$ rpki-client -vvf rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/51B1F2A665D911EBA6089869C4F9AE02.roa File: 51B1F2A665D911EBA6089869C4F9AE02.roa (raw, json) Hash identifier: Agm1iHBSDHpN64vkTSxuS0Cc6JpxKn9+gu3qk14vA4A= Subject key identifier: 9A:1C:54:1F:3F:3A:B3:62:2F:23:36:E4:1D:C7:8B:3A:88:D3:80:E1 Certificate issuer: /CN=A91D298D/serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Certificate serial: 0889 Authority key identifier: 83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/51B1F2A665D911EBA6089869C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:23:30 +0000 ROA not before: Thu 12 Feb 2026 20:17:44 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 59257 IP address blocks: 209.150.144.0/23 maxlen: 24 209.150.146.0/23 maxlen: 24 209.150.148.0/23 maxlen: 24 209.150.150.0/23 maxlen: 24 209.150.152.0/21 maxlen: 21 209.150.152.0/23 maxlen: 24 209.150.154.0/23 maxlen: 24 209.150.156.0/23 maxlen: 24 209.150.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2185 (0x889) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D298D, serialNumber=83AEF93152B2508CBC80A3627E3A27E87BCFDECA Validity Not Before: Feb 12 20:17:44 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47612-9caf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cd:e4:30:3a:d3:62:05:08:c2:64:30:ef:4c: 67:89:bb:3d:63:d5:e6:28:d9:57:87:75:60:40:c3: 0c:82:66:3b:c2:ed:0d:65:0a:04:d4:30:ad:b5:e8: b3:35:ea:8f:ac:0a:1f:46:dc:d2:5e:e3:0f:ee:2b: b8:dc:ef:b9:9f:3a:8b:1f:7d:04:7b:18:3d:23:4d: aa:ea:63:81:3a:a1:8b:60:8a:71:e7:75:72:31:89: e0:11:41:94:54:b1:75:b5:aa:30:be:f3:78:17:60: 63:d4:63:52:0b:e3:eb:73:6a:ab:8b:ba:4a:ba:57: 08:65:52:d3:67:80:74:f1:2b:d2:49:4b:f9:f2:78: 43:7d:b9:f3:68:d5:c5:a4:00:34:ae:c1:10:23:88: e5:19:dc:c1:52:e8:45:92:7f:24:44:33:57:75:1c: c5:6b:f5:9c:3c:8f:4a:a4:9c:97:a2:84:62:34:51: 46:b3:ba:84:2c:50:1e:fa:f0:be:7d:20:6c:c7:25: c1:bb:d3:2e:ae:29:fc:4f:25:1f:93:c4:36:1c:bb: 64:27:73:4f:79:5d:2e:24:c3:c2:21:43:8f:f8:d5: e1:04:89:ac:0e:04:26:59:16:8a:75:ad:2a:e3:1f: e2:4c:e5:1f:60:fa:01:80:a0:e7:64:d9:68:25:46: 85:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:1C:54:1F:3F:3A:B3:62:2F:23:36:E4:1D:C7:8B:3A:88:D3:80:E1 X509v3 Authority Key Identifier: keyid:83:AE:F9:31:52:B2:50:8C:BC:80:A3:62:7E:3A:27:E8:7B:CF:DE:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/g675MVKyUIy8gKNifjon6HvP3so.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g675MVKyUIy8gKNifjon6HvP3so.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D298D/2CB11FCEF1A611EAB95C0E2FC4F9AE02/51B1F2A665D911EBA6089869C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 209.150.144.0/20 Signature Algorithm: sha256WithRSAEncryption 6a:a1:90:2e:f5:29:fc:58:32:08:3d:e6:3e:7d:9a:5b:5c:62: 52:40:ae:dd:7b:63:71:da:0b:45:fe:74:f0:b3:38:7b:80:0b: 95:d9:ac:31:60:f3:8a:8c:2b:1a:ff:4e:53:d4:ac:3c:d7:f2: 65:4a:d7:3a:bd:94:13:17:b0:c1:94:59:3d:33:e7:8b:d9:85: 3e:27:a6:ad:59:9a:22:af:20:5a:3e:72:33:c6:ef:ad:21:a3: 96:c7:0d:fa:a6:9e:a7:93:4f:ce:a5:fb:30:4e:cb:f5:ef:4d: 56:5f:b4:e5:77:58:61:69:ce:2d:32:17:ea:ec:d1:59:80:0c: f0:ac:eb:75:f6:90:c5:6e:d5:58:92:7f:12:6e:36:6a:5d:ea: 83:4d:4e:e7:ca:e4:a6:73:df:cf:82:b3:9e:89:6d:a9:70:99: 63:12:58:ab:7f:db:45:c1:75:60:e2:6b:02:af:1e:26:47:cc: 5a:10:22:4f:61:79:72:3d:f4:89:6f:8f:6b:b2:49:47:d8:ec: 6c:20:ed:b7:24:66:60:a1:2f:ba:71:3a:6d:d0:b4:f0:25:b1: 3c:63:5a:8e:e5:1c:2d:26:fd:48:87:17:5d:03:c8:49:cf:b1: 71:d5:6d:49:f8:f7:e6:e1:99:78:d7:4b:f8:70:07:ca:8c:c0: 97:ce:40:56 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI5OEQxMTAvBgNVBAUTKDgzQUVGOTMxNTJCMjUwOENCQzgwQTM2MjdFM0EyN0U4 N0JDRkRFQ0EwHhcNMjYwMjEyMjAxNzQ0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzYxMi05Y2FmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsc3kMDrTYgUIwmQw70xnibs9Y9XmKNlXh3VgQMMMgmY7wu0NZQoE1DCtteiz NeqPrAofRtzSXuMP7iu43O+5nzqLH30Eexg9I02q6mOBOqGLYIpx53VyMYngEUGU VLF1taowvvN4F2Bj1GNSC+Prc2qri7pKulcIZVLTZ4B08SvSSUv58nhDfbnzaNXF pAA0rsEQI4jlGdzBUuhFkn8kRDNXdRzFa/WcPI9KpJyXooRiNFFGs7qELFAe+vC+ fSBsxyXBu9Murin8TyUfk8Q2HLtkJ3NPeV0uJMPCIUOP+NXhBImsDgQmWRaKda0q 4x/iTOUfYPoBgKDnZNloJUaFnwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJocVB8/ OrNiLyM25B3HizqI04DhMB8GA1UdIwQYMBaAFIOu+TFSslCMvICjYn46J+h7z97K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjk4RC8yQ0IxMUZDRUYx QTYxMUVBQjk1QzBFMkZDNEY5QUUwMi9nNjc1TVZLeVVJeThnS05pZmpvbjZIdlAz c28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c2NzVNVkt5VUl5OGdLTmlmam9uNkh2UDNzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI5OEQvMkNCMTFGQ0VGMUE2MTFFQUI5NUMwRTJGQzRGOUFFMDIvNTFCMUYyQTY2 NUQ5MTFFQkE2MDg5ODY5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQE0ZaQMA0GCSqGSIb3DQEBCwUAA4IBAQBqoZAu9Sn8WDIIPeY+fZpb XGJSQK7de2Nx2gtF/nTwszh7gAuV2awxYPOKjCsa/05T1Kw81/JlStc6vZQTF7DB lFk9M+eL2YU+J6atWZoiryBaPnIzxu+tIaOWxw36pp6nk0/OpfswTsv1701WX7Tl d1hhac4tMhfq7NFZgAzwrOt19pDFbtVYkn8SbjZqXeqDTU7nyuSmc9/PgrOeiW2p cJljElirf9tFwXVg4msCrx4mR8xaECJPYXlyPfSJb49rsklH2OxsIO23JGZgoS+6 cTpt0LTwJbE8Y1qO5RwtJv1IhxddA8hJz7Fx1W1J+Pfm4Zl410v4cAfKjMCXzkBW -----END CERTIFICATE-----Generated at Mon Mar 2 05:38:16 2026 by rpki-client