$ rpki-client -vvvf rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/157A1BFC59EE11EBA398AA0AC4F9AE02.roa File: 157A1BFC59EE11EBA398AA0AC4F9AE02.roa (raw, json) Hash identifier: QMrRwT38xYy+ZuGesyjfpnO2OKgW20cjOQ+RUcdn94k= Subject key identifier: 7E:A6:E8:64:44:E4:5F:40:24:78:9B:86:05:2D:7F:28:D8:AA:3F:B1 Certificate issuer: /CN=A91557BA/serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Certificate serial: 0D41 Authority key identifier: AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/157A1BFC59EE11EBA398AA0AC4F9AE02.roa Signing time: Fri 28 Aug 2026 18:36:07 +0000 ROA not before: Fri 28 Aug 2026 18:36:07 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 10148 IP address blocks: 128.250.0.0/16 maxlen: 24 192.43.207.0/24 maxlen: 24 192.43.208.0/24 maxlen: 24 192.43.209.0/24 maxlen: 24 192.101.254.0/24 maxlen: 24 192.231.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 18:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3393 (0xd41) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91557BA, serialNumber=AF2D453BEBBFDF5F29B63AC16754C78D1B0FCB88 Validity Not Before: Aug 28 18:36:07 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a91d517-2836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:de:fe:95:95:d4:8b:a6:5e:6a:3a:0f:05:cb: a2:ba:b4:ff:49:0b:7a:fd:35:69:63:7d:d9:9a:66: a1:51:9e:4b:cf:67:fa:ee:19:59:f7:0f:a8:5c:9d: 2f:19:ee:f9:00:a5:d7:77:71:0a:b3:30:25:9f:f4: c2:60:b5:5d:9d:ce:5b:55:ee:a0:b2:87:12:5c:8d: 52:8a:e6:77:b0:9f:cd:fb:fd:70:bf:5c:b0:45:00: e5:fe:50:84:00:45:6f:01:83:27:8f:73:68:8d:a4: f7:50:d2:4b:17:29:ee:6a:43:97:b9:53:85:87:71: 33:74:1f:ce:f8:db:bf:05:28:dd:56:e0:2c:e0:b3: 2d:3e:37:f3:60:9b:f8:ed:58:3b:50:df:bc:83:3d: ad:7c:3c:ba:fa:20:13:5b:7a:03:b6:db:87:29:bf: b5:8f:71:2c:b0:46:fb:73:e1:17:e5:60:ef:8a:e5: 91:89:74:f5:1d:59:5a:28:f5:fe:60:f3:f3:11:19: 30:ee:2a:b6:c3:88:c9:f0:92:e4:90:e4:79:04:d2: 78:54:15:ba:8c:3e:b9:48:23:03:1d:67:3a:32:12: 62:57:8b:91:21:24:e0:85:d9:1f:70:e6:5e:45:ef: a2:6c:79:a9:16:b3:be:c1:88:df:b4:e9:c3:b7:b5: aa:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:A6:E8:64:44:E4:5F:40:24:78:9B:86:05:2D:7F:28:D8:AA:3F:B1 X509v3 Authority Key Identifier: keyid:AF:2D:45:3B:EB:BF:DF:5F:29:B6:3A:C1:67:54:C7:8D:1B:0F:CB:88 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/ry1FO-u_318ptjrBZ1THjRsPy4g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ry1FO-u_318ptjrBZ1THjRsPy4g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557BA/6812DF9204EB11EAA72FA363C4F9AE02/157A1BFC59EE11EBA398AA0AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 128.250.0.0/16 192.43.207.0-192.43.209.255 192.101.254.0/24 192.231.127.0/24 Signature Algorithm: sha256WithRSAEncryption 09:de:11:d8:d6:72:22:6e:eb:be:31:f6:2c:ab:61:e5:31:2f: 45:a2:28:3f:35:47:d5:c4:a5:9d:e7:cf:44:97:6e:45:a6:56: 80:5a:25:48:ad:27:ab:2e:78:fc:e6:b4:93:25:1c:55:a9:93: 3f:0e:5f:87:ab:d7:c7:ce:4e:58:02:b2:08:9d:80:d5:e2:10: de:ab:13:89:d5:4f:33:d8:9b:a2:67:3a:72:a4:4c:a5:43:a4: 3c:cb:0e:b0:0a:22:a8:89:0e:dd:d8:4e:a6:fb:bb:61:79:5d: 4e:6f:30:db:6a:65:c5:33:9c:e4:58:43:f1:43:70:a2:bb:57: 9a:b8:27:77:61:c2:4d:10:d8:e3:79:35:af:19:02:40:57:e2: 4c:08:8a:5a:61:ba:c1:fd:bc:40:5a:3e:6f:4a:a3:a6:03:00: fc:41:f4:e8:00:28:8c:07:43:b0:b5:ae:c1:d4:1d:b4:15:b1: d0:e4:cb:cb:b5:2e:3c:f4:f6:1f:15:6b:82:ce:f8:5c:ce:20: 32:f6:0a:c9:ea:8b:11:a5:ab:ad:c9:01:9d:0f:fa:f2:1e:69: c4:ba:52:a0:b1:f9:d0:32:a4:64:31:8a:45:35:d1:2a:74:1c: d4:18:35:31:05:ff:a7:13:77:dc:f5:6b:69:bd:a2:aa:6a:04: 42:21:23:93 -----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgICDUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTU3QkExMTAvBgNVBAUTKEFGMkQ0NTNCRUJCRkRGNUYyOUI2M0FDMTY3NTRDNzhE MUIwRkNCODgwHhcNMjYwODI4MTgzNjA3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTkxZDUxNy0yODM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvN7+lZXUi6ZeajoPBcuiurT/SQt6/TVpY33ZmmahUZ5Lz2f67hlZ9w+oXJ0v Ge75AKXXd3EKszAln/TCYLVdnc5bVe6gsocSXI1SiuZ3sJ/N+/1wv1ywRQDl/lCE AEVvAYMnj3NojaT3UNJLFynuakOXuVOFh3EzdB/O+Nu/BSjdVuAs4LMtPjfzYJv4 7Vg7UN+8gz2tfDy6+iATW3oDttuHKb+1j3EssEb7c+EX5WDviuWRiXT1HVlaKPX+ YPPzERkw7iq2w4jJ8JLkkOR5BNJ4VBW6jD65SCMDHWc6MhJiV4uRISTghdkfcOZe Re+ibHmpFrO+wYjftOnDt7WqHwIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFH6m6GRE 5F9AJHibhgUtfyjYqj+xMB8GA1UdIwQYMBaAFK8tRTvrv99fKbY6wWdUx40bD8uI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NTdCQS82ODEyREY5MjA0 RUIxMUVBQTcyRkEzNjNDNEY5QUUwMi9yeTFGTy11XzMxOHB0anJCWjFUSGpSc1B5 NGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3J5MUZPLXVfMzE4cHRqckJaMVRIalJzUHk0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTU3QkEvNjgxMkRGOTIwNEVCMTFFQUE3MkZBMzYzQzRGOUFFMDIvMTU3QTFCRkM1 OUVFMTFFQkEzOThBQTBBQzRGOUFFMDIucm9hMDgGCCsGAQUFBwEHAQH/BCkwJzAl BAIAATAfAwMAgPowDAMEAMArzwMEAcAr0AMEAMBl/gMEAMDnfzANBgkqhkiG9w0B AQsFAAOCAQEACd4R2NZyIm7rvjH2LKth5TEvRaIoPzVH1cSlnefPRJduRaZWgFol SK0nqy54/Oa0kyUcVamTPw5fh6vXx85OWAKyCJ2A1eIQ3qsTidVPM9ibomc6cqRM pUOkPMsOsAoiqIkO3dhOpvu7YXldTm8w22plxTOc5FhD8UNwortXmrgnd2HCTRDY 43k1rxkCQFfiTAiKWmG6wf28QFo+b0qjpgMA/EH06AAojAdDsLWuwdQdtBWx0OTL y7UuPPT2HxVrgs74XM4gMvYKyeqLEaWrrckBnQ/68h5pxLpSoLH50DKkZDGKRTXR KnQc1Bg1MQX/pxN33PVrab2iqmoEQiEjkw== -----END CERTIFICATE-----Generated at Tue Sep 22 03:26:00 2026 by rpki-client