$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa File: B57E9D8C98D511F0912EFD62C4F9AE02.roa (raw, json) Hash identifier: H0Iwpph5C0NznDpgp/Qg/LJo8mI5O7HMAwbb7Y6vKFE= Subject key identifier: 7C:89:A1:FA:19:05:B9:07:37:4B:93:60:56:82:0C:DB:65:44:92:06 Certificate issuer: /CN=A91D8A94/serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Certificate serial: 06 Authority key identifier: 64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa Signing time: Wed 24 Sep 2025 00:09:09 +0000 ROA not before: Wed 24 Sep 2025 00:09:09 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 154262 IP address blocks: 27.126.156.0/23 maxlen: 23 27.126.156.0/24 maxlen: 24 27.126.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:33:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6 (0x6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D8A94, serialNumber=64C0C1D9615011062513EF47B8EE388981D3E80F Validity Not Before: Sep 24 00:09:09 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68d336a4-6cf4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ab:83:78:18:2a:2e:e3:ec:6a:09:60:fd:f9: 60:82:cd:4e:28:57:8d:6a:7d:bd:05:eb:f2:64:98: 67:21:2d:f7:5f:93:bf:90:31:0c:00:39:0a:c7:38: 99:c1:57:88:84:47:ea:d5:57:1c:c0:14:45:45:a9: 88:20:f8:0e:8f:a7:8b:5b:fa:6e:7d:2b:9e:3d:c2: cc:57:d2:4a:df:af:ad:29:ea:e3:b6:10:5b:90:eb: a5:dc:18:80:72:36:e2:54:db:2b:a1:19:36:51:40: 81:5c:57:71:3a:ac:ee:cc:75:87:25:b7:8d:3f:47: e9:43:c9:58:ac:ee:9d:f2:71:2c:f3:c0:de:01:65: 3f:81:73:2b:8d:cf:d3:77:24:f1:41:df:17:d6:39: 11:12:c6:55:9f:7e:1f:0e:e2:17:63:2b:8a:bd:6b: 83:e2:31:c9:c4:ba:04:cc:4f:bf:a9:9f:cc:be:3e: c3:36:45:a9:9e:a3:b6:df:1a:d2:c5:88:25:83:8b: 06:5b:8a:b7:a6:c4:9e:d9:c3:30:d8:d3:0f:33:ee: 99:36:5b:fe:2f:2a:55:61:83:e6:15:fc:b3:50:c1: ec:df:78:0e:04:05:95:3c:22:4a:4b:ca:3e:90:1e: ee:19:d4:6b:1e:d8:3b:8b:53:fe:c6:5b:fe:d8:99: 5c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:89:A1:FA:19:05:B9:07:37:4B:93:60:56:82:0C:DB:65:44:92:06 X509v3 Authority Key Identifier: keyid:64:C0:C1:D9:61:50:11:06:25:13:EF:47:B8:EE:38:89:81:D3:E8:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/ZMDB2WFQEQYlE-9HuO44iYHT6A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZMDB2WFQEQYlE-9HuO44iYHT6A8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8A94/6CD00DD298CB11F082C3F05FC4F9AE02/B57E9D8C98D511F0912EFD62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.126.156.0/23 Signature Algorithm: sha256WithRSAEncryption 84:a2:e4:f5:e8:b8:f5:cc:82:8b:3a:fe:a8:d9:28:c1:0d:ca: dd:4b:f4:e4:7a:e8:0a:46:48:08:7c:86:c9:2a:2c:52:63:b1: d9:29:db:b9:ee:f9:a8:44:17:c6:10:5b:fc:5a:d5:90:75:ff: bf:f2:7d:70:7d:83:1f:98:ac:c0:d7:a9:10:72:dc:5e:be:5c: aa:5f:f2:38:ed:89:3f:37:d7:69:0e:60:a4:6b:8c:d3:cc:f2: dc:0b:a9:11:38:4d:73:7d:98:4e:cd:b1:1d:50:9f:a5:e8:ff: 83:36:6a:4c:22:42:36:57:34:6d:72:3a:cc:55:9d:1f:87:55: e1:68:0c:d5:bd:ca:1b:d5:8e:c9:4a:85:1b:a0:54:b1:ba:c8: 54:ad:c2:8a:e3:f9:0d:bf:20:ee:a7:dd:ec:80:c5:c9:17:95: 14:3d:52:75:64:d4:c7:cb:a1:7a:55:b1:b3:98:1e:f4:73:c8: 5a:19:dd:2b:10:92:ab:53:6b:14:d6:7f:01:25:66:f3:05:37: c4:bc:7c:aa:e4:07:40:18:c7:1a:20:5e:99:77:37:0f:2f:34: 51:10:0a:57:67:45:35:ab:47:ea:70:ce:85:ca:e5:f4:d1:3d: f0:83:fc:b2:9b:6f:cf:a5:96:cc:54:4c:05:36:56:59:0f:e5: cb:3e:f6:9c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OEE5NDExMC8GA1UEBRMoNjRDMEMxRDk2MTUwMTEwNjI1MTNFRjQ3QjhFRTM4ODk4 MUQzRTgwRjAeFw0yNTA5MjQwMDA5MDlaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZDMzNmE0LTZjZjQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgq4N4GCou4+xqCWD9+WCCzU4oV41qfb0F6/JkmGchLfdfk7+QMQwAOQrHOJnB V4iER+rVVxzAFEVFqYgg+A6Pp4tb+m59K549wsxX0krfr60p6uO2EFuQ66XcGIBy NuJU2yuhGTZRQIFcV3E6rO7MdYclt40/R+lDyVis7p3ycSzzwN4BZT+BcyuNz9N3 JPFB3xfWORESxlWffh8O4hdjK4q9a4PiMcnEugTMT7+pn8y+PsM2Rameo7bfGtLF iCWDiwZbiremxJ7ZwzDY0w8z7pk2W/4vKlVhg+YV/LNQwezfeA4EBZU8IkpLyj6Q Hu4Z1Gse2DuLU/7GW/7YmVxvAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUfImh+hkF uQc3S5NgVoIM22VEkgYwHwYDVR0jBBgwFoAUZMDB2WFQEQYlE+9HuO44iYHT6A8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4QTk0LzZDRDAwREQyOThD QjExRjA4MkMzRjA1RkM0RjlBRTAyL1pNREIyV0ZRRVFZbEUtOUh1TzQ0aVlIVDZB OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWk1EQjJXRlFFUVlsRS05SHVPNDRpWUhUNkE4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OEE5NC82Q0QwMEREMjk4Q0IxMUYwODJDM0YwNUZDNEY5QUUwMi9CNTdFOUQ4Qzk4 RDUxMUYwOTEyRUZENjJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEARt+nDANBgkqhkiG9w0BAQsFAAOCAQEAhKLk9ei49cyCizr+ qNkowQ3K3Uv05HroCkZICHyGySosUmOx2Snbue75qEQXxhBb/FrVkHX/v/J9cH2D H5iswNepEHLcXr5cql/yOO2JPzfXaQ5gpGuM08zy3AupEThNc32YTs2xHVCfpej/ gzZqTCJCNlc0bXI6zFWdH4dV4WgM1b3KG9WOyUqFG6BUsbrIVK3CiuP5Db8g7qfd 7IDFyReVFD1SdWTUx8uhelWxs5ge9HPIWhndKxCSq1NrFNZ/ASVm8wU3xLx8quQH QBjHGiBemXc3Dy80URAKV2dFNatH6nDOhcrl9NE98IP8sptvz6WWzFRMBTZWWQ/l yz72nA== -----END CERTIFICATE-----Generated at Mon Oct 20 11:23:26 2025 by rpki-client