUUwMi9oZks2OGJmZkhhcU1pS3RzWG5qQl9NUDNq UWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hmSzY4YmZmSGFxTWlLdHNYbmpCX01QM2pRZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzQyQzUvMUY0MDRFMzBBNEU5MTFFQ0FGM0ZCMTUyQzRGOUFFMDIvQTdGQkEwMEU3 Nzg4MTFFREFFMzkyODBDQzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQEQBkgAwQEzn+QAwQB0SNgAwQB0SNyAwQB0SOcAwQB0SO8AwQE2Gvw MA0GCSqGSIb3DQEBCwUAA4IBAQAi2F744uol0+WfV81EJWSkzUJyWsHXGGPKukEI 8C0FHejzQ3z7HDlqR/Nokp8KRwaDeWXIa6usI8j5CoPe48YEusri3Tbpr5B8+3zz +m3u9ovGWjc3IPLFzRxiP0LsHChIbpZoL3ngNK+OhTK4v9GdYPebtu6m3aTLviYC tZO2asKl5C478h8slu/Ahg862a7fC+RvUDgwx4mq3oNae26top+8PyAyW6zDMuvb xTkg/nCwPU5GvR8bRm5VNb9pU+1ULk9udsMGBeNIna8Nu6UE4D7gB1NzumoyqvWS rAPNKcAY5ImT9isnHlYR+JdCRisqTwueCWgGNWkV61CUDKpk -----END CERTIFICATE-----Generated at Wed May 13 02:29:41 2026 by rpki-client