$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/0F0E88A6192F11F183D9B1FC303D8C67.roa File: 0F0E88A6192F11F183D9B1FC303D8C67.roa (raw, json) Hash identifier: BU+UPd1lv9xQsHx7Mx43o9RAgapDbN7ba5OCHOlgE94= Subject key identifier: A6:99:2E:30:06:AD:E8:30:E7:87:AE:59:01:13:37:1D:C1:BB:EF:78 Certificate issuer: /CN=A91A560A/serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Certificate serial: 38FF Authority key identifier: 86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/0F0E88A6192F11F183D9B1FC303D8C67.roa Signing time: Fri 02 Oct 2026 15:38:27 +0000 ROA not before: Fri 02 Oct 2026 15:38:27 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 150344 IP address blocks: 151.158.126.0/24 maxlen: 24 151.158.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14591 (0x38ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=86DB57E690F7D309293A28BA7C55FB8AF37D5DBD Validity Not Before: Oct 2 15:38:27 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcff3-9b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d6:54:9d:94:da:ad:d8:34:00:5c:47:d0:51: 90:c5:1c:df:8a:28:1c:b4:09:51:4b:6c:32:c8:06: 9a:f8:3f:b5:12:71:73:ab:26:3f:03:c8:5f:8b:ac: d1:59:a1:57:d4:03:40:e7:2f:8f:c7:cc:6d:fa:c5: cd:d2:51:4d:fa:dc:54:8a:cf:f7:90:be:d9:54:ae: 61:8c:fe:2b:b2:01:79:c8:e9:e1:6a:60:9f:4c:20: 50:0a:7e:65:8a:82:6e:c9:0d:75:8c:77:bc:c8:05: 42:e5:3f:a5:81:f6:fc:d6:9e:c2:50:7d:b5:f1:49: 94:50:fa:8e:f8:c6:25:1a:a1:6e:15:73:fc:f6:5e: e4:d0:77:29:e0:9d:35:48:42:a0:fd:3c:d2:a3:40: 77:8b:db:e3:79:27:15:b8:0f:0d:f5:40:17:49:2a: 1d:9c:8b:f0:97:6c:05:89:5f:18:7f:ed:0c:1b:44: c7:5f:5a:f0:82:76:38:20:9c:c2:8f:6c:ba:94:49: 14:cb:ac:d4:8b:55:19:08:e8:ad:c2:b0:38:c2:ae: 71:8e:c0:c5:92:7b:52:65:17:71:33:11:99:f3:f6: dd:b7:ef:cf:f8:c8:9b:6c:90:5e:69:66:d0:f1:d8: ef:b2:fc:e5:b7:4e:87:2d:7a:2c:24:c5:25:09:43: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:99:2E:30:06:AD:E8:30:E7:87:AE:59:01:13:37:1D:C1:BB:EF:78 X509v3 Authority Key Identifier: keyid:86:DB:57:E6:90:F7:D3:09:29:3A:28:BA:7C:55:FB:8A:F3:7D:5D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/httX5pD30wkpOii6fFX7ivN9Xb0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/httX5pD30wkpOii6fFX7ivN9Xb0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/B9953DBA1D8A11E2A387D0E408B02CD2/0F0E88A6192F11F183D9B1FC303D8C67.roa sbgp-ipAddrBlock: critical IPv4: 151.158.126.0/23 Signature Algorithm: sha256WithRSAEncryption 02:aa:61:2f:19:05:85:2d:83:31:3f:e2:a3:66:b8:34:8f:32: ad:6a:b3:36:a9:02:6d:b6:b9:b8:b3:17:2b:da:7c:fd:0b:26: 19:05:de:e8:f3:de:c0:6e:43:c4:73:41:4b:ed:27:08:b9:77: f1:64:2e:ac:18:fe:d2:2e:8d:96:8e:23:7f:1f:8a:2e:ad:73: 3f:bb:79:5b:5c:05:50:a1:03:5a:f3:91:68:81:fe:33:c1:dc: e5:ad:6e:36:7b:76:76:38:99:02:b0:a7:7e:aa:43:d6:dc:0a: b6:e1:13:85:d1:bc:9d:01:ac:5a:19:ca:fe:9e:bd:b4:b3:d7: e9:d7:42:29:a2:c7:eb:e1:a6:04:c5:f2:4f:91:bc:0a:27:85: 99:ac:b2:4f:d4:4e:ce:3f:ad:f2:e1:eb:68:36:e6:5a:b0:52: bf:a9:f2:a4:a7:bc:80:8c:93:65:2a:a7:d6:78:7d:36:9a:36: ca:4b:a8:1a:15:d2:db:2b:96:8c:ec:d1:7a:8b:79:be:70:22: 72:d8:c7:6d:75:4c:9f:25:4c:1b:47:53:2e:3c:e3:e5:8f:76: e6:32:7c:40:de:5e:b2:f0:63:3e:fb:34:15:1d:36:34:79:5b: a2:3e:3e:56:23:ca:c6:0b:39:fe:9f:dd:54:cf:1e:ab:2f:26: bc:58:ff:da -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICOP8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDg2REI1N0U2OTBGN0QzMDkyOTNBMjhCQTdDNTVGQjhB RjM3RDVEQkQwHhcNMjYxMDAyMTUzODI3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2ZmMy05YjJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv9ZUnZTardg0AFxH0FGQxRzfiigctAlRS2wyyAaa+D+1EnFzqyY/A8hfi6zR WaFX1ANA5y+Px8xt+sXN0lFN+txUis/3kL7ZVK5hjP4rsgF5yOnhamCfTCBQCn5l ioJuyQ11jHe8yAVC5T+lgfb81p7CUH218UmUUPqO+MYlGqFuFXP89l7k0Hcp4J01 SEKg/TzSo0B3i9vjeScVuA8N9UAXSSodnIvwl2wFiV8Yf+0MG0THX1rwgnY4IJzC j2y6lEkUy6zUi1UZCOitwrA4wq5xjsDFkntSZRdxMxGZ8/bdt+/P+MibbJBeaWbQ 8djvsvzlt06HLXosJMUlCUPD/wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKaZLjAG regw54euWQETNx3Bu+94MB8GA1UdIwQYMBaAFIbbV+aQ99MJKToounxV+4rzfV29 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9COTk1M0RCQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9odHRYNXBEMzB3a3BPaWk2ZkZYN2l2TjlY YjAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL2h0dFg1cEQzMHdrcE9paTZmRlg3aXZOOVhiMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQjk5NTNEQkExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMEYwRTg4QTYx OTJGMTFGMTgzRDlCMUZDMzAzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBl55+MA0GCSqGSIb3DQEBCwUAA4IBAQACqmEvGQWFLYMxP+KjZrg0 jzKtarM2qQJttrm4sxcr2nz9CyYZBd7o897AbkPEc0FL7ScIuXfxZC6sGP7SLo2W jiN/H4ourXM/u3lbXAVQoQNa85Fogf4zwdzlrW42e3Z2OJkCsKd+qkPW3Aq24ROF 0bydAaxaGcr+nr20s9fp10Iposfr4aYExfJPkbwKJ4WZrLJP1E7OP63y4etoNuZa sFK/qfKkp7yAjJNlKqfWeH02mjbKS6gaFdLbK5aM7NF6i3m+cCJy2MdtdUyfJUwb R1MuPOPlj3bmMnxA3l6y8GM++zQVHTY0eVuiPj5WI8rGCzn+n91Uzx6rLya8WP/a -----END CERTIFICATE-----Generated at Thu Oct 22 18:52:15 2026 by rpki-client