$ rpki-client -vvf rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/D9D9E8C0191511F092B86383C4F9AE02.roa File: D9D9E8C0191511F092B86383C4F9AE02.roa (raw, json) Hash identifier: JDWX9UuqHKo4in7tq3/puQm/PTl4j1DhM/0eE9MXDA0= Subject key identifier: 5B:07:4E:FA:C5:99:47:D6:A9:E1:49:0D:06:0D:30:AE:FE:26:C7:A0 Certificate issuer: /CN=A91820CC/serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09 Certificate serial: F5 Authority key identifier: 24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/D9D9E8C0191511F092B86383C4F9AE02.roa Signing time: Wed 01 Jul 2026 08:33:33 +0000 ROA not before: Wed 01 Jul 2026 08:33:33 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 30967 IP address blocks: 188.95.8.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 08:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91820CC, serialNumber=2453CE7C4253DBB2C7AC3D29013E90D5F53C5D09 Validity Not Before: Jul 1 08:33:33 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a44d0dd-26fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:c1:f2:46:21:53:7e:7e:ae:e7:61:d3:c9: be:55:58:eb:c9:81:51:68:38:ff:ca:9d:b7:ce:6c: 5d:e2:a2:30:36:ad:b9:6d:6f:36:af:08:37:4d:7b: 1a:11:b9:42:8f:88:75:32:64:f4:ad:c8:e3:ed:9c: 61:20:98:b2:37:07:e3:ad:75:c6:11:ec:69:4b:02: 1c:77:ff:f1:0e:b0:8e:fc:ec:79:32:c4:18:a4:49: c6:7a:ad:8f:cf:e9:d9:f7:5b:a9:4f:95:5a:72:45: a6:83:5c:cc:95:4c:f9:72:54:42:4c:90:52:ba:ed: 31:71:81:cb:f4:f6:01:38:43:f1:3c:17:12:6f:83: 2c:de:49:47:44:5c:cc:ce:09:f3:f7:42:e3:83:ca: 48:f9:27:07:56:36:bd:7e:1b:0b:4b:e7:64:53:4e: 5d:0d:cb:83:51:45:cf:3f:a8:fb:d6:44:55:04:4d: 32:77:3f:1f:97:ad:50:d1:68:72:11:49:25:85:75: cd:23:89:6a:d3:dc:e7:51:67:ba:09:ab:dc:c9:57: a8:9a:5a:72:de:c6:57:7a:97:82:bf:70:0e:88:e8: d9:95:d2:06:a6:58:03:bd:d1:80:44:61:43:1f:84: 4c:ab:61:21:23:10:89:94:01:d5:77:77:d1:a3:56: 3b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:07:4E:FA:C5:99:47:D6:A9:E1:49:0D:06:0D:30:AE:FE:26:C7:A0 X509v3 Authority Key Identifier: keyid:24:53:CE:7C:42:53:DB:B2:C7:AC:3D:29:01:3E:90:D5:F5:3C:5D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/JFPOfEJT27LHrD0pAT6Q1fU8XQk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JFPOfEJT27LHrD0pAT6Q1fU8XQk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91820CC/BDD4AF3C0BD911F08C607F87C4F9AE02/D9D9E8C0191511F092B86383C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 188.95.8.0/22 Signature Algorithm: sha256WithRSAEncryption 17:89:b0:bc:aa:ff:32:3e:51:03:a4:e4:c5:a6:ec:ef:1b:a0: 7a:ec:e3:1b:15:57:a8:76:33:bc:2a:62:1c:b7:e7:43:35:6b: 3d:4d:2f:08:69:9f:77:af:04:38:1b:d2:10:28:5f:be:65:48: bf:9f:87:51:9c:d4:41:6a:79:f9:b5:14:22:b0:f8:5a:91:68: 8f:8c:7b:02:95:c3:97:12:67:48:3d:d4:eb:b6:ec:dd:09:07: f4:24:ca:5d:9c:94:18:c2:a9:86:2d:61:62:4b:ff:63:1d:30: 05:78:b2:79:30:75:0c:a9:78:f8:ad:02:a2:cd:04:3b:da:eb: db:39:b4:b7:75:7d:46:89:ed:a7:de:fb:ad:84:6b:a9:95:91: d9:56:97:7a:1f:33:19:6c:46:4d:e2:fe:58:07:1d:1c:21:0c: 94:b7:c4:81:ea:d7:3a:94:bf:b1:d5:61:92:14:7f:95:22:6a: d4:37:75:fa:5e:42:56:9b:5e:e9:51:80:04:67:bf:7f:43:f0: ea:39:60:33:aa:a3:11:d7:12:48:5d:14:73:f4:c1:fa:d6:91: 98:95:d1:52:53:a5:98:2f:e4:21:9e:82:f7:df:1c:ab:e2:ec: ea:2c:29:8a:8a:f4:18:a9:22:ed:28:98:50:3b:7d:b3:77:7a: 54:6c:14:bc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODIwQ0MxMTAvBgNVBAUTKDI0NTNDRTdDNDI1M0RCQjJDN0FDM0QyOTAxM0U5MEQ1 RjUzQzVEMDkwHhcNMjYwNzAxMDgzMzMzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0ZDBkZC0yNmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArVHB8kYhU35+rudh08m+VVjryYFRaDj/yp23zmxd4qIwNq25bW82rwg3TXsa EblCj4h1MmT0rcjj7ZxhIJiyNwfjrXXGEexpSwIcd//xDrCO/Ox5MsQYpEnGeq2P z+nZ91upT5VackWmg1zMlUz5clRCTJBSuu0xcYHL9PYBOEPxPBcSb4Ms3klHRFzM zgnz90Ljg8pI+ScHVja9fhsLS+dkU05dDcuDUUXPP6j71kRVBE0ydz8fl61Q0Why EUklhXXNI4lq09znUWe6CavcyVeomlpy3sZXepeCv3AOiOjZldIGplgDvdGARGFD H4RMq2EhIxCJlAHVd3fRo1Y7RwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFsHTvrF mUfWqeFJDQYNMK7+JsegMB8GA1UdIwQYMBaAFCRTznxCU9uyx6w9KQE+kNX1PF0J MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjBDQy9CREQ0QUYzQzBC RDkxMUYwOEM2MDdGODdDNEY5QUUwMi9KRlBPZkVKVDI3TEhyRDBwQVQ2UTFmVThY UWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pGUE9mRUpUMjdMSHJEMHBBVDZRMWZVOFhRay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODIwQ0MvQkRENEFGM0MwQkQ5MTFGMDhDNjA3Rjg3QzRGOUFFMDIvRDlEOUU4QzAx OTE1MTFGMDkyQjg2MzgzQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCvF8IMA0GCSqGSIb3DQEBCwUAA4IBAQAXibC8qv8yPlEDpOTFpuzv G6B67OMbFVeodjO8KmIct+dDNWs9TS8IaZ93rwQ4G9IQKF++ZUi/n4dRnNRBann5 tRQisPhakWiPjHsClcOXEmdIPdTrtuzdCQf0JMpdnJQYwqmGLWFiS/9jHTAFeLJ5 MHUMqXj4rQKizQQ72uvbObS3dX1Gie2n3vuthGuplZHZVpd6HzMZbEZN4v5YBx0c IQyUt8SB6tc6lL+x1WGSFH+VImrUN3X6XkJWm17pUYAEZ79/Q/DqOWAzqqMR1xJI XRRz9MH61pGYldFSU6WYL+QhnoL33xyr4uzqLCmKivQYqSLtKJhQO32zd3pUbBS8 -----END CERTIFICATE-----Generated at Fri Jul 24 03:05:08 2026 by rpki-client