$ rpki-client -vvvf rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/23D7B1B81EDD11ED83B7963BC4F9AE02.roa File: 23D7B1B81EDD11ED83B7963BC4F9AE02.roa (raw, json) Hash identifier: X+ZMp2R6SUMq3SlqDIsBt5yVmWcK4Q5Oo/yQV7k9r5U= Subject key identifier: 7D:A9:ED:0C:2F:40:B8:A1:EB:D8:53:49:64:8E:5A:5E:8F:28:BB:61 Certificate issuer: /CN=A91F33A5/serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B Certificate serial: 044F Authority key identifier: 4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/23D7B1B81EDD11ED83B7963BC4F9AE02.roa Signing time: Wed 09 Sep 2026 00:50:42 +0000 ROA not before: Wed 09 Sep 2026 00:50:42 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 134111 IP address blocks: 146.118.0.0/16 maxlen: 24 192.65.130.0/24 maxlen: 24 192.102.250.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 00:13:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1103 (0x44f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F33A5, serialNumber=4FF52847215C4A22E9F1149E6CBFEDF74D61CE8B Validity Not Before: Sep 9 00:50:42 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa0ad62-f152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:78:d9:42:62:53:f8:84:c1:56:e8:e1:39:92: 1e:b6:02:2d:dc:28:16:7c:8e:49:17:28:cc:98:83: ec:36:79:9e:ec:88:53:89:6f:fc:e0:0d:8b:7d:02: 35:25:3a:de:fa:91:79:57:8d:3c:09:76:f2:bb:56: c9:ee:78:ad:35:9f:ee:e3:0c:e9:b6:3b:ae:60:06: 5b:6b:1b:06:8a:a5:f1:d1:25:2f:e5:a4:a5:01:e8: 1c:7a:02:bc:29:24:ec:b6:8d:96:96:a5:5c:f9:2a: 17:61:63:4d:f5:18:c2:1b:0a:45:04:69:98:d3:bd: 15:1f:7c:9f:a6:f1:c6:9f:37:c4:55:32:8a:80:3d: 6f:2b:8a:d2:b8:7f:58:f9:f6:9c:3a:11:b3:75:49: 36:59:ac:de:91:75:dd:4b:a3:41:24:32:22:84:f6: 48:1b:c3:97:fb:c6:86:2d:22:14:c6:1b:eb:4d:f6: 35:18:77:bd:82:b0:b9:9f:06:2d:53:92:2a:2d:74: 40:ad:d7:7b:78:a7:e8:85:4c:2b:9b:06:5b:b5:1a: d0:4f:8b:23:fc:cf:0c:6a:dc:ae:df:d0:3c:43:56: 8f:00:cd:50:d3:21:c6:a5:6d:35:e0:c8:f7:c5:90: fa:62:62:06:25:da:57:6e:3d:eb:69:df:29:8e:fa: 77:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A9:ED:0C:2F:40:B8:A1:EB:D8:53:49:64:8E:5A:5E:8F:28:BB:61 X509v3 Authority Key Identifier: keyid:4F:F5:28:47:21:5C:4A:22:E9:F1:14:9E:6C:BF:ED:F7:4D:61:CE:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/T_UoRyFcSiLp8RSebL_t901hzos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T_UoRyFcSiLp8RSebL_t901hzos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F33A5/11870972D4D811ECA4245F10C4F9AE02/23D7B1B81EDD11ED83B7963BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 146.118.0.0/16 192.65.130.0/24 192.102.250.0/23 Signature Algorithm: sha256WithRSAEncryption 05:ba:85:d7:8f:2d:4e:2f:f9:6f:5d:c7:f0:82:f2:0b:ec:b6: 0b:be:20:24:a4:11:68:60:20:47:7f:b1:ea:1a:14:c4:d3:ba: 57:cc:79:bd:d9:2a:24:52:67:ee:5b:05:4a:64:2d:f4:a7:81: 35:25:00:1f:7d:72:0d:19:5c:cd:ff:0c:87:49:0c:6e:4f:d2: 62:80:12:13:ab:16:f8:ff:23:e9:30:b8:fa:9e:2f:23:b5:0d: a0:26:c6:79:09:27:25:6d:c0:69:0b:9c:b8:84:c5:16:d3:ff: 22:1a:dc:68:25:5a:6e:0b:f0:ad:be:98:5c:9f:67:e9:e0:04: 22:37:26:ea:45:f2:86:8b:27:79:ff:8c:97:14:fd:68:b8:90: 71:44:8d:47:6b:e2:b9:d2:aa:ff:ce:d7:e6:f7:a2:c0:d1:36: cb:19:03:9d:59:56:1b:2e:70:05:67:4b:f8:d7:ee:1f:c4:e9: df:4f:c0:40:9d:64:70:ec:71:c2:a7:74:15:52:6f:81:3e:5b: 2e:d6:1d:96:ee:58:ca:50:68:45:90:83:98:0b:00:90:51:5e: 38:ed:f8:61:1b:06:15:50:5f:ab:f2:6a:f6:a0:95:32:3b:79: 9a:c4:55:d0:70:32:63:25:ec:a5:94:d1:4a:09:52:b6:d3:5c: 7a:74:99:9d -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICBE8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjMzQTUxMTAvBgNVBAUTKDRGRjUyODQ3MjE1QzRBMjJFOUYxMTQ5RTZDQkZFREY3 NEQ2MUNFOEIwHhcNMjYwOTA5MDA1MDQyWhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwYWQ2Mi1mMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxnjZQmJT+ITBVujhOZIetgIt3CgWfI5JFyjMmIPsNnme7IhTiW/84A2LfQI1 JTre+pF5V408CXbyu1bJ7nitNZ/u4wzptjuuYAZbaxsGiqXx0SUv5aSlAegcegK8 KSTsto2WlqVc+SoXYWNN9RjCGwpFBGmY070VH3yfpvHGnzfEVTKKgD1vK4rSuH9Y +facOhGzdUk2WazekXXdS6NBJDIihPZIG8OX+8aGLSIUxhvrTfY1GHe9grC5nwYt U5IqLXRArdd7eKfohUwrmwZbtRrQT4sj/M8Matyu39A8Q1aPAM1Q0yHGpW014Mj3 xZD6YmIGJdpXbj3rad8pjvp3VwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFH2p7Qwv QLih69hTSWSOWl6PKLthMB8GA1UdIwQYMBaAFE/1KEchXEoi6fEUnmy/7fdNYc6L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMzNBNS8xMTg3MDk3MkQ0 RDgxMUVDQTQyNDVGMTBDNEY5QUUwMi9UX1VvUnlGY1NpTHA4UlNlYkxfdDkwMWh6 b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RfVW9SeUZjU2lMcDhSU2ViTF90OTAxaHpvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjMzQTUvMTE4NzA5NzJENEQ4MTFFQ0E0MjQ1RjEwQzRGOUFFMDIvMjNEN0IxQjgx RUREMTFFRDgzQjc5NjNCQzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX BAIAATARAwMAknYDBADAQYIDBAHAZvowDQYJKoZIhvcNAQELBQADggEBAAW6hdeP LU4v+W9dx/CC8gvstgu+ICSkEWhgIEd/seoaFMTTulfMeb3ZKiRSZ+5bBUpkLfSn gTUlAB99cg0ZXM3/DIdJDG5P0mKAEhOrFvj/I+kwuPqeLyO1DaAmxnkJJyVtwGkL nLiExRbT/yIa3GglWm4L8K2+mFyfZ+ngBCI3JupF8oaLJ3n/jJcU/Wi4kHFEjUdr 4rnSqv/O1+b3osDRNssZA51ZVhsucAVnS/jX7h/E6d9PwECdZHDsccKndBVSb4E+ Wy7WHZbuWMpQaEWQg5gLAJBRXjjt+GEbBhVQX6vyavaglTI7eZrEVdBwMmMl7KWU 0UoJUrbTXHp0mZ0= -----END CERTIFICATE-----Generated at Fri Sep 25 14:26:58 2026 by rpki-client