$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa File: B57E9D8C98D511F0912EFD62C4F9AE02.roa (raw, json) Hash identifier: 4nKg+X7JGFIuP3mpoxMRrEp0mp4b6ki1NFU060UN+wQ= Subject key identifier: 8A:A5:2E:E2:C4:0B:81:57:04:77:8B:3C:A7:83:14:94:F6:2F:AE:4C Certificate issuer: /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Certificate serial: D9 Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa Signing time: Sat 24 Oct 2026 03:53:59 +0000 ROA not before: Sat 24 Oct 2026 03:53:59 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 154262 IP address blocks: 27.126.156.0/23 maxlen: 23 27.126.156.0/24 maxlen: 24 27.126.157.0/24 maxlen: 24 2001:df6:25c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 06:49:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Validity Not Before: Oct 24 03:53:59 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6adc2bd7-5208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:ba:a3:9a:8d:1f:64:a9:1d:d0:bb:48:4a:2a: 6a:45:ce:e9:d8:87:71:c4:da:75:c9:90:91:c6:0a: 32:68:19:ff:11:55:15:70:77:95:30:ec:69:46:1c: 71:4b:66:4d:23:7e:27:9e:91:99:77:b5:26:35:5b: 7b:40:07:02:c2:bd:fa:79:7c:ee:9c:a0:e4:98:0e: 13:16:0f:71:b9:f5:be:37:a0:59:68:90:ac:84:e7: 46:f1:4f:fb:0f:e7:80:0a:71:59:3d:1a:f3:d6:80: 4c:4f:36:ae:ea:55:79:e7:c6:90:ec:f4:10:e4:6e: c8:f4:9e:b1:80:c2:0a:59:35:c7:9a:55:a8:45:c9: 21:fc:13:9a:95:90:51:49:30:7f:e5:07:26:dd:83: 75:c3:f0:bc:46:a1:c2:1e:9f:db:0a:fe:b9:f4:5b: 0a:72:72:e0:48:88:1b:c6:e4:8c:8a:91:ab:9a:5b: 04:ed:a2:e7:08:de:84:85:a9:cb:c8:aa:82:a5:83: c4:06:a3:c4:84:30:aa:82:18:6e:a0:5f:3a:a0:75: b3:d8:5a:28:fd:f0:32:3c:e4:2b:47:67:e9:a4:8a: cf:57:7c:bd:b0:74:c5:7b:e2:ee:db:89:7f:bf:89: d6:29:b6:b2:d9:41:bf:81:17:f0:cb:4d:39:fd:ac: 27:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:A5:2E:E2:C4:0B:81:57:04:77:8B:3C:A7:83:14:94:F6:2F:AE:4C X509v3 Authority Key Identifier: keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.126.156.0/23 IPv6: 2001:df6:25c0::/48 Signature Algorithm: sha256WithRSAEncryption 15:7b:63:34:e9:c0:80:cd:60:4b:9e:85:3b:56:79:69:22:e2: 04:18:79:84:6d:5b:13:97:18:fa:40:02:e0:0e:ba:b8:3c:c3: c9:18:1b:7b:1b:2e:04:aa:03:04:1e:fd:dd:4c:04:7f:c8:60: 8e:2f:cf:db:09:cb:87:c4:75:65:b5:aa:ff:8a:45:71:90:41: ca:89:b3:42:c4:2a:b6:e2:fb:e6:8e:82:3d:bb:f1:ec:1a:c5: d9:ac:28:35:f7:e6:3a:a2:b7:53:23:6e:31:79:b7:6d:e7:44: 3b:58:ba:8b:e0:e4:75:78:ca:a9:51:2d:5e:e4:b5:1e:dc:08: e0:2d:e1:7a:5d:09:42:bf:50:be:6d:e9:8e:f0:bb:e9:45:c4: 03:09:0a:ad:d0:86:38:a6:4f:48:a1:1c:18:68:f9:64:b3:dc: 17:de:43:8e:4c:39:81:5d:53:c2:df:f7:0f:58:d2:a1:73:ea: f2:91:00:a4:64:3c:03:9c:bb:9e:6e:b4:d1:1a:71:9a:2f:37: 1f:3b:c3:58:14:58:c7:9a:6e:29:5b:a6:58:ef:e1:28:40:54: da:1d:5e:31:22:f8:ce:cb:d4:84:e5:7b:ab:64:9b:3e:38:6e: 14:cf:f4:76:0e:8c:6c:28:02:30:fc:19:cf:24:48:5b:a0:42: 4a:5a:e4:a0 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBOTQxMTAvBgNVBAUTKDY0QzBDMUQ5NjE1MDExMDYyNTEzRUY0N0I4RUUzODg5 ODFEM0U4MEYwHhcNMjYxMDI0MDM1MzU5WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWRjMmJkNy01MjA4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA77qjmo0fZKkd0LtISipqRc7p2IdxxNp1yZCRxgoyaBn/EVUVcHeVMOxpRhxx S2ZNI34nnpGZd7UmNVt7QAcCwr36eXzunKDkmA4TFg9xufW+N6BZaJCshOdG8U/7 D+eACnFZPRrz1oBMTzau6lV558aQ7PQQ5G7I9J6xgMIKWTXHmlWoRckh/BOalZBR STB/5Qcm3YN1w/C8RqHCHp/bCv659FsKcnLgSIgbxuSMipGrmlsE7aLnCN6EhanL yKqCpYPEBqPEhDCqghhuoF86oHWz2Foo/fAyPOQrR2fppIrPV3y9sHTFe+Lu24l/ v4nWKbay2UG/gRfwy005/awnqwIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFIqlLuLE C4FXBHeLPKeDFJT2L65MMB8GA1UdIwQYMBaAFGTAwdlhUBEGJRPvR7juOImB0+gP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE5NC82Q0QwMEREMjk4 Q0IxMUYwODJDM0YwNUZDNEY5QUUwMi9aTURCMldGUUVRWWxFLTlIdU80NGlZSFQ2 QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNREIyV0ZRRVFZbEUtOUh1TzQ0aVlIVDZBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhBOTQvNkNEMDBERDI5OENCMTFGMDgyQzNGMDVGQzRGOUFFMDIvQjU3RTlEOEM5 OEQ1MTFGMDkxMkVGRDYyQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBG36cMA8EAgACMAkDBwAgAQ32JcAwDQYJKoZIhvcNAQELBQADggEB ABV7YzTpwIDNYEuehTtWeWki4gQYeYRtWxOXGPpAAuAOurg8w8kYG3sbLgSqAwQe /d1MBH/IYI4vz9sJy4fEdWW1qv+KRXGQQcqJs0LEKrbi++aOgj278ewaxdmsKDX3 5jqit1MjbjF5t23nRDtYuovg5HV4yqlRLV7ktR7cCOAt4XpdCUK/UL5t6Y7wu+lF xAMJCq3QhjimT0ihHBho+WSz3BfeQ45MOYFdU8Lf9w9Y0qFz6vKRAKRkPAOcu55u tNEacZovNx87w1gUWMeabilbpljv4ShAVNodXjEi+M7L1ITle6tkmz44bhTP9HYO jGwoAjD8Gc8kSFugQkpa5KA= -----END CERTIFICATE-----Generated at Sun Nov 15 20:44:03 2026 by rpki-client