$ rpki-client -vvf rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/931A1664264611F1BB7525369F833773.roa File: 931A1664264611F1BB7525369F833773.roa (raw, json) Hash identifier: O+dFRmqz0HLQWE2NlORO6GptWeFGJW4FEbE2GeFkulo= Subject key identifier: C8:3A:CD:B0:76:EA:1E:A2:C4:8F:20:71:E0:5E:9F:FA:FA:C5:26:0A Certificate issuer: /CN=A91397C2/serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Certificate serial: 08AC Authority key identifier: D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/931A1664264611F1BB7525369F833773.roa Signing time: Sun 22 Mar 2026 23:26:38 +0000 ROA not before: Sun 22 Mar 2026 23:26:38 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 154206 IP address blocks: 45.125.34.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2220 (0x8ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91397C2, serialNumber=D3D15AEE9A4F8AE5C281108A7D2D3AD81D4E79CD Validity Not Before: Mar 22 23:26:38 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69c07aae-c83b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:76:53:68:b8:d8:24:64:bf:f7:7c:32:13:58: 81:3c:f8:ca:d5:89:aa:c0:a9:27:64:86:b4:1d:7f: 88:17:d9:5e:39:b5:67:c2:cd:be:7a:29:cb:d6:67: 98:a9:e7:3e:18:95:02:6a:53:66:a0:de:48:35:3e: 51:43:35:50:7a:ae:35:f1:f7:68:1f:53:80:51:48: cd:d3:db:d1:0d:5e:e0:c4:7d:9a:38:9f:ef:01:d9: 5e:4a:9f:af:b3:bc:6a:38:81:c3:50:d6:f5:ac:13: f2:01:e2:3f:5b:99:65:8c:72:77:af:1a:0c:67:58: f5:c1:dc:4c:e2:be:e6:4b:2c:88:ed:1f:0c:05:c7: ff:5b:bd:59:83:0f:94:2d:2b:12:6b:00:7f:a8:a7: 7d:89:76:8a:a4:a5:5b:7a:33:2f:c8:e4:72:b6:28: 9a:e7:e6:ee:c3:ec:be:89:89:0e:4a:1e:ad:b1:bb: ce:67:94:dc:85:05:20:f6:d8:f1:6f:a7:d1:7b:a8: f4:97:1b:82:31:46:b3:31:47:26:49:da:4c:5d:af: 8e:75:92:a9:b3:ab:af:e4:ac:95:54:1a:f0:3f:60: a4:1f:d3:42:5b:85:03:34:2c:81:0f:0f:1a:f3:52: 88:2c:3b:e6:2d:40:96:f1:77:1a:76:e2:21:1a:f7: 70:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:3A:CD:B0:76:EA:1E:A2:C4:8F:20:71:E0:5E:9F:FA:FA:C5:26:0A X509v3 Authority Key Identifier: keyid:D3:D1:5A:EE:9A:4F:8A:E5:C2:81:10:8A:7D:2D:3A:D8:1D:4E:79:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/09Fa7ppPiuXCgRCKfS062B1Oec0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/09Fa7ppPiuXCgRCKfS062B1Oec0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91397C2/4E426DE8FBEA11EA940A1D19C4F9AE02/931A1664264611F1BB7525369F833773.roa sbgp-ipAddrBlock: critical IPv4: 45.125.34.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:ef:dd:9a:1d:cc:86:6f:f5:89:cf:86:93:27:d0:b3:a3:22: 58:76:73:ff:39:ef:64:74:59:3a:f3:17:41:d2:c1:e7:13:25: 16:10:51:ce:f2:dc:8c:19:d4:db:ca:e5:da:cc:da:96:f3:9a: 7b:ad:e4:9d:9c:49:ef:3c:da:f6:a0:c1:2f:4d:83:6d:3b:dd: 4f:0c:e2:27:2d:45:71:fa:04:1b:41:6d:c4:5b:bb:a7:de:18: 1c:66:10:e7:c1:37:6d:5d:46:c9:16:95:6d:54:b4:08:3a:57: d6:1a:47:c1:66:f1:25:71:59:8b:9c:b1:d5:af:b7:23:1a:96: c7:b8:00:5b:97:f7:e9:a2:7d:1f:55:d7:93:dc:94:28:7e:5a: 9e:dd:9d:54:9d:8c:47:b4:0f:e3:ac:e3:39:57:bf:d9:8f:18: fa:9f:f6:2f:f8:9f:c1:39:48:05:93:85:51:30:1d:43:8f:ac: cb:54:2a:dd:f2:ea:22:82:98:83:40:27:f7:08:a6:da:d0:9b: 2a:08:90:79:44:d7:40:31:ca:a7:cf:1d:88:f1:aa:ed:77:cb: a1:2f:60:1b:40:cc:01:7b:5a:64:11:cc:f0:71:1d:37:4b:8b: d1:75:e0:e2:27:3f:2a:d6:f7:7d:0a:6e:9c:a4:c7:b1:6b:3b: 0b:9f:12:71 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCKwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzk3QzIxMTAvBgNVBAUTKEQzRDE1QUVFOUE0RjhBRTVDMjgxMTA4QTdEMkQzQUQ4 MUQ0RTc5Q0QwHhcNMjYwMzIyMjMyNjM4WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWMwN2FhZS1jODNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0HZTaLjYJGS/93wyE1iBPPjK1YmqwKknZIa0HX+IF9leObVnws2+einL1meY qec+GJUCalNmoN5INT5RQzVQeq418fdoH1OAUUjN09vRDV7gxH2aOJ/vAdleSp+v s7xqOIHDUNb1rBPyAeI/W5lljHJ3rxoMZ1j1wdxM4r7mSyyI7R8MBcf/W71Zgw+U LSsSawB/qKd9iXaKpKVbejMvyORytiia5+buw+y+iYkOSh6tsbvOZ5TchQUg9tjx b6fRe6j0lxuCMUazMUcmSdpMXa+OdZKps6uv5KyVVBrwP2CkH9NCW4UDNCyBDw8a 81KILDvmLUCW8XcaduIhGvdwaQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMg6zbB2 6h6ixI8gceBen/r6xSYKMB8GA1UdIwQYMBaAFNPRWu6aT4rlwoEQin0tOtgdTnnN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzOTdDMi80RTQyNkRFOEZC RUExMUVBOTQwQTFEMTlDNEY5QUUwMi8wOUZhN3BwUGl1WENnUkNLZlMwNjJCMU9l YzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzA5RmE3cHBQaXVYQ2dSQ0tmUzA2MkIxT2VjMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Mzk3QzIvNEU0MjZERThGQkVBMTFFQTk0MEExRDE5QzRGOUFFMDIvOTMxQTE2NjQy NjQ2MTFGMUJCNzUyNTM2OUY4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBLX0iMA0GCSqGSIb3DQEBCwUAA4IBAQBu792aHcyGb/WJz4aTJ9Cz oyJYdnP/Oe9kdFk68xdB0sHnEyUWEFHO8tyMGdTbyuXazNqW85p7reSdnEnvPNr2 oMEvTYNtO91PDOInLUVx+gQbQW3EW7un3hgcZhDnwTdtXUbJFpVtVLQIOlfWGkfB ZvElcVmLnLHVr7cjGpbHuABbl/fpon0fVdeT3JQoflqe3Z1UnYxHtA/jrOM5V7/Z jxj6n/Yv+J/BOUgFk4VRMB1Dj6zLVCrd8uoigpiDQCf3CKba0JsqCJB5RNdAMcqn zx2I8artd8uhL2AbQMwBe1pkEczwcR03S4vRdeDiJz8q1vd9Cm6cpMexazsLnxJx -----END CERTIFICATE-----Generated at Thu Mar 26 18:33:13 2026 by rpki-client