$ rpki-client -vvf rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/515DD9629A8811F08FD4A810C4F9AE02.roa File: 515DD9629A8811F08FD4A810C4F9AE02.roa (raw, json) Hash identifier: Dg/Vcy50ZsOW8WbCgEni7y9JIL1pu3cmWYVSSZjfezQ= Subject key identifier: E4:ED:BE:12:8C:12:73:49:DB:38:78:04:B5:05:6C:3B:B0:CB:40:D5 Certificate issuer: /CN=A9136C1F/serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679 Certificate serial: 05 Authority key identifier: D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/515DD9629A8811F08FD4A810C4F9AE02.roa Signing time: Sun 28 Sep 2025 13:27:31 +0000 ROA not before: Sun 28 Sep 2025 13:27:31 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154260 IP address blocks: 27.126.158.0/23 maxlen: 23 27.126.158.0/24 maxlen: 24 27.126.159.0/24 maxlen: 24 2402:2de0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 08:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9136C1F, serialNumber=D4A4F0B6000DE02248C4657AF9DD26B023C5F679 Validity Not Before: Sep 28 13:27:31 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68d937c3-6f43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:27:60:00:fd:67:ac:01:f3:cd:b0:3f:a1:e5: f1:6b:99:7a:45:fe:2a:be:47:a7:fd:04:d5:4a:d5: 8f:6e:e4:e4:5a:5c:cf:02:1a:93:aa:cd:a6:f5:9b: 0c:35:0a:da:63:16:52:6c:f8:20:63:24:1c:1e:01: 4c:5f:97:3e:8d:14:db:2f:cb:74:8c:7a:42:f7:03: 37:e7:3b:53:d8:b5:d0:77:38:1b:01:16:56:a4:e2: ed:40:11:de:bf:0d:8c:56:b2:46:9e:f6:89:d4:7b: b8:27:3f:38:6f:e0:2b:27:66:66:82:74:17:55:d5: 79:09:30:69:4e:fd:57:66:a2:3d:cc:f2:28:45:94: c9:60:f4:f2:02:6a:22:31:64:61:d6:b6:97:ea:60: e1:da:dc:ac:ec:c3:3b:12:e9:59:6c:7d:52:7a:05: da:a9:9f:1b:4f:28:3c:4f:89:4a:6d:11:45:0c:14: fa:c7:01:df:cd:e8:62:b0:e4:a6:d7:23:b1:56:54: 18:da:b3:d5:9c:c3:e5:16:61:0e:1e:69:b0:f3:35: cb:20:2d:0a:c3:90:14:3f:70:af:eb:da:32:9c:16: c1:3d:b8:4e:94:a8:e2:eb:9c:a5:62:9f:77:79:4a: e3:0b:0a:2a:69:77:26:b4:6a:4c:56:d0:95:0a:dd: a5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:ED:BE:12:8C:12:73:49:DB:38:78:04:B5:05:6C:3B:B0:CB:40:D5 X509v3 Authority Key Identifier: keyid:D4:A4:F0:B6:00:0D:E0:22:48:C4:65:7A:F9:DD:26:B0:23:C5:F6:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/1KTwtgAN4CJIxGV6-d0msCPF9nk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1KTwtgAN4CJIxGV6-d0msCPF9nk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9136C1F/E6A7F6B89A8511F097C24686C4F9AE02/515DD9629A8811F08FD4A810C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.126.158.0/23 IPv6: 2402:2de0::/32 Signature Algorithm: sha256WithRSAEncryption 0f:2f:3c:75:df:94:b6:a4:82:53:c4:8b:c7:3b:f6:a5:11:a9: 9e:5a:fd:fb:f5:54:ad:80:42:c4:60:8a:f0:5d:86:fc:dc:2f: 06:c2:a6:60:3c:2a:cf:8b:a5:ec:90:c3:bf:5a:8e:cc:c3:71: fa:81:32:19:74:1f:9b:1d:fe:eb:0e:bb:c8:6f:93:ed:76:b9: 28:fe:9d:7e:61:a2:7d:2e:c9:9a:bc:63:0f:a5:10:e5:fa:33: d4:f7:8e:41:98:93:d3:6a:4b:49:55:c8:b2:35:96:35:f8:4c: bd:f1:f4:41:d0:ed:16:de:7a:49:3e:e5:da:98:4e:91:7d:95: 19:6c:ec:6b:b5:93:44:95:fe:20:5e:3b:36:84:3f:33:53:17: 36:d1:eb:f3:45:50:b9:4b:a1:0d:92:cc:a0:07:d1:76:3b:a2: 1c:5f:6f:a2:c5:7c:b5:c1:43:99:00:0a:bc:f9:db:88:7e:b0: c6:c7:8c:8b:8f:db:de:84:48:9a:f7:8e:43:e5:42:ad:66:48: 8f:fa:de:3a:36:41:ac:67:1e:44:b7:b4:2e:37:45:51:03:5f: b9:f0:24:fd:dc:65:93:3e:d4:9b:82:23:f1:cc:a0:a7:e0:bd: 48:22:71:96:1e:52:38:6f:f3:08:ee:dc:3a:71:6d:f5:f3:53: 69:7d:dc:a3 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz NkMxRjExMC8GA1UEBRMoRDRBNEYwQjYwMDBERTAyMjQ4QzQ2NTdBRjlERDI2QjAy M0M1RjY3OTAeFw0yNTA5MjgxMzI3MzFaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZDkzN2MzLTZmNDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCjJ2AA/WesAfPNsD+h5fFrmXpF/iq+R6f9BNVK1Y9u5ORaXM8CGpOqzab1mww1 CtpjFlJs+CBjJBweAUxflz6NFNsvy3SMekL3AzfnO1PYtdB3OBsBFlak4u1AEd6/ DYxWskae9onUe7gnPzhv4CsnZmaCdBdV1XkJMGlO/Vdmoj3M8ihFlMlg9PICaiIx ZGHWtpfqYOHa3KzswzsS6VlsfVJ6BdqpnxtPKDxPiUptEUUMFPrHAd/N6GKw5KbX I7FWVBjas9Wcw+UWYQ4eabDzNcsgLQrDkBQ/cK/r2jKcFsE9uE6UqOLrnKVin3d5 SuMLCippdya0akxW0JUK3aVlAgMBAAGjggKkMIICoDAdBgNVHQ4EFgQU5O2+EowS c0nbOHgEtQVsO7DLQNUwHwYDVR0jBBgwFoAU1KTwtgAN4CJIxGV6+d0msCPF9nkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM2QzFGL0U2QTdGNkI4OUE4 NTExRjA5N0MyNDY4NkM0RjlBRTAyLzFLVHd0Z0FONENKSXhHVjYtZDBtc0NQRjlu ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvMUtUd3RnQU40Q0pJeEdWNi1kMG1zQ1BGOW5rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NkMxRi9FNkE3RjZCODlBODUxMUYwOTdDMjQ2ODZDNEY5QUUwMi81MTVERDk2MjlB ODgxMUYwOEZENEE4MTBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAuBggrBgEFBQcBBwEB/wQf MB0wDAQCAAEwBgMEARt+njANBAIAAjAHAwUAJAIt4DANBgkqhkiG9w0BAQsFAAOC AQEADy88dd+UtqSCU8SLxzv2pRGpnlr9+/VUrYBCxGCK8F2G/NwvBsKmYDwqz4ul 7JDDv1qOzMNx+oEyGXQfmx3+6w67yG+T7Xa5KP6dfmGifS7JmrxjD6UQ5foz1PeO QZiT02pLSVXIsjWWNfhMvfH0QdDtFt56ST7l2phOkX2VGWzsa7WTRJX+IF47NoQ/ M1MXNtHr80VQuUuhDZLMoAfRdjuiHF9vosV8tcFDmQAKvPnbiH6wxseMi4/b3oRI mveOQ+VCrWZIj/reOjZBrGceRLe0LjdFUQNfufAk/dxlkz7Um4Ij8cygp+C9SCJx lh5SOG/zCO7cOnFt9fNTaX3cow== -----END CERTIFICATE-----Generated at Wed Nov 5 16:06:04 2025 by rpki-client