$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/C2838C8245B011EFAE60CC76C4F9AE02.roa File: C2838C8245B011EFAE60CC76C4F9AE02.roa (raw, json) Hash identifier: RzM5XYHpAe7uWEPFy0Uicf76LJbJuN++zhp1wy8rKjI= Subject key identifier: 36:B0:D8:D3:62:B0:E2:60:3E:DF:78:99:65:4E:0B:DE:76:DA:55:08 Certificate issuer: /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Certificate serial: 0139 Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/C2838C8245B011EFAE60CC76C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:39:22 +0000 ROA not before: Tue 13 Jan 2026 04:23:15 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 152317 IP address blocks: 157.10.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:35:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 313 (0x139) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827 Validity Not Before: Jan 13 04:23:15 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a5a11a-d42b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8a:1f:1b:e6:ad:84:29:85:4d:7f:b6:dc:3f: 6c:79:b9:5a:e6:43:d6:c0:81:71:a3:b6:9e:0b:7d: 48:0a:00:13:b2:b0:b5:da:f4:5d:0e:1e:49:49:a5: df:8a:a6:6b:5f:30:31:43:c1:57:ee:72:89:47:69: de:1e:2d:04:c5:68:a1:b9:17:06:3e:98:3b:42:ea: 3a:e7:6a:5e:a2:89:8e:d9:5f:dd:ac:95:c3:9a:c5: dd:4d:8c:21:49:cb:32:32:dc:a9:dc:c7:4f:d1:5b: ae:6f:05:29:98:b5:e9:72:11:83:e7:53:a8:ce:10: 1e:24:39:fa:94:68:c4:f1:62:33:92:cc:74:30:a5: fb:24:89:e3:95:d2:23:49:df:ae:44:8d:ff:06:14: e4:19:05:e8:39:c6:7e:50:36:81:93:42:24:d8:36: ff:36:28:c0:33:b1:ad:b0:3d:25:91:b9:c1:12:e0: 3b:63:fc:c3:86:86:0f:ed:00:af:90:9d:e2:cb:4c: b0:ad:da:e8:af:9b:5d:50:68:06:d3:a1:af:0e:92: c4:e5:9a:74:1e:fc:bb:90:7f:c6:5d:9d:be:83:23: 7f:87:64:f6:b5:93:5e:5c:cc:de:25:f9:6a:85:de: be:b6:1b:65:22:40:9c:25:4c:5d:47:86:24:c9:d6: 2e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B0:D8:D3:62:B0:E2:60:3E:DF:78:99:65:4E:0B:DE:76:DA:55:08 X509v3 Authority Key Identifier: keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/C2838C8245B011EFAE60CC76C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.120.0/23 Signature Algorithm: sha256WithRSAEncryption 5f:e8:63:30:ac:c9:af:d8:23:84:d6:d9:2f:03:0e:24:26:ad: 53:e9:31:54:c0:07:11:3b:22:2a:38:6f:83:26:3c:df:8e:9c: 54:fb:ad:07:be:02:07:7f:3d:7d:af:7b:06:2a:b7:92:a6:82: 22:96:3c:62:81:d8:68:24:0b:5c:6d:4a:33:ee:e5:61:ad:49: f0:17:dd:d7:a4:f9:f8:97:a8:71:2f:04:42:9c:31:04:2d:13: d2:3e:cf:96:e2:dc:45:70:a4:44:3a:ec:07:96:74:a0:e3:27: 93:21:f7:45:01:c2:c7:fa:d0:4b:07:ed:4b:da:cd:bf:c7:04: d3:6a:1f:05:c5:fc:60:1a:da:18:96:ac:12:11:a1:3c:d6:49: 33:ec:58:b0:01:c4:51:54:60:9c:5b:b4:0a:ae:68:92:40:ca: 90:fb:1e:d6:79:fa:cf:1d:c3:2f:3b:f5:e9:06:45:26:69:56: e8:55:55:71:bf:07:1b:41:46:54:19:31:12:06:ce:56:9f:51: 57:ac:94:70:63:89:c8:97:92:21:1d:72:c1:13:76:3a:7d:0e: d0:08:ef:25:89:12:bc:e6:1c:15:24:a1:be:c0:7d:e9:59:1a: fb:b3:09:25:d7:99:6f:4e:c3:dd:53:4b:77:a3:66:fc:ea:45: 2e:c2:4b:6f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICATkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VFODUxMTAvBgNVBAUTKDA3MjQ0QTk5NENEQzRCOTM4MDc0NzExQzQyNDhENDlG OUQ1MEQ4MjcwHhcNMjYwMTEzMDQyMzE1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTExYS1kNDJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvIofG+athCmFTX+23D9sebla5kPWwIFxo7aeC31ICgATsrC12vRdDh5JSaXf iqZrXzAxQ8FX7nKJR2neHi0ExWihuRcGPpg7Quo652peoomO2V/drJXDmsXdTYwh ScsyMtyp3MdP0VuubwUpmLXpchGD51OozhAeJDn6lGjE8WIzksx0MKX7JInjldIj Sd+uRI3/BhTkGQXoOcZ+UDaBk0Ik2Db/NijAM7GtsD0lkbnBEuA7Y/zDhoYP7QCv kJ3iy0ywrdror5tdUGgG06GvDpLE5Zp0Hvy7kH/GXZ2+gyN/h2T2tZNeXMzeJflq hd6+thtlIkCcJUxdR4YkydYucQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDaw2NNi sOJgPt94mWVOC9522lUIMB8GA1UdIwQYMBaAFAckSplM3EuTgHRxHEJI1J+dUNgn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUU4NS9GQzY2RjVBRTQ1 QUQxMUVGQjQzNUVCNkZDNEY5QUUwMi9CeVJLbVV6Y1M1T0FkSEVjUWtqVW41MVEy Q2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0J5UkttVXpjUzVPQWRIRWNRa2pVbjUxUTJDYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VFODUvRkM2NkY1QUU0NUFEMTFFRkI0MzVFQjZGQzRGOUFFMDIvQzI4MzhDODI0 NUIwMTFFRkFFNjBDQzc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnQp4MA0GCSqGSIb3DQEBCwUAA4IBAQBf6GMwrMmv2COE1tkvAw4k Jq1T6TFUwAcROyIqOG+DJjzfjpxU+60HvgIHfz19r3sGKreSpoIiljxigdhoJAtc bUoz7uVhrUnwF93XpPn4l6hxLwRCnDEELRPSPs+W4txFcKREOuwHlnSg4yeTIfdF AcLH+tBLB+1L2s2/xwTTah8FxfxgGtoYlqwSEaE81kkz7FiwAcRRVGCcW7QKrmiS QMqQ+x7WefrPHcMvO/XpBkUmaVboVVVxvwcbQUZUGTESBs5Wn1FXrJRwY4nIl5Ih HXLBE3Y6fQ7QCO8liRK85hwVJKG+wH3pWRr7swkl15lvTsPdU0t3o2b86kUuwktv -----END CERTIFICATE-----Generated at Thu Mar 26 15:40:58 2026 by rpki-client