$ rpki-client -vvf rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/C0D1BBF079BD11F1BB8B39355BA30FBC.roa File: C0D1BBF079BD11F1BB8B39355BA30FBC.roa (raw, json) Hash identifier: gGu0FmVRoRjPupu9uKCq5cNV44H2mLC6217rmSNSokI= Subject key identifier: 0B:2F:BA:7C:9B:39:5E:F8:B1:AC:71:25:41:24:91:B1:18:F3:BA:BA Certificate issuer: /CN=A91689B9/serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Certificate serial: 03 Authority key identifier: D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/C0D1BBF079BD11F1BB8B39355BA30FBC.roa Signing time: Tue 07 Jul 2026 04:38:52 +0000 ROA not before: Tue 07 Jul 2026 04:38:52 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 135880 IP address blocks: 151.158.58.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Jul 2026 11:03:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91689B9, serialNumber=D4D18EF1C42B04995CB1A18F5764BA49EFB95BE5 Validity Not Before: Jul 7 04:38:52 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6a4c82dc-bc81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f3:70:45:1e:3c:48:53:ef:8d:fb:b9:22:aa: 20:c3:aa:9d:f3:fc:5c:16:43:81:9d:d7:f5:6f:ea: e2:2f:be:2f:28:14:8e:db:74:72:52:f6:2c:c1:7b: 6a:91:40:34:8f:13:0d:c4:84:21:5e:2d:a9:67:90: f7:7c:43:ed:dc:95:44:1d:37:09:6d:69:b5:8f:81: fb:bb:9b:2d:4b:bb:c9:91:5d:68:f8:cd:37:d1:02: 28:3e:e3:2e:a4:38:00:96:9a:1e:02:f2:30:62:64: 26:0c:7f:71:7c:5f:74:fb:0d:4b:64:24:eb:6d:fa: 7b:2d:14:53:9f:d9:aa:40:95:77:85:88:5f:21:ca: 65:80:0c:a0:09:58:47:48:d0:15:c8:0c:a9:1a:da: 1e:c9:39:8b:d8:ac:d1:59:11:63:ab:21:e0:69:ac: 75:94:0e:6c:66:6f:cf:bd:35:b7:83:df:4e:13:bb: d1:79:69:e7:77:16:ea:8f:33:c4:8c:11:b1:ce:15: 42:ab:f8:2d:ad:80:15:cf:6e:ed:be:73:b9:bb:4a: 2e:83:28:27:60:39:a0:58:8e:bb:7a:0f:b1:d7:e1: 1c:17:77:88:a7:18:70:b3:53:04:fa:83:cc:38:fb: e5:ca:af:06:ae:9b:dd:99:47:64:9a:57:31:48:6c: a6:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:2F:BA:7C:9B:39:5E:F8:B1:AC:71:25:41:24:91:B1:18:F3:BA:BA X509v3 Authority Key Identifier: keyid:D4:D1:8E:F1:C4:2B:04:99:5C:B1:A1:8F:57:64:BA:49:EF:B9:5B:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/1NGO8cQrBJlcsaGPV2S6Se-5W-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/1NGO8cQrBJlcsaGPV2S6Se-5W-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91689B9/1D2D0706792D11F1BC8890906FA30FBC/C0D1BBF079BD11F1BB8B39355BA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 151.158.58.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:df:69:bb:26:4e:34:33:a4:d8:2c:fe:38:0b:3b:9f:fd:fb: b2:63:d0:b8:5b:de:8c:c8:e7:5e:15:18:0d:37:f8:f0:a3:7f: 8d:1c:b7:25:6f:6d:84:7d:37:32:e9:15:16:73:1b:fd:e9:0d: d6:02:46:6a:b5:f6:ae:09:b2:ed:f9:27:fb:52:5c:08:ec:72: 86:42:eb:9d:62:1e:55:bb:52:41:cc:54:43:0c:a6:53:ca:55: 44:a1:9f:c0:9a:b0:ea:a2:5c:1e:62:34:59:5d:56:bb:0c:1c: d9:9e:a9:6f:4c:9d:ed:42:5f:31:c5:6e:f8:28:01:22:ce:db: 7d:e2:cc:9b:e5:d5:1f:8b:39:2a:5a:c2:86:9d:07:c7:51:67: 14:65:a1:35:21:0c:ba:55:66:f2:aa:91:a9:47:09:3d:07:03: e7:25:5f:58:fc:32:85:17:37:99:8f:24:c5:0e:28:f9:26:12: 63:04:dc:53:b5:fc:f2:78:02:a1:7b:a1:2f:bc:31:66:24:c3: 3a:c5:79:40:51:31:6d:0b:97:e8:97:b6:cf:06:14:c3:83:28: bb:0a:c7:18:a8:24:6a:c4:c9:82:03:f5:14:af:ef:b7:f1:ad: b6:08:cf:5e:9a:9d:c2:6b:41:c9:94:5f:30:76:78:4b:bf:c6: a7:1e:da:3e -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 ODlCOTExMC8GA1UEBRMoRDREMThFRjFDNDJCMDQ5OTVDQjFBMThGNTc2NEJBNDlF RkI5NUJFNTAeFw0yNjA3MDcwNDM4NTJaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNGM4MmRjLWJjODEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDG83BFHjxIU++N+7kiqiDDqp3z/FwWQ4Gd1/Vv6uIvvi8oFI7bdHJS9izBe2qR QDSPEw3EhCFeLalnkPd8Q+3clUQdNwltabWPgfu7my1Lu8mRXWj4zTfRAig+4y6k OACWmh4C8jBiZCYMf3F8X3T7DUtkJOtt+nstFFOf2apAlXeFiF8hymWADKAJWEdI 0BXIDKka2h7JOYvYrNFZEWOrIeBprHWUDmxmb8+9NbeD304Tu9F5aed3FuqPM8SM EbHOFUKr+C2tgBXPbu2+c7m7Si6DKCdgOaBYjrt6D7HX4RwXd4inGHCzUwT6g8w4 ++XKrwaum92ZR2SaVzFIbKbFAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUCy+6fJs5 XvixrHElQSSRsRjzurowHwYDVR0jBBgwFoAU1NGO8cQrBJlcsaGPV2S6Se+5W+Uw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY4OUI5LzFEMkQwNzA2Nzky RDExRjFCQzg4OTA5MDZGQTMwRkJDLzFOR084Y1FyQkpsY3NhR1BWMlM2U2UtNVct VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvMU5HTzhjUXJCSmxjc2FHUFYyUzZTZS01Vy1VLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 ODlCOS8xRDJEMDcwNjc5MkQxMUYxQkM4ODkwOTA2RkEzMEZCQy9DMEQxQkJGMDc5 QkQxMUYxQkI4QjM5MzU1QkEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGXnjowDQYJKoZIhvcNAQELBQADggEBAJ/fabsmTjQzpNgs/jgLO5/9 +7Jj0Lhb3ozI514VGA03+PCjf40ctyVvbYR9NzLpFRZzG/3pDdYCRmq19q4Jsu35 J/tSXAjscoZC651iHlW7UkHMVEMMplPKVUShn8CasOqiXB5iNFldVrsMHNmeqW9M ne1CXzHFbvgoASLO233izJvl1R+LOSpawoadB8dRZxRloTUhDLpVZvKqkalHCT0H A+clX1j8MoUXN5mPJMUOKPkmEmME3FO1/PJ4AqF7oS+8MWYkwzrFeUBRMW0Ll+iX ts8GFMODKLsKxxioJGrEyYID9RSv77fxrbYIz16ancJrQcmUXzB2eEu/xqce2j4= -----END CERTIFICATE-----Generated at Tue Jul 21 20:56:35 2026 by rpki-client