$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/42BB5BC2CB8A11F089E0C00EC4F9AE02.roa File: 42BB5BC2CB8A11F089E0C00EC4F9AE02.roa (raw, json) Hash identifier: ffFlZZGQ0iwDML1pEzeR++cufgSgn2eJebqm0V7/KKc= Subject key identifier: 35:2C:F3:7A:D7:7E:AE:AC:25:B7:55:06:77:36:6F:4D:3A:AC:CC:E4 Certificate issuer: /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D Certificate serial: 0874 Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/42BB5BC2CB8A11F089E0C00EC4F9AE02.roa Signing time: Sun 01 Mar 2026 18:17:53 +0000 ROA not before: Mon 16 Feb 2026 20:17:37 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 24323 IP address blocks: 150.107.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 20:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2164 (0x874) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D Validity Not Before: Feb 16 20:17:37 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a482d1-5ede Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:86:f9:df:71:25:99:8f:f8:02:9c:1f:ea: d0:52:5b:20:7b:be:b8:07:cf:68:28:67:3a:fd:18: 28:5b:21:9c:78:eb:91:24:bf:6e:10:a6:09:f9:7d: aa:17:4a:c8:1a:c0:3a:36:65:d4:f1:95:5f:0f:a8: fc:11:13:ce:99:db:55:48:c0:9c:98:81:5e:68:34: 2b:2c:c9:fb:27:d1:b9:d1:cb:62:1c:72:8e:2f:c8: be:35:0e:2b:27:53:60:de:01:c5:36:ff:48:d7:88: de:e5:6f:49:1a:3a:a2:b0:87:26:58:77:7b:a8:db: 82:98:75:7e:12:b5:bf:f8:3d:3b:b4:42:e1:b8:64: d2:ac:c6:80:5c:70:b6:67:6a:8f:ad:82:52:6d:6a: e5:27:3b:7a:8a:f6:25:2f:be:69:56:64:9c:73:08: 48:18:7b:52:7a:14:44:b1:6b:7e:65:78:77:dd:be: fd:b6:87:88:47:da:4f:f7:e4:02:e5:0f:05:f0:ce: e4:7d:ec:cb:11:1b:f8:7b:c5:47:7a:1c:7d:82:13: 00:b7:b8:90:c6:0b:04:56:19:d0:5a:76:c3:70:c6: 95:6d:91:a9:b5:a9:a0:df:13:ed:bb:f7:14:5a:31: 55:1b:b1:15:4f:97:bc:43:39:ea:45:7f:e4:96:06: 9e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2C:F3:7A:D7:7E:AE:AC:25:B7:55:06:77:36:6F:4D:3A:AC:CC:E4 X509v3 Authority Key Identifier: keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/42BB5BC2CB8A11F089E0C00EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 150.107.55.0/24 Signature Algorithm: sha256WithRSAEncryption 82:78:23:0f:e4:eb:86:8d:f3:24:c9:03:93:c4:ea:88:ce:50: 48:5e:cf:69:5f:7c:46:74:39:92:8a:3a:40:15:14:45:75:b0: 8d:f0:69:af:9a:7e:ad:9e:c1:f5:77:1a:28:96:7c:15:03:87: ad:af:e1:f4:d4:3c:08:b1:5d:d8:63:6d:d6:cd:19:cd:ca:76: 70:0b:e2:c3:1f:9f:4f:dd:07:10:eb:3e:88:7a:13:cb:c8:07: 43:ea:17:87:e2:42:3f:62:83:e6:20:7d:4d:39:05:e6:70:4f: 0c:b4:65:2d:fe:85:71:81:21:71:f3:91:24:96:ac:b0:83:a3: 60:f4:d6:12:90:bd:6a:80:a1:03:7d:26:6b:74:4a:fe:e3:5d: 9d:ba:17:0c:ed:15:4c:e5:38:e7:54:7b:80:97:f9:79:6e:97: 41:0a:27:cb:57:1d:47:3d:f8:fa:31:05:8f:b2:b5:09:00:78: 66:d7:57:99:33:9c:08:ed:32:f3:da:17:35:f6:f8:18:7f:c0: 8d:11:09:f9:44:aa:fe:e8:3f:9e:34:dc:b4:fb:76:30:4f:95: 4c:99:04:51:c3:0f:d5:19:b4:69:47:fd:08:18:fe:2a:b6:79: 86:43:15:c5:7f:67:84:47:c8:a5:b8:06:1c:f6:a9:bd:20:62: 83:46:17:9c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUQxN0YxMTAvBgNVBAUTKDE3RjRGQjEyODc1NkVCQjBCQUM1OUQ0RTBGNEI3RTA4 NzI3OTc2MEQwHhcNMjYwMjE2MjAxNzM3WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0ODJkMS01ZWRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr2mG+d9xJZmP+AKcH+rQUlsge764B89oKGc6/RgoWyGceOuRJL9uEKYJ+X2q F0rIGsA6NmXU8ZVfD6j8ERPOmdtVSMCcmIFeaDQrLMn7J9G50ctiHHKOL8i+NQ4r J1Ng3gHFNv9I14je5W9JGjqisIcmWHd7qNuCmHV+ErW/+D07tELhuGTSrMaAXHC2 Z2qPrYJSbWrlJzt6ivYlL75pVmSccwhIGHtSehREsWt+ZXh33b79toeIR9pP9+QC 5Q8F8M7kfezLERv4e8VHehx9ghMAt7iQxgsEVhnQWnbDcMaVbZGptamg3xPtu/cU WjFVG7EVT5e8QznqRX/klgaeXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDUs83rX fq6sJbdVBnc2b006rMzkMB8GA1UdIwQYMBaAFBf0+xKHVuuwusWdTg9LfghyeXYN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRDE3Ri9BNTZENUY0MEZC NDcxMUVBQkVGNDdEM0VDNEY5QUUwMi9GX1Q3RW9kVzY3QzZ4WjFPRDB0LUNISjVk ZzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZfVDdFb2RXNjdDNnhaMU9EMHQtQ0hKNWRnMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUQxN0YvQTU2RDVGNDBGQjQ3MTFFQUJFRjQ3RDNFQzRGOUFFMDIvNDJCQjVCQzJD QjhBMTFGMDg5RTBDMDBFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAlms3MA0GCSqGSIb3DQEBCwUAA4IBAQCCeCMP5OuGjfMkyQOTxOqI zlBIXs9pX3xGdDmSijpAFRRFdbCN8Gmvmn6tnsH1dxoolnwVA4etr+H01DwIsV3Y Y23WzRnNynZwC+LDH59P3QcQ6z6IehPLyAdD6heH4kI/YoPmIH1NOQXmcE8MtGUt /oVxgSFx85Eklqywg6Ng9NYSkL1qgKEDfSZrdEr+412duhcM7RVM5TjnVHuAl/l5 bpdBCifLVx1HPfj6MQWPsrUJAHhm11eZM5wI7TLz2hc19vgYf8CNEQn5RKr+6D+e NNy0+3YwT5VMmQRRww/VGbRpR/0IGP4qtnmGQxXFf2eER8iluAYc9qm9IGKDRhec -----END CERTIFICATE-----Generated at Thu Mar 26 07:15:59 2026 by rpki-client