$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa File: B57E9D8C98D511F0912EFD62C4F9AE02.roa (raw, json) Hash identifier: 86MylSxd7V+hHjjKN7/QTT2LdZCILl0Br6wq+Ny+lhA= Subject key identifier: 90:C7:32:08:20:60:63:66:E9:D6:89:AA:D6:CB:CB:64:64:9F:AF:D4 Certificate issuer: /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Certificate serial: BD Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa Signing time: Wed 09 Sep 2026 07:56:30 +0000 ROA not before: Wed 09 Sep 2026 07:56:30 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 154262 IP address blocks: 27.126.156.0/23 maxlen: 23 27.126.156.0/24 maxlen: 24 27.126.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 06:54:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 189 (0xbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Validity Not Before: Sep 9 07:56:30 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6aa1112d-5624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7d:04:60:67:5e:29:94:76:b8:d7:7b:3e:7b: 99:24:df:d7:d6:35:80:19:c5:53:17:dc:ba:f2:7b: 7a:87:cd:d4:72:22:9e:6e:8d:b4:8c:ac:2a:1d:c6: ff:1f:e2:01:71:6a:16:b5:55:a9:b1:0a:d9:d8:d8: f4:70:a2:2f:86:5b:8c:49:19:33:3d:14:c5:11:a0: 44:fe:cb:02:bd:3d:c8:6b:a8:f2:16:37:eb:79:b0: 50:c7:c2:0b:91:92:73:62:5d:eb:b9:cc:b2:ed:6f: 6f:f5:ce:69:a6:e2:b4:79:32:92:76:28:84:e1:d4: f7:89:12:e9:3b:18:f1:f8:ab:79:b5:0f:4b:30:98: c0:db:07:94:0f:cc:84:b4:16:66:81:f1:73:a2:93: 70:a4:db:06:62:6a:51:ad:bf:7d:20:d2:d8:28:3f: 34:a7:03:83:2f:af:54:d8:08:be:9b:b1:00:30:4d: 72:cb:b9:6b:22:81:d7:c8:ca:f1:8d:13:71:a8:cc: 10:35:ff:a5:6c:42:b5:f5:f2:4d:39:70:b6:7b:00: fc:ad:33:24:db:68:d3:d7:8c:d1:16:52:7b:7e:2e: cc:b1:bb:0f:3a:41:53:4e:ae:d5:ac:1a:4f:6c:05: a0:5f:34:b8:16:e9:cb:19:69:2f:07:47:e9:8d:98: 1a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:C7:32:08:20:60:63:66:E9:D6:89:AA:D6:CB:CB:64:64:9F:AF:D4 X509v3 Authority Key Identifier: keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 27.126.156.0/23 Signature Algorithm: sha256WithRSAEncryption 85:8f:b1:83:99:82:8d:f5:0f:4f:45:de:1a:8f:b7:2c:72:0a: 92:c3:e1:7b:06:4e:6e:43:ec:63:b7:91:d4:d3:d2:89:d7:1b: b5:8c:80:9e:e5:cf:8e:87:9d:11:51:da:1e:14:49:b1:57:ba: 1a:f8:55:a1:0a:0d:b9:02:35:63:6f:9d:cf:45:fc:ee:4b:18: 09:eb:85:63:ed:d3:b1:c5:77:30:fe:39:dd:5c:09:03:39:d8: 61:36:7c:d7:c5:0f:49:9f:09:b7:c1:20:82:2a:ba:19:60:8e: c2:77:2c:6e:65:91:01:c2:d8:b8:d2:dc:80:60:34:ee:0d:43: ea:7c:18:88:ad:c0:62:40:45:ff:30:e8:06:6d:e0:57:91:1b: fe:17:62:54:e6:71:fb:03:cb:c8:d8:b7:1c:1a:b4:e4:d8:5b: 17:34:42:47:75:52:3f:b7:27:65:a4:ba:6e:e6:d1:c8:73:12: 8c:95:5d:39:b6:b5:b3:d7:3b:26:91:70:de:b0:48:7f:14:07: 4a:52:c2:49:1c:85:5c:a3:1c:f6:74:21:7e:ba:56:32:6c:54: 2c:ac:9d:c1:00:b3:63:6c:cc:51:71:7f:06:2a:10:91:61:4c: ef:2b:9f:20:85:f3:3c:bc:fa:ef:13:29:1d:dc:1f:21:27:b4: 09:bb:93:44 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDhBOTQxMTAvBgNVBAUTKDY0QzBDMUQ5NjE1MDExMDYyNTEzRUY0N0I4RUUzODg5 ODFEM0U4MEYwHhcNMjYwOTA5MDc1NjMwWhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWExMTEyZC01NjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAon0EYGdeKZR2uNd7PnuZJN/X1jWAGcVTF9y68nt6h83UciKebo20jKwqHcb/ H+IBcWoWtVWpsQrZ2Nj0cKIvhluMSRkzPRTFEaBE/ssCvT3Ia6jyFjfrebBQx8IL kZJzYl3rucyy7W9v9c5ppuK0eTKSdiiE4dT3iRLpOxjx+Kt5tQ9LMJjA2weUD8yE tBZmgfFzopNwpNsGYmpRrb99INLYKD80pwODL69U2Ai+m7EAME1yy7lrIoHXyMrx jRNxqMwQNf+lbEK19fJNOXC2ewD8rTMk22jT14zRFlJ7fi7MsbsPOkFTTq7VrBpP bAWgXzS4FunLGWkvB0fpjZgaIwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJDHMggg YGNm6daJqtbLy2Rkn6/UMB8GA1UdIwQYMBaAFGTAwdlhUBEGJRPvR7juOImB0+gP MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEOEE5NC82Q0QwMEREMjk4 Q0IxMUYwODJDM0YwNUZDNEY5QUUwMi9aTURCMldGUUVRWWxFLTlIdU80NGlZSFQ2 QTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1pNREIyV0ZRRVFZbEUtOUh1TzQ0aVlIVDZBOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDhBOTQvNkNEMDBERDI5OENCMTFGMDgyQzNGMDVGQzRGOUFFMDIvQjU3RTlEOEM5 OEQ1MTFGMDkxMkVGRDYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBG36cMA0GCSqGSIb3DQEBCwUAA4IBAQCFj7GDmYKN9Q9PRd4aj7cs cgqSw+F7Bk5uQ+xjt5HU09KJ1xu1jICe5c+Oh50RUdoeFEmxV7oa+FWhCg25AjVj b53PRfzuSxgJ64Vj7dOxxXcw/jndXAkDOdhhNnzXxQ9Jnwm3wSCCKroZYI7Cdyxu ZZEBwti40tyAYDTuDUPqfBiIrcBiQEX/MOgGbeBXkRv+F2JU5nH7A8vI2LccGrTk 2FsXNEJHdVI/tydlpLpu5tHIcxKMlV05trWz1zsmkXDesEh/FAdKUsJJHIVcoxz2 dCF+ulYybFQsrJ3BALNjbMxRcX8GKhCRYUzvK58ghfM8vPrvEykd3B8hJ7QJu5NE -----END CERTIFICATE-----Generated at Tue Sep 22 15:04:05 2026 by rpki-client