$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A1C0742EFDF811EEA4D57274C4F9AE02.roa File: A1C0742EFDF811EEA4D57274C4F9AE02.roa (raw, json) Hash identifier: jxIjxLYPAa1qnB0jFN6nM/shPAzKUb5KsBQXc5gos7U= Subject key identifier: 82:6D:B3:BB:DE:EA:B9:76:82:C0:7C:30:8C:ED:9B:83:60:F8:AF:7A Certificate issuer: /CN=A91BEBE9/serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Certificate serial: 0258 Authority key identifier: 0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A1C0742EFDF811EEA4D57274C4F9AE02.roa Signing time: Mon 29 Jun 2026 03:33:13 +0000 ROA not before: Mon 29 Jun 2026 03:33:13 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 36184 IP address blocks: 217.10.226.0/24 maxlen: 24 217.10.229.0/24 maxlen: 24 217.10.230.0/24 maxlen: 24 217.10.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 600 (0x258) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEBE9, serialNumber=0FAB4EF9828F4AF267C16D8AD4710A8EEC9BBBAE Validity Not Before: Jun 29 03:33:13 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a41e779-20fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:1c:48:11:76:00:c4:c1:97:7b:de:ca:d1: 2e:a8:de:13:81:db:04:24:ea:9c:8a:0b:f3:45:7d: ab:79:43:df:6d:77:60:cb:2a:26:c2:24:84:2a:f6: 57:dc:bc:23:50:db:82:26:45:0d:bb:4b:12:55:b3: 27:0f:a7:b2:2f:0c:92:02:82:0d:c3:41:c9:7e:4d: 24:f4:88:cf:2e:e1:20:8b:0d:eb:2a:34:e6:cf:1f: 4a:cd:4c:e2:92:cd:f7:43:7e:f7:86:10:e8:ea:6e: 76:ee:51:7b:4a:98:f1:ec:c0:47:18:ac:78:65:55: 24:7d:75:55:87:55:38:4b:76:4c:b1:76:1d:7c:a2: 50:a6:c8:67:2d:54:67:01:cd:f1:02:1b:ce:1b:9b: 53:24:42:ff:bb:90:05:9b:c6:d6:24:56:fc:38:3d: bf:74:13:cf:04:60:a3:d2:11:5f:db:81:91:6b:38: 10:37:7b:60:62:1b:37:2b:0a:d1:9a:97:0a:34:ec: 6f:5b:06:63:4b:3c:ed:c0:72:c6:39:f4:fb:24:c7: 1e:3c:0d:a4:67:74:41:19:2e:b9:5c:3a:11:04:cc: c6:1b:17:21:24:30:eb:fb:8d:85:66:ad:e4:7b:c4: 45:54:2d:f7:9c:a7:9e:19:66:d2:e8:e5:f9:e0:dc: b4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6D:B3:BB:DE:EA:B9:76:82:C0:7C:30:8C:ED:9B:83:60:F8:AF:7A X509v3 Authority Key Identifier: keyid:0F:AB:4E:F9:82:8F:4A:F2:67:C1:6D:8A:D4:71:0A:8E:EC:9B:BB:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/D6tO-YKPSvJnwW2K1HEKjuybu64.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/D6tO-YKPSvJnwW2K1HEKjuybu64.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEBE9/94C9B878005D11EEBE7A9241C4F9AE02/A1C0742EFDF811EEA4D57274C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 217.10.226.0/24 217.10.229.0-217.10.231.255 Signature Algorithm: sha256WithRSAEncryption b3:dd:c9:e4:df:c3:99:97:de:87:13:c4:5a:81:4a:d5:1f:15: 5c:61:87:fe:f5:02:fa:4d:22:77:fc:cd:c5:44:44:de:e4:24: 3c:55:e2:80:32:e1:c4:0e:cf:d4:e5:ff:7a:fa:e4:01:c0:27: 22:5a:d4:48:92:af:e7:4e:bc:d6:cc:9b:97:5f:2c:34:16:bf: cb:b8:fe:da:c8:ee:ba:0e:d9:c1:c8:84:03:83:24:e8:fb:c4: fa:79:11:98:f5:46:d4:4e:6d:b2:f0:6f:a7:d8:f6:bd:ff:d0: ed:82:74:fe:51:d6:de:4d:d2:66:d7:bf:80:13:09:cc:bc:37: b7:55:18:33:9c:98:35:bb:85:f3:27:71:c6:b9:37:4c:da:82: f4:5c:af:21:30:53:ed:fe:1c:dc:1a:54:78:c6:8d:54:c0:2d: 19:08:46:14:01:2a:a9:80:29:40:d0:8d:bd:38:ab:30:79:68: 96:df:47:5d:53:c3:06:c4:c3:90:95:b4:05:5b:63:90:88:2a: 79:1e:75:3a:54:4c:7b:91:69:9a:7f:b1:f9:f4:86:33:a7:c9: db:98:68:d0:17:8d:7a:af:01:81:14:2d:8f:79:e6:09:a1:35: b2:62:47:0d:23:50:46:93:cf:f8:f0:a8:85:93:55:b5:22:82: 5c:01:5c:9d -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICAlgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkVCRTkxMTAvBgNVBAUTKDBGQUI0RUY5ODI4RjRBRjI2N0MxNkQ4QUQ0NzEwQThF RUM5QkJCQUUwHhcNMjYwNjI5MDMzMzEzWhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQxZTc3OS0yMGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApD4cSBF2AMTBl3veytEuqN4TgdsEJOqcigvzRX2reUPfbXdgyyomwiSEKvZX 3LwjUNuCJkUNu0sSVbMnD6eyLwySAoINw0HJfk0k9IjPLuEgiw3rKjTmzx9KzUzi ks33Q373hhDo6m527lF7Spjx7MBHGKx4ZVUkfXVVh1U4S3ZMsXYdfKJQpshnLVRn Ac3xAhvOG5tTJEL/u5AFm8bWJFb8OD2/dBPPBGCj0hFf24GRazgQN3tgYhs3KwrR mpcKNOxvWwZjSzztwHLGOfT7JMcePA2kZ3RBGS65XDoRBMzGGxchJDDr+42FZq3k e8RFVC33nKeeGWbS6OX54Ny01wIDAQABo4ICbjCCAmowHQYDVR0OBBYEFIJts7ve 6rl2gsB8MIztm4Ng+K96MB8GA1UdIwQYMBaAFA+rTvmCj0ryZ8FtitRxCo7sm7uu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRUJFOS85NEM5Qjg3ODAw NUQxMUVFQkU3QTkyNDFDNEY5QUUwMi9ENnRPLVlLUFN2Sm53VzJLMUhFS2p1eWJ1 NjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0Q2dE8tWUtQU3ZKbndXMksxSEVLanV5YnU2NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkVCRTkvOTRDOUI4NzgwMDVEMTFFRUJFN0E5MjQxQzRGOUFFMDIvQTFDMDc0MkVG REY4MTFFRUE0RDU3Mjc0QzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwQA2QriMAwDBADZCuUDBAPZCuAwDQYJKoZIhvcNAQELBQADggEBALPd yeTfw5mX3ocTxFqBStUfFVxhh/71AvpNInf8zcVERN7kJDxV4oAy4cQOz9Tl/3r6 5AHAJyJa1EiSr+dOvNbMm5dfLDQWv8u4/trI7roO2cHIhAODJOj7xPp5EZj1RtRO bbLwb6fY9r3/0O2CdP5R1t5N0mbXv4ATCcy8N7dVGDOcmDW7hfMncca5N0zagvRc ryEwU+3+HNwaVHjGjVTALRkIRhQBKqmAKUDQjb04qzB5aJbfR11TwwbEw5CVtAVb Y5CIKnkedTpUTHuRaZp/sfn0hjOnyduYaNAXjXqvAYEULY955gmhNbJiRw0jUEaT z/jwqIWTVbUiglwBXJ0= -----END CERTIFICATE-----Generated at Fri Jul 24 14:40:42 2026 by rpki-client