$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/ACC1DEB0960A11EC8BB4F586C4F9AE02.roa File: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (raw, json) Hash identifier: 2Ejpb7iiO3JmzRqpewiLL1vt+WHuS/YGJN8reYrEMtI= Subject key identifier: 7D:29:83:CE:5D:75:F5:54:54:48:6D:FC:F9:4B:F5:4A:C5:5C:B2:FB Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 0516 Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/ACC1DEB0960A11EC8BB4F586C4F9AE02.roa Signing time: Thu 23 Jul 2026 01:26:00 +0000 ROA not before: Thu 23 Jul 2026 01:26:00 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 133199 IP address blocks: 217.194.132.0/24 maxlen: 24 217.194.133.0/24 maxlen: 24 217.194.134.0/24 maxlen: 24 217.194.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 01:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1302 (0x516) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Jul 23 01:26:00 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a616da8-3983 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:02:2c:14:8a:3d:c7:42:78:f7:b4:b5:49:89: 1c:59:e3:3b:1b:23:60:8a:0f:94:12:29:11:ef:d9: 5d:e4:da:21:de:b6:48:50:ad:1f:10:bb:d0:f6:e1: e4:82:68:42:1b:e9:16:c4:b2:27:07:3f:61:f3:0b: d6:4f:f4:62:46:94:7a:a9:2e:34:86:3c:d1:8b:07: 8b:8b:e7:b5:33:e0:55:2a:69:82:2b:eb:76:2d:d4: eb:b8:48:4f:a1:1d:5b:bd:d1:eb:cb:f4:80:3c:37: f3:2d:58:73:06:99:83:52:3b:85:53:ad:ad:c2:a7: 9b:c5:0d:65:09:c4:a1:3c:a3:90:93:2e:8a:1c:e8: 9f:bd:c3:08:0b:b3:2b:b5:fc:bd:89:cc:f9:9f:99: bd:14:18:33:b7:b3:5b:35:c5:3d:1d:ea:6c:0b:79: ed:06:f8:b1:e6:55:59:58:0c:98:40:bd:91:a9:5f: fc:8a:b6:c3:ff:a0:6b:87:fd:cb:cb:3a:ae:3c:00: 6f:07:81:f1:eb:df:a9:0b:2e:88:8f:e8:69:c9:4e: 89:b3:fb:f1:51:9d:8e:3a:87:00:af:68:d1:ac:b8: 85:fd:0f:50:2f:53:e0:21:64:e4:e3:d6:37:d9:c6: f0:e1:c5:e7:46:b2:7e:cc:9c:e0:87:40:6b:e2:9c: b6:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:29:83:CE:5D:75:F5:54:54:48:6D:FC:F9:4B:F5:4A:C5:5C:B2:FB X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/ACC1DEB0960A11EC8BB4F586C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 217.194.132.0/22 Signature Algorithm: sha256WithRSAEncryption cd:3e:5d:80:b8:b7:aa:0a:51:08:e2:fa:c2:d8:61:15:c3:5b: ff:1d:00:7a:ce:b1:f9:37:a0:b3:bb:84:90:4d:93:f5:af:96: c5:d0:ea:02:5f:a2:75:70:9b:10:3b:95:6a:e7:98:78:04:d2: 5d:e5:13:6e:e4:a6:0f:2b:57:11:1b:05:25:26:5d:8e:79:1c: 97:13:2d:01:0c:15:00:02:e0:22:e4:5c:ef:64:37:35:7d:d6: 9f:7b:19:a0:eb:ca:68:85:a3:78:fd:e1:11:63:d0:66:34:87: b3:df:11:98:ec:ff:10:d1:00:a3:f6:17:aa:16:fb:da:f4:ae: c8:17:de:d0:c9:92:28:a2:66:ea:2c:01:fb:ee:43:fd:51:c1: e2:7c:7a:56:cd:92:53:5c:8a:f0:5a:07:96:54:0e:19:2e:82: 17:60:5f:8f:a0:ee:fd:3f:99:03:5e:fa:ec:52:e3:0d:d2:99: 4a:38:6d:e9:96:f8:57:f8:fd:fb:15:13:0c:59:cd:52:27:ba: 4c:b1:63:40:51:01:a9:e6:32:36:b8:30:89:33:72:f2:af:5b: b4:61:88:ce:01:58:cc:e5:ad:5a:5b:80:06:78:71:06:77:20: a1:4f:ac:3d:ca:9c:8b:a2:c7:17:8e:26:c9:cb:8a:89:d3:c6: 9c:81:39:cf -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjYwNzIzMDEyNjAwWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxNmRhOC0zOTgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAowIsFIo9x0J497S1SYkcWeM7GyNgig+UEikR79ld5Noh3rZIUK0fELvQ9uHk gmhCG+kWxLInBz9h8wvWT/RiRpR6qS40hjzRiweLi+e1M+BVKmmCK+t2LdTruEhP oR1bvdHry/SAPDfzLVhzBpmDUjuFU62twqebxQ1lCcShPKOQky6KHOifvcMIC7Mr tfy9icz5n5m9FBgzt7NbNcU9HepsC3ntBvix5lVZWAyYQL2RqV/8irbD/6Brh/3L yzquPABvB4Hx69+pCy6Ij+hpyU6Js/vxUZ2OOocAr2jRrLiF/Q9QL1PgIWTk49Y3 2cbw4cXnRrJ+zJzgh0Br4py2fQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFH0pg85d dfVUVEht/PlL9UrFXLL7MB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTUwNEUvNDRBNTE5NDg5NjA4MTFFQ0EwNEEwMDg2QzRGOUFFMDIvQUNDMURFQjA5 NjBBMTFFQzhCQjRGNTg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQC2cKEMA0GCSqGSIb3DQEBCwUAA4IBAQDNPl2AuLeqClEI4vrC2GEV w1v/HQB6zrH5N6Czu4SQTZP1r5bF0OoCX6J1cJsQO5Vq55h4BNJd5RNu5KYPK1cR GwUlJl2OeRyXEy0BDBUAAuAi5FzvZDc1fdafexmg68pohaN4/eERY9BmNIez3xGY 7P8Q0QCj9heqFvva9K7IF97QyZIoombqLAH77kP9UcHifHpWzZJTXIrwWgeWVA4Z LoIXYF+PoO79P5kDXvrsUuMN0plKOG3plvhX+P37FRMMWc1SJ7pMsWNAUQGp5jI2 uDCJM3Lyr1u0YYjOAVjM5a1aW4AGeHEGdyChT6w9ypyLoscXjibJy4qJ08acgTnP -----END CERTIFICATE-----Generated at Fri Jul 24 22:20:39 2026 by rpki-client