$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/9D9BBE06B11711F1804AF5374511F970.roa File: 9D9BBE06B11711F1804AF5374511F970.roa (raw, json) Hash identifier: hEZdh/nCthSLt4lixxo9SKLQ79qoIbWxNKfer+Cf5AQ= Subject key identifier: 12:A1:D7:9E:62:D0:FD:6E:7A:E7:BC:6D:A9:C0:E9:9E:C0:70:42:66 Certificate issuer: /CN=A91C51D7/serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F Certificate serial: 1F Authority key identifier: CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/9D9BBE06B11711F1804AF5374511F970.roa Signing time: Sat 31 Oct 2026 02:57:22 +0000 ROA not before: Sat 31 Oct 2026 02:57:22 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 3918 IP address blocks: 134.144.78.0/24 maxlen: 24 134.144.82.0/24 maxlen: 24 134.144.83.0/24 maxlen: 24 134.144.182.0/24 maxlen: 24 156.149.128.0/24 maxlen: 24 156.149.136.0/24 maxlen: 24 156.149.137.0/24 maxlen: 24 156.149.138.0/24 maxlen: 24 156.149.139.0/24 maxlen: 24 161.126.150.0/24 maxlen: 24 161.126.151.0/24 maxlen: 24 161.126.181.0/24 maxlen: 24 161.126.210.0/24 maxlen: 24 161.126.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.crl rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 09:05:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31 (0x1f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C51D7, serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F Validity Not Before: Oct 31 02:57:22 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6ae55911-37b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c5:63:3b:a2:69:0a:8f:79:97:98:63:e3:d8: 04:a3:aa:e8:38:96:d3:ae:ce:b9:cc:a8:82:d4:6f: 51:2f:eb:09:3f:a4:67:d2:48:42:80:ba:cb:52:f9: 6c:f8:9e:8a:3b:f3:eb:24:00:a4:83:97:7a:b6:1b: 07:55:aa:a1:2d:8f:1b:51:75:c7:1a:cf:3f:1d:53: 7e:fd:96:9c:6c:fe:2b:e5:a9:5d:df:f9:41:0c:1e: cf:2b:78:bf:0a:e0:47:66:f2:a5:51:fc:09:19:26: 75:04:47:c9:43:3f:a8:23:56:c7:7e:4f:55:f7:60: 96:8b:70:2b:23:ce:b7:b2:3e:9f:f9:9f:c6:b5:43: a7:f0:7d:9d:1a:27:4b:9f:bd:05:ca:93:f8:c1:a6: 9a:c6:e3:3a:01:0c:cd:44:5f:38:0f:b7:fe:81:e9: 0a:2e:38:c8:9e:b3:64:c4:0b:f1:35:e4:c7:66:05: 94:24:c8:c9:d6:52:0d:90:d1:f0:27:c0:38:21:07: a3:53:b8:86:38:a5:9e:ec:f5:58:89:9d:86:e1:18: 2c:95:d4:a3:f1:21:b2:1e:93:3e:9e:52:40:e6:29: f1:4f:c0:a4:d9:a8:8a:39:d4:8d:01:12:a8:d3:33: 91:d7:25:94:b8:76:01:a8:ef:0c:52:26:b7:fa:81: 75:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:A1:D7:9E:62:D0:FD:6E:7A:E7:BC:6D:A9:C0:E9:9E:C0:70:42:66 X509v3 Authority Key Identifier: keyid:CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/9D9BBE06B11711F1804AF5374511F970.roa sbgp-ipAddrBlock: critical IPv4: 134.144.78.0/24 134.144.82.0/23 134.144.182.0/24 156.149.128.0/24 156.149.136.0/22 161.126.150.0/23 161.126.181.0/24 161.126.210.0/23 Signature Algorithm: sha256WithRSAEncryption 37:05:cb:53:b5:77:ed:59:db:9b:54:aa:bc:47:4a:72:b8:c2: 8b:21:72:57:c1:fa:fa:9b:77:8d:11:24:ce:9a:70:56:36:86: 5d:08:d9:37:9d:f0:4b:84:6e:31:68:36:1b:a8:36:40:ba:7a: ee:e9:51:c2:71:9a:49:ba:19:f4:67:6e:90:ec:a1:5f:7d:19: 91:a0:9a:d9:31:fd:87:fd:d9:c0:e7:e0:aa:c1:c8:7b:9d:a8: c0:5f:ce:51:83:32:fe:d7:46:a7:66:ab:dc:45:0c:50:81:56: 59:fa:f7:bc:0a:77:67:94:69:c7:b6:3a:42:b3:02:60:25:be: 1b:e5:04:ca:72:bc:48:68:f5:cd:16:03:60:23:7c:77:a0:05: 8b:c7:6f:db:b1:4a:15:27:ac:7b:e7:5f:f3:86:eb:e9:7e:c1: 66:14:11:2d:85:36:f3:10:9d:f0:e2:05:07:7b:f9:22:a3:d6: 4b:5f:62:09:c7:9c:62:b5:f1:be:08:ec:0a:d6:ed:85:26:4c: 24:e9:7e:60:ea:c0:6a:d7:61:28:1b:17:41:ee:56:76:02:9c: 23:28:47:68:f9:35:67:f6:c2:8d:b8:ee:cb:f4:8a:5e:00:66: b7:ee:88:02:e5:2d:3f:c0:aa:61:08:7f:80:dd:5a:d5:ce:1e: 9d:e2:43:ea -----BEGIN CERTIFICATE----- MIIFZTCCBE2gAwIBAgIBHzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTFENzExMC8GA1UEBRMoQ0RDMzRCOTQ5MjkwN0IxQTU5RUU2QTAwQjg3QjRGQzIx OTI2QUIyRjAeFw0yNjEwMzEwMjU3MjJaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhZTU1OTExLTM3YjgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDuxWM7omkKj3mXmGPj2ASjqug4ltOuzrnMqILUb1Ev6wk/pGfSSEKAustS+Wz4 noo78+skAKSDl3q2GwdVqqEtjxtRdccazz8dU379lpxs/ivlqV3f+UEMHs8reL8K 4Edm8qVR/AkZJnUER8lDP6gjVsd+T1X3YJaLcCsjzreyPp/5n8a1Q6fwfZ0aJ0uf vQXKk/jBpprG4zoBDM1EXzgPt/6B6QouOMies2TEC/E15MdmBZQkyMnWUg2Q0fAn wDghB6NTuIY4pZ7s9ViJnYbhGCyV1KPxIbIekz6eUkDmKfFPwKTZqIo51I0BEqjT M5HXJZS4dgGo7wxSJrf6gXX1AgMBAAGjggKKMIIChjAdBgNVHQ4EFgQUEqHXnmLQ /W5657xtqcDpnsBwQmYwHwYDVR0jBBgwFoAUzcNLlJKQexpZ7moAuHtPwhkmqy8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1MUQ3L0JCRUU2MkY0QjEw OTExRjFBQUI4MkIyRDQwMTFGOTcwL3pjTkxsSktRZXhwWjdtb0F1SHRQd2hrbXF5 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvemNOTGxKS1FleHBaN21vQXVIdFB3aGttcXk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTFENy9CQkVFNjJGNEIxMDkxMUYxQUFCODJCMkQ0MDExRjk3MC85RDlCQkUwNkIx MTcxMUYxODA0QUY1Mzc0NTExRjk3MC5yb2EwSQYIKwYBBQUHAQcBAf8EOjA4MDYE AgABMDADBACGkE4DBAGGkFIDBACGkLYDBACclYADBAKclYgDBAGhfpYDBAChfrUD BAGhftIwDQYJKoZIhvcNAQELBQADggEBADcFy1O1d+1Z25tUqrxHSnK4woshclfB +vqbd40RJM6acFY2hl0I2Ted8EuEbjFoNhuoNkC6eu7pUcJxmkm6GfRnbpDsoV99 GZGgmtkx/Yf92cDn4KrByHudqMBfzlGDMv7XRqdmq9xFDFCBVln697wKd2eUace2 OkKzAmAlvhvlBMpyvEho9c0WA2AjfHegBYvHb9uxShUnrHvnX/OG6+l+wWYUES2F NvMQnfDiBQd7+SKj1ktfYgnHnGK18b4I7ArW7YUmTCTpfmDqwGrXYSgbF0HuVnYC nCMoR2j5NWf2wo247sv0il4AZrfuiALlLT/AqmEIf4DdWtXOHp3iQ+o= -----END CERTIFICATE-----Generated at Sun Nov 15 20:33:24 2026 by rpki-client