$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/9CF6A89AA27B11F09D816A4BC4F9AE02.roa File: 9CF6A89AA27B11F09D816A4BC4F9AE02.roa (raw, json) Hash identifier: +KgRGtvBsNKgJ1bmGzJ3c6UPRBi5OzU225sJX+Gg66A= Subject key identifier: 51:FB:BB:59:65:62:AF:1E:5A:70:8B:0E:19:39:F0:A6:67:B6:96:BA Certificate issuer: /CN=A91DD25E/serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Certificate serial: 9F Authority key identifier: 89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/9CF6A89AA27B11F09D816A4BC4F9AE02.roa Signing time: Mon 03 Aug 2026 08:58:07 +0000 ROA not before: Mon 03 Aug 2026 08:58:07 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 134349 IP address blocks: 157.15.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Sep 2026 06:45:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 159 (0x9f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD25E, serialNumber=89BA90CB7D442A8387C6AB930738CA200E137BAD Validity Not Before: Aug 3 08:58:07 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a70581f-0372 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:8a:58:6d:cd:7d:83:16:27:6f:a6:15:49:d4: f9:57:e0:25:86:4c:79:48:56:3e:74:4d:84:40:b9: d4:93:ed:d1:12:07:2b:f7:b4:57:26:b2:39:1c:c2: 29:fc:44:3e:b8:5d:fe:ae:d3:8b:2e:c8:fd:ae:ca: 3a:19:6b:50:cb:c4:90:36:b6:7e:be:df:36:21:23: 04:24:35:1a:f8:da:8d:15:13:88:b2:86:68:b9:fe: 6f:95:71:c6:ed:2f:76:51:56:15:81:8a:05:4f:42: 1f:59:a9:ed:c0:f4:d2:e2:36:87:31:71:d2:2d:5e: 44:18:2e:0a:d6:38:75:33:fb:87:c6:11:4f:86:53: fa:1f:39:7a:15:b8:3b:c6:22:f8:61:b6:cd:e1:6c: 0a:a6:e7:f3:29:aa:3b:83:50:05:b9:34:68:5c:63: ef:38:cc:c2:db:27:d9:88:a9:8e:71:a8:31:e1:95: e3:f4:a5:30:cf:b3:49:03:82:3e:9e:60:a3:56:85: fa:b3:c8:3b:8f:68:c4:df:48:b0:f8:6f:5f:0b:73: 7f:9d:a3:72:9c:e7:75:80:50:45:29:a8:ee:26:9b: 27:27:52:a8:ca:ca:0e:32:b5:bb:e7:d0:a5:68:7f: 58:13:22:e7:a6:64:c7:35:91:f5:5b:d6:02:52:90: 44:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FB:BB:59:65:62:AF:1E:5A:70:8B:0E:19:39:F0:A6:67:B6:96:BA X509v3 Authority Key Identifier: keyid:89:BA:90:CB:7D:44:2A:83:87:C6:AB:93:07:38:CA:20:0E:13:7B:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/ibqQy31EKoOHxquTBzjKIA4Te60.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ibqQy31EKoOHxquTBzjKIA4Te60.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD25E/355BEC86A27B11F0980FD04AC4F9AE02/9CF6A89AA27B11F09D816A4BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.191.0/24 Signature Algorithm: sha256WithRSAEncryption 45:49:ba:14:e1:19:02:14:5a:20:92:ba:a4:dc:9f:7f:73:5d: d8:ff:25:b0:1c:a7:e7:59:97:50:ca:5e:8d:3b:3c:6d:3e:02: 8d:e0:d0:34:10:ee:8b:a6:55:82:33:3e:22:cc:c3:5d:eb:e2: ac:c4:7c:cc:09:bb:5e:22:39:dd:16:a7:68:a2:e7:d8:c8:ce: eb:ee:a4:26:97:63:af:d1:22:e6:0f:e0:bd:60:22:0e:ee:42: 67:24:6c:75:54:95:45:e0:6f:c2:9d:81:43:06:e3:88:22:48: f9:52:68:68:a8:25:c0:30:0d:07:f5:4f:d4:24:17:5b:66:be: 1a:44:62:c5:72:0c:c1:20:8b:98:c0:ca:92:56:d9:15:61:83: 05:e8:32:63:d9:50:d1:ea:20:e0:e0:a7:f6:30:64:71:21:0c: b7:8e:33:39:0e:72:3b:4f:89:01:8b:13:72:6d:5a:36:a2:16: d0:b6:a9:6d:55:53:29:40:f1:3f:5c:1e:9a:2f:99:a0:b4:13: 04:b2:50:e3:cd:5d:48:1c:bf:fa:7f:0f:b8:53:4b:0e:97:c4: f1:2d:b5:7e:83:ed:6d:ea:c3:db:7c:0a:ba:1c:69:1c:23:72: 47:02:4d:9d:3a:65:80:d2:b2:28:a5:8f:a8:68:34:d3:ce:e4: 51:96:32:f0 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAJ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REQyNUUxMTAvBgNVBAUTKDg5QkE5MENCN0Q0NDJBODM4N0M2QUI5MzA3MzhDQTIw MEUxMzdCQUQwHhcNMjYwODAzMDg1ODA3WhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTcwNTgxZi0wMzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuIpYbc19gxYnb6YVSdT5V+Alhkx5SFY+dE2EQLnUk+3REgcr97RXJrI5HMIp /EQ+uF3+rtOLLsj9rso6GWtQy8SQNrZ+vt82ISMEJDUa+NqNFROIsoZouf5vlXHG 7S92UVYVgYoFT0IfWantwPTS4jaHMXHSLV5EGC4K1jh1M/uHxhFPhlP6Hzl6Fbg7 xiL4YbbN4WwKpufzKao7g1AFuTRoXGPvOMzC2yfZiKmOcagx4ZXj9KUwz7NJA4I+ nmCjVoX6s8g7j2jE30iw+G9fC3N/naNynOd1gFBFKajuJpsnJ1KoysoOMrW759Cl aH9YEyLnpmTHNZH1W9YCUpBEewIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFH7u1ll Yq8eWnCLDhk58KZntpa6MB8GA1UdIwQYMBaAFIm6kMt9RCqDh8arkwc4yiAOE3ut MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERDI1RS8zNTVCRUM4NkEy N0IxMUYwOTgwRkQwNEFDNEY5QUUwMi9pYnFReTMxRUtvT0h4cXVUQnpqS0lBNFRl NjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2licVF5MzFFS29PSHhxdVRCempLSUE0VGU2MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REQyNUUvMzU1QkVDODZBMjdCMTFGMDk4MEZEMDRBQzRGOUFFMDIvOUNGNkE4OUFB MjdCMTFGMDlEODE2QTRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAnQ+/MA0GCSqGSIb3DQEBCwUAA4IBAQBFSboU4RkCFFogkrqk3J9/ c13Y/yWwHKfnWZdQyl6NOzxtPgKN4NA0EO6LplWCMz4izMNd6+KsxHzMCbteIjnd FqdooufYyM7r7qQml2Ov0SLmD+C9YCIO7kJnJGx1VJVF4G/CnYFDBuOIIkj5Umho qCXAMA0H9U/UJBdbZr4aRGLFcgzBIIuYwMqSVtkVYYMF6DJj2VDR6iDg4Kf2MGRx IQy3jjM5DnI7T4kBixNybVo2ohbQtqltVVMpQPE/XB6aL5mgtBMEslDjzV1IHL/6 fw+4U0sOl8TxLbV+g+1t6sPbfAq6HGkcI3JHAk2dOmWA0rIopY+oaDTTzuRRljLw -----END CERTIFICATE-----Generated at Thu Sep 24 21:40:57 2026 by rpki-client