$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/BF886C00D26A11EEAF76482BC4F9AE02.roa File: BF886C00D26A11EEAF76482BC4F9AE02.roa (raw, json) Hash identifier: dhcSaLNUlhbiUcFKAsa5AQ1b5rgid7EM2yOheX+7QNI= Subject key identifier: BE:9E:2C:5D:88:2D:DF:26:EB:E8:F7:02:24:74:AD:CC:EC:BA:1D:E5 Certificate issuer: /CN=A91A4EF9/serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Certificate serial: 0190 Authority key identifier: 87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/BF886C00D26A11EEAF76482BC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:36:17 +0000 ROA not before: Wed 25 Feb 2026 02:33:25 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 152301 IP address blocks: 157.10.72.0/23 maxlen: 24 208.122.28.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 04:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 400 (0x190) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4EF9, serialNumber=872C9368656C778357C2A5A99BECFFF677550AC8 Validity Not Before: Feb 25 02:33:25 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a5a060-9ca2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c5:90:91:0f:65:28:af:eb:7f:33:cc:65:99: a2:bb:f2:90:e5:da:11:b8:7d:76:18:7c:b0:b5:89: ce:44:3a:16:32:da:8e:22:78:e3:45:c5:11:2b:3f: 1b:30:8c:82:d6:cc:00:79:c5:72:3c:54:20:f7:37: 5c:3c:3e:3c:fb:d9:57:a5:a5:60:75:f6:37:77:3d: 3c:f2:91:58:e2:ad:20:1e:4c:2d:7d:72:99:fa:82: 63:4c:ed:c6:40:dc:83:fc:39:9a:22:78:c3:a6:7e: cd:53:f9:20:20:1c:3c:e7:8d:cf:c5:29:b2:e0:53: 68:cc:52:ba:bd:5b:bf:ea:5e:6d:39:53:05:69:37: 2d:ce:72:48:4f:91:85:1e:32:cc:9b:84:53:4c:6e: af:59:e5:c8:11:5f:60:30:3e:ed:9a:c0:28:51:32: 5b:77:06:e7:a7:19:b7:c3:11:9d:9a:84:33:a4:e0: 81:12:83:4b:80:3f:45:cb:64:de:65:14:83:78:54: c1:08:fb:81:4b:54:2b:ba:42:0e:60:a8:c1:34:c5: 4f:2e:86:e1:08:a0:2d:57:0b:ff:5c:9c:7a:bc:89: 46:84:94:2d:39:3f:94:2a:1f:87:aa:40:05:d3:8f: 58:96:c0:30:4b:ed:1b:82:6b:65:4e:59:7c:19:00: e1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:9E:2C:5D:88:2D:DF:26:EB:E8:F7:02:24:74:AD:CC:EC:BA:1D:E5 X509v3 Authority Key Identifier: keyid:87:2C:93:68:65:6C:77:83:57:C2:A5:A9:9B:EC:FF:F6:77:55:0A:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/hyyTaGVsd4NXwqWpm-z_9ndVCsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hyyTaGVsd4NXwqWpm-z_9ndVCsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4EF9/75A0CD14D13711EEAA9F1980C4F9AE02/BF886C00D26A11EEAF76482BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.72.0/23 208.122.28.0/23 Signature Algorithm: sha256WithRSAEncryption 3e:f5:aa:88:9d:d5:0f:a7:39:3f:98:72:a7:fd:35:90:82:f8: 9d:1c:d5:bb:4f:c3:49:14:fe:06:a9:93:f1:38:27:41:c6:3b: a1:4f:5f:a7:ca:9a:80:74:63:db:21:9d:0f:02:68:2b:12:a0: e7:3f:08:b5:f1:89:d8:c7:6d:18:c2:45:38:14:62:37:5d:86: 64:d3:cb:74:26:e3:f9:87:37:05:af:9f:f5:90:8d:c2:6a:a7: 73:56:2b:ad:cf:2c:6a:88:d1:57:58:8e:2c:1f:8e:f6:90:7e: 9a:69:92:eb:7d:89:d7:c4:cc:01:75:ec:29:83:c9:e8:89:7a: c0:75:78:f0:83:9c:ab:d7:f2:69:04:b2:ca:19:4f:e1:c5:0f: 73:d6:c4:9d:11:4e:3d:00:6b:55:b4:f9:f3:59:62:59:c2:2b: ef:97:8b:8d:e3:6b:a2:b0:78:28:2f:28:78:fb:2c:61:b9:32: b0:b4:7b:a4:5a:56:0f:87:0a:a0:98:c0:bb:49:10:64:fd:c4: e5:0e:a8:91:ea:92:55:21:86:f8:66:0d:7c:c7:66:3d:fc:c4: a7:19:9b:e0:e2:6f:53:17:a6:20:a3:91:c3:41:4e:aa:bd:1c: 28:dd:8f:56:ed:e5:b7:dd:8b:9f:03:fd:e4:a7:d7:95:0b:10: dd:5f:2b:38 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAZAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTRFRjkxMTAvBgNVBAUTKDg3MkM5MzY4NjU2Qzc3ODM1N0MyQTVBOTlCRUNGRkY2 Nzc1NTBBQzgwHhcNMjYwMjI1MDIzMzI1WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTA2MC05Y2EyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAk8WQkQ9lKK/rfzPMZZmiu/KQ5doRuH12GHywtYnORDoWMtqOInjjRcURKz8b MIyC1swAecVyPFQg9zdcPD48+9lXpaVgdfY3dz088pFY4q0gHkwtfXKZ+oJjTO3G QNyD/DmaInjDpn7NU/kgIBw8543PxSmy4FNozFK6vVu/6l5tOVMFaTctznJIT5GF HjLMm4RTTG6vWeXIEV9gMD7tmsAoUTJbdwbnpxm3wxGdmoQzpOCBEoNLgD9Fy2Te ZRSDeFTBCPuBS1QrukIOYKjBNMVPLobhCKAtVwv/XJx6vIlGhJQtOT+UKh+HqkAF 049YlsAwS+0bgmtlTll8GQDhbwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFL6eLF2I Ld8m6+j3AiR0rczsuh3lMB8GA1UdIwQYMBaAFIcsk2hlbHeDV8KlqZvs//Z3VQrI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNEVGOS83NUEwQ0QxNEQx MzcxMUVFQUE5RjE5ODBDNEY5QUUwMi9oeXlUYUdWc2Q0Tlh3cVdwbS16XzluZFZD c2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2h5eVRhR1ZzZDROWHdxV3BtLXpfOW5kVkNzZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTRFRjkvNzVBMENEMTREMTM3MTFFRUFBOUYxOTgwQzRGOUFFMDIvQkY4ODZDMDBE MjZBMTFFRUFGNzY0ODJCQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBnQpIAwQB0HocMA0GCSqGSIb3DQEBCwUAA4IBAQA+9aqIndUPpzk/ mHKn/TWQgvidHNW7T8NJFP4GqZPxOCdBxjuhT1+nypqAdGPbIZ0PAmgrEqDnPwi1 8YnYx20YwkU4FGI3XYZk08t0JuP5hzcFr5/1kI3CaqdzViutzyxqiNFXWI4sH472 kH6aaZLrfYnXxMwBdewpg8noiXrAdXjwg5yr1/JpBLLKGU/hxQ9z1sSdEU49AGtV tPnzWWJZwivvl4uN42uisHgoLyh4+yxhuTKwtHukWlYPhwqgmMC7SRBk/cTlDqiR 6pJVIYb4Zg18x2Y9/MSnGZvg4m9TF6Ygo5HDQU6qvRwo3Y9W7eW33YufA/3kp9eV CxDdXys4 -----END CERTIFICATE-----Generated at Wed Mar 4 10:09:08 2026 by rpki-client