$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/D9D9E8C0191511F092B86383C4F9AE02.roa File: D9D9E8C0191511F092B86383C4F9AE02.roa (raw, json) Hash identifier: jRuHimWgQS+tjLR9bDCVnhmy0GeAXCUN8m6ZV5rJabM= Subject key identifier: CB:9C:83:38:CD:B5:FF:23:91:93:61:2C:75:1C:99:B1:50:C6:56:7B Certificate issuer: /CN=A91820CC/serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09 Certificate serial: B5 Authority key identifier: 24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/D9D9E8C0191511F092B86383C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:02:34 +0000 ROA not before: Tue 01 Jul 2025 08:43:07 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 30967 IP address blocks: 188.95.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:14:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 181 (0xb5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09 Validity Not Before: Jul 1 08:43:07 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a5a68a-efd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:36:15:47:1c:6d:76:71:7b:d1:56:c6:3c:ca: cc:00:94:b4:81:d4:91:ea:58:1b:8a:da:b4:23:3d: 1c:ef:fb:62:f8:b8:50:f3:83:e5:40:06:fb:62:3f: dd:46:e5:e5:9c:15:8f:d4:4c:09:7e:ea:71:b4:01: d3:bc:b9:7b:67:07:06:b9:fd:e6:bd:ee:7a:ef:49: 21:b6:de:8c:2c:eb:47:c2:e7:09:b7:00:2e:9f:75: 2e:ec:6c:e1:09:02:25:93:dc:03:34:21:ed:a9:77: 04:db:19:7b:25:4e:2d:46:ff:b1:69:e5:c3:f0:38: 92:08:9f:23:81:41:9c:2a:84:53:54:b6:18:a4:e0: 23:75:a2:f9:99:85:6a:b5:1a:75:8f:38:1d:63:0e: 61:fa:e5:8f:ad:9c:f2:5b:ee:c0:ac:94:2f:b2:a5: c7:b5:f1:67:a4:db:85:fc:e2:ed:7f:27:ce:e0:5d: 92:fe:a5:4c:4a:4c:1a:35:db:d2:82:72:71:c5:86: 7e:40:c6:94:b0:16:5f:5a:6c:aa:aa:7c:3a:f6:65: 9d:01:ff:98:9f:bf:8a:5c:66:ce:0a:88:b5:a4:86: ef:61:df:06:0e:1a:f8:bc:d1:26:ee:62:08:99:99: 44:26:e6:c2:13:98:fe:a5:be:5c:32:bb:f4:60:41: 83:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:9C:83:38:CD:B5:FF:23:91:93:61:2C:75:1C:99:B1:50:C6:56:7B X509v3 Authority Key Identifier: keyid:24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/D9D9E8C0191511F092B86383C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 188.95.8.0/22 Signature Algorithm: sha256WithRSAEncryption a6:40:5a:72:3d:d7:7d:f5:1c:db:41:7b:31:07:82:e8:6b:f0: 1c:2b:ca:72:a2:49:70:e8:90:fc:3a:19:cd:f6:54:8d:b7:e0: 1c:14:d6:32:61:2f:7c:3c:2e:d9:bd:2f:f4:be:03:8f:82:f6: cd:30:86:a2:74:6e:49:35:ad:a3:70:97:c4:86:ac:4f:d9:55: 84:fb:9c:e1:d9:33:07:ac:e6:4a:28:cc:e6:16:be:13:1d:33: 1d:4f:dd:5a:fe:a4:9e:58:3c:0b:49:b1:f6:c3:01:97:5a:7a: 53:21:f5:c6:d9:68:9a:ea:09:ce:9d:49:16:5b:0e:8b:2d:66: 59:b8:15:2d:c6:2b:10:ae:b8:f4:c9:35:3e:96:18:17:14:ff: de:90:10:80:dd:72:c9:30:a6:9f:6a:a6:eb:ab:d2:c0:01:03: 5f:73:da:42:7c:46:72:9a:b4:3b:21:33:18:6d:25:b4:28:53: e6:da:db:a0:fa:a1:74:2c:d0:0a:39:59:d5:66:37:f4:e1:22: b2:45:de:ac:0a:60:3a:7f:4d:32:57:79:a8:e6:67:db:7d:38: 86:30:8b:b4:93:3e:3b:86:c8:d3:e2:ce:da:75:c3:9f:03:a8: 01:9a:94:2e:30:d4:1f:5c:9f:70:8b:6c:79:1a:27:49:01:d3: 3c:37:3e:be -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICALUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQ0MxMTAvBgNVBAUTKDI0NTNDRTdDNDI1M0RCQjJDN0FDM0QyOTAxM0U5MEQ1 RjUzQzVEMDkwHhcNMjUwNzAxMDg0MzA3WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTY4YS1lZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2TYVRxxtdnF70VbGPMrMAJS0gdSR6lgbitq0Iz0c7/ti+LhQ84PlQAb7Yj/d RuXlnBWP1EwJfupxtAHTvLl7ZwcGuf3mve5670khtt6MLOtHwucJtwAun3Uu7Gzh CQIlk9wDNCHtqXcE2xl7JU4tRv+xaeXD8DiSCJ8jgUGcKoRTVLYYpOAjdaL5mYVq tRp1jzgdYw5h+uWPrZzyW+7ArJQvsqXHtfFnpNuF/OLtfyfO4F2S/qVMSkwaNdvS gnJxxYZ+QMaUsBZfWmyqqnw69mWdAf+Yn7+KXGbOCoi1pIbvYd8GDhr4vNEm7mII mZlEJubCE5j+pb5cMrv0YEGDswIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMucgzjN tf8jkZNhLHUcmbFQxlZ7MB8GA1UdIwQYMBaAFCRTznxCU9uyx6w9KQE+kNX1PF0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDQy9CREQ0QUYzQzBC RDkxMUYwOEM2MDdGODdDNEY5QUUwMi9KRlBPZkVKVDI3TEhyRDBwQVQ2UTFmVThY UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pGUE9mRUpUMjdMSHJEMHBBVDZRMWZVOFhRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIwQ0MvQkRENEFGM0MwQkQ5MTFGMDhDNjA3Rjg3QzRGOUFFMDIvRDlEOUU4QzAx OTE1MTFGMDkyQjg2MzgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCvF8IMA0GCSqGSIb3DQEBCwUAA4IBAQCmQFpyPdd99RzbQXsxB4Lo a/AcK8pyoklw6JD8OhnN9lSNt+AcFNYyYS98PC7ZvS/0vgOPgvbNMIaidG5JNa2j cJfEhqxP2VWE+5zh2TMHrOZKKMzmFr4THTMdT91a/qSeWDwLSbH2wwGXWnpTIfXG 2Wia6gnOnUkWWw6LLWZZuBUtxisQrrj0yTU+lhgXFP/ekBCA3XLJMKafaqbrq9LA AQNfc9pCfEZymrQ7ITMYbSW0KFPm2tug+qF0LNAKOVnVZjf04SKyRd6sCmA6f00y V3mo5mfbfTiGMIu0kz47hsjT4s7adcOfA6gBmpQuMNQfXJ9wi2x5GidJAdM8Nz6+ -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:36 2026 by rpki-client