$ rpki-client -vvf rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/ECB0C56845B211EFBCC09A1AC4F9AE02.roa File: ECB0C56845B211EFBCC09A1AC4F9AE02.roa (raw, json) Hash identifier: XlfXtiHFNX7/67H2UR1inFOAMG5dLCk4KBq/ZXW7m4o= Subject key identifier: 51:33:29:F5:2C:C4:27:63:41:C3:07:9A:51:C2:73:D4:B3:12:86:F2 Certificate issuer: /CN=A91DACA7/serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Certificate serial: 0136 Authority key identifier: 01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/ECB0C56845B211EFBCC09A1AC4F9AE02.roa Signing time: Sun 01 Mar 2026 11:07:58 +0000 ROA not before: Tue 13 Jan 2026 04:23:35 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152317 IP address blocks: 157.10.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:39:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 310 (0x136) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DACA7, serialNumber=01BB28FDBE155A8662C5EE680CFDF0C98D4EBD1D Validity Not Before: Jan 13 04:23:35 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41e0e-17ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:52:db:e8:2e:75:e5:53:8c:25:c1:82:10:fd: 14:e7:14:0c:73:c4:53:6b:1d:53:fe:e8:09:d5:68: 17:f3:17:96:35:d0:04:86:02:d6:4d:2b:6f:b5:66: 5c:7d:a6:d0:d6:b2:21:4c:9a:54:71:1c:4c:4a:a1: 4a:dd:37:88:bd:2f:79:06:b1:73:aa:31:92:e8:63: 59:4a:88:80:b3:3e:2d:67:09:65:08:8c:0b:88:95: 30:db:df:c6:71:a8:fc:a0:48:07:f2:94:7e:2e:5f: 8f:3b:5f:e5:3d:af:4f:32:42:31:2c:ab:81:0e:7d: be:41:0e:32:c6:dc:83:9f:13:18:8a:ee:75:b2:8d: be:d1:90:3a:f3:3b:d5:22:f4:51:2d:9f:e5:21:a8: 1b:be:3c:ed:0a:a4:ad:24:f6:1d:51:ec:ac:43:c8: 2b:b1:47:eb:95:b4:7d:ff:ef:fe:76:ab:ff:3f:d1: a3:cc:80:e0:7b:86:5b:67:b5:9d:da:6c:d2:82:ff: 89:dc:69:e2:42:6f:bc:80:99:4f:45:b3:e2:db:61: b7:2b:42:cc:15:25:63:ed:27:42:64:20:d8:79:0f: 0e:bb:e2:26:38:02:fe:46:f7:da:0e:b9:5d:3b:fd: bf:58:8f:e0:7f:71:d0:d8:27:e6:cb:9e:10:13:50: 82:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:33:29:F5:2C:C4:27:63:41:C3:07:9A:51:C2:73:D4:B3:12:86:F2 X509v3 Authority Key Identifier: keyid:01:BB:28:FD:BE:15:5A:86:62:C5:EE:68:0C:FD:F0:C9:8D:4E:BD:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/Abso_b4VWoZixe5oDP3wyY1OvR0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Abso_b4VWoZixe5oDP3wyY1OvR0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DACA7/517E6E4C45B211EFA5DF6D19C4F9AE02/ECB0C56845B211EFBCC09A1AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.128.0/23 Signature Algorithm: sha256WithRSAEncryption 2b:f2:2c:50:5d:cf:48:51:49:7f:6c:da:36:41:cd:c0:0a:77: 94:b2:f8:91:75:58:b9:6d:9b:98:d5:6c:17:36:87:e2:4a:04: e5:ae:ed:a4:5e:74:53:92:d9:5c:b5:74:d5:28:43:2f:f7:73: 27:85:69:04:8e:dc:e9:db:e3:5c:3c:cd:a7:38:23:b3:f9:d5: 41:a1:3b:06:8a:3b:a6:f7:00:27:6f:5c:01:4b:11:c7:33:5a: f2:c8:06:1f:77:27:fe:67:04:e9:49:ed:50:c0:c6:fd:26:e7: 63:73:e7:98:38:f2:de:bc:d2:a1:7c:27:48:dc:68:62:fc:7e: 85:47:6e:ca:33:af:df:c1:91:cb:14:ce:7d:83:37:68:ef:3f: 00:cb:61:0e:71:cc:00:9e:fc:b8:32:6f:43:03:7a:af:7c:17: 9b:5d:cb:9c:0a:1b:55:83:81:94:92:2a:8b:db:16:94:64:14: b1:e7:b4:cd:dc:41:54:ab:2e:79:56:f5:d3:9e:b5:a8:eb:e3: 59:5e:16:f0:26:0f:25:f6:3d:a4:71:84:d1:15:b5:da:6a:c4: 75:39:c6:2f:bd:e5:a7:d5:4b:7d:80:c7:0e:0a:7b:86:f4:b8: 3a:78:71:aa:14:f3:e6:56:4b:80:19:ec:2c:1a:63:16:e5:e7: 04:5a:d8:e8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICATYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REFDQTcxMTAvBgNVBAUTKDAxQkIyOEZEQkUxNTVBODY2MkM1RUU2ODBDRkRGMEM5 OEQ0RUJEMUQwHhcNMjYwMTEzMDQyMzM1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWUwZS0xN2FlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5FLb6C515VOMJcGCEP0U5xQMc8RTax1T/ugJ1WgX8xeWNdAEhgLWTStvtWZc fabQ1rIhTJpUcRxMSqFK3TeIvS95BrFzqjGS6GNZSoiAsz4tZwllCIwLiJUw29/G caj8oEgH8pR+Ll+PO1/lPa9PMkIxLKuBDn2+QQ4yxtyDnxMYiu51so2+0ZA68zvV IvRRLZ/lIagbvjztCqStJPYdUeysQ8grsUfrlbR9/+/+dqv/P9GjzIDge4ZbZ7Wd 2mzSgv+J3GniQm+8gJlPRbPi22G3K0LMFSVj7SdCZCDYeQ8Ou+ImOAL+RvfaDrld O/2/WI/gf3HQ2Cfmy54QE1CChQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFEzKfUs xCdjQcMHmlHCc9SzEobyMB8GA1UdIwQYMBaAFAG7KP2+FVqGYsXuaAz98MmNTr0d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQUNBNy81MTdFNkU0QzQ1 QjIxMUVGQTVERjZEMTlDNEY5QUUwMi9BYnNvX2I0VldvWml4ZTVvRFAzd3lZMU92 UjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Fic29fYjRWV29aaXhlNW9EUDN3eVkxT3ZSMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REFDQTcvNTE3RTZFNEM0NUIyMTFFRkE1REY2RDE5QzRGOUFFMDIvRUNCMEM1Njg0 NUIyMTFFRkJDQzA5QTFBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQqAMA0GCSqGSIb3DQEBCwUAA4IBAQAr8ixQXc9IUUl/bNo2Qc3A CneUsviRdVi5bZuY1WwXNofiSgTlru2kXnRTktlctXTVKEMv93MnhWkEjtzp2+Nc PM2nOCOz+dVBoTsGijum9wAnb1wBSxHHM1ryyAYfdyf+ZwTpSe1QwMb9Judjc+eY OPLevNKhfCdI3Ghi/H6FR27KM6/fwZHLFM59gzdo7z8Ay2EOccwAnvy4Mm9DA3qv fBebXcucChtVg4GUkiqL2xaUZBSx57TN3EFUqy55VvXTnrWo6+NZXhbwJg8l9j2k cYTRFbXaasR1OcYvveWn1Ut9gMcOCnuG9Lg6eHGqFPPmVkuAGewsGmMW5ecEWtjo -----END CERTIFICATE-----Generated at Mon Mar 2 08:01:29 2026 by rpki-client