$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/B2A566E2CB9B11F0A4EC673AC4F9AE02.roa File: B2A566E2CB9B11F0A4EC673AC4F9AE02.roa (raw, json) Hash identifier: iuVZXAAipAy2W4qils7MwY0qFs7nw1X3E/jymLHx1So= Subject key identifier: 01:4A:34:94:1F:DA:85:3E:09:E5:E4:58:47:6B:A5:4B:99:7B:9A:36 Certificate issuer: /CN=A91A4ACD/serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A Certificate serial: 8B Authority key identifier: 73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/B2A566E2CB9B11F0A4EC673AC4F9AE02.roa Signing time: Thu 13 Aug 2026 07:57:58 +0000 ROA not before: Thu 13 Aug 2026 07:57:58 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 154113 IP address blocks: 192.188.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 07:06:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 139 (0x8b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4ACD, serialNumber=736EF357EF23F33EAC07B274EA5E3FEC0DFEE58A Validity Not Before: Aug 13 07:57:58 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a7d7905-b1d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:42:9f:f8:fc:d7:85:d2:f5:47:41:62:91:d6: 98:c7:33:cc:3a:30:26:03:8f:bb:59:32:76:34:80: f5:2f:6e:82:ab:b1:81:73:38:39:48:56:6e:f3:bc: 48:5a:4f:77:95:b6:5f:ba:6c:94:90:7e:49:ec:1b: 84:c0:cd:23:58:9d:b6:f5:8b:81:19:6a:ad:b6:02: fc:99:88:0c:8b:13:c2:11:32:b2:04:4a:22:dc:a4: 0b:ca:9f:5c:31:76:78:79:40:f5:e6:0f:c0:39:59: 47:7a:77:b4:62:31:db:39:6c:2e:d2:5a:a0:0f:8b: 73:8b:15:df:76:f7:8e:9f:dc:bc:6b:f5:de:bd:77: fd:b0:a8:89:9d:a6:ca:56:bc:f3:a5:3b:78:e1:2f: 6c:0c:6e:78:ce:9e:a3:e6:a5:77:2d:a2:77:5d:8b: a0:1b:07:f1:dd:1f:ca:d3:83:79:cd:fb:19:4a:16: d7:6c:2a:5a:fc:b4:2f:2f:4d:64:a7:35:6e:b9:84: f8:f4:ec:0f:39:a0:7b:c1:25:3e:36:fd:4c:70:c8: 16:ce:a8:d7:20:79:df:ff:36:b1:a9:34:41:84:16: 41:34:9c:de:18:58:c4:b8:59:72:b1:76:f3:65:c0: 6f:13:8f:7f:3d:13:48:d2:3a:af:39:e0:9b:14:cd: 8d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:4A:34:94:1F:DA:85:3E:09:E5:E4:58:47:6B:A5:4B:99:7B:9A:36 X509v3 Authority Key Identifier: keyid:73:6E:F3:57:EF:23:F3:3E:AC:07:B2:74:EA:5E:3F:EC:0D:FE:E5:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/c27zV-8j8z6sB7J06l4_7A3-5Yo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/c27zV-8j8z6sB7J06l4_7A3-5Yo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4ACD/B332486ACB9A11F09D10C116C4F9AE02/B2A566E2CB9B11F0A4EC673AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.188.90.0/24 Signature Algorithm: sha256WithRSAEncryption 8e:11:fe:bd:ab:ca:31:6a:99:03:56:08:8c:9d:5a:8e:4f:91: 37:ef:24:61:45:0f:a0:79:e9:d5:06:2e:4c:a1:1b:86:6b:39: 03:c3:10:6f:91:25:92:eb:f8:05:fa:09:e2:8e:39:e9:88:b5: bf:d3:76:70:c0:13:53:13:79:9f:98:c3:3b:9c:f6:d6:15:43: c8:61:69:b2:e5:f7:ed:be:81:b0:d3:e6:e0:ce:07:21:8a:12: 7b:cb:03:16:c1:93:7d:c4:ae:cb:ea:b1:5a:17:67:d2:96:5c: d0:30:83:b9:60:81:17:8a:5a:29:8f:38:f4:84:be:0a:6c:92: d2:95:d9:da:4d:2e:47:ff:29:7e:c1:0c:b5:5e:29:e5:bc:e3: e7:79:ee:c4:da:26:3f:22:d5:63:e6:4d:18:10:a8:5d:a7:16: 25:39:05:50:d8:b0:cd:ca:a2:f2:2a:91:51:75:ff:1b:b5:aa: 7c:6d:01:d9:94:aa:84:27:bf:09:e1:d4:9f:a8:70:53:00:48: 18:cd:64:44:8f:d3:3c:9a:56:7b:9c:4a:bb:1d:32:33:06:08: 44:d8:1b:8b:c2:c6:bb:78:a4:98:72:c4:4d:1f:75:bd:f9:62: cd:2e:2d:65:e3:ce:a7:22:23:8c:4a:c4:fa:fd:1e:a3:d4:bf: 7f:a9:5c:fd -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRBQ0QxMTAvBgNVBAUTKDczNkVGMzU3RUYyM0YzM0VBQzA3QjI3NEVBNUUzRkVD MERGRUU1OEEwHhcNMjYwODEzMDc1NzU4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTdkNzkwNS1iMWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0EKf+PzXhdL1R0FikdaYxzPMOjAmA4+7WTJ2NID1L26Cq7GBczg5SFZu87xI Wk93lbZfumyUkH5J7BuEwM0jWJ229YuBGWqttgL8mYgMixPCETKyBEoi3KQLyp9c MXZ4eUD15g/AOVlHene0YjHbOWwu0lqgD4tzixXfdveOn9y8a/XevXf9sKiJnabK VrzzpTt44S9sDG54zp6j5qV3LaJ3XYugGwfx3R/K04N5zfsZShbXbCpa/LQvL01k pzVuuYT49OwPOaB7wSU+Nv1McMgWzqjXIHnf/zaxqTRBhBZBNJzeGFjEuFlysXbz ZcBvE49/PRNI0jqvOeCbFM2NDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAFKNJQf 2oU+CeXkWEdrpUuZe5o2MB8GA1UdIwQYMBaAFHNu81fvI/M+rAeydOpeP+wN/uWK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEFDRC9CMzMyNDg2QUNC OUExMUYwOUQxMEMxMTZDNEY5QUUwMi9jMjd6Vi04ajh6NnNCN0owNmw0XzdBMy01 WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2MyN3pWLThqOHo2c0I3SjA2bDRfN0EzLTVZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRBQ0QvQjMzMjQ4NkFDQjlBMTFGMDlEMTBDMTE2QzRGOUFFMDIvQjJBNTY2RTJD QjlCMTFGMEE0RUM2NzNBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwLxaMA0GCSqGSIb3DQEBCwUAA4IBAQCOEf69q8oxapkDVgiMnVqO T5E37yRhRQ+geenVBi5MoRuGazkDwxBvkSWS6/gF+gnijjnpiLW/03ZwwBNTE3mf mMM7nPbWFUPIYWmy5fftvoGw0+bgzgchihJ7ywMWwZN9xK7L6rFaF2fSllzQMIO5 YIEXilopjzj0hL4KbJLSldnaTS5H/yl+wQy1XinlvOPnee7E2iY/ItVj5k0YEKhd pxYlOQVQ2LDNyqLyKpFRdf8btap8bQHZlKqEJ78J4dSfqHBTAEgYzWREj9M8mlZ7 nEq7HTIzBghE2BuLwsa7eKSYcsRNH3W9+WLNLi1l486nIiOMSsT6/R6j1L9/qVz9 -----END CERTIFICATE-----Generated at Thu Sep 24 23:32:08 2026 by rpki-client