$ rpki-client -vvf rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/2A26D2607E1311EEAF8FD93EC4F9AE02.roa File: 2A26D2607E1311EEAF8FD93EC4F9AE02.roa (raw, json) Hash identifier: 2pNCzrFLeuNwJ+o+omJeHhkXCESRdRl7rsiGuuIXYT0= Subject key identifier: A5:44:7E:C2:13:5A:ED:E4:6D:43:5F:D2:A2:11:B1:9F:86:B7:D2:16 Certificate issuer: /CN=A91E15AD/serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Certificate serial: 01F6 Authority key identifier: 7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/2A26D2607E1311EEAF8FD93EC4F9AE02.roa Signing time: Mon 02 Mar 2026 05:04:25 +0000 ROA not before: Tue 23 Dec 2025 19:44:01 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 151989 IP address blocks: 115.84.168.0/23 maxlen: 23 115.84.168.0/24 maxlen: 24 115.84.169.0/24 maxlen: 24 2001:df3:1c40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:08:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 502 (0x1f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E15AD, serialNumber=7F352A76956D7702FC77AF60FCC129E61FDBEA32 Validity Not Before: Dec 23 19:44:01 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a51a59-cff5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:07:77:70:22:4f:d1:5f:0a:dc:6d:f0:62:d1: f8:7a:74:0a:13:5d:34:47:09:b2:14:cb:8f:e8:c9: 5f:9f:e5:80:f9:85:25:12:4a:de:8c:ba:72:f2:bf: 3f:83:4b:2a:3e:d8:c6:cf:2d:87:a4:8d:3f:a8:be: 66:3e:4f:5c:ad:79:a5:96:39:be:d7:df:48:66:e3: 63:9c:29:4d:15:32:80:ef:42:fe:bf:78:9e:9d:24: 9d:5f:20:9f:c5:40:0d:fe:9d:e3:06:56:e9:2b:63: ff:c2:fb:35:3d:86:17:55:a9:64:37:ae:80:5f:e6: be:ac:14:06:12:21:55:c1:5a:8e:cb:1a:eb:1a:54: 31:81:f3:47:57:ba:0b:2d:07:92:32:fe:a1:b8:c1: f0:46:c5:b3:9b:c6:62:d9:8f:40:52:40:65:2e:36: 5f:a4:c1:53:7d:e9:2f:e8:d1:7d:a5:56:df:28:0f: fc:4e:03:a7:0d:b1:ca:25:2c:b3:30:48:27:1d:4f: a4:4a:b3:7d:ac:66:db:82:21:e6:78:23:d9:f8:24: 92:25:a7:b1:0d:9d:03:a4:09:8c:5c:a3:1b:19:e0: b8:8b:01:32:f8:b7:df:2e:fb:89:3c:59:70:21:8a: 02:d9:07:21:98:99:e2:b0:f3:93:d9:5b:4d:af:ba: f1:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:44:7E:C2:13:5A:ED:E4:6D:43:5F:D2:A2:11:B1:9F:86:B7:D2:16 X509v3 Authority Key Identifier: keyid:7F:35:2A:76:95:6D:77:02:FC:77:AF:60:FC:C1:29:E6:1F:DB:EA:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/fzUqdpVtdwL8d69g_MEp5h_b6jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fzUqdpVtdwL8d69g_MEp5h_b6jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E15AD/B8B91C467E1211EE9CB11F3EC4F9AE02/2A26D2607E1311EEAF8FD93EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 115.84.168.0/23 IPv6: 2001:df3:1c40::/48 Signature Algorithm: sha256WithRSAEncryption 0b:f9:e5:a4:c9:29:f5:cd:01:af:00:db:39:ce:80:3c:c0:31: 3b:1a:8c:a3:85:82:e6:c6:17:17:5b:00:fb:e9:02:b8:de:6c: ba:89:4f:0b:70:78:9a:a0:f3:f6:25:cc:99:a1:43:43:fc:ea: 33:d9:5a:c8:82:41:8b:73:3a:df:02:28:5b:b5:c0:90:e5:2e: 64:db:be:c9:9a:0f:22:cf:e0:3e:c2:e1:d9:0d:ce:2d:6b:70: f2:58:ea:4b:6a:81:ff:dd:a8:3f:fd:e4:1f:f4:9a:57:18:e7: 33:b1:f0:ce:9b:ee:27:c8:60:33:c4:e9:5d:e8:98:5f:b7:61: 9a:29:b1:a6:03:16:8f:24:74:4f:89:d9:e1:07:6b:c2:23:10: 61:cf:30:e1:2e:9b:13:b2:0b:f2:5b:9e:90:5e:3b:c4:bb:0d: 69:12:71:aa:de:c3:62:07:cf:b1:48:65:d0:80:39:3b:a1:22: 2f:59:82:1d:0a:59:10:cc:1a:a8:92:9f:e7:44:ee:f0:78:bc: 07:8e:33:82:72:52:7c:a2:b5:8d:d1:51:70:04:d5:71:11:1e: db:a5:6b:e4:b4:f6:0c:7b:bc:ac:5d:53:29:a1:4c:96:7a:9b: bd:5e:de:d0:96:4e:c3:95:56:76:5e:64:86:f7:7c:4b:dd:8c: 21:cf:44:76 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICAfYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE1QUQxMTAvBgNVBAUTKDdGMzUyQTc2OTU2RDc3MDJGQzc3QUY2MEZDQzEyOUU2 MUZEQkVBMzIwHhcNMjUxMjIzMTk0NDAxWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1MWE1OS1jZmY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswd3cCJP0V8K3G3wYtH4enQKE100RwmyFMuP6Mlfn+WA+YUlEkrejLpy8r8/ g0sqPtjGzy2HpI0/qL5mPk9crXmlljm+199IZuNjnClNFTKA70L+v3ienSSdXyCf xUAN/p3jBlbpK2P/wvs1PYYXValkN66AX+a+rBQGEiFVwVqOyxrrGlQxgfNHV7oL LQeSMv6huMHwRsWzm8Zi2Y9AUkBlLjZfpMFTfekv6NF9pVbfKA/8TgOnDbHKJSyz MEgnHU+kSrN9rGbbgiHmeCPZ+CSSJaexDZ0DpAmMXKMbGeC4iwEy+LffLvuJPFlw IYoC2QchmJnisPOT2VtNr7rx1wIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFKVEfsIT Wu3kbUNf0qIRsZ+Gt9IWMB8GA1UdIwQYMBaAFH81KnaVbXcC/HevYPzBKeYf2+oy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTVBRC9COEI5MUM0NjdF MTIxMUVFOUNCMTFGM0VDNEY5QUUwMi9melVxZHBWdGR3TDhkNjlnX01FcDVoX2I2 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Z6VXFkcFZ0ZHdMOGQ2OWdfTUVwNWhfYjZqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE1QUQvQjhCOTFDNDY3RTEyMTFFRTlDQjExRjNFQzRGOUFFMDIvMkEyNkQyNjA3 RTEzMTFFRUFGOEZEOTNFQzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBc1SoMA8EAgACMAkDBwAgAQ3zHEAwDQYJKoZIhvcNAQELBQADggEB AAv55aTJKfXNAa8A2znOgDzAMTsajKOFgubGFxdbAPvpArjebLqJTwtweJqg8/Yl zJmhQ0P86jPZWsiCQYtzOt8CKFu1wJDlLmTbvsmaDyLP4D7C4dkNzi1rcPJY6ktq gf/dqD/95B/0mlcY5zOx8M6b7ifIYDPE6V3omF+3YZopsaYDFo8kdE+J2eEHa8Ij EGHPMOEumxOyC/JbnpBeO8S7DWkScarew2IHz7FIZdCAOTuhIi9Zgh0KWRDMGqiS n+dE7vB4vAeOM4JyUnyitY3RUXAE1XERHtula+S09gx7vKxdUymhTJZ6m71e3tCW TsOVVnZeZIb3fEvdjCHPRHY= -----END CERTIFICATE-----Generated at Thu Mar 26 02:26:08 2026 by rpki-client