$ rpki-client -vvf rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa File: 6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa (raw, json) Hash identifier: tbhcExPyMdasBxcbE73h7b5HlPi0div8uaJX4sMb5Ow= Subject key identifier: 3E:80:01:5F:3D:2B:2F:39:E7:E9:69:DD:02:FB:41:18:EC:13:84:EE Certificate issuer: /CN=A91754C0/serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Certificate serial: 0197 Authority key identifier: D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa Signing time: Wed 25 Mar 2026 04:39:29 +0000 ROA not before: Wed 25 Mar 2026 04:39:29 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 152481 IP address blocks: 157.20.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 407 (0x197) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91754C0, serialNumber=D0F8B006596C7C037CB549305B39690000AAE8A4 Validity Not Before: Mar 25 04:39:29 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69c36701-c0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9e:14:e2:9a:2a:b8:e2:5d:68:05:11:54:40: 77:a1:7f:06:a1:ee:d3:9c:c1:cb:35:b7:16:72:af: f1:f4:c9:23:0d:6f:8a:5c:d8:1d:61:93:20:96:ad: 8b:2e:33:24:83:37:14:40:a7:e3:4e:e2:ef:ae:d4: d1:8d:a5:e8:f5:18:30:c2:96:9e:90:34:5f:2d:79: 2b:c9:44:8c:bc:07:d1:94:05:1f:83:3f:e0:25:62: fc:b4:71:3b:b2:e1:d3:03:7a:df:4e:dc:7d:1f:7b: 3f:66:dd:fa:2d:94:22:c1:91:85:8a:71:ad:39:33: da:b6:5a:e4:53:57:f2:bb:6b:6b:64:a0:20:c4:fa: 43:72:84:b4:59:bb:ee:37:92:28:fb:a0:64:60:ce: 29:c0:16:83:fc:7e:f3:04:21:e6:66:44:e4:67:33: be:74:bc:f3:9c:36:86:ba:94:b5:68:57:b4:9a:1e: d1:a7:f9:ce:77:c0:59:4f:15:c4:94:66:18:06:7e: 29:22:eb:76:be:e2:51:38:c1:18:f6:d2:62:b2:e8: 2c:b7:6b:ac:b5:a3:0d:a7:00:98:30:13:e1:e7:ab: f5:a5:ea:f4:1c:86:95:79:c3:cf:6b:05:d3:93:ec: 2e:85:29:21:17:df:f3:fa:13:6d:b6:7f:a8:94:46: b5:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:80:01:5F:3D:2B:2F:39:E7:E9:69:DD:02:FB:41:18:EC:13:84:EE X509v3 Authority Key Identifier: keyid:D0:F8:B0:06:59:6C:7C:03:7C:B5:49:30:5B:39:69:00:00:AA:E8:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/0PiwBllsfAN8tUkwWzlpAACq6KQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0PiwBllsfAN8tUkwWzlpAACq6KQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91754C0/FEDF572ECCBB11EE8A0F7748C4F9AE02/6BA3FEA4CCBD11EEBADDFC4AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.56.0/24 Signature Algorithm: sha256WithRSAEncryption 87:41:1a:b8:20:c0:0e:f2:5b:59:9f:97:93:d8:c8:a5:47:30: ba:67:09:43:5a:57:ab:2f:da:62:7a:c9:ab:2f:a7:db:02:51: 32:d9:8b:b2:ec:e6:e8:c1:8a:d0:af:13:3f:fc:4f:bb:6b:83: 97:ee:02:4b:de:78:e8:ac:9c:23:df:24:0d:5f:c1:d7:96:77: 0e:d7:7a:61:1a:dc:85:33:d3:1a:c8:f1:fb:da:aa:d2:ca:a1: 67:3d:44:9a:fa:64:c0:38:15:dd:db:47:5b:e2:57:91:52:97: 50:ee:98:79:08:3b:86:eb:d7:3d:c5:3f:ea:44:c3:7a:1a:0e: 12:18:4b:8a:6b:28:2e:05:cb:7b:a1:16:51:8f:53:df:fa:ec: 92:a7:8e:b6:6c:2c:55:6e:a4:aa:b2:e6:a6:2b:8a:25:37:30: 69:da:62:18:48:44:84:34:1d:90:96:86:dc:5e:fd:03:ca:2b: 06:14:81:e7:ac:36:1e:87:56:4c:fe:d1:a1:85:f1:e0:80:04: e3:c8:b9:7a:3e:5c:58:d0:87:83:08:57:5a:20:97:88:05:ed: d1:ba:ef:a5:d3:65:4e:b3:bd:1d:da:eb:03:2a:e4:1a:9f:75: 85:7f:28:a8:8e:29:f7:67:6e:a9:6d:df:87:e7:c3:ad:0b:c4: 13:a8:0e:b5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzU0QzAxMTAvBgNVBAUTKEQwRjhCMDA2NTk2QzdDMDM3Q0I1NDkzMDVCMzk2OTAw MDBBQUU4QTQwHhcNMjYwMzI1MDQzOTI5WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWMzNjcwMS1jMGQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj54U4poquOJdaAURVEB3oX8Goe7TnMHLNbcWcq/x9MkjDW+KXNgdYZMglq2L LjMkgzcUQKfjTuLvrtTRjaXo9RgwwpaekDRfLXkryUSMvAfRlAUfgz/gJWL8tHE7 suHTA3rfTtx9H3s/Zt36LZQiwZGFinGtOTPatlrkU1fyu2trZKAgxPpDcoS0Wbvu N5Io+6BkYM4pwBaD/H7zBCHmZkTkZzO+dLzznDaGupS1aFe0mh7Rp/nOd8BZTxXE lGYYBn4pIut2vuJROMEY9tJisugst2ustaMNpwCYMBPh56v1per0HIaVecPPawXT k+wuhSkhF9/z+hNttn+olEa13QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFD6AAV89 Ky855+lp3QL7QRjsE4TuMB8GA1UdIwQYMBaAFND4sAZZbHwDfLVJMFs5aQAAquik MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTRDMC9GRURGNTcyRUND QkIxMUVFOEEwRjc3NDhDNEY5QUUwMi8wUGl3Qmxsc2ZBTjh0VWt3V3pscEFBQ3E2 S1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBQaXdCbGxzZkFOOHRVa3dXemxwQUFDcTZLUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzU0QzAvRkVERjU3MkVDQ0JCMTFFRThBMEY3NzQ4QzRGOUFFMDIvNkJBM0ZFQTRD Q0JEMTFFRUJBRERGQzRBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAnRQ4MA0GCSqGSIb3DQEBCwUAA4IBAQCHQRq4IMAO8ltZn5eT2Mil RzC6ZwlDWlerL9piesmrL6fbAlEy2Yuy7ObowYrQrxM//E+7a4OX7gJL3njorJwj 3yQNX8HXlncO13phGtyFM9MayPH72qrSyqFnPUSa+mTAOBXd20db4leRUpdQ7ph5 CDuG69c9xT/qRMN6Gg4SGEuKayguBct7oRZRj1Pf+uySp462bCxVbqSqsuamK4ol NzBp2mIYSESENB2QlobcXv0DyisGFIHnrDYeh1ZM/tGhhfHggATjyLl6PlxY0IeD CFdaIJeIBe3Ruu+l02VOs70d2usDKuQan3WFfyiojin3Z26pbd+H58OtC8QTqA61 -----END CERTIFICATE-----Generated at Thu Mar 26 16:35:26 2026 by rpki-client