$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/3B5B829EABF511F08C00BC38C4F9AE02.roa File: 3B5B829EABF511F08C00BC38C4F9AE02.roa (raw, json) Hash identifier: hmChBrVE0EuRQzKDJ7uKwkJY+XVRktN6YzaNk+odT7g= Subject key identifier: AE:A6:14:D8:AD:82:1C:DF:D6:BC:32:39:E1:4A:9E:DA:37:7C:49:86 Certificate issuer: /CN=A91AF3E2/serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA Certificate serial: 012E Authority key identifier: F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/3B5B829EABF511F08C00BC38C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:25:10 +0000 ROA not before: Sun 01 Mar 2026 07:25:10 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 26658 IP address blocks: 27.0.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 07:25:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 302 (0x12e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF3E2, serialNumber=F6BA6E630A6AA98D821568264E027B988DF5C9BA Validity Not Before: Mar 1 07:25:10 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a3e9d6-9fd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b9:a9:b2:1a:3e:b3:c4:e6:38:a9:dd:16:2e: ce:8a:df:8a:58:75:6b:0b:7f:8f:c3:86:8c:24:bb: c4:78:9d:8c:85:6a:48:03:3d:60:8d:a4:c4:37:1a: 6b:69:81:4f:1e:69:97:9b:ab:92:0c:0e:8a:c0:6c: c1:b3:2e:49:42:a8:76:0c:0c:a8:36:79:08:d7:de: 7b:89:8b:f1:bb:0e:a0:3f:6c:53:58:c6:95:d9:a5: 7e:17:6d:2a:3d:35:a7:d6:6d:e4:7a:2f:50:d8:09: 25:4d:71:27:ab:d1:64:93:49:a6:0c:f4:83:db:40: 8d:f2:a9:7b:0d:59:49:4b:69:e4:e9:c5:63:19:ef: 52:f3:82:d2:64:be:b3:03:da:52:34:a8:8e:d3:05: 09:9e:be:9f:c8:02:af:1f:64:86:cb:fd:ea:00:fd: 88:7c:8d:7f:fa:c6:5c:77:1a:5d:93:45:3c:84:a3: 8d:ad:33:22:63:a0:ab:fd:c6:24:17:19:e4:4c:dd: 26:41:61:1f:59:0b:5c:89:32:fa:a4:88:68:7d:13: 14:f0:14:55:0f:d1:ff:bc:52:15:f2:ef:6d:44:d5: ef:fa:e8:92:f1:c8:de:9a:12:fa:d8:38:ee:00:80: be:d4:38:65:0c:f2:5d:6a:e3:8b:50:d1:a8:a3:a5: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A6:14:D8:AD:82:1C:DF:D6:BC:32:39:E1:4A:9E:DA:37:7C:49:86 X509v3 Authority Key Identifier: keyid:F6:BA:6E:63:0A:6A:A9:8D:82:15:68:26:4E:02:7B:98:8D:F5:C9:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/9rpuYwpqqY2CFWgmTgJ7mI31ybo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9rpuYwpqqY2CFWgmTgJ7mI31ybo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF3E2/DA622E9A5B9E11EFBCDBC55BC4F9AE02/3B5B829EABF511F08C00BC38C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.0.156.0/22 Signature Algorithm: sha256WithRSAEncryption 00:b1:cd:25:c3:15:c6:e1:25:6e:92:20:f7:a6:2b:98:06:79: 31:31:06:c5:22:7e:f9:ee:9d:7c:a9:10:b2:e7:88:49:43:fc: 0d:cf:8c:2a:90:7c:80:f5:24:75:b8:b8:ff:81:18:9c:56:57: ad:47:ed:0c:a9:5f:8a:cb:e3:13:dd:05:45:98:20:99:e4:84: 37:57:a3:f2:d8:5a:ae:de:7f:5c:a4:4d:fa:32:47:d4:9a:f7: 97:fb:4f:ff:41:d1:76:dc:34:ff:64:74:3c:03:9c:ad:89:1a: 7f:87:26:b7:23:2c:ef:27:27:b4:ee:41:71:da:80:71:06:45: 21:25:b4:ee:d0:5e:9c:40:9a:e1:96:6d:0b:91:e8:bf:4b:de: 95:b1:09:f4:51:e0:c0:f5:d9:af:d4:41:e6:a7:da:b8:fa:21: 2f:10:43:44:95:bd:b7:09:7e:4e:84:99:4f:32:52:d5:73:c6: 6c:a5:c4:50:ce:4a:45:09:18:ff:3e:55:a0:8c:71:68:cb:1e: 48:81:a6:f0:1c:78:82:26:32:e2:9e:d1:b4:82:7a:40:a9:cd: c0:74:06:99:69:e3:77:86:36:c4:16:9f:16:c6:c9:ef:77:db: 0c:95:f8:d5:ee:02:5d:e7:d9:8e:bb:da:ed:e9:e8:a0:41:88: 84:3c:3e:93 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAS4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYzRTIxMTAvBgNVBAUTKEY2QkE2RTYzMEE2QUE5OEQ4MjE1NjgyNjRFMDI3Qjk4 OERGNUM5QkEwHhcNMjYwMzAxMDcyNTEwWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTlkNi05ZmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAormpsho+s8TmOKndFi7Oit+KWHVrC3+Pw4aMJLvEeJ2MhWpIAz1gjaTENxpr aYFPHmmXm6uSDA6KwGzBsy5JQqh2DAyoNnkI1957iYvxuw6gP2xTWMaV2aV+F20q PTWn1m3kei9Q2AklTXEnq9Fkk0mmDPSD20CN8ql7DVlJS2nk6cVjGe9S84LSZL6z A9pSNKiO0wUJnr6fyAKvH2SGy/3qAP2IfI1/+sZcdxpdk0U8hKONrTMiY6Cr/cYk FxnkTN0mQWEfWQtciTL6pIhofRMU8BRVD9H/vFIV8u9tRNXv+uiS8cjemhL62Dju AIC+1DhlDPJdauOLUNGoo6WT9wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK6mFNit ghzf1rwyOeFKnto3fEmGMB8GA1UdIwQYMBaAFPa6bmMKaqmNghVoJk4Ce5iN9cm6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjNFMi9EQTYyMkU5QTVC OUUxMUVGQkNEQkM1NUJDNEY5QUUwMi85cnB1WXdwcXFZMkNGV2dtVGdKN21JMzF5 Ym8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlycHVZd3BxcVkyQ0ZXZ21UZ0o3bUkzMXliby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYzRTIvREE2MjJFOUE1QjlFMTFFRkJDREJDNTVCQzRGOUFFMDIvM0I1QjgyOUVB QkY1MTFGMDhDMDBCQzM4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCGwCcMA0GCSqGSIb3DQEBCwUAA4IBAQAAsc0lwxXG4SVukiD3piuY BnkxMQbFIn757p18qRCy54hJQ/wNz4wqkHyA9SR1uLj/gRicVletR+0MqV+Ky+MT 3QVFmCCZ5IQ3V6Py2Fqu3n9cpE36MkfUmveX+0//QdF23DT/ZHQ8A5ytiRp/hya3 IyzvJye07kFx2oBxBkUhJbTu0F6cQJrhlm0Lkei/S96VsQn0UeDA9dmv1EHmp9q4 +iEvEENElb23CX5OhJlPMlLVc8ZspcRQzkpFCRj/PlWgjHFoyx5IgabwHHiCJjLi ntG0gnpAqc3AdAaZaeN3hjbEFp8Wxsnvd9sMlfjV7gJd59mOu9rt6eigQYiEPD6T -----END CERTIFICATE-----Generated at Mon Mar 2 03:50:49 2026 by rpki-client