$ rpki-client -vvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/AE8BB766178911EC876F5F50C4F9AE02.roa File: AE8BB766178911EC876F5F50C4F9AE02.roa (raw, json) Hash identifier: +d1MUKmmVJG/vsTFf7Frn1NwsWtESd/BW6+x47gDzSQ= Subject key identifier: 89:C5:F3:27:81:80:EE:20:BF:3C:98:97:FE:B7:D9:92:A4:E2:C8:6C Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 05F1 Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/AE8BB766178911EC876F5F50C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:36:33 +0000 ROA not before: Fri 01 Aug 2025 00:36:02 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 58780 IP address blocks: 161.43.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1521 (0x5f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: Aug 1 00:36:02 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a46b11-5370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:33:d5:2f:bd:5a:b9:90:62:3c:b0:5f:29:4a: fe:a4:f6:9e:0f:93:65:5c:70:05:1b:6e:37:1e:74: 65:1a:09:41:cd:2e:23:ca:4b:d7:09:aa:a8:c7:d3: aa:e0:55:28:2b:0c:56:bb:3f:f0:b4:e7:39:26:89: a4:f6:de:64:2c:7b:98:26:b3:80:d5:96:e0:32:dc: 7e:d7:0b:55:31:7b:5a:e8:ad:0a:75:ff:18:53:77: 2c:0e:21:e1:1d:85:bc:b4:e1:79:ea:e2:b7:2b:ca: a2:1d:d8:a9:da:67:59:62:bb:ac:af:41:c7:b4:5c: b3:a1:99:7b:39:00:89:0c:6a:4a:81:a0:b9:a4:9f: 7e:86:94:3b:37:50:23:04:4e:c4:c9:e6:2c:e4:4e: fd:08:9a:b7:77:38:47:74:5d:8b:ed:66:15:35:9e: a7:4d:0c:52:45:96:39:65:f9:2e:1b:38:09:8e:6f: fa:ca:bb:1a:b7:e0:f1:7a:46:b4:d5:26:3b:63:6e: 7e:d0:e1:3d:ee:cc:2e:9c:43:5b:33:36:58:f0:02: 03:1d:97:72:03:a4:3d:f2:2d:50:39:c5:ab:40:52: 0d:e1:34:8a:c9:f3:1f:dd:5b:d1:2b:e4:10:64:a4: 52:42:c9:b8:d5:b4:30:33:e8:89:e0:a6:e5:92:3c: 9f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:C5:F3:27:81:80:EE:20:BF:3C:98:97:FE:B7:D9:92:A4:E2:C8:6C X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/AE8BB766178911EC876F5F50C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.43.223.0/24 Signature Algorithm: sha256WithRSAEncryption c2:2c:b7:15:7c:0c:3c:8e:53:ef:ae:69:c9:b0:3f:c9:a9:2b: 29:89:18:2b:36:c4:28:7e:13:70:a7:6f:80:e1:cb:88:84:7c: f1:82:ca:2b:fd:20:92:e6:22:8b:33:bd:e9:dc:4e:95:61:40: f5:1e:f9:2a:05:39:7f:6b:84:48:fb:ff:51:3a:87:2a:98:8d: 3d:46:db:52:df:56:3c:ff:c8:7d:66:d1:07:b3:67:aa:08:44: 7f:de:23:21:87:d6:1e:71:cd:b7:a4:df:c8:f4:e2:32:45:ca: 8f:80:2a:51:fb:f5:97:da:b1:47:cb:ec:22:ad:c1:c0:f2:3b: 07:d2:e0:a6:eb:87:43:f9:9b:99:e4:3c:b1:2c:79:9b:af:2d: ae:90:f2:05:02:86:f9:0d:ee:6b:a9:06:a9:79:42:f0:25:90: c1:8a:85:42:09:f5:66:cd:dc:0a:7c:19:1b:89:a1:1e:ee:90: 6a:1d:16:df:c4:48:9c:0e:8a:f9:50:b4:ef:ec:a0:cc:aa:cd: a0:d1:27:4b:40:f6:fc:55:d7:6d:d6:47:10:af:dd:8b:e8:6d: 81:bd:d7:2c:25:35:ce:d2:df:02:24:20:cf:be:5a:b2:53:da: 75:64:34:24:35:99:73:26:c3:b7:ea:8f:e5:71:94:fb:37:23: ff:bb:2f:b4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBfEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjUwODAxMDAzNjAyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NmIxMS01MzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqzPVL71auZBiPLBfKUr+pPaeD5NlXHAFG243HnRlGglBzS4jykvXCaqox9Oq 4FUoKwxWuz/wtOc5Jomk9t5kLHuYJrOA1ZbgMtx+1wtVMXta6K0Kdf8YU3csDiHh HYW8tOF56uK3K8qiHdip2mdZYrusr0HHtFyzoZl7OQCJDGpKgaC5pJ9+hpQ7N1Aj BE7EyeYs5E79CJq3dzhHdF2L7WYVNZ6nTQxSRZY5ZfkuGzgJjm/6yrsat+Dxeka0 1SY7Y25+0OE97swunENbMzZY8AIDHZdyA6Q98i1QOcWrQFIN4TSKyfMf3VvRK+QQ ZKRSQsm41bQwM+iJ4KblkjyffQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFInF8yeB gO4gvzyYl/632ZKk4shsMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE0QjEvN0E4ODY0QUNGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvQUU4QkI3NjYx Nzg5MTFFQzg3NkY1RjUwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoSvfMA0GCSqGSIb3DQEBCwUAA4IBAQDCLLcVfAw8jlPvrmnJsD/J qSspiRgrNsQofhNwp2+A4cuIhHzxgsor/SCS5iKLM73p3E6VYUD1HvkqBTl/a4RI +/9ROocqmI09RttS31Y8/8h9ZtEHs2eqCER/3iMhh9Yecc23pN/I9OIyRcqPgCpR +/WX2rFHy+wircHA8jsH0uCm64dD+ZuZ5DyxLHmbry2ukPIFAob5De5rqQapeULw JZDBioVCCfVmzdwKfBkbiaEe7pBqHRbfxEicDor5ULTv7KDMqs2g0SdLQPb8Vddt 1kcQr92L6G2BvdcsJTXO0t8CJCDPvlqyU9p1ZDQkNZlzJsO36o/lcZT7NyP/uy+0 -----END CERTIFICATE-----Generated at Mon Mar 2 15:52:29 2026 by rpki-client