$ rpki-client -vvvf rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/BFC2928AB50311F1A29149BC4111F970.roa File: BFC2928AB50311F1A29149BC4111F970.roa (raw, json) Hash identifier: 1pUmR0Iv+JSyRlcSri62+2ZlKQE8raHJCVkRfNgvUMc= Subject key identifier: 46:7E:4F:F3:1B:A1:A7:3B:35:F9:22:2A:97:60:CC:4A:D9:56:5F:A9 Certificate issuer: /CN=A91525A9/serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Certificate serial: 02B9 Authority key identifier: EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/BFC2928AB50311F1A29149BC4111F970.roa Signing time: Sun 20 Sep 2026 14:58:33 +0000 ROA not before: Sun 20 Sep 2026 14:58:33 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 24155 IP address blocks: 150.129.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 01:26:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 697 (0x2b9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91525A9, serialNumber=EBC3D7FCFB134F538FC19F98AD898C0F3F074F20 Validity Not Before: Sep 20 14:58:33 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6aaff499-5305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:da:2b:86:e0:96:66:52:76:41:d3:98:3c:2c: 3c:46:17:f5:aa:1a:22:79:2e:50:fe:91:57:f1:d8: 7a:fa:41:a1:b1:2f:3e:55:70:9e:53:51:69:1c:65: 2d:f5:16:31:a4:c1:1e:a5:88:ab:d6:a2:cc:f7:83: d1:34:1d:47:6a:fc:c9:64:51:c3:6f:cb:ec:fc:80: 4d:89:b6:3f:7b:cd:1e:cd:73:65:b0:da:8b:80:fc: 00:6a:66:50:56:af:fe:94:1c:ec:c9:9c:67:85:24: 1d:d0:ee:d7:95:1a:a4:6c:41:45:f6:30:10:e0:d5: 7a:85:4c:93:84:28:e0:ee:da:29:d0:99:b8:0d:e8: 64:d6:3e:a2:1c:17:f0:78:4f:02:5f:33:d3:19:6b: c3:c6:6d:96:31:43:8b:20:3a:4b:7b:78:cf:f4:ef: 96:0e:31:99:da:f3:83:41:d5:f3:ce:12:23:a6:b8: d5:17:23:e3:d8:79:cf:02:41:77:13:db:9a:81:85: 95:df:09:aa:6a:60:e1:22:83:40:13:3e:eb:6e:bc: 25:9f:48:ad:b0:5d:ae:1e:8b:62:43:95:19:d2:22: 7a:37:b3:23:3c:53:a4:26:47:2b:f5:41:fd:96:7d: 18:4e:a6:a1:11:1f:e3:9f:dc:0d:36:6a:8e:70:ce: cb:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:7E:4F:F3:1B:A1:A7:3B:35:F9:22:2A:97:60:CC:4A:D9:56:5F:A9 X509v3 Authority Key Identifier: keyid:EB:C3:D7:FC:FB:13:4F:53:8F:C1:9F:98:AD:89:8C:0F:3F:07:4F:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/68PX_PsTT1OPwZ-YrYmMDz8HTyA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/68PX_PsTT1OPwZ-YrYmMDz8HTyA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91525A9/2618840EB14311ED87D07678C4F9AE02/BFC2928AB50311F1A29149BC4111F970.roa sbgp-ipAddrBlock: critical IPv4: 150.129.211.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:14:f1:bf:fe:92:76:c4:fd:53:17:0e:39:4c:bc:ae:79:d3: b1:04:60:a1:7f:0e:f3:c4:78:4f:85:94:6a:2a:2a:c5:6c:53: c8:c4:17:bb:8d:a2:8e:d8:7e:6c:c1:67:d2:34:13:d9:c6:e3: 72:c1:30:8d:a5:ba:a2:1c:67:50:9a:1f:0a:fc:c6:83:20:32: 26:72:63:7a:3c:95:91:a4:2d:dc:25:60:7d:94:ba:01:bb:6b: 5c:75:eb:62:66:0e:a0:5e:2e:b9:d0:a2:b2:1a:ad:06:05:a7: 0c:de:01:96:1b:03:aa:31:00:fd:d1:1f:85:04:8c:1f:8f:a4: 00:97:37:c9:9c:22:be:25:4a:18:7b:d4:7f:22:69:08:92:77: e3:8a:d3:73:8b:c1:e4:e1:bc:28:9f:99:4a:8d:08:fd:de:d8: f7:63:f5:2c:80:68:af:6c:95:af:67:9c:54:3f:57:f5:a3:eb: db:6c:05:2b:34:99:c3:14:32:b3:f5:eb:c4:0b:60:7b:a9:ad: 51:9e:b3:3b:a5:05:35:1b:ee:a9:61:c9:76:5a:6f:c2:f3:7c: 10:a5:12:0d:88:76:d8:5c:9c:24:7b:9a:da:69:7d:70:1b:8e: 42:35:bf:14:fb:1a:45:85:95:f5:9b:a1:c3:aa:d7:5d:b6:34: 24:19:b0:f8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICArkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTI1QTkxMTAvBgNVBAUTKEVCQzNEN0ZDRkIxMzRGNTM4RkMxOUY5OEFEODk4QzBG M0YwNzRGMjAwHhcNMjYwOTIwMTQ1ODMzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFmZjQ5OS01MzA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAptorhuCWZlJ2QdOYPCw8Rhf1qhoieS5Q/pFX8dh6+kGhsS8+VXCeU1FpHGUt 9RYxpMEepYir1qLM94PRNB1HavzJZFHDb8vs/IBNibY/e80ezXNlsNqLgPwAamZQ Vq/+lBzsyZxnhSQd0O7XlRqkbEFF9jAQ4NV6hUyThCjg7top0Jm4Dehk1j6iHBfw eE8CXzPTGWvDxm2WMUOLIDpLe3jP9O+WDjGZ2vODQdXzzhIjprjVFyPj2HnPAkF3 E9uagYWV3wmqamDhIoNAEz7rbrwln0itsF2uHotiQ5UZ0iJ6N7MjPFOkJkcr9UH9 ln0YTqahER/jn9wNNmqOcM7L1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFEZ+T/Mb oac7NfkiKpdgzErZVl+pMB8GA1UdIwQYMBaAFOvD1/z7E09Tj8GfmK2JjA8/B08g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MjVBOS8yNjE4ODQwRUIx NDMxMUVEODdEMDc2NzhDNEY5QUUwMi82OFBYX1BzVFQxT1B3Wi1ZclltTUR6OEhU eUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzY4UFhfUHNUVDFPUHdaLVlyWW1NRHo4SFR5QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTI1QTkvMjYxODg0MEVCMTQzMTFFRDg3RDA3Njc4QzRGOUFFMDIvQkZDMjkyOEFC NTAzMTFGMUEyOTE0OUJDNDExMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAloHTMA0GCSqGSIb3DQEBCwUAA4IBAQBNFPG//pJ2xP1TFw45TLyu edOxBGChfw7zxHhPhZRqKirFbFPIxBe7jaKO2H5swWfSNBPZxuNywTCNpbqiHGdQ mh8K/MaDIDImcmN6PJWRpC3cJWB9lLoBu2tcdetiZg6gXi650KKyGq0GBacM3gGW GwOqMQD90R+FBIwfj6QAlzfJnCK+JUoYe9R/ImkIknfjitNzi8Hk4bwon5lKjQj9 3tj3Y/UsgGivbJWvZ5xUP1f1o+vbbAUrNJnDFDKz9evEC2B7qa1RnrM7pQU1G+6p Ycl2Wm/C83wQpRINiHbYXJwke5raaX1wG45CNb8U+xpFhZX1m6HDqtddtjQkGbD4 -----END CERTIFICATE-----Generated at Wed Sep 23 14:46:06 2026 by rpki-client