$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/00E1AC30FBAA11EE9C7F3921C4F9AE02.roa File: 00E1AC30FBAA11EE9C7F3921C4F9AE02.roa (raw, json) Hash identifier: Olday+AXi3Qq8gq780450bntMRq7xAhbF+H8ZFEm5II= Subject key identifier: 0D:A9:E3:94:46:DC:E7:7A:EC:4A:D8:7F:40:65:97:D0:3A:7F:D7:43 Certificate issuer: /CN=A91EF73D/serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Certificate serial: 01A9 Authority key identifier: 9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/00E1AC30FBAA11EE9C7F3921C4F9AE02.roa Signing time: Tue 17 Mar 2026 03:38:54 +0000 ROA not before: Tue 17 Mar 2026 03:38:54 +0000 ROA not after: Fri 28 May 2027 00:00:00 +0000 asID: 9230 IP address blocks: 157.20.54.0/23 maxlen: 23 157.20.54.0/24 maxlen: 24 157.20.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 03:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 425 (0x1a9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF73D, serialNumber=9A89BB37C54386DA9A87A64FF0094428A3171A47 Validity Not Before: Mar 17 03:38:54 2026 GMT Not After : May 28 00:00:00 2027 GMT Subject: CN=69b8ccce-a1ac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:09:be:b2:ce:41:02:01:7b:f8:d1:b1:e6:98: 4e:a8:86:c4:48:b5:0c:cd:c4:39:3e:0e:44:dd:cc: 93:18:9b:76:ef:e8:52:97:e8:23:a9:b7:f5:d8:b6: c5:0c:44:d6:8f:e2:0a:78:1c:1e:9f:20:91:ac:bd: 83:e8:58:ea:4a:a7:f3:e2:dc:81:11:9c:e9:b4:c3: 44:f2:a7:e2:f3:0a:17:8e:f0:a4:3d:41:57:c4:b4: b2:44:27:43:94:fc:22:b5:fb:32:f3:2a:ad:8c:4f: b4:97:5e:14:6b:06:57:55:b7:43:45:57:66:f2:09: 09:8a:e9:7f:5c:d0:d9:42:d4:a5:86:b1:17:9a:c0: 9d:3d:95:fe:22:22:f3:85:ca:38:2e:08:8a:01:6d: c1:9b:02:9d:41:7c:55:6f:11:f7:e1:90:1b:d3:25: 26:7c:a9:a7:ea:a1:97:f2:a6:c4:13:e7:a9:26:74: bb:e9:7c:30:1c:27:7d:a2:c2:f8:0f:a9:d7:1a:de: 01:73:5c:1d:81:46:71:43:6c:e6:26:78:ff:b8:18: 85:d0:73:fd:6b:1b:c6:58:06:c5:04:89:06:b1:94: c2:f4:c8:3e:29:29:5d:ea:f9:09:7f:a5:66:6e:29: d0:6b:ca:4f:a7:35:0d:bc:42:6f:e4:61:8a:ca:2e: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A9:E3:94:46:DC:E7:7A:EC:4A:D8:7F:40:65:97:D0:3A:7F:D7:43 X509v3 Authority Key Identifier: keyid:9A:89:BB:37:C5:43:86:DA:9A:87:A6:4F:F0:09:44:28:A3:17:1A:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/mom7N8VDhtqah6ZP8AlEKKMXGkc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mom7N8VDhtqah6ZP8AlEKKMXGkc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF73D/C92B3232CE1F11EEAC62617CC4F9AE02/00E1AC30FBAA11EE9C7F3921C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.54.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:41:1c:78:50:3c:d9:b8:8e:32:95:eb:3d:bc:9c:aa:12:b3: c6:df:f1:9e:02:f9:8a:45:28:34:4f:1e:75:85:48:51:c8:8f: 8c:68:aa:1b:f6:00:4e:5d:f8:f9:d2:25:20:ed:65:5a:a0:3c: f9:55:6c:93:3b:40:b9:54:5d:7b:ee:04:ea:33:4f:d8:eb:83: da:fa:43:e5:d6:07:48:f9:38:87:f7:b1:f0:af:59:99:88:d4: f6:41:ac:4e:cd:a0:6d:11:b2:66:23:0c:a1:ef:10:b9:c3:b9: d6:d0:d8:8b:4a:97:c4:63:df:ee:25:9c:70:f8:8c:a9:0d:ea: e8:ac:c0:9e:69:f2:2c:cf:0e:b1:1a:87:1e:c3:36:d9:bf:77: ba:3a:a1:59:f0:e8:b3:bd:9c:61:99:9c:de:c2:19:f8:2e:59: 7b:27:35:2c:ca:6a:11:90:ff:5a:4b:75:a1:a1:54:94:58:6c: 0f:0b:63:89:42:e6:32:4e:8d:d8:51:01:1f:34:69:37:26:56: 22:5b:89:ed:52:da:69:ef:d4:62:06:da:06:bc:01:c4:05:43: 6c:e7:c6:03:9a:97:10:e7:b3:50:02:fa:14:0c:1c:f4:84:3e: 48:72:2c:d8:c6:f8:11:2e:c8:32:d3:4a:6c:83:0c:bb:3c:ef: f1:4c:5a:f2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAakwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY3M0QxMTAvBgNVBAUTKDlBODlCQjM3QzU0Mzg2REE5QTg3QTY0RkYwMDk0NDI4 QTMxNzFBNDcwHhcNMjYwMzE3MDMzODU0WhcNMjcwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4Y2NjZS1hMWFjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuwm+ss5BAgF7+NGx5phOqIbESLUMzcQ5Pg5E3cyTGJt27+hSl+gjqbf12LbF DETWj+IKeBwenyCRrL2D6FjqSqfz4tyBEZzptMNE8qfi8woXjvCkPUFXxLSyRCdD lPwitfsy8yqtjE+0l14UawZXVbdDRVdm8gkJiul/XNDZQtSlhrEXmsCdPZX+IiLz hco4LgiKAW3BmwKdQXxVbxH34ZAb0yUmfKmn6qGX8qbEE+epJnS76XwwHCd9osL4 D6nXGt4Bc1wdgUZxQ2zmJnj/uBiF0HP9axvGWAbFBIkGsZTC9Mg+KSld6vkJf6Vm binQa8pPpzUNvEJv5GGKyi6xuwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA2p45RG 3Od67ErYf0Bll9A6f9dDMB8GA1UdIwQYMBaAFJqJuzfFQ4bamoemT/AJRCijFxpH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjczRC9DOTJCMzIzMkNF MUYxMUVFQUM2MjYxN0NDNEY5QUUwMi9tb203TjhWRGh0cWFoNlpQOEFsRUtLTVhH a2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21vbTdOOFZEaHRxYWg2WlA4QWxFS0tNWEdrYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUY3M0QvQzkyQjMyMzJDRTFGMTFFRUFDNjI2MTdDQzRGOUFFMDIvMDBFMUFDMzBG QkFBMTFFRTlDN0YzOTIxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRQ2MA0GCSqGSIb3DQEBCwUAA4IBAQCfQRx4UDzZuI4yles9vJyq ErPG3/GeAvmKRSg0Tx51hUhRyI+MaKob9gBOXfj50iUg7WVaoDz5VWyTO0C5VF17 7gTqM0/Y64Pa+kPl1gdI+TiH97Hwr1mZiNT2QaxOzaBtEbJmIwyh7xC5w7nW0NiL SpfEY9/uJZxw+IypDerorMCeafIszw6xGocewzbZv3e6OqFZ8OizvZxhmZzewhn4 Lll7JzUsymoRkP9aS3WhoVSUWGwPC2OJQuYyTo3YUQEfNGk3JlYiW4ntUtpp79Ri BtoGvAHEBUNs58YDmpcQ57NQAvoUDBz0hD5IcizYxvgRLsgy00psgwy7PO/xTFry -----END CERTIFICATE-----Generated at Fri Mar 27 01:02:24 2026 by rpki-client