$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/39CF61B81E3F11F196621670303D8C67.roa File: 39CF61B81E3F11F196621670303D8C67.roa (raw, json) Hash identifier: EYfYn+U3VhT59mtwpdO2I7nb2Hr1Kjf7NC15GXsbD8U= Subject key identifier: 30:CC:BB:91:67:94:B3:FA:A5:48:BD:C1:91:1F:1C:EE:31:0C:4A:AE Certificate issuer: /CN=A91ED65C/serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D Certificate serial: 1B Authority key identifier: AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/39CF61B81E3F11F196621670303D8C67.roa Signing time: Sat 25 Apr 2026 08:45:07 +0000 ROA not before: Sat 25 Apr 2026 08:45:07 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 6075 IP address blocks: 192.28.120.0/24 maxlen: 24 192.28.121.0/24 maxlen: 24 192.28.122.0/24 maxlen: 24 192.28.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 09:03:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED65C, serialNumber=AEFD51464A796542D564213A2F63AD5F8FC3006D Validity Not Before: Apr 25 08:45:07 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69ec7f13-421b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:65:3a:56:b6:ab:99:6d:a6:2d:34:7b:42:82: 02:e0:81:30:36:37:d5:d0:20:bc:91:f9:b4:19:c7: 44:ce:73:39:4e:74:d5:40:72:a2:d4:89:70:67:12: 83:d1:64:43:9c:95:0e:b5:52:b0:24:01:15:62:79: 85:b1:01:27:51:1c:06:61:84:12:ee:d8:81:73:7c: a3:43:37:02:c0:10:d0:03:f8:c0:2a:ff:60:b5:78: 80:ef:95:66:47:1e:46:55:f1:53:f0:ba:8d:8b:d4: 58:13:61:09:27:37:11:aa:6f:b9:5f:c6:58:be:89: f1:19:6e:7e:26:88:26:86:d5:6e:9e:03:0e:fe:5f: ce:0f:8f:bf:37:6e:b4:39:b1:af:a9:19:35:12:31: d1:32:53:dc:29:a7:01:83:a0:e3:3c:da:10:25:3c: a8:fa:90:4d:24:2b:18:e9:a5:54:21:43:21:8d:1f: 56:b2:28:4f:2f:25:1c:fa:9d:bc:78:73:d3:c1:35: 3f:4f:7a:0b:de:97:3a:4f:64:05:b4:fa:d6:58:6d: 37:dd:02:08:84:c0:7d:94:f4:39:a2:af:bb:ec:e5: e7:1f:e4:b0:4d:58:e2:52:ff:7d:32:69:43:78:59: 9a:86:1c:64:9e:6f:20:32:de:de:7f:19:a5:78:54: 33:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:CC:BB:91:67:94:B3:FA:A5:48:BD:C1:91:1F:1C:EE:31:0C:4A:AE X509v3 Authority Key Identifier: keyid:AE:FD:51:46:4A:79:65:42:D5:64:21:3A:2F:63:AD:5F:8F:C3:00:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/rv1RRkp5ZULVZCE6L2OtX4_DAG0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rv1RRkp5ZULVZCE6L2OtX4_DAG0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED65C/F613E1261E3C11F1BFB5EA1C2F3D8C67/39CF61B81E3F11F196621670303D8C67.roa sbgp-ipAddrBlock: critical IPv4: 192.28.120.0/22 Signature Algorithm: sha256WithRSAEncryption 46:31:c9:a4:2f:a9:77:e2:78:84:fa:82:d4:46:e0:27:34:39: 5d:30:a0:fa:db:49:f2:c5:2d:54:b3:06:bd:58:d3:75:11:d7: 80:35:f7:af:80:94:53:f2:f3:65:87:97:43:1d:8c:79:0b:7e: 07:5c:74:b5:be:9c:71:54:78:ec:b8:28:39:7f:ff:bf:70:b2: c0:75:69:b6:f8:5f:e3:37:31:e6:c6:77:b1:be:b8:1e:2c:92: 37:81:f2:0d:bf:58:3e:ba:e8:6d:61:bc:a3:7e:59:7d:1c:e6: 1f:96:ce:1b:2e:38:ed:6f:d1:0e:b2:7a:d7:40:a8:57:81:44: 06:e5:ea:95:e8:30:48:b7:ef:27:18:f6:cb:02:6b:3e:c5:9b: 92:66:be:41:bd:37:fc:43:96:12:2a:79:54:b4:11:c1:10:3c: e6:74:30:91:ed:f1:fb:ff:fa:ca:95:ec:2a:49:13:ce:06:74: a7:f3:90:b6:fd:ab:c7:5c:54:9c:f4:ae:6e:7c:a2:be:e4:10: 82:ed:22:4e:5e:33:27:bb:9d:6e:66:53:ba:22:61:86:5a:99: 5a:76:90:98:39:a6:7b:1f:21:a0:ca:7e:0a:53:98:76:62:d2: 7e:9f:d6:2c:63:f5:c5:fc:a6:ba:f1:00:d6:ed:3b:c5:dc:4e: 63:82:6c:5e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF RDY1QzExMC8GA1UEBRMoQUVGRDUxNDY0QTc5NjU0MkQ1NjQyMTNBMkY2M0FENUY4 RkMzMDA2RDAeFw0yNjA0MjUwODQ1MDdaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZWM3ZjEzLTQyMWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCaZTpWtquZbaYtNHtCggLggTA2N9XQILyR+bQZx0TOczlOdNVAcqLUiXBnEoPR ZEOclQ61UrAkARVieYWxASdRHAZhhBLu2IFzfKNDNwLAENAD+MAq/2C1eIDvlWZH HkZV8VPwuo2L1FgTYQknNxGqb7lfxli+ifEZbn4miCaG1W6eAw7+X84Pj783brQ5 sa+pGTUSMdEyU9wppwGDoOM82hAlPKj6kE0kKxjppVQhQyGNH1ayKE8vJRz6nbx4 c9PBNT9PegvelzpPZAW0+tZYbTfdAgiEwH2U9Dmir7vs5ecf5LBNWOJS/30yaUN4 WZqGHGSebyAy3t5/GaV4VDMVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUMMy7kWeU s/qlSL3BkR8c7jEMSq4wHwYDVR0jBBgwFoAUrv1RRkp5ZULVZCE6L2OtX4/DAG0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVENjVDL0Y2MTNFMTI2MUUz QzExRjFCRkI1RUExQzJGM0Q4QzY3L3J2MVJSa3A1WlVMVlpDRTZMMk90WDRfREFH MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcnYxUlJrcDVaVUxWWkNFNkwyT3RYNF9EQUcwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF RDY1Qy9GNjEzRTEyNjFFM0MxMUYxQkZCNUVBMUMyRjNEOEM2Ny8zOUNGNjFCODFF M0YxMUYxOTY2MjE2NzAzMDNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBALAHHgwDQYJKoZIhvcNAQELBQADggEBAEYxyaQvqXfieIT6gtRG4Cc0 OV0woPrbSfLFLVSzBr1Y03UR14A196+AlFPy82WHl0MdjHkLfgdcdLW+nHFUeOy4 KDl//79wssB1abb4X+M3MebGd7G+uB4skjeB8g2/WD666G1hvKN+WX0c5h+Wzhsu OO1v0Q6yetdAqFeBRAbl6pXoMEi37ycY9ssCaz7Fm5JmvkG9N/xDlhIqeVS0EcEQ POZ0MJHt8fv/+sqV7CpJE84GdKfzkLb9q8dcVJz0rm58or7kEILtIk5eMye7nW5m U7oiYYZamVp2kJg5pnsfIaDKfgpTmHZi0n6f1ixj9cX8prrxANbtO8XcTmOCbF4= -----END CERTIFICATE-----Generated at Wed May 13 07:21:13 2026 by rpki-client