$ rpki-client -vvvf rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/9D9BBE06B11711F1804AF5374511F970.roa File: 9D9BBE06B11711F1804AF5374511F970.roa (raw, json) Hash identifier: yQHAWTOO6s0EY77eHGUrtRbZsyK1kk1KFIjjGVR2Ox0= Subject key identifier: CA:B2:86:A0:16:B8:BC:FC:95:28:4E:59:1E:97:7F:2A:87:14:E3:AB Certificate issuer: /CN=A91C51D7/serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F Certificate serial: 13 Authority key identifier: CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/9D9BBE06B11711F1804AF5374511F970.roa Signing time: Sat 10 Oct 2026 02:44:20 +0000 ROA not before: Sat 10 Oct 2026 02:44:20 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 3918 IP address blocks: 134.144.78.0/24 maxlen: 24 134.144.82.0/24 maxlen: 24 134.144.83.0/24 maxlen: 24 134.144.182.0/24 maxlen: 24 156.149.128.0/24 maxlen: 24 161.126.150.0/24 maxlen: 24 161.126.151.0/24 maxlen: 24 161.126.181.0/24 maxlen: 24 161.126.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.crl rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 09:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19 (0x13) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C51D7, serialNumber=CDC34B9492907B1A59EE6A00B87B4FC21926AB2F Validity Not Before: Oct 10 02:44:20 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=6ac9a683-84d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:63:a9:4d:48:65:8c:4b:31:2c:6a:24:ad:a9: a0:d6:d3:ee:ad:04:26:85:ae:ee:fb:96:1d:a8:93: bb:47:b5:c9:85:18:d2:38:75:6e:8c:b0:c4:4d:90: 89:b5:03:18:3f:7f:f9:53:c7:de:c7:f7:15:23:1a: b2:b8:43:8a:fe:c6:ae:1d:f0:42:dd:f9:84:0e:31: 2c:56:ca:74:7b:20:ce:ef:f0:75:c6:62:41:ac:97: 1f:e7:65:dc:eb:1c:9c:70:6e:74:96:2b:ba:c6:59: 2d:83:b0:5e:af:6d:0b:ce:30:0a:15:79:f3:dd:4b: bf:39:ce:9a:8b:97:40:91:f5:b1:75:23:f8:a1:2e: e4:16:fc:87:52:c4:3a:9d:e6:53:92:2d:1e:29:88: cb:e1:d8:18:7d:3e:64:e6:c4:11:0b:0f:d3:3f:9a: fa:c6:4b:55:fb:27:bd:af:31:2c:95:4b:e3:a9:c4: 48:0e:0d:f1:7a:9c:56:22:52:d0:7c:7d:0a:5e:4c: 7e:6a:33:cf:1f:cd:b0:20:af:3a:58:31:b4:56:a2: 5a:13:3d:fa:04:6c:4d:d4:96:df:d2:dd:9d:08:a3: e7:f3:a4:68:86:7f:a0:11:f6:85:9a:2d:ee:2c:1a: 0c:be:ca:17:2a:0a:f4:97:f0:f6:02:83:16:ec:f9: 18:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B2:86:A0:16:B8:BC:FC:95:28:4E:59:1E:97:7F:2A:87:14:E3:AB X509v3 Authority Key Identifier: keyid:CD:C3:4B:94:92:90:7B:1A:59:EE:6A:00:B8:7B:4F:C2:19:26:AB:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/zcNLlJKQexpZ7moAuHtPwhkmqy8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/zcNLlJKQexpZ7moAuHtPwhkmqy8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C51D7/BBEE62F4B10911F1AAB82B2D4011F970/9D9BBE06B11711F1804AF5374511F970.roa sbgp-ipAddrBlock: critical IPv4: 134.144.78.0/24 134.144.82.0/23 134.144.182.0/24 156.149.128.0/24 161.126.150.0/23 161.126.181.0/24 161.126.210.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:ca:f9:0d:46:e2:8c:bb:71:2d:3d:a8:aa:0a:ca:24:3d:90: 93:f7:23:b8:cc:d5:f5:a6:63:ec:d1:ec:9a:29:dd:8d:7e:8c: 76:39:5e:e8:e2:40:9c:06:a2:b7:4a:09:e4:53:89:b9:27:c6: fe:9f:a3:1f:eb:34:df:d8:61:0c:77:36:cc:79:ba:62:8f:f3: 88:ec:52:e6:b2:32:77:14:40:78:89:ed:00:8e:90:18:f9:a6: f7:76:76:4e:d7:aa:78:74:a2:9a:6f:46:ea:ff:f6:9d:75:3f: d3:d0:a2:ac:52:fc:b3:62:fb:cb:a8:9f:39:f2:b9:a6:7a:ce: c0:68:b6:06:81:00:7a:78:81:68:f8:bb:6c:17:fc:5a:86:5b: 55:26:eb:79:05:5d:48:7c:26:44:91:7a:7b:d1:29:bd:4c:93: 49:f1:84:c7:09:a3:7c:ef:3e:a5:22:20:03:ae:62:d4:45:e3: ef:9e:51:1b:85:ea:ac:7d:94:da:a6:bb:61:fb:d5:68:04:d1: 8f:e2:37:2d:e0:6b:43:d6:43:ad:70:0e:7a:bf:07:bb:08:63: 05:5f:ef:22:db:0d:00:24:1d:ce:ff:12:9c:66:53:6c:36:67: 94:9c:78:2b:46:5d:76:90:fd:22:e4:70:97:3a:5f:49:9f:86: 71:29:a2:e3 -----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgIBEzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTFENzExMC8GA1UEBRMoQ0RDMzRCOTQ5MjkwN0IxQTU5RUU2QTAwQjg3QjRGQzIx OTI2QUIyRjAeFw0yNjEwMTAwMjQ0MjBaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhYzlhNjgzLTg0ZDgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQD5Y6lNSGWMSzEsaiStqaDW0+6tBCaFru77lh2ok7tHtcmFGNI4dW6MsMRNkIm1 Axg/f/lTx97H9xUjGrK4Q4r+xq4d8ELd+YQOMSxWynR7IM7v8HXGYkGslx/nZdzr HJxwbnSWK7rGWS2DsF6vbQvOMAoVefPdS785zpqLl0CR9bF1I/ihLuQW/IdSxDqd 5lOSLR4piMvh2Bh9PmTmxBELD9M/mvrGS1X7J72vMSyVS+OpxEgODfF6nFYiUtB8 fQpeTH5qM88fzbAgrzpYMbRWoloTPfoEbE3Ult/S3Z0Io+fzpGiGf6AR9oWaLe4s Ggy+yhcqCvSX8PYCgxbs+RilAgMBAAGjggKEMIICgDAdBgNVHQ4EFgQUyrKGoBa4 vPyVKE5ZHpd/KocU46swHwYDVR0jBBgwFoAUzcNLlJKQexpZ7moAuHtPwhkmqy8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1MUQ3L0JCRUU2MkY0QjEw OTExRjFBQUI4MkIyRDQwMTFGOTcwL3pjTkxsSktRZXhwWjdtb0F1SHRQd2hrbXF5 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvemNOTGxKS1FleHBaN21vQXVIdFB3aGttcXk4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTFENy9CQkVFNjJGNEIxMDkxMUYxQUFCODJCMkQ0MDExRjk3MC85RDlCQkUwNkIx MTcxMUYxODA0QUY1Mzc0NTExRjk3MC5yb2EwQwYIKwYBBQUHAQcBAf8ENDAyMDAE AgABMCoDBACGkE4DBAGGkFIDBACGkLYDBACclYADBAGhfpYDBAChfrUDBAChftIw DQYJKoZIhvcNAQELBQADggEBAD3K+Q1G4oy7cS09qKoKyiQ9kJP3I7jM1fWmY+zR 7Jop3Y1+jHY5XujiQJwGordKCeRTibknxv6fox/rNN/YYQx3Nsx5umKP84jsUuay MncUQHiJ7QCOkBj5pvd2dk7Xqnh0oppvRur/9p11P9PQoqxS/LNi+8uonznyuaZ6 zsBotgaBAHp4gWj4u2wX/FqGW1Um63kFXUh8JkSRenvRKb1Mk0nxhMcJo3zvPqUi IAOuYtRF4++eURuF6qx9lNqmu2H71WgE0Y/iNy3ga0PWQ61wDnq/B7sIYwVf7yLb DQAkHc7/EpxmU2w2Z5SceCtGXXaQ/SLkcJc6X0mfhnEpouM= -----END CERTIFICATE-----Generated at Tue Oct 20 18:31:52 2026 by rpki-client