$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/39CF61B81E3F11F196621670303D8C67.roa File: 39CF61B81E3F11F196621670303D8C67.roa (raw, json) Hash identifier: zPRyj4utwiTX5jFvUWAD+F2yXKjyPz2qiUDVnqyk25k= Subject key identifier: 74:76:9A:60:49:13:C9:62:47:92:AA:6B:23:0D:DA:9C:9D:CE:06:0D Certificate issuer: /CN=A91ED65C/serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D Certificate serial: 02 Authority key identifier: AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/39CF61B81E3F11F196621670303D8C67.roa Signing time: Thu 12 Mar 2026 18:13:53 +0000 ROA not before: Thu 12 Mar 2026 18:13:53 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 6075 IP address blocks: 192.28.120.0/24 maxlen: 24 192.28.121.0/24 maxlen: 24 192.28.122.0/24 maxlen: 24 192.28.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 08:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED65C, serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D Validity Not Before: Mar 12 18:13:53 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69b30261-7902 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1d:04:1a:81:52:97:0d:c6:a0:64:4c:b4:a5: 66:62:8b:e8:b9:7b:d4:13:7b:61:fb:73:c6:b5:80: 31:ed:98:bc:58:23:26:28:3d:54:47:0a:04:96:37: ff:c0:2d:e1:ce:af:00:a9:1a:2f:42:0c:1a:21:a1: 76:00:50:6d:bc:2d:15:19:34:00:47:65:7a:4b:b7: 95:14:5a:22:ad:4c:25:b6:23:28:d4:9c:27:cb:99: 7c:b9:12:eb:30:04:c0:76:f8:b5:58:59:c3:84:46: a7:11:2d:5c:c3:05:ac:30:3c:63:50:b5:f6:c7:64: 7b:4f:c7:5a:e3:de:62:0d:79:70:76:65:84:ae:ca: 33:71:4b:72:d7:da:8d:c0:67:57:da:05:75:21:bd: 48:c7:ed:2e:35:11:d1:97:c5:3f:a8:ff:8b:95:39: 97:d6:2c:28:2a:03:7e:42:53:b6:58:33:8c:9b:ab: e0:54:03:3c:49:87:9c:98:47:7a:a7:61:0c:7e:c8: 9d:55:4f:81:71:2f:89:5f:f8:d5:8c:75:e5:14:f0: 6b:d7:41:c9:81:9c:e9:d5:a9:c7:e4:e2:8c:42:97: 69:ab:15:50:72:95:9f:59:f4:d8:af:19:51:cd:ab: a8:90:70:60:a1:95:d4:4d:c1:9b:4b:ed:ca:aa:26: b3:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:76:9A:60:49:13:C9:62:47:92:AA:6B:23:0D:DA:9C:9D:CE:06:0D X509v3 Authority Key Identifier: keyid:AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/39CF61B81E3F11F196621670303D8C67.roa sbgp-ipAddrBlock: critical IPv4: 192.28.120.0/22 Signature Algorithm: sha256WithRSAEncryption 4c:26:45:8c:5f:21:80:f4:c5:e5:98:09:a4:b0:9f:dc:41:2c: 42:cf:27:b8:7a:3c:0e:4b:39:08:2c:d7:6c:98:8b:ba:f2:00: aa:71:86:5d:96:19:75:74:3f:45:e0:75:e2:70:f3:58:4d:e5: cb:84:9e:22:bd:2f:09:92:57:9c:b0:94:f2:db:cf:11:4a:c8: d7:a5:46:98:c1:a1:c3:61:5f:4f:10:a3:37:31:a0:3c:e7:b2: a1:65:0e:37:24:74:6f:fc:69:de:de:54:57:17:6d:35:47:4a: de:d3:eb:58:61:bc:89:33:05:5c:2e:a3:c4:92:0f:4b:8d:5c: 02:bf:bc:cf:72:22:02:1a:ed:87:8f:a4:ff:6e:cf:76:77:92: 8f:a8:99:cc:ef:f3:12:7a:6a:b4:1f:62:b6:95:d0:ee:7c:85: 6c:e7:f3:72:aa:5e:d9:c3:56:9b:83:ed:08:52:78:f9:9e:ff: b4:d8:da:34:3f:bf:c8:6c:4f:68:2d:fd:79:95:56:95:a2:a4: 6e:26:3a:e8:04:10:4d:a0:d5:c0:07:9e:4e:e6:54:02:51:10: 82:61:b0:04:91:b1:5d:1b:2a:42:3f:6a:92:66:8a:74:f9:1b: af:00:8d:a2:e1:af:1e:92:0c:eb:0d:1e:0a:aa:bd:64:90:43: c7:a7:79:d0 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDY1QzExMC8GA1UEBRMoQUVGRDUxNDY0QTc5NjU0MkQ1NjQyMTNBMkY2M0FENUY4 RkMzMDA2RDAeFw0yNjAzMTIxODEzNTNaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjMwMjYxLTc5MDIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZHQQagVKXDcagZEy0pWZii+i5e9QTe2H7c8a1gDHtmLxYIyYoPVRHCgSWN//A LeHOrwCpGi9CDBohoXYAUG28LRUZNABHZXpLt5UUWiKtTCW2IyjUnCfLmXy5Eusw BMB2+LVYWcOERqcRLVzDBawwPGNQtfbHZHtPx1rj3mINeXB2ZYSuyjNxS3LX2o3A Z1faBXUhvUjH7S41EdGXxT+o/4uVOZfWLCgqA35CU7ZYM4ybq+BUAzxJh5yYR3qn YQx+yJ1VT4FxL4lf+NWMdeUU8GvXQcmBnOnVqcfk4oxCl2mrFVBylZ9Z9NivGVHN q6iQcGChldRNwZtL7cqqJrPJAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUdHaaYEkT yWJHkqprIw3anJ3OBg0wHwYDVR0jBBgwFoAUrv1RRkp5ZULVZCE6L2OtX4/DAG0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDL0Y2MTNFMTI2MUUz QzExRjFCRkI1RUExQzJGM0Q4QzY3L3J2MVJSa3A1WlVMVlpDRTZMMk90WDRfREFH MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcnYxUlJrcDVaVUxWWkNFNkwyT3RYNF9EQUcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDY1Qy9GNjEzRTEyNjFFM0MxMUYxQkZCNUVBMUMyRjNEOEM2Ny8zOUNGNjFCODFF M0YxMUYxOTY2MjE2NzAzMDNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALAHHgwDQYJKoZIhvcNAQELBQADggEBAEwmRYxfIYD0xeWYCaSwn9xB LELPJ7h6PA5LOQgs12yYi7ryAKpxhl2WGXV0P0XgdeJw81hN5cuEniK9LwmSV5yw lPLbzxFKyNelRpjBocNhX08QozcxoDznsqFlDjckdG/8ad7eVFcXbTVHSt7T61hh vIkzBVwuo8SSD0uNXAK/vM9yIgIa7YePpP9uz3Z3ko+omczv8xJ6arQfYraV0O58 hWzn83KqXtnDVpuD7QhSePme/7TY2jQ/v8hsT2gt/XmVVpWipG4mOugEEE2g1cAH nk7mVAJREIJhsASRsV0bKkI/apJminT5G68AjaLhrx6SDOsNHgqqvWSQQ8enedA= -----END CERTIFICATE-----Generated at Thu Mar 26 10:41:28 2026 by rpki-client