$ rpki-client -vvf rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/0FFE750C1EAF11F195BB007D1D3D8C67.roa File: 0FFE750C1EAF11F195BB007D1D3D8C67.roa (raw, json) Hash identifier: BrK0FrMPMwFevxo3blKFfc/tytf2FzSWadOgigE4AiU= Subject key identifier: 93:91:CB:96:FF:51:B9:87:28:BD:A8:89:27:65:B7:19:10:1C:A1:10 Certificate issuer: /CN=A91F3BDE/serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Certificate serial: 26 Authority key identifier: 9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/0FFE750C1EAF11F195BB007D1D3D8C67.roa Signing time: Fri 13 Mar 2026 07:34:26 +0000 ROA not before: Fri 13 Mar 2026 07:34:26 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 139756 IP address blocks: 192.58.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 18:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38 (0x26) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F3BDE, serialNumber=9CD77139B7AE40C636092D12886944DE3F1AFFE2 Validity Not Before: Mar 13 07:34:26 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69b3be02-8c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:eb:82:d8:93:87:6b:f9:57:fd:17:29:8e:84: db:c0:9e:1c:e9:1b:6a:9d:d5:89:93:11:24:2c:b7: d1:d4:88:87:78:02:13:9c:09:e6:c4:5c:74:89:18: e9:7f:4b:df:1b:d3:18:14:7d:06:48:21:81:ec:14: b4:a6:2e:80:ce:97:f6:54:3e:1b:c5:cf:14:dd:e2: 07:4d:cb:b8:f9:9b:f7:6b:27:2f:a9:51:64:72:15: 70:db:35:bb:ad:c5:d9:b3:4d:aa:bf:32:3c:92:c0: e2:a1:cf:2c:d8:ce:4d:97:dc:11:dd:7d:15:0b:1e: f1:92:13:1f:e1:7d:8b:33:6a:57:ad:8d:f5:2a:52: 78:19:bc:11:3d:aa:90:5e:e9:c2:a1:04:65:38:71: 9f:38:98:e8:c5:46:93:f5:55:2a:90:a7:15:29:38: 2f:01:f4:18:0f:f2:90:20:74:47:7d:51:ed:d0:9b: 8b:74:99:5d:8c:0f:5b:80:c1:24:e9:57:f5:c5:94: 74:1d:41:73:db:51:26:99:aa:cc:d0:c3:f9:de:39: 2e:58:8c:dc:59:81:97:28:f1:41:3a:fc:cd:50:81: e5:32:99:84:f4:5e:ca:28:cf:6d:6e:0b:fb:84:82: 67:c4:d3:44:51:d2:8c:4b:a1:ab:60:3a:f7:fe:80: fa:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:91:CB:96:FF:51:B9:87:28:BD:A8:89:27:65:B7:19:10:1C:A1:10 X509v3 Authority Key Identifier: keyid:9C:D7:71:39:B7:AE:40:C6:36:09:2D:12:88:69:44:DE:3F:1A:FF:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/nNdxObeuQMY2CS0SiGlE3j8a_-I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nNdxObeuQMY2CS0SiGlE3j8a_-I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F3BDE/6FF23B90F01711F085541F24476F56BC/0FFE750C1EAF11F195BB007D1D3D8C67.roa sbgp-ipAddrBlock: critical IPv4: 192.58.100.0/24 Signature Algorithm: sha256WithRSAEncryption 41:c1:80:8d:8a:1d:f2:82:ce:6c:f4:26:7a:63:0f:1d:82:c1: 10:20:c6:12:19:2a:8f:35:5a:0d:00:a1:40:b5:96:67:1a:5c: 5d:bc:4a:e2:34:80:6b:60:c5:2f:33:82:ba:12:2c:53:b8:b6: b2:9c:b9:52:37:b2:e4:62:ff:41:12:77:83:b5:f2:96:47:65: 50:3b:70:e5:42:90:0f:1c:bf:85:db:0c:d1:b4:5d:9b:01:b5: 52:33:15:b1:dd:65:9c:99:0c:dc:5b:61:c2:ed:d7:57:c0:f4: 2b:58:f9:a8:ae:99:52:8a:e8:1b:28:42:ac:a1:60:95:43:da: 80:e1:de:78:ad:d7:bb:a2:12:95:90:26:ef:64:0d:03:56:97: 69:6d:ee:23:3f:1f:68:b7:87:9f:c0:e3:59:b8:ad:3d:bc:a0: 2c:6b:54:de:ad:1f:02:c0:c9:db:0d:3c:d5:4a:a4:d1:a8:05: 77:41:06:5e:9f:d6:31:30:1f:6b:ac:31:d7:a0:73:cc:ed:ff: 36:ae:b2:39:6a:13:28:5c:97:5a:12:1c:9c:fd:b8:29:ee:fa: b1:b5:9b:10:d4:f3:ac:b5:70:20:49:11:17:28:d4:31:3d:8f: a5:d5:fb:95:64:b8:fa:09:9f:17:58:7c:35:56:dc:c2:77:4d: 78:28:2c:17 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBJjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG M0JERTExMC8GA1UEBRMoOUNENzcxMzlCN0FFNDBDNjM2MDkyRDEyODg2OTQ0REUz RjFBRkZFMjAeFw0yNjAzMTMwNzM0MjZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YjNiZTAyLThjOTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC164LYk4dr+Vf9FymOhNvAnhzpG2qd1YmTESQst9HUiId4AhOcCebEXHSJGOl/ S98b0xgUfQZIIYHsFLSmLoDOl/ZUPhvFzxTd4gdNy7j5m/drJy+pUWRyFXDbNbut xdmzTaq/MjySwOKhzyzYzk2X3BHdfRULHvGSEx/hfYszaletjfUqUngZvBE9qpBe 6cKhBGU4cZ84mOjFRpP1VSqQpxUpOC8B9BgP8pAgdEd9Ue3Qm4t0mV2MD1uAwSTp V/XFlHQdQXPbUSaZqszQw/neOS5YjNxZgZco8UE6/M1QgeUymYT0Xsooz21uC/uE gmfE00RR0oxLoatgOvf+gPqXAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUk5HLlv9R uYcovaiJJ2W3GRAcoRAwHwYDVR0jBBgwFoAUnNdxObeuQMY2CS0SiGlE3j8a/+Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUYzQkRFLzZGRjIzQjkwRjAx NzExRjA4NTU0MUYyNDQ3NkY1NkJDL25OZHhPYmV1UU1ZMkNTMFNpR2xFM2o4YV8t SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbk5keE9iZXVRTVkyQ1MwU2lHbEUzajhhXy1JLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG M0JERS82RkYyM0I5MEYwMTcxMUYwODU1NDFGMjQ0NzZGNTZCQy8wRkZFNzUwQzFF QUYxMUYxOTVCQjAwN0QxRDNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBADAOmQwDQYJKoZIhvcNAQELBQADggEBAEHBgI2KHfKCzmz0JnpjDx2C wRAgxhIZKo81Wg0AoUC1lmcaXF28SuI0gGtgxS8zgroSLFO4trKcuVI3suRi/0ES d4O18pZHZVA7cOVCkA8cv4XbDNG0XZsBtVIzFbHdZZyZDNxbYcLt11fA9CtY+aiu mVKK6BsoQqyhYJVD2oDh3nit17uiEpWQJu9kDQNWl2lt7iM/H2i3h5/A41m4rT28 oCxrVN6tHwLAydsNPNVKpNGoBXdBBl6f1jEwH2usMdegc8zt/zausjlqEyhcl1oS HJz9uCnu+rG1mxDU86y1cCBJERco1DE9j6XV+5VkuPoJnxdYfDVW3MJ3TXgoLBc= -----END CERTIFICATE-----Generated at Fri Mar 27 05:05:54 2026 by rpki-client