$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/5CCD0A3C186B11F1A49ED6DE323D8C67.roa File: 5CCD0A3C186B11F1A49ED6DE323D8C67.roa (raw, json) Hash identifier: /T0qY7CsRtoFS+lodVUIgOp2mv9nPTD25O9ozCsvMyA= Subject key identifier: 49:A5:1D:67:07:4A:65:FC:DA:85:9A:9D:7C:F8:DF:24:C2:0A:BC:5F Certificate issuer: /CN=A91E6369/serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2 Certificate serial: 24 Authority key identifier: 48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/5CCD0A3C186B11F1A49ED6DE323D8C67.roa Signing time: Thu 05 Mar 2026 08:14:42 +0000 ROA not before: Thu 05 Mar 2026 08:14:42 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 63969 IP address blocks: 151.158.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 02:50:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36 (0x24) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6369, serialNumber=48384286AEB9B60BB342847F2BA7612F84DB43B2 Validity Not Before: Mar 5 08:14:42 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a93b72-dc2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:49:33:d2:12:75:8f:72:43:09:79:ab:b3:f3: 1f:66:16:39:50:e3:70:2e:92:b4:c2:b4:26:66:7f: d6:be:c4:54:0b:14:ee:c9:4d:4e:34:e5:ab:a2:07: 3c:73:9d:0c:01:aa:b4:05:62:3e:32:69:0d:02:9e: 9a:69:1c:1b:98:0b:08:be:07:cb:7a:95:9b:d7:c6: fe:d5:02:b4:cf:ff:27:aa:35:a7:de:82:6b:da:32: fb:cd:9a:ee:98:58:46:25:67:e6:b7:cf:2d:e4:24: 3c:53:1c:ee:e3:da:07:3f:d5:2d:a7:bd:2a:fa:9e: f7:9d:db:e0:01:a0:45:5b:a6:49:97:24:38:35:42: f2:03:6c:d7:cb:49:21:7c:87:89:7b:a4:70:d3:29: 77:10:e7:fa:cb:dc:f9:c8:f8:95:e7:96:1c:59:5e: ca:1d:a4:4c:dc:2f:1d:3b:66:1e:5d:fe:b6:d3:fe: 09:45:92:f1:ff:5c:89:fb:d9:bd:97:d4:ad:7a:6e: 3b:f0:ef:81:8b:ea:cd:4c:b2:32:4a:f7:6d:7e:b8: 05:92:8d:f3:bf:fe:94:cb:cb:07:b1:91:c5:30:91: aa:7a:17:d6:02:2b:c3:95:60:56:bb:3f:8b:1a:cc: 5f:ff:95:dc:79:b6:bb:c1:fe:34:4e:e6:84:89:ee: 98:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:A5:1D:67:07:4A:65:FC:DA:85:9A:9D:7C:F8:DF:24:C2:0A:BC:5F X509v3 Authority Key Identifier: keyid:48:38:42:86:AE:B9:B6:0B:B3:42:84:7F:2B:A7:61:2F:84:DB:43:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/SDhChq65tguzQoR_K6dhL4TbQ7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/SDhChq65tguzQoR_K6dhL4TbQ7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6369/767A8E8A0C7911F1B18A0C0E1C3D8C67/5CCD0A3C186B11F1A49ED6DE323D8C67.roa sbgp-ipAddrBlock: critical IPv4: 151.158.197.0/24 Signature Algorithm: sha256WithRSAEncryption 44:ac:e9:01:32:23:1b:bb:3b:ae:99:fa:54:41:fe:0a:c9:61: 9f:23:26:61:a6:69:5e:4c:15:d3:7e:16:fc:6a:25:77:3a:60: ea:e6:cb:97:76:ba:b2:31:00:29:3c:3c:cd:93:cb:f9:f7:68: d1:97:c9:12:cd:3d:d6:86:38:0c:84:e9:34:81:6f:16:62:54: 3c:a3:01:c7:c1:df:69:17:4d:3c:a6:98:9a:a3:bc:52:5c:bf: 73:0f:49:d3:99:d4:0f:a5:f2:fd:74:2d:d3:c9:04:fd:34:51: 8d:d8:77:1e:a9:bc:b6:39:4f:b0:35:29:b0:96:12:1d:84:fd: 25:bb:b9:a2:a6:55:64:42:38:0c:e3:fd:ea:55:cb:63:87:52: c2:d0:4f:22:e3:9e:34:55:32:2b:f8:47:6a:e9:30:aa:f1:2b: c8:65:14:31:8f:82:67:2d:d1:4d:58:2b:7e:ba:b1:d8:17:6f: 77:5f:78:a3:1c:40:43:1f:74:b7:1d:f5:0d:bc:62:1c:89:6c: e2:6f:c3:10:29:79:77:21:36:7b:da:30:38:4b:0f:f5:a9:65: c9:be:2d:1a:26:bc:5d:c6:c3:e3:0a:a2:a2:89:c6:3c:4a:75: ce:69:3e:5e:42:db:79:b3:ed:70:cd:9b:f6:8c:4a:41:83:2d: b9:f9:53:25 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF NjM2OTExMC8GA1UEBRMoNDgzODQyODZBRUI5QjYwQkIzNDI4NDdGMkJBNzYxMkY4 NERCNDNCMjAeFw0yNjAzMDUwODE0NDJaFw0yNzA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTkzYjcyLWRjMmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKSTPSEnWPckMJeauz8x9mFjlQ43AukrTCtCZmf9a+xFQLFO7JTU405auiBzxz nQwBqrQFYj4yaQ0CnpppHBuYCwi+B8t6lZvXxv7VArTP/yeqNafegmvaMvvNmu6Y WEYlZ+a3zy3kJDxTHO7j2gc/1S2nvSr6nved2+ABoEVbpkmXJDg1QvIDbNfLSSF8 h4l7pHDTKXcQ5/rL3PnI+JXnlhxZXsodpEzcLx07Zh5d/rbT/glFkvH/XIn72b2X 1K16bjvw74GL6s1MsjJK921+uAWSjfO//pTLywexkcUwkap6F9YCK8OVYFa7P4sa zF//ldx5trvB/jRO5oSJ7piDAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUSaUdZwdK ZfzahZqdfPjfJMIKvF8wHwYDVR0jBBgwFoAUSDhChq65tguzQoR/K6dhL4TbQ7Iw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU2MzY5Lzc2N0E4RThBMEM3 OTExRjFCMThBMEMwRTFDM0Q4QzY3L1NEaENocTY1dGd1elFvUl9LNmRoTDRUYlE3 SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjMyMkE1RjQxRDY2MTFFMkEzRjI3RjdDNzJG RDFGRjIvU0RoQ2hxNjV0Z3V6UW9SX0s2ZGhMNFRiUTdJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NjM2OS83NjdBOEU4QTBDNzkxMUYxQjE4QTBDMEUxQzNEOEM2Ny81Q0NEMEEzQzE4 NkIxMUYxQTQ5RUQ2REUzMjNEOEM2Ny5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACXnsUwDQYJKoZIhvcNAQELBQADggEBAESs6QEyIxu7O66Z+lRB/grJ YZ8jJmGmaV5MFdN+FvxqJXc6YOrmy5d2urIxACk8PM2Ty/n3aNGXyRLNPdaGOAyE 6TSBbxZiVDyjAcfB32kXTTymmJqjvFJcv3MPSdOZ1A+l8v10LdPJBP00UY3Ydx6p vLY5T7A1KbCWEh2E/SW7uaKmVWRCOAzj/epVy2OHUsLQTyLjnjRVMiv4R2rpMKrx K8hlFDGPgmct0U1YK366sdgXb3dfeKMcQEMfdLcd9Q28YhyJbOJvwxApeXchNnva MDhLD/WpZcm+LRomvF3Gw+MKoqKJxjxKdc5pPl5C23mz7XDNm/aMSkGDLbn5UyU= -----END CERTIFICATE-----Generated at Sat Mar 7 16:09:00 2026 by rpki-client