$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/DD10EC4221D311F1A9814A2D233D8C67.roa File: DD10EC4221D311F1A9814A2D233D8C67.roa (raw, json) Hash identifier: /yzAJPiNJxpo9+q64etk5otNPKwR6uKsst/Nxwyi5gg= Subject key identifier: D0:74:91:7C:69:D3:19:66:E3:45:09:C5:AE:9E:5F:54:71:2A:33:D0 Certificate issuer: /CN=A91CE959/serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421 Certificate serial: 0A Authority key identifier: DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/DD10EC4221D311F1A9814A2D233D8C67.roa Signing time: Mon 23 Mar 2026 07:21:53 +0000 ROA not before: Mon 23 Mar 2026 07:21:53 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 9919 IP address blocks: 185.171.168.0/24 maxlen: 24 185.171.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:58:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE959, serialNumber=DA6DEB3F65CC23678483A76BB78E391F2F9C6421 Validity Not Before: Mar 23 07:21:53 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69c0ea11-579d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:db:13:18:ee:09:7b:f4:5a:55:2c:97:3d:70: 49:1d:fd:ba:c7:e5:88:09:14:36:01:b5:48:ff:a6: 59:78:33:d5:bd:17:e2:93:7e:34:5b:d2:b2:9c:9e: d4:49:c4:b9:ca:da:f8:17:d2:d4:63:ae:de:ee:3f: 3f:d7:48:c4:30:48:51:6c:2b:6f:17:5d:14:7d:3d: d1:d9:df:36:20:31:ee:8f:6c:53:c9:6b:dd:b1:13: 23:cb:64:95:86:be:c8:74:ad:71:94:b7:65:89:90: a6:e1:09:23:e9:d4:22:4c:1e:50:6b:6d:df:98:9f: f3:f5:c7:2e:71:a4:81:20:db:ce:db:9d:88:dd:f5: c6:c3:d0:dc:b4:87:65:fd:99:67:a7:5b:77:72:0c: e4:ed:98:ca:9f:0f:95:e2:cb:a0:54:8f:1c:20:fa: 6d:ec:25:83:89:91:18:13:d1:1e:ba:9c:bb:3b:8d: 3a:81:20:7a:67:a9:12:9e:77:59:0d:4a:cb:62:cf: c3:36:9a:45:03:ab:60:38:ca:c0:85:71:80:8b:ae: 31:05:19:51:15:96:a9:2e:2c:cb:5b:8e:ff:2c:f4: 3b:d3:17:04:d2:d6:0b:0b:98:40:cd:49:5b:01:ab: 0d:d1:48:34:f2:0f:3e:a2:a1:aa:62:6a:ff:f4:96: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:74:91:7C:69:D3:19:66:E3:45:09:C5:AE:9E:5F:54:71:2A:33:D0 X509v3 Authority Key Identifier: keyid:DA:6D:EB:3F:65:CC:23:67:84:83:A7:6B:B7:8E:39:1F:2F:9C:64:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/2m3rP2XMI2eEg6drt445Hy-cZCE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2m3rP2XMI2eEg6drt445Hy-cZCE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE959/F47755B821B211F1959DF977AAEE528E/DD10EC4221D311F1A9814A2D233D8C67.roa sbgp-ipAddrBlock: critical IPv4: 185.171.168.0/24 185.171.170.0/24 Signature Algorithm: sha256WithRSAEncryption a7:1c:4b:34:b1:1d:14:3d:69:7e:2d:b1:79:48:90:aa:6e:d2: 96:ab:88:57:47:a6:97:bf:53:10:64:80:4b:41:2e:d2:7b:60: 2f:af:05:fd:a9:2a:2b:d6:1d:2e:b6:7c:0d:c1:ff:3e:f9:8d: 8f:59:21:ea:5e:30:d5:81:99:f5:77:a1:99:ed:28:86:ab:73: 4f:c6:c6:9b:56:19:e1:45:00:e3:7e:a6:4a:07:7d:54:40:f2: 7f:07:e8:22:0a:da:c7:f5:ee:13:17:43:c3:3f:79:05:37:9c: 50:2b:71:7d:a9:6a:8a:4e:bc:e3:04:19:5e:71:1e:2c:d0:03: 5e:be:3e:54:ff:49:af:2d:56:35:d7:c1:72:cb:37:3f:6c:b5: ec:25:5c:2a:5e:b0:f9:4e:5e:e5:c0:36:3c:0f:73:b0:25:40: ac:1f:d8:8d:59:da:b3:24:98:50:55:48:ef:e4:03:68:7e:72: a8:49:2f:b1:ee:33:3e:4c:0d:ad:e4:55:a8:8e:23:e1:6d:64: b0:9b:e1:93:4e:45:fb:1c:d0:f7:7c:40:17:dd:b5:50:78:30: 49:6f:42:ab:75:ad:49:cc:d2:b7:91:24:05:da:f6:52:5c:e0: 0a:e3:03:18:be:41:63:77:91:38:5d:64:f3:30:a0:74:87:e1: 40:36:ee:00 -----BEGIN CERTIFICATE----- MIIFQTCCBCmgAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD RTk1OTExMC8GA1UEBRMoREE2REVCM0Y2NUNDMjM2Nzg0ODNBNzZCQjc4RTM5MUYy RjlDNjQyMTAeFw0yNjAzMjMwNzIxNTNaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YzBlYTExLTU3OWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCX2xMY7gl79FpVLJc9cEkd/brH5YgJFDYBtUj/pll4M9W9F+KTfjRb0rKcntRJ xLnK2vgX0tRjrt7uPz/XSMQwSFFsK28XXRR9PdHZ3zYgMe6PbFPJa92xEyPLZJWG vsh0rXGUt2WJkKbhCSPp1CJMHlBrbd+Yn/P1xy5xpIEg287bnYjd9cbD0Ny0h2X9 mWenW3dyDOTtmMqfD5Xiy6BUjxwg+m3sJYOJkRgT0R66nLs7jTqBIHpnqRKed1kN Sstiz8M2mkUDq2A4ysCFcYCLrjEFGVEVlqkuLMtbjv8s9DvTFwTS1gsLmEDNSVsB qw3RSDTyDz6ioapiav/0lq+DAgMBAAGjggJmMIICYjAdBgNVHQ4EFgQU0HSRfGnT GWbjRQnFrp5fVHEqM9AwHwYDVR0jBBgwFoAU2m3rP2XMI2eEg6drt445Hy+cZCEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNFOTU5L0Y0Nzc1NUI4MjFC MjExRjE5NTlERjk3N0FBRUU1MjhFLzJtM3JQMlhNSTJlRWc2ZHJ0NDQ1SHktY1pD RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMm0zclAyWE1JMmVFZzZkcnQ0NDVIeS1jWkNFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD RTk1OS9GNDc3NTVCODIxQjIxMUYxOTU5REY5NzdBQUVFNTI4RS9ERDEwRUM0MjIx RDMxMUYxQTk4MTRBMkQyMzNEOEM2Ny5yb2EwJQYIKwYBBQUHAQcBAf8EFjAUMBIE AgABMAwDBAC5q6gDBAC5q6owDQYJKoZIhvcNAQELBQADggEBAKccSzSxHRQ9aX4t sXlIkKpu0pariFdHppe/UxBkgEtBLtJ7YC+vBf2pKivWHS62fA3B/z75jY9ZIepe MNWBmfV3oZntKIarc0/GxptWGeFFAON+pkoHfVRA8n8H6CIK2sf17hMXQ8M/eQU3 nFArcX2paopOvOMEGV5xHizQA16+PlT/Sa8tVjXXwXLLNz9stewlXCpesPlOXuXA NjwPc7AlQKwf2I1Z2rMkmFBVSO/kA2h+cqhJL7HuMz5MDa3kVaiOI+FtZLCb4ZNO Rfsc0Pd8QBfdtVB4MElvQqt1rUnM0reRJAXa9lJc4ArjAxi+QWN3kThdZPMwoHSH 4UA27gA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:15:29 2026 by rpki-client