$ rpki-client -vvf rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/C591C650781311F080669C0EC4F9AE02.roa File: C591C650781311F080669C0EC4F9AE02.roa (raw, json) Hash identifier: Bg2wu7TpMXwzFSX0fI8NfsbFSLdPHOZ/G6xBjTAs5cw= Subject key identifier: 2D:15:42:27:03:2D:69:F9:19:42:B3:E1:94:8B:B5:D0:A8:0E:9A:01 Certificate issuer: /CN=A911F5CA/serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Certificate serial: 0180 Authority key identifier: B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/C591C650781311F080669C0EC4F9AE02.roa Signing time: Sun 05 Apr 2026 04:38:17 +0000 ROA not before: Sun 05 Apr 2026 04:38:17 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 147023 IP address blocks: 78.138.14.0/24 maxlen: 24 78.138.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 04:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 384 (0x180) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F5CA, serialNumber=B3D75AE1ECEEF6F92BD17D0C4B36518D5BE776F1 Validity Not Before: Apr 5 04:38:17 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69d1e739-c307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:61:60:b2:7a:f0:a1:88:04:4c:ed:0c:02:6a: 9e:d5:f0:93:2c:33:29:1f:1a:54:58:df:28:8e:94: 14:d9:3e:fb:8e:40:62:62:8f:b3:43:52:e8:f3:d2: 0f:e3:aa:aa:e0:ee:f2:77:f4:d9:c5:7e:b8:ff:28: 6f:df:46:88:97:fe:8c:54:7f:58:b9:66:20:bf:bd: ea:6c:13:6e:15:4b:8f:ac:88:8c:d9:d2:1d:5e:ac: 29:db:15:12:d4:fb:3e:e5:09:aa:93:9d:c7:58:21: 82:1f:27:3d:6e:0d:5c:0f:6a:e9:b1:80:79:0d:96: 3b:68:2a:75:23:cc:84:e9:6d:86:ae:64:84:86:95: a0:c9:b4:b5:93:fc:0f:c0:80:52:a6:13:7b:39:bb: 8e:ab:52:6b:31:f1:37:21:f3:e9:c7:8a:e0:e5:81: f5:1a:60:5d:f8:65:cb:3e:a3:f5:64:82:b9:b9:39: cb:f9:96:09:a1:ec:cd:4d:3b:91:12:fc:6d:cb:7b: 93:33:09:a9:fe:dd:97:7d:9d:34:ae:ac:da:a4:e5: 4d:18:db:bf:c2:62:a5:c2:9a:76:f8:43:e1:f1:54: b9:8b:49:37:a3:31:3b:9e:1c:c7:fb:e4:b0:53:63: 6a:46:fd:04:01:cb:6b:46:cf:d0:7b:a7:fe:d2:f0: 85:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:15:42:27:03:2D:69:F9:19:42:B3:E1:94:8B:B5:D0:A8:0E:9A:01 X509v3 Authority Key Identifier: keyid:B3:D7:5A:E1:EC:EE:F6:F9:2B:D1:7D:0C:4B:36:51:8D:5B:E7:76:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/s9da4ezu9vkr0X0MSzZRjVvndvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/s9da4ezu9vkr0X0MSzZRjVvndvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F5CA/9E7C2CEE024F11EFAC65F577C4F9AE02/C591C650781311F080669C0EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 78.138.14.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:67:51:5f:12:2c:67:89:8e:10:af:1c:aa:19:f2:1d:64:b4: e3:83:78:4e:ae:9e:aa:c4:94:88:ee:5a:95:51:96:09:3b:d1: e3:6f:72:b8:82:5d:6f:65:0c:5e:fc:1b:73:ec:8c:a4:16:b7: 1f:1d:e9:f4:c4:c8:46:25:fa:8a:95:e5:0d:8e:53:3b:e0:03: e3:8f:67:23:5c:a0:df:7c:61:83:30:43:10:de:0e:a4:e1:ed: f7:0a:e5:fa:cb:7e:03:2c:0c:c3:d9:8f:bb:b7:f4:cb:15:79: 33:c2:a1:aa:2c:02:3e:37:6f:10:b3:ff:22:74:21:f8:38:18: fa:fb:de:cd:0c:c5:4e:66:4e:c4:a4:72:29:d2:c5:b1:62:18: 79:7c:60:bb:28:b4:e5:43:3c:4a:53:a8:2e:02:97:8f:72:f5: 4c:33:a5:2c:48:41:1e:36:df:e5:85:86:1a:83:dd:41:c8:d6: a2:bc:67:d1:a2:46:1e:95:dd:2e:5d:ec:e8:62:c8:3c:41:46: 0a:c5:52:25:65:f2:37:ea:3b:21:4e:cd:9e:75:c4:da:c7:74: bb:ed:fb:78:a7:bb:65:d9:50:98:ea:04:dd:b3:2b:73:33:4b: c8:f9:5d:39:30:eb:b9:fc:91:c6:3c:ae:a5:57:e9:6e:ae:af: 97:ae:c0:f3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAYAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY1Q0ExMTAvBgNVBAUTKEIzRDc1QUUxRUNFRUY2RjkyQkQxN0QwQzRCMzY1MThE NUJFNzc2RjEwHhcNMjYwNDA1MDQzODE3WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWQxZTczOS1jMzA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1mFgsnrwoYgETO0MAmqe1fCTLDMpHxpUWN8ojpQU2T77jkBiYo+zQ1Lo89IP 46qq4O7yd/TZxX64/yhv30aIl/6MVH9YuWYgv73qbBNuFUuPrIiM2dIdXqwp2xUS 1Ps+5Qmqk53HWCGCHyc9bg1cD2rpsYB5DZY7aCp1I8yE6W2GrmSEhpWgybS1k/wP wIBSphN7ObuOq1JrMfE3IfPpx4rg5YH1GmBd+GXLPqP1ZIK5uTnL+ZYJoezNTTuR Evxty3uTMwmp/t2XfZ00rqzapOVNGNu/wmKlwpp2+EPh8VS5i0k3ozE7nhzH++Sw U2NqRv0EActrRs/Qe6f+0vCFJwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFC0VQicD LWn5GUKz4ZSLtdCoDpoBMB8GA1UdIwQYMBaAFLPXWuHs7vb5K9F9DEs2UY1b53bx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjVDQS85RTdDMkNFRTAy NEYxMUVGQUM2NUY1NzdDNEY5QUUwMi9zOWRhNGV6dTl2a3IwWDBNU3paUmpWdm5k dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3M5ZGE0ZXp1OXZrcjBYME1TelpSalZ2bmR2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUY1Q0EvOUU3QzJDRUUwMjRGMTFFRkFDNjVGNTc3QzRGOUFFMDIvQzU5MUM2NTA3 ODEzMTFGMDgwNjY5QzBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBTooOMA0GCSqGSIb3DQEBCwUAA4IBAQB8Z1FfEixniY4QrxyqGfId ZLTjg3hOrp6qxJSI7lqVUZYJO9Hjb3K4gl1vZQxe/Btz7IykFrcfHen0xMhGJfqK leUNjlM74APjj2cjXKDffGGDMEMQ3g6k4e33CuX6y34DLAzD2Y+7t/TLFXkzwqGq LAI+N28Qs/8idCH4OBj6+97NDMVOZk7EpHIp0sWxYhh5fGC7KLTlQzxKU6guApeP cvVMM6UsSEEeNt/lhYYag91ByNaivGfRokYeld0uXezoYsg8QUYKxVIlZfI36jsh Ts2edcTax3S77ft4p7tl2VCY6gTdsytzM0vI+V05MOu5/JHGPK6lV+lurq+XrsDz -----END CERTIFICATE-----Generated at Fri Apr 17 05:27:26 2026 by rpki-client