$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/D27AE4B27E9511ECA9132A0BC4F9AE02.roa File: D27AE4B27E9511ECA9132A0BC4F9AE02.roa (raw, json) Hash identifier: Q7LCJn4UOngJqKxFQBK5nVd5LUGaCgTS+cghyBmcZLM= Subject key identifier: B5:FE:84:4E:00:48:00:DB:21:DE:53:C5:19:4B:46:77:67:3D:90:ED Certificate issuer: /CN=A91EA958/serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Certificate serial: 2546 Authority key identifier: 11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/D27AE4B27E9511ECA9132A0BC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:58:35 +0000 ROA not before: Wed 02 Jul 2025 15:21:07 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 15133 IP address blocks: 136.228.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9542 (0x2546) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=1110310E0F80467703D8477FB3EE25F1D8888E9E Validity Not Before: Jul 2 15:21:07 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a4703b-c904 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:1f:48:b9:2b:c7:57:09:32:bc:78:a4:fc: 7a:86:b8:c3:ab:8b:72:d5:71:40:0c:87:c0:dd:da: b0:22:6d:28:70:21:7c:fa:e9:b2:43:33:54:ef:be: dd:c8:56:20:7d:b6:73:44:43:ce:65:07:9d:5d:03: 78:a0:53:cc:49:84:84:bb:1e:b1:ab:8a:c1:b8:b3: a5:a7:6a:e0:f1:28:d3:73:42:8a:67:0d:ca:43:d2: 29:fc:6b:26:68:8b:11:ad:15:e8:14:d2:c7:40:41: f1:ab:ce:10:32:18:51:0e:57:19:cf:52:3c:70:fd: a4:fb:ce:cd:fc:26:f3:7c:ff:95:37:d9:a4:70:be: 96:20:db:73:c4:3a:d5:45:36:29:ab:e8:1d:76:26: dd:8f:f3:b5:3a:72:4a:09:80:14:8d:f0:bc:75:57: 2f:02:7f:84:0d:0f:c8:f7:a2:82:29:1b:df:a9:bb: 92:03:91:ae:b4:9f:24:b0:cb:37:79:77:6d:8a:0d: d8:17:3c:c5:e1:0b:88:5e:f3:c4:6d:a8:c9:7b:4d: 49:b3:5d:ac:3e:72:bd:2a:15:6c:62:78:98:9f:c0: f5:46:3a:7c:5c:90:c5:d9:a8:d7:f6:c6:23:9e:48: 6b:2a:03:dd:4b:35:17:dc:5e:35:72:f2:63:3c:61: fc:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FE:84:4E:00:48:00:DB:21:DE:53:C5:19:4B:46:77:67:3D:90:ED X509v3 Authority Key Identifier: keyid:11:10:31:0E:0F:80:46:77:03:D8:47:7F:B3:EE:25:F1:D8:88:8E:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/ERAxDg-ARncD2Ed_s-4l8diIjp4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ERAxDg-ARncD2Ed_s-4l8diIjp4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/FDEFD7364BD611E5A7CA3033C4F9AE02/D27AE4B27E9511ECA9132A0BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 136.228.144.0/24 Signature Algorithm: sha256WithRSAEncryption 48:36:2f:b1:20:de:02:13:e0:e4:54:d7:72:61:ab:e6:18:e8: 28:5d:93:e9:28:1c:ec:b2:d8:9f:21:6f:6e:3e:3d:55:6e:a3: d4:42:bd:73:fe:35:8b:b6:15:ce:2f:44:9e:59:d1:b7:e5:ff: 95:20:af:bf:9d:3e:42:d0:62:0a:3b:97:e6:9c:6d:af:ba:66: a1:81:ab:4d:04:c5:f6:33:ac:cd:7a:5b:a6:6d:3a:fb:78:03: fb:cb:db:c1:ea:ab:02:e2:a3:30:d5:9d:92:f6:2f:7e:7d:85: 69:f2:3f:2f:d7:6c:31:49:a9:1c:bc:b5:7d:a1:4d:4b:a3:41: 12:81:e0:60:4a:56:21:ce:6a:be:a1:70:fc:98:f7:a0:8e:95: 91:3f:28:13:75:aa:63:a5:74:82:17:cd:24:0c:82:8e:99:d1: 41:87:bd:ff:33:e8:68:57:a8:bf:93:a4:34:64:f6:95:9f:fc: fd:2f:b5:50:02:ea:c0:98:2c:5a:36:2e:db:3d:f1:8d:6e:1c: 18:a8:6c:4d:f3:b8:a2:34:38:d7:9b:d4:54:f6:2d:b5:44:e5: b4:ab:56:f5:d5:ca:58:9f:d8:3f:bd:38:af:18:4d:a6:f6:da: 49:d2:4f:07:08:2d:5e:b8:23:80:29:ea:93:8a:91:10:05:91: cb:c3:cc:49 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICJUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKDExMTAzMTBFMEY4MDQ2NzcwM0Q4NDc3RkIzRUUyNUYx RDg4ODhFOUUwHhcNMjUwNzAyMTUyMTA3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzAzYi1jOTA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsFwfSLkrx1cJMrx4pPx6hrjDq4ty1XFADIfA3dqwIm0ocCF8+umyQzNU777d yFYgfbZzREPOZQedXQN4oFPMSYSEux6xq4rBuLOlp2rg8SjTc0KKZw3KQ9Ip/Gsm aIsRrRXoFNLHQEHxq84QMhhRDlcZz1I8cP2k+87N/CbzfP+VN9mkcL6WINtzxDrV RTYpq+gddibdj/O1OnJKCYAUjfC8dVcvAn+EDQ/I96KCKRvfqbuSA5GutJ8ksMs3 eXdtig3YFzzF4QuIXvPEbajJe01Js12sPnK9KhVsYniYn8D1Rjp8XJDF2ajX9sYj nkhrKgPdSzUX3F41cvJjPGH8UQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLX+hE4A SADbId5TxRlLRndnPZDtMB8GA1UdIwQYMBaAFBEQMQ4PgEZ3A9hHf7PuJfHYiI6e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC9GREVGRDczNjRC RDYxMUU1QTdDQTMwMzNDNEY5QUUwMi9FUkF4RGctQVJuY0QyRWRfcy00bDhkaUlq cDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0VSQXhEZy1BUm5jRDJFZF9zLTRsOGRpSWpwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE5NTgvRkRFRkQ3MzY0QkQ2MTFFNUE3Q0EzMDMzQzRGOUFFMDIvRDI3QUU0QjI3 RTk1MTFFQ0E5MTMyQTBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAiOSQMA0GCSqGSIb3DQEBCwUAA4IBAQBINi+xIN4CE+DkVNdyYavm GOgoXZPpKBzsstifIW9uPj1VbqPUQr1z/jWLthXOL0SeWdG35f+VIK+/nT5C0GIK O5fmnG2vumahgatNBMX2M6zNelumbTr7eAP7y9vB6qsC4qMw1Z2S9i9+fYVp8j8v 12wxSakcvLV9oU1Lo0ESgeBgSlYhzmq+oXD8mPegjpWRPygTdapjpXSCF80kDIKO mdFBh73/M+hoV6i/k6Q0ZPaVn/z9L7VQAurAmCxaNi7bPfGNbhwYqGxN87iiNDjX m9RU9i21ROW0q1b11cpYn9g/vTivGE2m9tpJ0k8HCC1euCOAKeqTipEQBZHLw8xJ -----END CERTIFICATE-----Generated at Mon Mar 2 13:38:16 2026 by rpki-client