$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/0423873AD9C511EEA944FA80C4F9AE02.roa File: 0423873AD9C511EEA944FA80C4F9AE02.roa (raw, json) Hash identifier: vrmDfWTNDEfAAGTB6RMWU6c9oOq8iON07z3iMp7YpRs= Subject key identifier: A0:C9:AA:37:42:70:52:75:F6:54:44:D9:9E:6D:E2:EA:23:99:87:6C Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Certificate serial: 0192 Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/0423873AD9C511EEA944FA80C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:20:40 +0000 ROA not before: Wed 11 Feb 2026 04:23:33 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 5068 IP address blocks: 157.15.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 402 (0x192) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Validity Not Before: Feb 11 04:23:33 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a45947-9d79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:3e:c1:64:26:e7:43:51:76:88:9f:f2:ce: d5:58:6b:67:97:f5:fd:88:f6:54:ae:ad:08:ec:8f: bf:d2:51:2b:f9:08:2e:26:ff:d9:b3:f4:ee:11:cd: 79:00:11:56:42:80:76:af:12:ae:b6:c5:76:99:82: 53:32:5e:9c:73:5d:24:1a:8f:2c:53:28:5a:91:d4: 7c:5f:b5:d4:9b:73:df:38:bc:7a:2b:a7:d6:0d:3b: 8f:f4:76:5f:c1:50:18:b3:d4:1c:03:b6:14:de:45: 51:bd:43:94:d7:3e:65:77:3e:bf:c1:2e:2b:c4:66: 24:be:0c:17:ed:23:ce:12:0a:e6:3b:d1:6c:f7:aa: b0:27:03:51:a4:47:5a:9d:98:49:6a:eb:8a:a6:44: 3d:f2:18:c4:84:36:67:32:f6:28:3e:b5:f1:7a:51: eb:fc:4d:3a:8f:a6:62:8f:4e:77:34:b2:ce:ad:8a: 6f:4e:6e:97:a2:92:6e:4c:c5:63:fc:f8:08:00:b4: b9:a6:b3:e5:0f:bd:9b:e4:23:c8:ec:73:1d:e9:4c: 8a:9d:7a:2b:64:6a:a3:d7:25:ab:de:ff:2e:d0:60: c7:71:35:a9:1e:a5:9a:9f:40:60:c5:21:38:22:e9: 6f:8c:cf:30:d4:88:74:36:0e:a4:6e:d9:9f:48:33: 24:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:C9:AA:37:42:70:52:75:F6:54:44:D9:9E:6D:E2:EA:23:99:87:6C X509v3 Authority Key Identifier: keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/0423873AD9C511EEA944FA80C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.28.0/23 Signature Algorithm: sha256WithRSAEncryption 05:b2:de:d9:23:04:13:d9:81:aa:22:86:86:72:1d:99:2e:ad: f1:9b:6a:77:2e:ce:b9:97:44:45:d8:08:3e:2a:a6:15:67:99: 22:5a:17:64:59:bc:c2:59:17:5a:09:75:fa:9b:41:75:f3:b5: ee:e5:4e:36:cf:c9:50:c6:93:5d:a2:01:42:3f:15:37:a4:f4: 3d:dd:0a:b1:bd:15:0f:2b:ed:25:3b:76:f7:ee:23:e1:84:2d: c0:fd:b1:46:7c:85:f1:ad:d6:07:01:9f:de:3d:2a:60:24:11: d5:09:33:7c:25:c5:07:a0:4c:72:d4:e1:ca:e8:f2:0a:22:2a: 8e:8e:03:37:88:38:0a:d0:82:22:ca:b4:61:1a:52:29:19:ca: 29:17:93:25:5e:34:e9:cb:f8:76:6a:62:5b:4c:84:d3:8c:9a: 0e:f7:cf:1c:fe:bb:66:04:94:4c:58:67:51:bc:29:49:07:19: f9:42:12:9f:c7:d5:53:6c:78:ca:cc:22:c8:84:89:1b:3d:0b: 13:b7:e6:7e:b3:c3:66:7d:25:50:28:d8:9f:32:81:57:b9:59: ee:d2:49:b0:3f:2e:c6:b3:27:b2:aa:72:81:1c:a7:17:88:7e: 83:b1:74:09:e1:8b:d2:6f:7e:e5:5f:e4:87:8d:c4:59:65:82: af:ee:c0:ca -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDVCNUNDNDAzMDlBMDdDMDNERjBCNjMwNEZDRDg0MEY5 NTBCRkIwNDEwHhcNMjYwMjExMDQyMzMzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTk0Ny05ZDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAo/Q+wWQm50NRdoif8s7VWGtnl/X9iPZUrq0I7I+/0lEr+QguJv/Zs/TuEc15 ABFWQoB2rxKutsV2mYJTMl6cc10kGo8sUyhakdR8X7XUm3PfOLx6K6fWDTuP9HZf wVAYs9QcA7YU3kVRvUOU1z5ldz6/wS4rxGYkvgwX7SPOEgrmO9Fs96qwJwNRpEda nZhJauuKpkQ98hjEhDZnMvYoPrXxelHr/E06j6Zij053NLLOrYpvTm6XopJuTMVj /PgIALS5prPlD72b5CPI7HMd6UyKnXorZGqj1yWr3v8u0GDHcTWpHqWan0BgxSE4 IulvjM8w1Ih0Ng6kbtmfSDMkyQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKDJqjdC cFJ19lRE2Z5t4uojmYdsMB8GA1UdIwQYMBaAFFtcxAMJoHwD3wtjBPzYQPlQv7BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi82RUI5QzAzRUM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZBUGZDMk1FX05oQS1WQ19z RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxekVBd21nZkFQZkMyTUVfTmhBLVZDX3NFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE5MzYvNkVCOUMwM0VDNjM2MTFFRUFCQ0MwNDBCQzRGOUFFMDIvMDQyMzg3M0FE OUM1MTFFRUE5NDRGQTgwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQ8cMA0GCSqGSIb3DQEBCwUAA4IBAQAFst7ZIwQT2YGqIoaGch2Z Lq3xm2p3Ls65l0RF2Ag+KqYVZ5kiWhdkWbzCWRdaCXX6m0F187Xu5U42z8lQxpNd ogFCPxU3pPQ93QqxvRUPK+0lO3b37iPhhC3A/bFGfIXxrdYHAZ/ePSpgJBHVCTN8 JcUHoExy1OHK6PIKIiqOjgM3iDgK0IIiyrRhGlIpGcopF5MlXjTpy/h2amJbTITT jJoO988c/rtmBJRMWGdRvClJBxn5QhKfx9VTbHjKzCLIhIkbPQsTt+Z+s8NmfSVQ KNifMoFXuVnu0kmwPy7GsyeyqnKBHKcXiH6DsXQJ4YvSb37lX+SHjcRZZYKv7sDK -----END CERTIFICATE-----Generated at Mon Mar 2 10:36:49 2026 by rpki-client