$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa File: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (raw, json) Hash identifier: SBniOwJpF70Ix0jWbrEbwm9I4bdyxhYIEqPTOAue5Cw= Subject key identifier: 31:5D:1C:85:65:02:99:8F:CA:B7:3E:18:CA:AC:3D:6D:A8:E9:F6:A6 Certificate issuer: /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Certificate serial: 0675 Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa Signing time: Thu 08 Oct 2026 16:29:35 +0000 ROA not before: Thu 08 Oct 2026 16:29:35 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 19905 IP address blocks: 213.170.156.0/24 maxlen: 24 213.170.157.0/24 maxlen: 24 213.170.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 16:19:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1653 (0x675) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4 Validity Not Before: Oct 8 16:29:35 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ac7c4ee-2889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8d:07:09:13:1c:75:bf:dd:3e:ae:96:db:6a: dd:ee:fb:4f:c2:9c:c5:56:5f:85:a8:63:a6:31:76: 2b:3b:77:c5:f1:2b:d8:02:8e:0f:71:d6:f1:ce:c9: c7:ed:7d:88:29:01:fa:eb:05:b7:08:3c:de:a6:9c: 98:01:02:d5:ce:7e:84:cd:c5:79:28:e1:1a:4b:94: 34:b8:c7:92:28:62:ef:8b:70:ca:a1:3d:0c:db:0e: 57:52:fd:3e:63:25:2c:e8:90:09:9a:b6:92:47:3a: 53:37:7d:19:9b:17:bd:cb:2c:d8:e5:be:92:67:a3: 5f:70:15:33:31:53:1d:da:0c:b9:65:ae:8a:79:29: a3:97:2e:c3:0d:27:dc:c1:f6:75:d4:07:33:e4:65: 86:c2:be:da:44:b2:55:9a:ef:33:32:0a:50:9d:88: f7:8c:3d:40:e0:a7:1a:8f:78:7f:29:c3:49:77:03: 00:c9:ca:91:62:04:55:6e:5c:e3:c9:82:2a:0c:05: 93:33:9a:ab:92:ac:05:cc:98:83:01:47:c4:9f:57: d0:ea:0f:ac:bc:3c:a1:14:be:5d:ac:7f:83:1a:a2: 45:9f:f8:82:80:26:de:50:c4:76:7f:54:7c:4e:96: d2:5e:8f:e2:b4:2f:dc:36:b0:c1:11:aa:53:56:60: 1a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5D:1C:85:65:02:99:8F:CA:B7:3E:18:CA:AC:3D:6D:A8:E9:F6:A6 X509v3 Authority Key Identifier: keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 213.170.156.0-213.170.158.255 Signature Algorithm: sha256WithRSAEncryption 5e:c2:5f:dd:6a:2c:d8:cf:19:9b:73:37:b2:d3:fc:54:ef:d0: 4c:5d:70:b3:72:58:89:c5:bc:1e:3b:e3:23:00:d3:1f:27:3e: 57:1b:fe:3e:c9:be:b1:59:a3:58:ab:47:3a:7a:dd:57:5f:6a: 1d:63:5f:e5:4d:98:aa:d6:6f:a4:c4:a7:14:2b:15:ad:c6:f8: b6:39:b8:87:ef:d5:f4:70:a7:da:ef:39:76:54:91:f9:f2:cd: bb:c5:82:8a:3f:b6:c0:5a:0e:9b:70:5d:f4:24:ca:af:53:db: dc:37:51:0a:f6:cc:b0:71:0d:08:0d:f1:7b:a2:88:62:5d:74: 62:43:f4:45:f5:a6:72:b8:16:79:88:72:1d:42:05:f0:e2:f5: 36:22:a1:2a:78:0c:d9:08:28:66:b8:6e:c0:f3:ba:18:0d:b6: 9f:fe:ee:34:a8:da:07:64:b2:ca:51:a6:47:cd:18:1e:f3:d9: d7:81:45:b9:90:17:24:5a:70:1b:37:6c:74:27:28:2e:14:b0: 68:0f:6e:d6:09:6f:eb:45:3d:c2:7c:54:1e:96:4c:91:cc:66: 04:0b:f6:93:17:fa:34:e7:dc:8d:1a:57:9f:08:be:10:3e:5d: 8d:d0:1c:0b:99:ae:e8:fd:4c:53:10:57:a6:4a:f8:30:80:f2: 5d:dd:fc:9d -----BEGIN CERTIFICATE----- MIIFRDCCBCygAwIBAgICBnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENEMDkxMTAvBgNVBAUTKEFEQjk4OTc4RkQ3NTFGOTlEOUE4RUIyQUU3MkQzQzBD NTUwNDUzQTQwHhcNMjYxMDA4MTYyOTM1WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWM3YzRlZS0yODg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAi40HCRMcdb/dPq6W22rd7vtPwpzFVl+FqGOmMXYrO3fF8SvYAo4PcdbxzsnH 7X2IKQH66wW3CDzeppyYAQLVzn6EzcV5KOEaS5Q0uMeSKGLvi3DKoT0M2w5XUv0+ YyUs6JAJmraSRzpTN30Zmxe9yyzY5b6SZ6NfcBUzMVMd2gy5Za6KeSmjly7DDSfc wfZ11Acz5GWGwr7aRLJVmu8zMgpQnYj3jD1A4Kcaj3h/KcNJdwMAycqRYgRVblzj yYIqDAWTM5qrkqwFzJiDAUfEn1fQ6g+svDyhFL5drH+DGqJFn/iCgCbeUMR2f1R8 TpbSXo/itC/cNrDBEapTVmAaBQIDAQABo4ICaDCCAmQwHQYDVR0OBBYEFDFdHIVl ApmPyrc+GMqsPW2o6famMB8GA1UdIwQYMBaAFK25iXj9dR+Z2ajrKuctPAxVBFOk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0QwOS9FQUM3RUVBMDEx MkQxMUVDOEQ4NzA1N0RDNEY5QUUwMi9yYm1KZVAxMUg1blpxT3NxNXkwOERGVUVV NlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL3JibUplUDExSDVuWnFPc3E1eTA4REZVRVU2US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENEMDkvRUFDN0VFQTAxMTJEMTFFQzhEODcwNTdEQzRGOUFFMDIvNUIwQURDMzA4 RDNBMTFFQzk0REVFQzdCQzRGOUFFMDIucm9hMCcGCCsGAQUFBwEHAQH/BBgwFjAU BAIAATAOMAwDBALVqpwDBADVqp4wDQYJKoZIhvcNAQELBQADggEBAF7CX91qLNjP GZtzN7LT/FTv0ExdcLNyWInFvB474yMA0x8nPlcb/j7JvrFZo1irRzp63Vdfah1j X+VNmKrWb6TEpxQrFa3G+LY5uIfv1fRwp9rvOXZUkfnyzbvFgoo/tsBaDptwXfQk yq9T29w3UQr2zLBxDQgN8XuiiGJddGJD9EX1pnK4FnmIch1CBfDi9TYioSp4DNkI KGa4bsDzuhgNtp/+7jSo2gdksspRpkfNGB7z2deBRbmQFyRacBs3bHQnKC4UsGgP btYJb+tFPcJ8VB6WTJHMZgQL9pMX+jTn3I0aV58IvhA+XY3QHAuZruj9TFMQV6ZK +DCA8l3d/J0= -----END CERTIFICATE-----Generated at Fri Oct 23 20:36:18 2026 by rpki-client