$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/856BB842F51811F093E49DB5586F56BC.roa File: 856BB842F51811F093E49DB5586F56BC.roa (raw, json) Hash identifier: dtmzPX5V8fm/l6+L+oO2mpDs5n8kPzxPB4xRhbIQFXA= Subject key identifier: 8E:E6:20:83:4E:9D:7C:2E:38:EC:2C:D0:43:05:A1:ED:B3:2F:1A:50 Certificate issuer: /CN=A91BCB09/serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Certificate serial: 1B Authority key identifier: EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/856BB842F51811F093E49DB5586F56BC.roa Signing time: Sun 01 Mar 2026 05:43:15 +0000 ROA not before: Mon 19 Jan 2026 09:23:31 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 131192 IP address blocks: 151.158.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27 (0x1b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BCB09, serialNumber=EED2809187FDEAFC5478AC3AB56A6AB4F9C1BD46 Validity Not Before: Jan 19 09:23:31 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a3d1f3-69a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:cd:ac:5b:f9:92:d9:8b:f4:cf:fb:bd:ce: 78:7d:84:42:02:31:c0:b7:0d:d1:bf:3e:ca:8d:3b: 51:21:80:77:12:8a:4a:6a:99:d0:5f:50:00:fb:fb: 63:20:d8:6e:02:11:8b:2e:a5:05:0d:09:eb:3b:43: a8:a3:87:2e:4f:b9:e4:e6:54:06:11:7b:48:6e:42: 69:00:81:e5:99:3e:dc:e6:71:17:0e:0a:16:db:b1: f2:6e:78:c7:87:29:e3:c2:66:48:04:76:14:ce:64: 57:48:d0:57:b3:69:87:ca:32:0f:66:74:7a:92:32: 74:a3:dc:81:82:41:38:ce:1a:75:16:41:c5:36:5c: d0:74:aa:a2:a0:61:2c:da:7f:bf:f2:96:9e:39:1d: de:08:5b:39:47:2f:d8:1b:cb:14:3a:ce:00:86:2f: 9d:9b:c2:98:74:7e:7d:d8:92:d7:ab:9d:64:b1:d5: d6:4b:5b:69:4f:67:eb:54:4d:17:9c:1a:6b:58:51: a4:ba:07:9b:6b:a0:7a:45:ed:b0:52:0b:b1:79:64: ad:03:30:fc:9e:f6:35:dd:88:de:47:64:6d:84:86: 88:4e:f8:2e:50:8c:26:c5:32:e8:a1:3e:bf:dd:89: f4:71:85:92:38:49:a9:2a:4d:45:13:d5:c0:5e:dc: 55:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:E6:20:83:4E:9D:7C:2E:38:EC:2C:D0:43:05:A1:ED:B3:2F:1A:50 X509v3 Authority Key Identifier: keyid:EE:D2:80:91:87:FD:EA:FC:54:78:AC:3A:B5:6A:6A:B4:F9:C1:BD:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/7tKAkYf96vxUeKw6tWpqtPnBvUY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7tKAkYf96vxUeKw6tWpqtPnBvUY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB09/F302E534F4FE11F0B9D9EF1F516F56BC/856BB842F51811F093E49DB5586F56BC.roa sbgp-ipAddrBlock: critical IPv4: 151.158.48.0/23 Signature Algorithm: sha256WithRSAEncryption b9:fd:1a:87:3a:1a:55:f4:c7:ff:e4:f1:6b:f1:cc:84:46:3b: c9:6c:c3:10:a2:ee:14:60:2a:85:e6:5b:c9:83:64:c9:13:e5: 15:9d:40:b0:48:73:4f:8c:6d:65:61:a4:3a:0a:4e:eb:7c:18: 8e:30:98:49:d3:f8:13:d0:8a:a8:04:da:eb:d5:22:0c:53:36: f2:72:79:03:e6:aa:d0:81:de:8d:c0:17:73:37:bd:b4:81:4f: 63:b4:21:f4:8c:a1:c8:07:c2:80:6f:28:6c:41:69:6e:6a:ce: 8e:16:11:95:78:61:25:ad:ef:4c:ed:f5:1a:39:c1:94:1f:32: c5:e5:15:1e:54:91:ff:61:40:4f:13:20:9d:1b:19:7b:54:8a: 96:e5:04:a3:e3:b0:22:cf:89:74:4d:af:ab:9c:92:16:1c:55: a8:b1:3c:51:c4:22:45:f1:33:90:b0:c7:f6:1a:87:85:cb:46: b4:ab:7c:61:40:30:ec:d6:50:58:3b:15:ae:e6:75:2e:62:1e: 1d:99:e4:f5:3c:88:b6:e8:08:82:fd:f7:f9:12:44:4b:3c:35: 31:c6:ad:48:23:f5:51:54:b5:b4:b0:d3:c3:1a:e0:eb:e0:37: 30:2e:07:ad:46:f9:44:cf:fe:30:80:c4:3b:77:52:07:12:c3: 4e:b1:50:b0 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBGzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC Q0IwOTExMC8GA1UEBRMoRUVEMjgwOTE4N0ZERUFGQzU0NzhBQzNBQjU2QTZBQjRG OUMxQkQ0NjAeFw0yNjAxMTkwOTIzMzFaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMWYzLTY5YTAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDBCs2sW/mS2Yv0z/u9znh9hEICMcC3DdG/PsqNO1EhgHcSikpqmdBfUAD7+2Mg 2G4CEYsupQUNCes7Q6ijhy5PueTmVAYRe0huQmkAgeWZPtzmcRcOChbbsfJueMeH KePCZkgEdhTOZFdI0FezaYfKMg9mdHqSMnSj3IGCQTjOGnUWQcU2XNB0qqKgYSza f7/ylp45Hd4IWzlHL9gbyxQ6zgCGL52bwph0fn3YkternWSx1dZLW2lPZ+tUTRec GmtYUaS6B5troHpF7bBSC7F5ZK0DMPye9jXdiN5HZG2EhohO+C5QjCbFMuihPr/d ifRxhZI4SakqTUUT1cBe3FXnAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUjuYgg06d fC447CzQQwWh7bMvGlAwHwYDVR0jBBgwFoAU7tKAkYf96vxUeKw6tWpqtPnBvUYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDQjA5L0YzMDJFNTM0RjRG RTExRjBCOUQ5RUYxRjUxNkY1NkJDLzd0S0FrWWY5NnZ4VWVLdzZ0V3BxdFBuQnZV WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvN3RLQWtZZjk2dnhVZUt3NnRXcHF0UG5CdlVZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC Q0IwOS9GMzAyRTUzNEY0RkUxMUYwQjlEOUVGMUY1MTZGNTZCQy84NTZCQjg0MkY1 MTgxMUYwOTNFNDlEQjU1ODZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGXnjAwDQYJKoZIhvcNAQELBQADggEBALn9Goc6GlX0x//k8WvxzIRG O8lswxCi7hRgKoXmW8mDZMkT5RWdQLBIc0+MbWVhpDoKTut8GI4wmEnT+BPQiqgE 2uvVIgxTNvJyeQPmqtCB3o3AF3M3vbSBT2O0IfSMocgHwoBvKGxBaW5qzo4WEZV4 YSWt70zt9Ro5wZQfMsXlFR5Ukf9hQE8TIJ0bGXtUipblBKPjsCLPiXRNr6uckhYc VaixPFHEIkXxM5Cwx/Yah4XLRrSrfGFAMOzWUFg7Fa7mdS5iHh2Z5PU8iLboCIL9 9/kSREs8NTHGrUgj9VFUtbSw08Ma4OvgNzAuB61G+UTP/jCAxDt3UgcSw06xULA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:05:27 2026 by rpki-client