$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/100631B8285311F189E6C14D98833773.roa File: 100631B8285311F189E6C14D98833773.roa (raw, json) Hash identifier: OnSEmhCuD0RbgJQkhNAMR74l52P/16L6+HgI2JOjkDU= Subject key identifier: F2:E5:91:9A:82:1A:3C:2B:A1:0E:07:33:6C:53:7D:59:7D:4F:29:79 Certificate issuer: /CN=A91ADCB5/serialNumber=FFEEE67A4334656188FEA5F6F9D7E7A705949E3D Certificate serial: 02 Authority key identifier: FF:EE:E6:7A:43:34:65:61:88:FE:A5:F6:F9:D7:E7:A7:05:94:9E:3D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/100631B8285311F189E6C14D98833773.roa Signing time: Wed 25 Mar 2026 14:01:04 +0000 ROA not before: Wed 25 Mar 2026 14:01:04 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139472 IP address blocks: 198.204.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.crl rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 14:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADCB5, serialNumber=FFEEE67A4334656188FEA5F6F9D7E7A705949E3D Validity Not Before: Mar 25 14:01:04 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69c3eaa0-8a96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:9a:cd:db:e9:91:dc:21:29:06:1d:03:2f:a5: b5:56:09:b4:0a:ea:0b:68:40:95:9f:40:08:01:8e: 50:08:82:11:08:e4:2d:d7:7c:3a:b8:e4:fa:bd:86: 93:9c:af:ff:28:0b:e8:16:68:62:d9:80:97:29:75: 0b:7c:62:af:e7:1c:28:a4:1e:61:be:d4:82:c2:1a: a3:df:fc:92:44:1f:e6:f1:e9:67:1c:ac:f3:7b:e2: 09:02:f8:30:ae:b3:73:aa:0e:26:56:3c:23:83:04: db:c2:28:fd:5a:e5:99:e0:60:32:a0:c9:79:a5:2d: 07:4c:e7:1f:d6:27:97:88:2c:b3:0e:52:f4:25:34: aa:e0:fa:29:4a:31:52:77:89:29:cb:79:7f:24:80: 4e:ac:00:05:85:d7:b6:86:a9:6c:01:af:35:6a:8b: 22:4b:9f:c6:ce:b8:ef:f5:dd:7d:2a:f4:bc:f6:84: 16:21:a7:8c:5e:a0:56:47:dc:a1:74:81:13:fc:34: 88:a1:94:b5:b4:15:d3:5f:eb:56:31:60:1a:34:47: cb:0b:e2:a1:a5:c9:11:05:9a:0b:29:63:e2:80:00: fe:28:c5:cf:f7:fa:80:bb:47:01:e3:12:e6:9a:61: aa:d6:0f:cf:05:30:79:19:7a:c9:d0:ff:0c:d9:64: 4c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:E5:91:9A:82:1A:3C:2B:A1:0E:07:33:6C:53:7D:59:7D:4F:29:79 X509v3 Authority Key Identifier: keyid:FF:EE:E6:7A:43:34:65:61:88:FE:A5:F6:F9:D7:E7:A7:05:94:9E:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/_-7mekM0ZWGI_qX2-dfnpwWUnj0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_-7mekM0ZWGI_qX2-dfnpwWUnj0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADCB5/00429DF8285211F1A4C07CC897833773/100631B8285311F189E6C14D98833773.roa sbgp-ipAddrBlock: critical IPv4: 198.204.78.0/24 Signature Algorithm: sha256WithRSAEncryption 79:ae:0e:d5:a5:8b:cf:76:2b:b7:14:a1:af:49:63:6f:cd:92: de:16:e4:8a:6b:83:e8:b8:8a:c7:5d:53:9d:82:cb:d1:b2:76: 81:a4:a1:c2:86:b1:d1:c1:e0:22:17:54:16:96:45:fe:10:ba: 59:5d:68:03:6d:04:3f:37:ef:f5:2a:f6:22:8a:1e:12:7a:28: ed:fb:91:2a:c1:9c:a5:7a:ba:0d:81:3d:68:b2:5b:36:af:d7: 49:16:66:ca:a0:d2:99:fe:2a:21:68:38:fc:a3:75:30:6a:0d: f0:e3:f4:0a:c7:02:41:db:63:51:d2:cf:e3:92:2d:37:4e:81: 05:46:b3:ad:ba:4d:ad:7a:ae:71:5f:80:26:5e:0b:e5:39:a5: 25:76:21:5b:61:23:37:b1:66:4a:6b:8d:59:3b:96:50:9d:38: a8:95:f7:33:0a:33:a7:86:7c:54:6a:85:3f:a1:9c:5c:32:82: 5c:68:7b:0a:33:3f:e1:b6:38:b0:f7:9f:30:7e:ae:af:4a:72: fc:9c:26:72:3d:03:88:44:35:a4:f0:38:ad:e8:1e:f8:5c:de: 20:b3:9a:07:82:8d:b7:ab:7e:d2:fa:19:55:66:8c:da:a1:39: 05:b2:53:a1:83:32:e5:12:2a:d4:91:fe:02:3d:d7:dd:0f:6c: 2b:62:46:ce -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RENCNTExMC8GA1UEBRMoRkZFRUU2N0E0MzM0NjU2MTg4RkVBNUY2RjlEN0U3QTcw NTk0OUUzRDAeFw0yNjAzMjUxNDAxMDRaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzNlYWEwLThhOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC9ms3b6ZHcISkGHQMvpbVWCbQK6gtoQJWfQAgBjlAIghEI5C3XfDq45Pq9hpOc r/8oC+gWaGLZgJcpdQt8Yq/nHCikHmG+1ILCGqPf/JJEH+bx6WccrPN74gkC+DCu s3OqDiZWPCODBNvCKP1a5ZngYDKgyXmlLQdM5x/WJ5eILLMOUvQlNKrg+ilKMVJ3 iSnLeX8kgE6sAAWF17aGqWwBrzVqiyJLn8bOuO/13X0q9Lz2hBYhp4xeoFZH3KF0 gRP8NIihlLW0FdNf61YxYBo0R8sL4qGlyREFmgspY+KAAP4oxc/3+oC7RwHjEuaa YarWD88FMHkZesnQ/wzZZExpAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU8uWRmoIa PCuhDgczbFN9WX1PKXkwHwYDVR0jBBgwFoAU/+7mekM0ZWGI/qX2+dfnpwWUnj0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFEQ0I1LzAwNDI5REY4Mjg1 MjExRjFBNEMwN0NDODk3ODMzNzczL18tN21la00wWldHSV9xWDItZGZucHdXVW5q MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvXy03bWVrTTBaV0dJX3FYMi1kZm5wd1dVbmowLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RENCNS8wMDQyOURGODI4NTIxMUYxQTRDMDdDQzg5NzgzMzc3My8xMDA2MzFCODI4 NTMxMUYxODlFNkMxNEQ5ODgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADGzE4wDQYJKoZIhvcNAQELBQADggEBAHmuDtWli892K7cUoa9JY2/N kt4W5Iprg+i4isddU52Cy9GydoGkocKGsdHB4CIXVBaWRf4QulldaANtBD837/Uq 9iKKHhJ6KO37kSrBnKV6ug2BPWiyWzav10kWZsqg0pn+KiFoOPyjdTBqDfDj9ArH AkHbY1HSz+OSLTdOgQVGs626Ta16rnFfgCZeC+U5pSV2IVthIzexZkprjVk7llCd OKiV9zMKM6eGfFRqhT+hnFwyglxoewozP+G2OLD3nzB+rq9KcvycJnI9A4hENaTw OK3oHvhc3iCzmgeCjberftL6GVVmjNqhOQWyU6GDMuUSKtSR/gI9190PbCtiRs4= -----END CERTIFICATE-----Generated at Thu Mar 26 20:01:31 2026 by rpki-client