$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/CE88A98AC63611EEA0C70259C4F9AE02.roa File: CE88A98AC63611EEA0C70259C4F9AE02.roa (raw, json) Hash identifier: qcHwawytQ/8AG7cdx5hu0AuGvZCgLwDCZXBXxMtoIVk= Subject key identifier: BD:C2:02:89:82:DD:7C:6E:CA:75:3B:70:FE:13:4A:7B:40:98:63:4E Certificate issuer: /CN=A91E1936/serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Certificate serial: 0190 Authority key identifier: 5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/CE88A98AC63611EEA0C70259C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:20:38 +0000 ROA not before: Wed 11 Feb 2026 04:23:31 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 152330 IP address blocks: 157.15.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1936, serialNumber=5B5CC40309A07C03DF0B6304FCD840F950BFB041 Validity Not Before: Feb 11 04:23:31 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a45946-2132 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:00:b1:08:f2:9b:88:13:a3:bf:14:58:c1:c7: 33:42:6f:9d:19:a9:0d:50:b7:99:2e:f3:bc:a9:d8: 9f:f7:47:41:c5:47:b7:ea:00:0a:5b:88:03:f2:f5: 59:d0:9e:ed:16:13:84:6d:51:47:1c:fb:8e:8f:89: 6d:a0:b7:0f:72:a1:cd:e3:57:ba:a7:24:2d:9f:ac: 4a:6e:aa:53:0b:72:9c:ce:a8:fc:91:89:83:a4:6e: 9d:d5:e5:33:97:92:15:05:de:d6:42:90:d9:86:e5: fe:b1:ae:a2:93:aa:e0:e8:08:e3:84:b3:3d:13:e3: ce:ca:ab:20:c6:22:f8:6a:e2:0e:2f:23:e4:3e:3b: 75:db:e2:89:36:25:b2:19:03:dc:28:77:66:b2:2c: 92:c3:5c:7e:0d:15:9c:ea:7f:72:d9:93:a7:a2:ee: 03:99:46:80:23:41:4f:45:4a:bd:ff:08:e7:6f:eb: 91:af:10:82:0f:74:ca:56:d4:74:3b:bd:06:c4:c3: 85:db:2b:a6:94:90:fd:65:98:74:bd:4d:4f:a7:53: d6:b5:8f:8a:b8:ff:ec:08:e6:20:fb:40:41:ae:14: ef:ea:95:73:ad:6b:53:c6:14:c3:2c:cf:10:dd:fb: 70:bf:fb:8d:b0:a1:3b:e7:b7:1c:e8:bd:7a:1c:80: 6f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C2:02:89:82:DD:7C:6E:CA:75:3B:70:FE:13:4A:7B:40:98:63:4E X509v3 Authority Key Identifier: keyid:5B:5C:C4:03:09:A0:7C:03:DF:0B:63:04:FC:D8:40:F9:50:BF:B0:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/W1zEAwmgfAPfC2ME_NhA-VC_sEE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/W1zEAwmgfAPfC2ME_NhA-VC_sEE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1936/6EB9C03EC63611EEABCC040BC4F9AE02/CE88A98AC63611EEA0C70259C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.28.0/23 Signature Algorithm: sha256WithRSAEncryption 4d:33:d6:50:18:30:0b:83:7c:75:ba:59:15:30:11:71:b0:2c: b9:9c:7b:30:c0:9e:bb:25:fd:2a:13:05:a0:65:6f:2b:51:b0: c6:92:31:49:5e:c1:f0:e0:88:da:d7:a5:cb:3e:94:64:86:26: d0:35:a0:8b:1b:e4:97:7d:05:1f:0e:3a:f9:c2:49:07:65:de: d8:59:b5:0e:46:28:9f:c6:eb:a4:84:13:86:50:b3:e6:a1:90: ad:f1:9f:43:8c:fd:11:17:a0:a0:a8:1e:c1:b8:84:ae:9a:ab: 7a:54:40:ea:44:e3:61:6a:71:22:d0:cc:a9:9e:73:e6:f3:68: 5e:df:1d:8d:f1:e4:7e:18:33:26:22:f9:89:25:8e:97:94:34: 9e:d3:eb:0e:ef:b9:39:e1:19:27:83:14:23:2f:88:c8:2d:bc: 0a:3e:99:9d:8d:35:6d:2d:41:9f:0e:81:08:84:f0:40:b4:74: f5:75:6b:62:af:cb:56:bd:9c:8e:25:c0:c7:f3:94:02:42:2d: 6b:69:3a:2a:0c:fc:cc:4f:19:9b:f7:02:b9:97:af:3a:72:db: 2d:68:8c:36:d2:d5:7f:9f:4f:17:3a:19:dd:0e:96:75:f6:17: 98:c2:e9:bd:44:b5:a8:84:0f:fe:fe:ee:a2:98:f7:a0:67:08: 4e:86:00:c8 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE5MzYxMTAvBgNVBAUTKDVCNUNDNDAzMDlBMDdDMDNERjBCNjMwNEZDRDg0MEY5 NTBCRkIwNDEwHhcNMjYwMjExMDQyMzMxWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTk0Ni0yMTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsQCxCPKbiBOjvxRYwcczQm+dGakNULeZLvO8qdif90dBxUe36gAKW4gD8vVZ 0J7tFhOEbVFHHPuOj4ltoLcPcqHN41e6pyQtn6xKbqpTC3Kczqj8kYmDpG6d1eUz l5IVBd7WQpDZhuX+sa6ik6rg6AjjhLM9E+POyqsgxiL4auIOLyPkPjt12+KJNiWy GQPcKHdmsiySw1x+DRWc6n9y2ZOnou4DmUaAI0FPRUq9/wjnb+uRrxCCD3TKVtR0 O70GxMOF2yumlJD9ZZh0vU1Pp1PWtY+KuP/sCOYg+0BBrhTv6pVzrWtTxhTDLM8Q 3ftwv/uNsKE757cc6L16HIBv8QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFL3CAomC 3XxuynU7cP4TSntAmGNOMB8GA1UdIwQYMBaAFFtcxAMJoHwD3wtjBPzYQPlQv7BB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTkzNi82RUI5QzAzRUM2 MzYxMUVFQUJDQzA0MEJDNEY5QUUwMi9XMXpFQXdtZ2ZBUGZDMk1FX05oQS1WQ19z RUUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1cxekVBd21nZkFQZkMyTUVfTmhBLVZDX3NFRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE5MzYvNkVCOUMwM0VDNjM2MTFFRUFCQ0MwNDBCQzRGOUFFMDIvQ0U4OEE5OEFD NjM2MTFFRUEwQzcwMjU5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQ8cMA0GCSqGSIb3DQEBCwUAA4IBAQBNM9ZQGDALg3x1ulkVMBFx sCy5nHswwJ67Jf0qEwWgZW8rUbDGkjFJXsHw4Ija16XLPpRkhibQNaCLG+SXfQUf Djr5wkkHZd7YWbUORiifxuukhBOGULPmoZCt8Z9DjP0RF6CgqB7BuISumqt6VEDq RONhanEi0MypnnPm82he3x2N8eR+GDMmIvmJJY6XlDSe0+sO77k54RkngxQjL4jI LbwKPpmdjTVtLUGfDoEIhPBAtHT1dWtir8tWvZyOJcDH85QCQi1raToqDPzMTxmb 9wK5l686ctstaIw20tV/n08XOhndDpZ19heYwum9RLWohA/+/u6imPegZwhOhgDI -----END CERTIFICATE-----Generated at Mon Mar 2 10:32:37 2026 by rpki-client