$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/29D2F7BE0CA711ED98CF681AC4F9AE02.roa File: 29D2F7BE0CA711ED98CF681AC4F9AE02.roa (raw, json) Hash identifier: emYB90Tc6vUDMKCJrE8EikFcQqSVRLawl5Ox0dxnDFU= Subject key identifier: 8C:4F:C3:00:2F:61:26:10:E3:84:A0:2E:4D:41:65:F0:2B:58:C0:F4 Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 0517 Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/29D2F7BE0CA711ED98CF681AC4F9AE02.roa Signing time: Thu 23 Jul 2026 01:26:02 +0000 ROA not before: Thu 23 Jul 2026 01:26:02 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 133861 IP address blocks: 217.194.132.0/24 maxlen: 24 217.194.133.0/24 maxlen: 24 217.194.134.0/24 maxlen: 24 217.194.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1303 (0x517) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Jul 23 01:26:02 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a616daa-8c99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:55:2c:f0:10:38:87:f5:03:56:a6:3a:ea:6d: 91:2e:d1:53:2e:b3:45:e6:d8:94:83:44:27:57:46: 7f:d9:e9:9b:40:96:03:21:2a:3d:0a:ce:77:f6:da: e1:7a:81:64:2f:f9:02:0a:63:0c:12:4e:d0:36:01: bf:30:49:cc:23:25:f1:83:2d:f3:d8:67:12:24:82: 68:01:96:8d:dc:4e:ae:6c:75:59:91:ae:a1:38:dc: db:88:21:a2:92:af:13:ee:80:ee:f8:61:1f:bf:ad: 53:c5:19:56:7f:39:88:1b:60:2b:88:d5:2f:ec:37: d4:37:71:23:89:7b:13:c0:90:7d:79:d2:fb:8d:49: 1d:83:e1:25:71:f7:7a:ad:80:80:3a:8e:b4:c4:49: 33:ea:ae:d4:d2:7f:67:60:93:b2:f2:e5:df:52:cd: 94:54:74:cb:b1:66:ae:47:33:d4:37:9c:85:1e:09: 0b:19:23:15:2f:64:7c:05:b5:ba:c2:21:bf:52:b1: eb:b0:f7:bb:39:cc:ed:81:61:13:51:2a:fb:5b:4d: 8e:04:1c:0e:45:c3:0e:0a:d8:4f:90:99:45:a4:62: 24:50:42:01:a3:00:a3:fd:7a:23:d4:9c:57:27:2d: 60:82:38:5b:22:a1:ed:e3:d9:0f:c4:f8:01:12:95: 92:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4F:C3:00:2F:61:26:10:E3:84:A0:2E:4D:41:65:F0:2B:58:C0:F4 X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/29D2F7BE0CA711ED98CF681AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 217.194.132.0/22 Signature Algorithm: sha256WithRSAEncryption 91:b5:c5:7f:62:5f:67:82:c0:76:ed:6b:1d:43:9b:2e:0d:d8: d4:db:4e:d4:68:3e:ce:36:b4:12:c6:0d:97:a1:14:ba:54:72: 79:03:6d:13:91:5a:b1:48:ba:ed:4d:0e:79:6c:57:fb:32:ce: 47:34:e6:1e:5f:47:e8:08:f9:25:0c:3e:c3:ef:c6:33:ff:41: c8:a2:8b:44:61:4c:28:7d:b0:4b:d8:3b:23:f3:75:fd:6e:f1: 5d:4e:68:18:79:61:1d:9e:66:7b:b6:1f:c6:c0:2d:c5:d3:53: 8d:fd:ce:c4:5b:f5:58:7f:ee:71:f0:3b:9e:b7:85:3e:6e:7e: 42:67:fb:21:8d:cd:3e:b3:87:55:9c:b1:36:ec:3a:71:50:27: 9d:8f:58:8c:ba:63:9e:af:d0:e1:73:3f:5b:4b:9d:63:e7:4a: 2a:bf:8d:8f:63:0d:a4:c5:3b:a4:a7:11:18:54:ce:30:94:56: 08:0d:ae:e2:8a:81:d9:71:2d:9f:15:a9:a8:1e:34:7a:ee:52: 36:ff:57:4f:45:c4:b3:57:2e:d2:1c:df:55:55:63:77:51:d1: e6:94:7d:df:74:69:54:22:95:03:54:7b:15:3e:df:18:7e:51: 6c:e1:48:1f:f4:09:01:d7:d3:2e:04:23:ec:49:b1:f0:27:4a: 45:15:c4:39 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBRcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjYwNzIzMDEyNjAyWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxNmRhYS04Yzk5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn1Us8BA4h/UDVqY66m2RLtFTLrNF5tiUg0QnV0Z/2embQJYDISo9Cs539trh eoFkL/kCCmMMEk7QNgG/MEnMIyXxgy3z2GcSJIJoAZaN3E6ubHVZka6hONzbiCGi kq8T7oDu+GEfv61TxRlWfzmIG2AriNUv7DfUN3EjiXsTwJB9edL7jUkdg+Elcfd6 rYCAOo60xEkz6q7U0n9nYJOy8uXfUs2UVHTLsWauRzPUN5yFHgkLGSMVL2R8BbW6 wiG/UrHrsPe7OcztgWETUSr7W02OBBwORcMOCthPkJlFpGIkUEIBowCj/Xoj1JxX Jy1ggjhbIqHt49kPxPgBEpWSQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIxPwwAv YSYQ44SgLk1BZfArWMD0MB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTUwNEUvNDRBNTE5NDg5NjA4MTFFQ0EwNEEwMDg2QzRGOUFFMDIvMjlEMkY3QkUw Q0E3MTFFRDk4Q0Y2ODFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQC2cKEMA0GCSqGSIb3DQEBCwUAA4IBAQCRtcV/Yl9ngsB27WsdQ5su DdjU207UaD7ONrQSxg2XoRS6VHJ5A20TkVqxSLrtTQ55bFf7Ms5HNOYeX0foCPkl DD7D78Yz/0HIootEYUwofbBL2Dsj83X9bvFdTmgYeWEdnmZ7th/GwC3F01ON/c7E W/VYf+5x8Duet4U+bn5CZ/shjc0+s4dVnLE27DpxUCedj1iMumOer9Dhcz9bS51j 50oqv42PYw2kxTukpxEYVM4wlFYIDa7iioHZcS2fFamoHjR67lI2/1dPRcSzVy7S HN9VVWN3UdHmlH3fdGlUIpUDVHsVPt8YflFs4Ugf9AkB19MuBCPsSbHwJ0pFFcQ5 -----END CERTIFICATE-----Generated at Fri Jul 24 00:50:44 2026 by rpki-client