$ rpki-client -vvf rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/7CB1102487DD11F0A89FB377C4F9AE02.roa File: 7CB1102487DD11F0A89FB377C4F9AE02.roa (raw, json) Hash identifier: LJuHTr9dIvZYkAmMksiQJJP2qElg6VwwLMqlMwzQK3A= Subject key identifier: 03:C0:B6:66:7F:BC:7F:8E:B5:22:71:86:F8:74:25:0D:F0:E0:2C:47 Certificate issuer: /CN=A91547EC/serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Certificate serial: 69 Authority key identifier: 08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/7CB1102487DD11F0A89FB377C4F9AE02.roa Signing time: Tue 17 Mar 2026 07:43:40 +0000 ROA not before: Tue 17 Mar 2026 07:43:40 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 18055 IP address blocks: 192.108.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 07:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 105 (0x69) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91547EC, serialNumber=0812A09662F0B3E34F2B5A51C33E8E92703E4369 Validity Not Before: Mar 17 07:43:40 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69b9062c-d46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fb:be:14:3f:2d:af:b8:5b:63:49:f9:a1:73: e6:68:dd:f8:c5:44:81:e5:a2:cb:df:72:f2:77:ab: 45:23:59:54:e5:21:3e:78:34:f1:42:a0:c9:6e:2d: d6:d2:26:a8:b0:34:60:77:71:86:d8:70:ab:94:cf: 7a:0b:05:9c:73:7a:72:1e:50:65:71:0a:92:10:67: 6d:8d:da:a3:6f:50:70:2d:83:59:f9:a6:59:ba:5d: a2:51:8a:56:cb:f0:0a:a5:64:23:bc:87:ad:4f:42: dd:f7:dd:d7:52:59:45:40:31:25:02:83:e5:04:7c: 42:a4:3c:0e:1f:8e:d7:7f:15:5c:6a:38:3b:38:b5: dd:28:7e:f8:51:9f:77:ea:2c:30:da:f4:8f:7c:97: c6:65:1d:2b:48:e1:7b:1b:58:66:77:8a:e3:fc:3a: e0:5f:85:6c:db:4f:ba:6e:9a:61:66:4d:b0:a6:96: e4:67:ff:2c:4e:dc:75:48:e9:02:22:3b:c1:b7:61: ae:c3:de:07:cb:30:2d:55:28:bb:ec:82:63:24:3c: 03:be:32:24:de:5a:8d:85:fe:fa:be:06:b8:69:01: 28:ae:bd:13:5b:74:34:a6:54:02:2b:8d:55:70:a8: ef:58:8b:b6:b1:96:33:9d:8a:d4:03:e4:ab:0c:59: cc:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C0:B6:66:7F:BC:7F:8E:B5:22:71:86:F8:74:25:0D:F0:E0:2C:47 X509v3 Authority Key Identifier: keyid:08:12:A0:96:62:F0:B3:E3:4F:2B:5A:51:C3:3E:8E:92:70:3E:43:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/CBKglmLws-NPK1pRwz6OknA-Q2k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CBKglmLws-NPK1pRwz6OknA-Q2k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91547EC/256357C887DD11F0B74CFE76C4F9AE02/7CB1102487DD11F0A89FB377C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.108.99.0/24 Signature Algorithm: sha256WithRSAEncryption 8c:43:8f:22:2e:07:07:4b:ce:60:9a:a3:32:44:84:52:43:a9: 72:ad:24:5a:f1:d4:8e:40:13:73:69:20:6c:ca:5f:e2:d8:fe: 39:3b:5e:e2:59:64:58:0a:69:ff:e8:36:cc:9b:7f:14:20:10: 01:da:c0:a8:1c:d3:10:97:71:15:af:9c:ee:6b:1e:db:97:fa: a8:f1:02:73:89:dd:11:9a:f7:0a:d8:d3:7a:a4:ce:45:2e:ae: 95:a6:3c:cc:e4:ba:65:01:e1:0b:1b:23:b9:74:3d:00:e1:2d: 1e:79:6e:a1:9a:94:a1:22:61:a2:a3:a7:07:25:b7:62:e5:62: ff:dc:fd:ee:ca:7f:68:51:de:b6:62:0b:db:97:b4:d8:18:3e: 5a:15:a9:78:5e:6a:16:7d:33:ff:49:4a:70:af:10:ee:38:91: 24:c5:ed:5d:09:77:da:2e:36:27:91:7c:0f:dd:c9:43:4b:24: a6:de:88:1f:01:09:8b:d8:d5:72:6f:78:83:c3:a6:f5:9d:ba: 9c:a4:73:57:ca:36:ea:28:15:60:32:8e:c6:71:8e:a5:d8:dd: 35:ec:96:0e:7e:85:2c:fb:29:89:9d:0c:7e:5f:40:10:f3:bb: ee:c9:35:10:1c:a2:c0:1a:d7:b1:df:b9:7c:34:98:2e:e3:d3: fe:41:96:68 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBaTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 NDdFQzExMC8GA1UEBRMoMDgxMkEwOTY2MkYwQjNFMzRGMkI1QTUxQzMzRThFOTI3 MDNFNDM2OTAeFw0yNjAzMTcwNzQzNDBaFw0yNzA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjkwNjJjLWQ0NmIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCw+74UPy2vuFtjSfmhc+Zo3fjFRIHlosvfcvJ3q0UjWVTlIT54NPFCoMluLdbS JqiwNGB3cYbYcKuUz3oLBZxzenIeUGVxCpIQZ22N2qNvUHAtg1n5plm6XaJRilbL 8AqlZCO8h61PQt333ddSWUVAMSUCg+UEfEKkPA4fjtd/FVxqODs4td0ofvhRn3fq LDDa9I98l8ZlHStI4XsbWGZ3iuP8OuBfhWzbT7pummFmTbCmluRn/yxO3HVI6QIi O8G3Ya7D3gfLMC1VKLvsgmMkPAO+MiTeWo2F/vq+BrhpASiuvRNbdDSmVAIrjVVw qO9Yi7axljOditQD5KsMWcxfAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUA8C2Zn+8 f461InGG+HQlDfDgLEcwHwYDVR0jBBgwFoAUCBKglmLws+NPK1pRwz6OknA+Q2kw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU0N0VDLzI1NjM1N0M4ODdE RDExRjBCNzRDRkU3NkM0RjlBRTAyL0NCS2dsbUx3cy1OUEsxcFJ3ejZPa25BLVEy ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0JLZ2xtTHdzLU5QSzFwUnd6Nk9rbkEtUTJrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 NDdFQy8yNTYzNTdDODg3REQxMUYwQjc0Q0ZFNzZDNEY5QUUwMi83Q0IxMTAyNDg3 REQxMUYwQTg5RkIzNzdDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADAbGMwDQYJKoZIhvcNAQELBQADggEBAIxDjyIuBwdLzmCaozJEhFJD qXKtJFrx1I5AE3NpIGzKX+LY/jk7XuJZZFgKaf/oNsybfxQgEAHawKgc0xCXcRWv nO5rHtuX+qjxAnOJ3RGa9wrY03qkzkUurpWmPMzkumUB4QsbI7l0PQDhLR55bqGa lKEiYaKjpwclt2LlYv/c/e7Kf2hR3rZiC9uXtNgYPloVqXheahZ9M/9JSnCvEO44 kSTF7V0Jd9ouNieRfA/dyUNLJKbeiB8BCYvY1XJveIPDpvWdupykc1fKNuooFWAy jsZxjqXY3TXslg5+hSz7KYmdDH5fQBDzu+7JNRAcosAa17HfuXw0mC7j0/5Blmg= -----END CERTIFICATE-----Generated at Thu Mar 26 17:31:04 2026 by rpki-client