$ rpki-client -vvf rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/DF3673AAF69211F094F72B3C3B6F56BC.roa File: DF3673AAF69211F094F72B3C3B6F56BC.roa (raw, json) Hash identifier: fnqiKGE3K2rrneA73qgjy9hRogfZICMcrPpFNmCB2iY= Subject key identifier: 72:55:7D:0A:F9:7B:01:F9:32:24:74:A2:72:BC:8F:79:7B:1A:D8:77 Certificate issuer: /CN=A913E5F9/serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4 Certificate serial: 20 Authority key identifier: 8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/DF3673AAF69211F094F72B3C3B6F56BC.roa Signing time: Sun 01 Mar 2026 05:46:58 +0000 ROA not before: Wed 21 Jan 2026 06:32:39 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 134562 IP address blocks: 151.158.16.0/23 maxlen: 23 151.158.16.0/24 maxlen: 24 151.158.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913E5F9, serialNumber=8DE765CA91D2B935362BA44C75B5C122B4A6CEF4 Validity Not Before: Jan 21 06:32:39 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a3d2d2-1d57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:b1:c1:0b:d7:de:60:33:52:8d:50:c3:eb: 6f:3e:3d:e7:35:85:99:b5:7b:22:f9:05:87:a1:30: 2c:03:e9:bf:ce:cb:78:a1:2b:72:75:b6:ea:4b:65: 2c:8a:4a:ee:7a:dd:0f:f3:de:cc:65:88:30:9a:68: 8b:71:7c:ff:db:00:71:84:da:3d:eb:59:58:04:2a: 6c:5c:6a:6a:17:ad:14:2c:99:62:26:bc:44:62:9d: aa:f1:7e:e7:88:43:1e:42:31:0c:68:71:72:18:ae: b1:8c:4d:e0:62:4f:f9:38:49:29:45:d6:d6:6e:71: a7:a1:4e:35:9a:10:2c:c9:37:06:75:be:e6:55:ba: d1:75:99:cc:00:2c:2b:f2:d8:34:39:66:9a:d3:3c: e2:aa:fb:b2:cd:ce:01:84:c8:97:6a:8b:92:24:4b: 97:0e:34:42:49:2c:27:eb:72:76:9d:95:8e:30:61: 54:dc:1c:1d:e1:f6:c5:11:e5:b5:56:a5:13:1b:07: b9:92:0f:e7:bb:eb:b7:5d:5b:72:cd:b1:9e:7c:41: 61:40:52:e3:6c:3c:4f:5b:af:7d:94:b6:70:a4:97: f1:f8:0a:2b:f1:60:7c:88:35:f3:a9:37:eb:5f:31: 25:95:0e:91:2d:4d:83:26:fe:66:07:7a:e4:82:b7: 77:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:55:7D:0A:F9:7B:01:F9:32:24:74:A2:72:BC:8F:79:7B:1A:D8:77 X509v3 Authority Key Identifier: keyid:8D:E7:65:CA:91:D2:B9:35:36:2B:A4:4C:75:B5:C1:22:B4:A6:CE:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/jedlypHSuTU2K6RMdbXBIrSmzvQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/jedlypHSuTU2K6RMdbXBIrSmzvQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913E5F9/1AF23048F69111F0A0F488523A6F56BC/DF3673AAF69211F094F72B3C3B6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 151.158.16.0/23 Signature Algorithm: sha256WithRSAEncryption 76:26:4b:f7:29:94:4f:ad:c2:7c:c3:56:aa:61:c8:4e:87:81: 86:14:fd:94:f4:95:e0:36:b5:21:04:43:96:0e:53:89:41:d0: 8f:9e:36:7f:95:d8:f5:3c:56:30:0a:76:01:7f:fc:18:5a:31: 6e:64:ee:f2:13:8f:10:61:7e:c9:a5:08:98:0e:75:bd:01:32: f2:75:e6:32:02:1f:d1:35:68:fe:bf:6d:de:cb:1d:58:68:f7: 89:35:c9:13:1b:9c:27:af:03:a7:7f:33:b0:cc:cf:7b:32:cf: 88:eb:f9:5b:21:2f:36:e3:96:7f:39:6e:8b:aa:97:71:d6:dd: 6c:4a:c5:f1:b2:58:f1:33:15:cc:25:5c:15:c9:2b:c8:e8:e3: 18:d8:e8:ab:dd:ce:de:88:a4:6c:f2:45:4d:29:43:e9:34:1d: aa:b7:ff:1b:cc:d7:0d:78:e7:e2:09:c7:fb:6e:73:d4:e2:3d: 70:ab:ce:b3:bb:a3:04:d9:bb:4d:b0:88:8b:28:11:cc:d0:a8: 4e:37:4a:af:c1:9e:bb:72:3d:68:c4:f9:85:a0:38:5f:22:70: 70:2a:46:b1:ed:c1:f2:5c:4d:77:41:b2:14:de:0a:14:59:ec: 3f:76:a3:36:46:ad:e7:99:07:f8:4a:e5:cc:00:61:d4:01:88: 60:25:da:35 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz RTVGOTExMC8GA1UEBRMoOERFNzY1Q0E5MUQyQjkzNTM2MkJBNDRDNzVCNUMxMjJC NEE2Q0VGNDAeFw0yNjAxMjEwNjMyMzlaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMmQyLTFkNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsDrHBC9feYDNSjVDD628+Pec1hZm1eyL5BYehMCwD6b/Oy3ihK3J1tupLZSyK Su563Q/z3sxliDCaaItxfP/bAHGE2j3rWVgEKmxcamoXrRQsmWImvERinarxfueI Qx5CMQxocXIYrrGMTeBiT/k4SSlF1tZucaehTjWaECzJNwZ1vuZVutF1mcwALCvy 2DQ5ZprTPOKq+7LNzgGEyJdqi5IkS5cONEJJLCfrcnadlY4wYVTcHB3h9sUR5bVW pRMbB7mSD+e767ddW3LNsZ58QWFAUuNsPE9br32UtnCkl/H4CivxYHyINfOpN+tf MSWVDpEtTYMm/mYHeuSCt3dVAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUclV9Cvl7 AfkyJHSicryPeXsa2HcwHwYDVR0jBBgwFoAUjedlypHSuTU2K6RMdbXBIrSmzvQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTNFNUY5LzFBRjIzMDQ4RjY5 MTExRjBBMEY0ODg1MjNBNkY1NkJDL2plZGx5cEhTdVRVMks2Uk1kYlhCSXJTbXp2 US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvamVkbHlwSFN1VFUySzZSTWRiWEJJclNtenZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz RTVGOS8xQUYyMzA0OEY2OTExMUYwQTBGNDg4NTIzQTZGNTZCQy9ERjM2NzNBQUY2 OTIxMUYwOTRGNzJCM0MzQjZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGXnhAwDQYJKoZIhvcNAQELBQADggEBAHYmS/cplE+twnzDVqphyE6H gYYU/ZT0leA2tSEEQ5YOU4lB0I+eNn+V2PU8VjAKdgF//BhaMW5k7vITjxBhfsml CJgOdb0BMvJ15jICH9E1aP6/bd7LHVho94k1yRMbnCevA6d/M7DMz3syz4jr+Vsh Lzbjln85bouql3HW3WxKxfGyWPEzFcwlXBXJK8jo4xjY6Kvdzt6IpGzyRU0pQ+k0 Haq3/xvM1w145+IJx/tuc9TiPXCrzrO7owTZu02wiIsoEczQqE43Sq/BnrtyPWjE +YWgOF8icHAqRrHtwfJcTXdBshTeChRZ7D92ozZGreeZB/hK5cwAYdQBiGAl2jU= -----END CERTIFICATE-----Generated at Mon Mar 2 08:23:23 2026 by rpki-client