$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/3150E4A4F1F211F0B442E9B1456F56BC.roa File: 3150E4A4F1F211F0B442E9B1456F56BC.roa (raw, json) Hash identifier: NONLn4Akv/l6YL+qj6DEc725hoLYdC323Fs/6ORru7c= Subject key identifier: ED:35:21:7C:89:74:1D:35:B5:94:4D:3F:FB:45:95:2C:6B:4E:4B:E3 Certificate issuer: /CN=A91DA5F7/serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Certificate serial: 20 Authority key identifier: 98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/3150E4A4F1F211F0B442E9B1456F56BC.roa Signing time: Sun 01 Mar 2026 05:46:18 +0000 ROA not before: Sat 17 Jan 2026 18:23:25 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 142210 IP address blocks: 151.158.30.0/23 maxlen: 23 151.158.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 10:25:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32 (0x20) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA5F7, serialNumber=98E995BC3A4FF2CD08C6E3554B66374B66979270 Validity Not Before: Jan 17 18:23:25 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a3d2aa-1783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:04:84:a5:6a:31:a2:16:a8:49:c2:05:60:65: d3:0c:a0:9e:e3:8b:dd:cb:91:00:5c:e9:06:ee:d4: 5f:c8:fb:b8:bf:0a:df:39:60:35:74:a2:59:dc:1f: 84:8b:62:e6:60:09:23:2a:32:5d:a8:cb:59:27:91: 4e:3d:ad:a7:0c:d3:c9:14:9f:07:5f:66:1d:16:b3: 60:67:16:f4:8a:f1:56:f3:2f:d8:1f:03:c3:8c:36: 62:58:ff:75:7f:29:69:75:af:fa:74:68:5d:aa:cd: bf:07:50:5e:47:79:bc:77:fe:26:e0:94:ff:4b:f3: 27:0a:49:a8:e1:55:7d:64:1e:0f:d1:d5:9a:dd:ee: 08:be:b0:17:f2:9b:c4:72:48:f1:29:a1:fd:cd:11: ee:42:36:89:a6:0b:8d:59:2e:a7:8f:c9:83:6d:5b: 92:24:91:40:fe:d1:15:1d:86:d5:dd:74:c1:7b:e8: b8:4d:af:eb:b0:d4:53:3f:da:4b:c8:c5:49:06:e4: ac:54:c2:ab:7f:9a:c1:0a:4a:38:52:62:12:0c:1c: da:99:84:86:ea:e4:48:e4:d3:f9:20:47:2f:1c:63: c1:b2:45:40:98:31:97:3f:e1:ad:4f:0c:09:9b:d7: ed:2f:c2:9b:15:03:5b:ed:f6:50:97:74:d1:dc:1c: 61:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:35:21:7C:89:74:1D:35:B5:94:4D:3F:FB:45:95:2C:6B:4E:4B:E3 X509v3 Authority Key Identifier: keyid:98:E9:95:BC:3A:4F:F2:CD:08:C6:E3:55:4B:66:37:4B:66:97:92:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/mOmVvDpP8s0IxuNVS2Y3S2aXknA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/mOmVvDpP8s0IxuNVS2Y3S2aXknA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA5F7/F0DCCDD4F1F111F0AB21F93B456F56BC/3150E4A4F1F211F0B442E9B1456F56BC.roa sbgp-ipAddrBlock: critical IPv4: 151.158.30.0/23 Signature Algorithm: sha256WithRSAEncryption 29:71:e7:24:a8:65:a5:08:f0:05:73:88:5e:fa:9d:7e:96:85: 0f:cc:d4:d5:1c:06:3b:f2:db:95:77:15:c7:98:71:a7:58:73: 8c:9b:c4:3f:c5:7d:b4:1f:d3:13:79:4c:1a:46:e6:db:ce:ff: ab:83:93:ea:2a:58:9c:a1:df:c2:f9:ed:13:e3:66:51:f4:03: 5b:58:0c:1e:58:ca:77:37:f8:2c:28:11:56:ef:40:66:af:83: 39:1a:9a:ed:c2:ec:ed:29:3c:14:67:35:82:ab:eb:99:3a:6a: 53:a5:18:e0:a3:9d:fa:38:42:25:24:9a:39:18:a4:6b:e2:7f: 4e:99:db:0e:df:7a:67:64:b4:24:d2:7d:82:8d:d7:45:88:0b: c0:0b:98:5f:95:82:c1:5a:34:46:88:00:af:e1:8a:d7:3d:cb: bb:2f:fb:49:80:ce:fa:3c:d6:1b:8d:a8:42:53:4b:b5:59:54: cd:c5:97:4f:f3:13:41:24:39:04:71:17:9d:cd:08:79:0b:d3: dc:df:3e:02:50:8f:fb:11:f1:cb:f4:f6:53:29:ca:9f:0f:22: 56:19:70:51:2b:e2:85:c5:c0:1c:03:0f:27:a9:f5:19:2f:12: f9:42:15:bc:78:8e:a2:7a:cf:8d:d5:2d:8f:32:07:b9:6b:21: f4:76:c6:7a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBIDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTVGNzExMC8GA1UEBRMoOThFOTk1QkMzQTRGRjJDRDA4QzZFMzU1NEI2NjM3NEI2 Njk3OTI3MDAeFw0yNjAxMTcxODIzMjVaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkMmFhLTE3ODMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDeBISlajGiFqhJwgVgZdMMoJ7ji93LkQBc6Qbu1F/I+7i/Ct85YDV0olncH4SL YuZgCSMqMl2oy1knkU49racM08kUnwdfZh0Ws2BnFvSK8VbzL9gfA8OMNmJY/3V/ KWl1r/p0aF2qzb8HUF5Hebx3/ibglP9L8ycKSajhVX1kHg/R1Zrd7gi+sBfym8Ry SPEpof3NEe5CNommC41ZLqePyYNtW5IkkUD+0RUdhtXddMF76LhNr+uw1FM/2kvI xUkG5KxUwqt/msEKSjhSYhIMHNqZhIbq5Ejk0/kgRy8cY8GyRUCYMZc/4a1PDAmb 1+0vwpsVA1vt9lCXdNHcHGH1AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU7TUhfIl0 HTW1lE0/+0WVLGtOS+MwHwYDVR0jBBgwFoAUmOmVvDpP8s0IxuNVS2Y3S2aXknAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBNUY3L0YwRENDREQ0RjFG MTExRjBBQjIxRjkzQjQ1NkY1NkJDL21PbVZ2RHBQOHMwSXh1TlZTMlkzUzJhWGtu QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvbU9tVnZEcFA4czBJeHVOVlMyWTNTMmFYa25BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTVGNy9GMERDQ0RENEYxRjExMUYwQUIyMUY5M0I0NTZGNTZCQy8zMTUwRTRBNEYx RjIxMUYwQjQ0MkU5QjE0NTZGNTZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGXnh4wDQYJKoZIhvcNAQELBQADggEBAClx5ySoZaUI8AVziF76nX6W hQ/M1NUcBjvy25V3FceYcadYc4ybxD/FfbQf0xN5TBpG5tvO/6uDk+oqWJyh38L5 7RPjZlH0A1tYDB5Yync3+CwoEVbvQGavgzkamu3C7O0pPBRnNYKr65k6alOlGOCj nfo4QiUkmjkYpGvif06Z2w7femdktCTSfYKN10WIC8ALmF+VgsFaNEaIAK/hitc9 y7sv+0mAzvo81huNqEJTS7VZVM3Fl0/zE0EkOQRxF53NCHkL09zfPgJQj/sR8cv0 9lMpyp8PIlYZcFEr4oXFwBwDDyep9RkvEvlCFbx4jqJ6z43VLY8yB7lrIfR2xno= -----END CERTIFICATE-----Generated at Mon Mar 2 20:05:47 2026 by rpki-client