$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/BD2B0858B27A11F19095CEA23511F970.roa File: BD2B0858B27A11F19095CEA23511F970.roa (raw, json) Hash identifier: JN2Oh4NAb4qZWkyTkJ8HdWLvLh4qFlBcfnXv4X0jbyQ= Subject key identifier: 27:2F:6E:BE:F8:D0:98:2E:4D:A7:0A:60:38:79:92:69:48:49:E2:70 Certificate issuer: /CN=A91B1185/serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Certificate serial: 1792 Authority key identifier: FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/BD2B0858B27A11F19095CEA23511F970.roa Signing time: Thu 17 Sep 2026 09:32:46 +0000 ROA not before: Thu 17 Sep 2026 09:32:46 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 38166 IP address blocks: 175.111.12.0/24 maxlen: 24 175.111.13.0/24 maxlen: 24 175.111.14.0/24 maxlen: 24 175.111.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:35:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6034 (0x1792) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1185, serialNumber=FE3CD37CEC0E382307B4F9D5FFD57E97F121F053 Validity Not Before: Sep 17 09:32:46 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6aabb3bd-d46b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:bc:f3:2b:03:84:e8:fc:69:d2:02:7e:ec:d8: 0f:cd:42:7b:66:59:e8:98:2d:cc:b9:e5:ce:7d:92: c7:3d:5a:dc:36:99:84:69:d7:d8:fc:e7:9b:57:d3: 30:d8:4d:bf:57:c6:4e:14:75:0f:ba:53:1e:c8:be: 7d:56:dd:4c:53:b4:21:f9:99:e4:cd:a0:15:f1:63: f5:08:57:e9:4c:b3:96:c8:bc:91:0d:f5:e3:03:f6: f2:8c:b1:99:30:6b:80:50:e0:58:00:67:ff:bd:9a: 5b:d0:7e:a1:36:04:83:5a:c5:50:16:39:48:db:be: c8:0c:93:e3:2b:43:df:ec:9d:6b:45:a2:72:81:c9: 82:6c:94:20:53:f7:55:1e:26:9d:0c:0b:4d:ad:b8: f3:6a:97:8c:45:93:57:ed:77:50:05:81:81:0d:a2: c4:97:90:d0:1f:0c:b4:a5:a1:ef:dd:31:0e:24:17: 00:84:3e:c6:69:ce:bb:d7:dd:e5:f3:15:1c:b0:d7: c4:47:26:df:0b:80:5b:98:4a:51:6a:6d:0e:c2:93: 95:8e:0b:16:58:a0:39:e2:f8:2f:60:2a:ea:5d:f4: f6:4f:da:ce:f7:05:64:bf:7c:dc:b6:f8:0e:87:52: 02:d9:87:f0:f3:10:0d:0d:2c:05:b2:d0:c0:d1:7d: 8a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2F:6E:BE:F8:D0:98:2E:4D:A7:0A:60:38:79:92:69:48:49:E2:70 X509v3 Authority Key Identifier: keyid:FE:3C:D3:7C:EC:0E:38:23:07:B4:F9:D5:FF:D5:7E:97:F1:21:F0:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_jzTfOwOOCMHtPnV_9V-l_Eh8FM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1185/3EA9DD3A162311E892C4A940C4F9AE02/BD2B0858B27A11F19095CEA23511F970.roa sbgp-ipAddrBlock: critical IPv4: 175.111.12.0/22 Signature Algorithm: sha256WithRSAEncryption b1:51:1a:bc:db:fa:79:51:62:8d:aa:71:2d:ab:67:5f:5e:07: 4b:f5:e6:bd:d5:4f:d4:13:08:3e:59:a6:f0:3d:5d:e0:7c:7c: 4f:67:57:43:e9:d5:be:01:78:ed:67:4e:42:f0:b3:a0:7b:10: da:e1:d1:ce:fb:ce:b1:53:d6:b6:89:44:c7:d4:28:34:05:17: 80:99:ee:79:90:48:46:b1:44:0b:72:d2:4e:a4:6d:eb:bd:4e: 27:42:1b:8b:53:eb:de:fd:b7:25:25:1b:7e:f9:6a:12:cd:23: 8c:f0:98:02:b2:cf:c0:43:8d:b4:12:1c:0f:7b:da:46:99:1f: 49:3a:39:7a:13:3e:bf:01:8c:75:ca:0f:48:1a:21:49:c5:74: 16:b0:08:e8:4a:1c:b4:ef:9c:eb:1f:57:01:bd:91:7f:89:bc: bb:cc:d2:7f:be:e8:7a:1d:b5:d4:e6:4a:d7:8a:ef:62:97:c3: b3:99:ed:96:3c:75:06:7c:f0:59:a4:e0:e8:81:1a:50:20:ab: df:84:55:f6:e6:a8:04:54:4f:63:60:14:dc:76:96:05:95:8c: da:2f:5b:5d:c3:fb:60:2a:7b:2d:81:9d:35:c6:cb:fe:74:0c: cf:02:a2:0e:72:c0:d9:89:68:06:28:94:06:97:53:b9:a3:65: 0b:3b:bd:6a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICF5IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjExODUxMTAvBgNVBAUTKEZFM0NEMzdDRUMwRTM4MjMwN0I0RjlENUZGRDU3RTk3 RjEyMUYwNTMwHhcNMjYwOTE3MDkzMjQ2WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFiYjNiZC1kNDZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrzzKwOE6Pxp0gJ+7NgPzUJ7ZlnomC3MueXOfZLHPVrcNpmEadfY/OebV9Mw 2E2/V8ZOFHUPulMeyL59Vt1MU7Qh+ZnkzaAV8WP1CFfpTLOWyLyRDfXjA/byjLGZ MGuAUOBYAGf/vZpb0H6hNgSDWsVQFjlI277IDJPjK0Pf7J1rRaJygcmCbJQgU/dV HiadDAtNrbjzapeMRZNX7XdQBYGBDaLEl5DQHwy0paHv3TEOJBcAhD7Gac67193l 8xUcsNfERybfC4BbmEpRam0OwpOVjgsWWKA54vgvYCrqXfT2T9rO9wVkv3zctvgO h1IC2Yfw8xANDSwFstDA0X2KbwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCcvbr74 0JguTacKYDh5kmlISeJwMB8GA1UdIwQYMBaAFP4803zsDjgjB7T51f/VfpfxIfBT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMTE4NS8zRUE5REQzQTE2 MjMxMUU4OTJDNEE5NDBDNEY5QUUwMi9fanpUZk93T09DTUh0UG5WXzlWLWxfRWg4 Rk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19qelRmT3dPT0NNSHRQblZfOVYtbF9FaDhGTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjExODUvM0VBOUREM0ExNjIzMTFFODkyQzRBOTQwQzRGOUFFMDIvQkQyQjA4NThC MjdBMTFGMTkwOTVDRUEyMzUxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCr28MMA0GCSqGSIb3DQEBCwUAA4IBAQCxURq82/p5UWKNqnEtq2df XgdL9ea91U/UEwg+WabwPV3gfHxPZ1dD6dW+AXjtZ05C8LOgexDa4dHO+86xU9a2 iUTH1Cg0BReAme55kEhGsUQLctJOpG3rvU4nQhuLU+ve/bclJRt++WoSzSOM8JgC ss/AQ420EhwPe9pGmR9JOjl6Ez6/AYx1yg9IGiFJxXQWsAjoShy075zrH1cBvZF/ iby7zNJ/vuh6HbXU5krXiu9il8Ozme2WPHUGfPBZpODogRpQIKvfhFX25qgEVE9j YBTcdpYFlYzaL1tdw/tgKnstgZ01xsv+dAzPAqIOcsDZiWgGKJQGl1O5o2ULO71q -----END CERTIFICATE-----Generated at Sat Sep 26 14:40:42 2026 by rpki-client