$ rpki-client -vvf rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/41E1B62C439B11F1B25C79F98F833773.roa File: 41E1B62C439B11F1B25C79F98F833773.roa (raw, json) Hash identifier: j8xid4dONlxMY7HH7HNa8LV+xrw9gr7M/0XOCH5oqWs= Subject key identifier: A9:DC:CF:C6:23:B9:5F:2F:73:B3:28:8A:F1:4D:8B:23:CC:9C:64:5F Certificate issuer: /CN=A91A622F/serialNumber=2B19F455F4D3069477E01941F742149FB9000D81 Certificate serial: 10 Authority key identifier: 2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/41E1B62C439B11F1B25C79F98F833773.roa Signing time: Wed 29 Apr 2026 07:33:00 +0000 ROA not before: Wed 29 Apr 2026 07:33:00 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 23674 IP address blocks: 151.123.128.0/20 maxlen: 20 151.123.128.0/24 maxlen: 24 151.123.129.0/24 maxlen: 24 151.123.130.0/24 maxlen: 24 151.123.131.0/24 maxlen: 24 151.123.132.0/24 maxlen: 24 151.123.133.0/24 maxlen: 24 151.123.134.0/24 maxlen: 24 151.123.135.0/24 maxlen: 24 151.123.136.0/24 maxlen: 24 151.123.137.0/24 maxlen: 24 151.123.138.0/24 maxlen: 24 151.123.139.0/24 maxlen: 24 151.123.140.0/24 maxlen: 24 151.123.141.0/24 maxlen: 24 151.123.142.0/24 maxlen: 24 151.123.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 15:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16 (0x10) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A622F, serialNumber=2B19F455F4D3069477E01941F742149FB9000D81 Validity Not Before: Apr 29 07:33:00 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=69f1b42c-4b1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:61:d1:66:6c:9d:6e:8b:3f:ae:30:77:37:9c: 34:df:db:20:d6:c5:d4:41:69:2e:33:bc:0b:3a:e9: a2:49:6e:79:e9:c2:ff:8b:18:63:56:e0:99:8a:b3: ef:66:3b:62:91:b0:bc:5a:1e:93:db:ee:f3:d0:58: 57:e2:5a:a7:c4:e1:b5:86:af:0b:20:fb:c1:51:45: e1:90:f3:7d:52:7f:3f:9e:e5:58:29:a7:6b:b2:f4: a4:75:1b:48:4f:75:20:f9:9d:ea:a6:96:19:08:5d: 37:02:b1:fa:41:53:68:ed:93:fc:93:78:89:b9:e4: 78:a5:c4:6d:29:cb:33:0d:ab:ca:93:f3:96:7e:7a: 1c:a4:02:40:1f:de:87:39:31:8b:3e:bc:d9:04:ab: 9e:49:bf:5c:c5:94:2a:6f:6d:8b:0f:12:12:e5:b6: 99:4f:9d:ea:9c:19:19:6a:3b:86:8f:a3:8a:15:d5: 6d:a5:75:75:14:d0:06:5b:9b:f1:69:72:54:83:76: 6a:af:78:c5:32:16:7c:ea:36:a5:5c:d3:b2:8c:ab: fb:5f:f4:52:c2:10:33:82:09:20:cf:f4:a3:62:af: 80:f6:39:a0:58:03:c3:43:21:02:6f:82:07:d6:b3: 0d:77:68:c5:8d:c7:46:df:6c:2c:a4:04:9c:0a:15: 58:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:DC:CF:C6:23:B9:5F:2F:73:B3:28:8A:F1:4D:8B:23:CC:9C:64:5F X509v3 Authority Key Identifier: keyid:2B:19:F4:55:F4:D3:06:94:77:E0:19:41:F7:42:14:9F:B9:00:0D:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/Kxn0VfTTBpR34BlB90IUn7kADYE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Kxn0VfTTBpR34BlB90IUn7kADYE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A622F/2CAE626C3E6111F18B94D20BB2EE528E/41E1B62C439B11F1B25C79F98F833773.roa sbgp-ipAddrBlock: critical IPv4: 151.123.128.0/20 Signature Algorithm: sha256WithRSAEncryption 0b:9c:b4:be:e8:c5:1e:3f:a4:d9:73:c7:94:4e:0f:d0:5d:66: a4:0d:d9:95:39:c7:a5:6a:2a:38:74:36:b8:a3:65:54:63:eb: 64:bd:3c:25:06:52:5a:c7:6b:82:1c:b7:93:83:d3:01:b6:3a: 2c:85:28:f7:0b:50:84:62:19:39:9f:b5:f1:a0:1a:8b:4b:47: 5b:b6:46:57:9e:3c:00:3d:53:39:31:b6:1d:c7:ff:ee:4b:06: 19:a2:cf:57:43:a0:27:10:41:7d:42:18:45:67:8a:a6:ef:07: 78:66:a2:89:66:39:54:93:1f:df:4d:8e:7a:9c:10:15:92:68: 57:c3:38:c7:aa:aa:5a:fc:ff:f4:b7:ea:e9:05:6b:0b:9e:05: 82:14:85:ec:ae:3f:4f:92:5a:d5:6e:09:b9:c7:e7:e7:93:04: 3b:0a:03:ea:89:0b:57:64:a7:14:4f:03:ea:89:2e:84:e5:6c: e8:94:2d:dc:ed:85:58:04:ea:1b:67:5d:68:eb:bd:24:51:ff: 9d:d2:b0:69:45:13:46:a8:ea:cc:b0:2e:17:49:ca:77:94:78: a5:5a:81:c7:5a:c1:e2:bd:c2:d0:49:9b:56:3a:03:61:56:9c: d9:d6:f0:79:ff:8b:8e:01:d8:04:dc:7f:c3:4e:b0:71:b4:c5: 38:14:03:3a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBEDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NjIyRjExMC8GA1UEBRMoMkIxOUY0NTVGNEQzMDY5NDc3RTAxOTQxRjc0MjE0OUZC OTAwMEQ4MTAeFw0yNjA0MjkwNzMzMDBaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZjFiNDJjLTRiMWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD7YdFmbJ1uiz+uMHc3nDTf2yDWxdRBaS4zvAs66aJJbnnpwv+LGGNW4JmKs+9m O2KRsLxaHpPb7vPQWFfiWqfE4bWGrwsg+8FRReGQ831Sfz+e5Vgpp2uy9KR1G0hP dSD5neqmlhkIXTcCsfpBU2jtk/yTeIm55HilxG0pyzMNq8qT85Z+ehykAkAf3oc5 MYs+vNkEq55Jv1zFlCpvbYsPEhLltplPneqcGRlqO4aPo4oV1W2ldXUU0AZbm/Fp clSDdmqveMUyFnzqNqVc07KMq/tf9FLCEDOCCSDP9KNir4D2OaBYA8NDIQJvggfW sw13aMWNx0bfbCykBJwKFVjBAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUqdzPxiO5 Xy9zsyiK8U2LI8ycZF8wHwYDVR0jBBgwFoAUKxn0VfTTBpR34BlB90IUn7kADYEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2MjJGLzJDQUU2MjZDM0U2 MTExRjE4Qjk0RDIwQkIyRUU1MjhFL0t4bjBWZlRUQnBSMzRCbEI5MElVbjdrQURZ RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS3huMFZmVFRCcFIzNEJsQjkwSVVuN2tBRFlFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NjIyRi8yQ0FFNjI2QzNFNjExMUYxOEI5NEQyMEJCMkVFNTI4RS80MUUxQjYyQzQz OUIxMUYxQjI1Qzc5Rjk4RjgzMzc3My5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBASXe4AwDQYJKoZIhvcNAQELBQADggEBAAuctL7oxR4/pNlzx5ROD9Bd ZqQN2ZU5x6VqKjh0NrijZVRj62S9PCUGUlrHa4Ict5OD0wG2OiyFKPcLUIRiGTmf tfGgGotLR1u2RleePAA9Uzkxth3H/+5LBhmiz1dDoCcQQX1CGEVniqbvB3hmoolm OVSTH99NjnqcEBWSaFfDOMeqqlr8//S36ukFawueBYIUheyuP0+SWtVuCbnH5+eT BDsKA+qJC1dkpxRPA+qJLoTlbOiULdzthVgE6htnXWjrvSRR/53SsGlFE0ao6syw LhdJyneUeKVagcdaweK9wtBJm1Y6A2FWnNnW8Hn/i44B2ATcf8NOsHG0xTgUAzo= -----END CERTIFICATE-----Generated at Wed May 13 14:33:44 2026 by rpki-client