$ rpki-client -vvf rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa File: A19F973C60C011F0A28C7F2CC4F9AE02.roa (raw, json) Hash identifier: mrKimEpRui8ah5BAXI71K2U6jAN339zQMmSaKZaFtrY= Subject key identifier: D8:57:6F:67:92:6D:2C:01:7A:3A:87:57:97:AA:88:27:D6:01:02:0B Certificate issuer: /CN=A91F43F2/serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Certificate serial: 78 Authority key identifier: 55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa Signing time: Sun 01 Mar 2026 08:12:26 +0000 ROA not before: Mon 14 Jul 2025 14:41:31 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 151335 IP address blocks: 157.15.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 120 (0x78) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F43F2, serialNumber=55789A3416E7EF515CE08F05A36F1DED83444C09 Validity Not Before: Jul 14 14:41:31 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3f4ea-dc01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:31:8f:69:93:be:b3:fb:cd:c1:88:ed:c8:29: 63:03:c4:c6:ef:30:a0:ef:41:15:21:a0:a5:b3:9d: f5:65:0b:e4:24:aa:d2:05:c9:d5:ae:d0:73:ef:f3: 9c:1f:e6:ed:c2:cf:72:8c:0b:0f:ac:b3:bc:61:4c: c5:7e:60:0c:31:55:a7:c4:1a:ed:62:05:a0:4b:ce: 79:18:89:0e:c3:89:76:11:94:14:0c:8e:be:73:5f: 7c:1b:67:1c:62:02:52:3b:d2:e5:b1:13:66:e6:6a: eb:60:70:63:c0:a6:f4:26:25:80:3c:52:c8:72:93: f3:63:fe:67:ab:c5:5a:47:77:89:f8:9b:37:a2:2c: b8:d2:76:5f:00:1c:a9:d8:14:26:6e:6e:d7:3d:b3: d6:6e:6e:70:5f:cd:1e:bd:30:5f:8f:8e:45:80:c6: 01:3d:0c:0c:35:89:10:db:81:6e:44:c6:bd:13:47: b8:a9:91:0a:5c:58:fe:c9:97:99:ac:37:27:1b:21: 20:ec:45:a1:77:9d:bc:8c:36:ed:11:68:f6:b1:24: aa:77:85:b6:77:da:ce:1b:ed:5f:ac:9d:cd:4c:32: fe:17:8a:9a:24:a8:d4:69:c2:14:36:1f:22:78:9f: 98:6e:63:5a:5f:28:b4:d7:0b:76:ba:a2:0c:21:28: 37:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:57:6F:67:92:6D:2C:01:7A:3A:87:57:97:AA:88:27:D6:01:02:0B X509v3 Authority Key Identifier: keyid:55:78:9A:34:16:E7:EF:51:5C:E0:8F:05:A3:6F:1D:ED:83:44:4C:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/VXiaNBbn71Fc4I8Fo28d7YNETAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VXiaNBbn71Fc4I8Fo28d7YNETAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F43F2/4180509460C011F0AFB4572BC4F9AE02/A19F973C60C011F0A28C7F2CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.128.0/24 Signature Algorithm: sha256WithRSAEncryption 28:9a:84:d2:19:ef:af:03:13:c2:0c:05:7f:d6:86:22:33:8c: 0c:22:10:15:fd:e5:e4:a3:be:5a:d1:f4:68:e0:88:44:2a:14: 41:2e:c9:a2:93:97:bc:06:11:8b:08:ce:32:dd:a7:1c:fa:cb: 09:3e:01:73:4d:14:10:32:1a:85:de:b9:ca:b8:bb:25:43:16: 62:69:e8:00:86:a5:56:99:6f:4f:d8:76:b5:d6:fb:4c:03:17: c5:da:05:0c:29:78:09:43:2f:0e:f9:6c:02:27:53:db:96:bd: d6:ac:0e:ee:8f:cb:5c:cb:0d:09:7f:fb:ed:f3:c9:a2:9d:a1: 56:b0:da:a0:20:3b:b7:35:d6:73:4e:d1:87:44:67:2c:42:73: 8c:38:05:f2:dd:ac:8e:ec:b2:54:d7:35:1b:8e:ce:b5:40:5f: d2:48:8e:87:22:4f:59:3b:19:b9:0f:ac:99:63:8c:a8:2d:8e: bc:43:9f:7f:ae:33:3e:44:5d:ba:d5:03:76:25:f1:16:f3:95: 32:e6:2d:e9:39:f3:86:e9:d7:47:18:6d:07:98:f8:92:c5:68: 78:78:15:4a:43:91:ed:f3:0d:68:d9:8a:71:51:28:fa:5e:94: c4:73:9c:63:20:60:8e:19:3a:a3:0b:4a:48:17:39:67:c2:6b: ec:f4:1e:d4 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBeDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG NDNGMjExMC8GA1UEBRMoNTU3ODlBMzQxNkU3RUY1MTVDRTA4RjA1QTM2RjFERUQ4 MzQ0NEMwOTAeFw0yNTA3MTQxNDQxMzFaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNmNGVhLWRjMDEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDVMY9pk76z+83BiO3IKWMDxMbvMKDvQRUhoKWznfVlC+QkqtIFydWu0HPv85wf 5u3Cz3KMCw+ss7xhTMV+YAwxVafEGu1iBaBLznkYiQ7DiXYRlBQMjr5zX3wbZxxi AlI70uWxE2bmautgcGPApvQmJYA8Ushyk/Nj/merxVpHd4n4mzeiLLjSdl8AHKnY FCZubtc9s9ZubnBfzR69MF+PjkWAxgE9DAw1iRDbgW5Exr0TR7ipkQpcWP7Jl5ms NycbISDsRaF3nbyMNu0RaPaxJKp3hbZ32s4b7V+snc1MMv4XipokqNRpwhQ2HyJ4 n5huY1pfKLTXC3a6ogwhKDcDAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU2FdvZ5Jt LAF6OodXl6qIJ9YBAgswHwYDVR0jBBgwFoAUVXiaNBbn71Fc4I8Fo28d7YNETAkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUY0M0YyLzQxODA1MDk0NjBD MDExRjBBRkI0NTcyQkM0RjlBRTAyL1ZYaWFOQmJuNzFGYzRJOEZvMjhkN1lORVRB ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVlhpYU5CYm43MUZjNEk4Rm8yOGQ3WU5FVEFrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NDNGMi80MTgwNTA5NDYwQzAxMUYwQUZCNDU3MkJDNEY5QUUwMi9BMTlGOTczQzYw QzAxMUYwQTI4QzdGMkNDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACdD4AwDQYJKoZIhvcNAQELBQADggEBACiahNIZ768DE8IMBX/WhiIz jAwiEBX95eSjvlrR9GjgiEQqFEEuyaKTl7wGEYsIzjLdpxz6ywk+AXNNFBAyGoXe ucq4uyVDFmJp6ACGpVaZb0/YdrXW+0wDF8XaBQwpeAlDLw75bAInU9uWvdasDu6P y1zLDQl/++3zyaKdoVaw2qAgO7c11nNO0YdEZyxCc4w4BfLdrI7sslTXNRuOzrVA X9JIjociT1k7GbkPrJljjKgtjrxDn3+uMz5EXbrVA3Yl8RbzlTLmLek584bp10cY bQeY+JLFaHh4FUpDke3zDWjZinFRKPpelMRznGMgYI4ZOqMLSkgXOWfCa+z0HtQ= -----END CERTIFICATE-----Generated at Mon Mar 2 10:51:21 2026 by rpki-client