$ rpki-client -vvf rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/B8086D68733A11F1A07DD97E95A30FBC.roa File: B8086D68733A11F1A07DD97E95A30FBC.roa (raw, json) Hash identifier: bTVB+DDvlWg3BGswbEV0Wrf2VGFZJmesV6ILbWOzMg0= Subject key identifier: F0:91:79:4B:ED:FA:CD:D8:36:75:E0:67:C8:86:12:0C:65:C5:A1:6E Certificate issuer: /CN=A9153944/serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026 Certificate serial: 36 Authority key identifier: 29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/B8086D68733A11F1A07DD97E95A30FBC.roa Signing time: Sun 28 Jun 2026 21:45:46 +0000 ROA not before: Sun 28 Jun 2026 21:45:46 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 138590 IP address blocks: 151.123.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 06:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54 (0x36) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9153944, serialNumber=29AFD0AC1222E9EFEF8B028D318F8E64F5136026 Validity Not Before: Jun 28 21:45:46 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a41960a-43f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:ad:07:dc:24:90:74:af:a3:2a:a8:c8:02: 1d:15:e7:01:3b:0b:33:f2:09:95:a4:87:b3:8b:75: c6:56:14:22:56:b2:f8:f9:18:76:08:cd:d4:7a:7a: a0:e1:fb:55:d6:12:fe:a5:7d:41:b6:5b:7e:5e:91: 1c:c4:44:da:eb:76:82:3c:6d:c1:e1:e2:31:45:ec: c9:23:d6:3c:dd:1a:a4:e5:66:20:2c:9f:ab:3a:20: 1a:9b:5b:69:8f:11:c5:00:3d:04:0c:bb:4c:42:76: db:ae:ca:d0:d9:68:36:8c:12:25:b0:de:ac:fe:ea: 1e:77:6b:ce:65:5f:89:2e:bc:38:cd:ec:f8:43:b9: 1b:40:49:8d:1b:fd:82:cf:2d:ac:ea:9b:74:01:1d: 00:dc:32:e0:d6:fa:6e:e1:a7:13:4a:4d:86:32:28: 85:90:f8:3d:0d:5a:64:eb:32:a8:4e:7c:5f:45:b0: e3:4c:5c:ac:62:b0:be:31:50:b0:ea:d7:27:7e:68: 68:da:44:23:57:aa:53:be:fb:f3:15:bd:08:97:8e: 7d:e1:5c:c1:7f:34:9c:ef:1d:18:4d:80:09:56:30: 2a:6e:88:d4:f9:b9:91:7b:87:76:76:e7:20:02:fc: 82:f5:ae:99:7a:77:f1:9f:3a:31:c5:42:c1:24:4b: 59:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:91:79:4B:ED:FA:CD:D8:36:75:E0:67:C8:86:12:0C:65:C5:A1:6E X509v3 Authority Key Identifier: keyid:29:AF:D0:AC:12:22:E9:EF:EF:8B:02:8D:31:8F:8E:64:F5:13:60:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/Ka_QrBIi6e_viwKNMY-OZPUTYCY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Ka_QrBIi6e_viwKNMY-OZPUTYCY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153944/DC77010A356911F1BF7D6CA77CEE528E/B8086D68733A11F1A07DD97E95A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 151.123.156.0/22 Signature Algorithm: sha256WithRSAEncryption 37:89:2d:69:13:f2:1e:58:46:c1:89:49:7e:9b:d5:7a:3a:7d: 77:25:02:9a:fb:e4:56:ab:7a:cd:ee:3f:d8:b0:98:fe:74:03: 73:bf:a0:3a:8d:f9:7c:5a:d1:9e:78:fe:27:7b:90:54:8a:6b: 49:59:70:f4:58:93:e0:16:7d:91:91:07:f9:74:57:e6:b8:c4: 22:b4:59:ad:45:1d:73:a4:52:87:62:d1:9f:1a:76:d5:b2:f1: f7:84:b6:72:27:c7:e9:c4:ec:13:32:6b:54:1c:b1:9b:d7:01: 9f:15:c3:92:d4:14:36:a8:a2:b5:9d:3b:01:fb:7d:3c:d0:4f: 97:4c:f9:37:55:d9:73:d1:27:74:21:b9:03:c3:0f:8f:38:a0: 61:e7:78:ff:9a:d4:ff:4a:3d:d6:a6:7a:8f:11:9a:16:af:c1: 70:6c:a4:7e:89:f0:29:05:42:a6:4c:e1:9f:6a:b7:4b:a0:b5: 3f:29:5d:8a:6a:30:a0:07:fa:b9:ea:c7:56:43:af:3e:ae:b5: 47:df:f4:e2:a7:85:4f:a2:2b:1a:f1:7f:4b:08:4d:ce:54:40: b9:02:09:80:1a:89:2a:0f:f9:3a:82:a7:e8:b9:4b:04:07:5b: 8d:66:c0:90:96:36:52:82:0e:ec:8c:88:1d:2e:48:2a:11:a6: c9:f4:36:16 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 Mzk0NDExMC8GA1UEBRMoMjlBRkQwQUMxMjIyRTlFRkVGOEIwMjhEMzE4RjhFNjRG NTEzNjAyNjAeFw0yNjA2MjgyMTQ1NDZaFw0yNzA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNDE5NjBhLTQzZjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/9a0H3CSQdK+jKqjIAh0V5wE7CzPyCZWkh7OLdcZWFCJWsvj5GHYIzdR6eqDh +1XWEv6lfUG2W35ekRzERNrrdoI8bcHh4jFF7Mkj1jzdGqTlZiAsn6s6IBqbW2mP EcUAPQQMu0xCdtuuytDZaDaMEiWw3qz+6h53a85lX4kuvDjN7PhDuRtASY0b/YLP Lazqm3QBHQDcMuDW+m7hpxNKTYYyKIWQ+D0NWmTrMqhOfF9FsONMXKxisL4xULDq 1yd+aGjaRCNXqlO++/MVvQiXjn3hXMF/NJzvHRhNgAlWMCpuiNT5uZF7h3Z25yAC /IL1rpl6d/GfOjHFQsEkS1kTAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU8JF5S+36 zdg2deBnyIYSDGXFoW4wHwYDVR0jBBgwFoAUKa/QrBIi6e/viwKNMY+OZPUTYCYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTUzOTQ0L0RDNzcwMTBBMzU2 OTExRjFCRjdENkNBNzdDRUU1MjhFL0thX1FyQklpNmVfdml3S05NWS1PWlBVVFlD WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvS2FfUXJCSWk2ZV92aXdLTk1ZLU9aUFVUWUNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 Mzk0NC9EQzc3MDEwQTM1NjkxMUYxQkY3RDZDQTc3Q0VFNTI4RS9CODA4NkQ2ODcz M0ExMUYxQTA3REQ5N0U5NUEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAKXe5wwDQYJKoZIhvcNAQELBQADggEBADeJLWkT8h5YRsGJSX6b1Xo6 fXclApr75Fares3uP9iwmP50A3O/oDqN+Xxa0Z54/id7kFSKa0lZcPRYk+AWfZGR B/l0V+a4xCK0Wa1FHXOkUodi0Z8adtWy8feEtnInx+nE7BMya1QcsZvXAZ8Vw5LU FDaoorWdOwH7fTzQT5dM+TdV2XPRJ3QhuQPDD484oGHneP+a1P9KPdameo8Rmhav wXBspH6J8CkFQqZM4Z9qt0ugtT8pXYpqMKAH+rnqx1ZDrz6utUff9OKnhU+iKxrx f0sITc5UQLkCCYAaiSoP+TqCp+i5SwQHW41mwJCWNlKCDuyMiB0uSCoRpsn0NhY= -----END CERTIFICATE-----Generated at Sat Jul 18 02:54:18 2026 by rpki-client