$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/B57678E8D73711EEAECFA720C4F9AE02.roa File: B57678E8D73711EEAECFA720C4F9AE02.roa (raw, json) Hash identifier: ABVsrzyKZJ2br5rQmaDqu2VlB1V3k3qtHCTczVSRlrY= Subject key identifier: AF:97:D3:AA:D7:54:8E:46:FA:D2:8B:6E:75:7F:71:4B:83:93:2D:88 Certificate issuer: /CN=A91AC415/serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Certificate serial: 0185 Authority key identifier: A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/B57678E8D73711EEAECFA720C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:04:41 +0000 ROA not before: Tue 23 Dec 2025 03:24:24 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152129 IP address blocks: 210.79.128.0/23 maxlen: 23 210.79.128.0/24 maxlen: 24 210.79.129.0/24 maxlen: 24 2401:5420::/32 maxlen: 32 2401:5420::/48 maxlen: 48 2401:5420:1::/48 maxlen: 48 2401:5420:2::/48 maxlen: 48 2401:5420:3::/48 maxlen: 48 2401:5420:4::/48 maxlen: 48 2401:5420:5::/48 maxlen: 48 2401:5420:6::/48 maxlen: 48 2401:5420:7::/48 maxlen: 48 2401:5420:8::/48 maxlen: 48 2401:5420:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 03 Apr 2026 04:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC415, serialNumber=A82E6331EBF44F58FC659986DB0544C6615F26F1 Validity Not Before: Dec 23 03:24:24 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41d49-d494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:dc:00:f7:50:95:97:e9:4d:5b:3a:d1:eb:a2: 2b:e8:7a:74:a6:27:e4:d3:f6:b8:61:0b:23:7e:29: ff:0a:84:9a:92:56:a6:92:e3:d4:b0:bd:ff:50:cf: ac:23:f7:3f:fe:6a:fb:0b:93:08:8c:ec:a3:a4:ed: 91:49:06:86:05:61:8c:b2:65:8c:6c:a4:e7:67:60: 0c:df:34:cb:ae:e3:9f:64:d0:84:29:c8:2f:11:f5: 83:23:0c:a7:c0:5a:7b:20:21:fb:df:b3:90:1c:62: a6:a9:d1:2a:21:44:ea:95:31:09:08:c4:3f:6f:3b: 38:90:de:9f:0a:bc:9e:79:0f:37:a5:38:b6:d8:8e: 16:76:8e:5f:b6:32:4d:07:32:22:d3:49:b9:91:ab: 75:06:0d:44:97:53:31:32:7b:db:52:3e:76:42:7c: fb:0d:fc:49:ba:88:a2:37:58:a0:aa:54:f2:0c:24: b8:0c:3d:b2:37:ed:79:1c:ee:db:3c:69:ea:e9:c8: 62:15:94:b7:29:04:86:ef:9c:82:75:83:9a:0f:a6: 8f:21:71:33:c0:5b:a7:b8:75:c8:a4:76:bc:b7:b5: 51:a3:57:93:eb:ed:ba:67:2a:6c:c2:7a:85:1c:40: 3f:8d:95:ce:73:f2:8a:c1:ef:c9:c8:f9:64:c3:5f: 1e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:97:D3:AA:D7:54:8E:46:FA:D2:8B:6E:75:7F:71:4B:83:93:2D:88 X509v3 Authority Key Identifier: keyid:A8:2E:63:31:EB:F4:4F:58:FC:65:99:86:DB:05:44:C6:61:5F:26:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/qC5jMev0T1j8ZZmG2wVExmFfJvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qC5jMev0T1j8ZZmG2wVExmFfJvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC415/BD1C935CD73211EEA183F50AC4F9AE02/B57678E8D73711EEAECFA720C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 210.79.128.0/23 IPv6: 2401:5420::/32 Signature Algorithm: sha256WithRSAEncryption 1e:83:ec:ef:ed:52:6f:32:80:41:b5:d5:fd:cd:c7:82:dc:32: 81:b1:23:ad:2a:9c:77:2f:3b:e1:2c:f9:41:70:a8:cb:82:39: 22:af:64:c9:75:cf:9e:2e:e6:08:96:b2:3c:ed:94:f9:57:08: b0:ef:97:29:1c:32:cb:8e:84:3a:26:6e:57:ed:0b:ec:57:7a: 94:69:03:5c:2d:a1:b9:82:68:17:55:7e:8b:cd:4f:34:6b:5a: 01:29:14:91:0e:49:a6:df:db:5c:ee:f2:90:ba:81:ea:15:d1: f7:4f:84:3e:2f:60:01:de:2b:53:33:87:96:60:13:28:7a:31: 19:76:e4:ac:ac:3e:c9:88:50:25:36:c1:34:3f:00:c6:af:15: 3d:6b:b9:66:95:99:cf:b5:18:3a:aa:29:d6:1b:87:a9:e8:00: 4d:66:b8:72:22:e3:ba:5d:10:3f:08:51:df:e0:91:79:58:21: 5a:c8:76:7b:d7:8c:db:5e:3b:63:fd:c7:0c:f8:fe:52:5e:aa: 5a:57:96:41:f8:82:11:de:29:ca:b5:9f:b3:22:34:4b:62:37: 95:c5:af:68:2c:d3:ff:e3:07:38:b9:70:30:8b:f0:df:02:ca: 60:fd:5e:9a:c2:7b:43:d5:98:9b:f3:02:73:92:ec:24:9c:6d: 26:a2:25:fd -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM0MTUxMTAvBgNVBAUTKEE4MkU2MzMxRUJGNDRGNThGQzY1OTk4NkRCMDU0NEM2 NjE1RjI2RjEwHhcNMjUxMjIzMDMyNDI0WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWQ0OS1kNDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAudwA91CVl+lNWzrR66Ir6Hp0pifk0/a4YQsjfin/CoSaklamkuPUsL3/UM+s I/c//mr7C5MIjOyjpO2RSQaGBWGMsmWMbKTnZ2AM3zTLruOfZNCEKcgvEfWDIwyn wFp7ICH737OQHGKmqdEqIUTqlTEJCMQ/bzs4kN6fCryeeQ83pTi22I4Wdo5ftjJN BzIi00m5kat1Bg1El1MxMnvbUj52Qnz7DfxJuoiiN1igqlTyDCS4DD2yN+15HO7b PGnq6chiFZS3KQSG75yCdYOaD6aPIXEzwFunuHXIpHa8t7VRo1eT6+26ZypswnqF HEA/jZXOc/KKwe/JyPlkw18ePwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFK+X06rX VI5G+tKLbnV/cUuDky2IMB8GA1UdIwQYMBaAFKguYzHr9E9Y/GWZhtsFRMZhXybx MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzQxNS9CRDFDOTM1Q0Q3 MzIxMUVFQTE4M0Y1MEFDNEY5QUUwMi9xQzVqTWV2MFQxajhaWm1HMndWRXhtRmZK dkUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3FDNWpNZXYwVDFqOFpabUcyd1ZFeG1GZkp2RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUM0MTUvQkQxQzkzNUNENzMyMTFFRUExODNGNTBBQzRGOUFFMDIvQjU3Njc4RThE NzM3MTFFRUFFQ0ZBNzIwQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQB0k+AMA0EAgACMAcDBQAkAVQgMA0GCSqGSIb3DQEBCwUAA4IBAQAe g+zv7VJvMoBBtdX9zceC3DKBsSOtKpx3LzvhLPlBcKjLgjkir2TJdc+eLuYIlrI8 7ZT5Vwiw75cpHDLLjoQ6Jm5X7QvsV3qUaQNcLaG5gmgXVX6LzU80a1oBKRSRDkmm 39tc7vKQuoHqFdH3T4Q+L2AB3itTM4eWYBMoejEZduSsrD7JiFAlNsE0PwDGrxU9 a7lmlZnPtRg6qinWG4ep6ABNZrhyIuO6XRA/CFHf4JF5WCFayHZ714zbXjtj/ccM +P5SXqpaV5ZB+IIR3inKtZ+zIjRLYjeVxa9oLNP/4wc4uXAwi/DfAspg/V6awntD 1Zib8wJzkuwknG0moiX9 -----END CERTIFICATE-----Generated at Sat Mar 28 13:41:00 2026 by rpki-client