$ rpki-client -vvf rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/2CE10886A68511EFB0CF9981C4F9AE02.roa File: 2CE10886A68511EFB0CF9981C4F9AE02.roa (raw, json) Hash identifier: 3O6VgxIYZQg0/gXdPfFmHtQWn2JCLPxmlmgCbxUiuck= Subject key identifier: 38:9A:7F:5B:03:3C:C1:D5:26:72:11:0E:0C:A8:C2:E4:79:A7:E5:94 Certificate issuer: /CN=A91706E4/serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Certificate serial: F5 Authority key identifier: 17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/2CE10886A68511EFB0CF9981C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:11:58 +0000 ROA not before: Thu 01 Jan 2026 05:24:35 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 141212 IP address blocks: 160.191.228.0/24 maxlen: 24 160.191.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 245 (0xf5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91706E4, serialNumber=176BCE15C862D47BA760A1F66538F81D5C493B81 Validity Not Before: Jan 1 05:24:35 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41efe-46f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:e1:cf:33:7a:74:3a:24:0b:b5:59:a7:68:05: ce:c7:31:3c:33:b6:ef:63:02:60:76:5b:a2:a2:a2: 9e:2c:5c:98:5c:54:8e:f0:fe:03:99:a2:39:fa:56: d6:ec:c4:f6:3f:aa:7b:dc:36:96:0d:48:7b:02:5e: c2:e3:19:70:be:79:f1:60:32:51:67:dd:6c:63:54: b1:3b:73:9f:71:68:ee:61:c2:a6:92:0f:22:72:39: 7d:f0:15:0a:00:6d:3e:ce:01:6b:53:d8:ce:fc:58: 41:e3:f7:88:4f:5d:3a:c7:17:4b:b1:f0:4f:a8:3e: 77:c2:c9:76:8e:8c:77:10:72:15:d4:d4:d9:b3:b9: 5c:f1:0b:c2:41:cb:40:20:7c:c0:d4:ee:ea:4b:5e: da:68:24:9c:17:38:b9:44:02:c0:86:41:c8:5d:aa: 07:17:af:2c:af:c4:b0:0b:70:ea:9d:a0:7f:53:1a: ef:0b:0b:6c:77:76:2f:63:7f:b8:43:0b:db:76:0c: 6a:77:e0:33:f5:82:18:f9:f3:47:dd:8e:9f:93:ff: a3:2f:61:a8:d8:73:e6:ba:f1:27:b1:1a:d1:7d:72: 1c:9a:f0:dd:8c:11:9e:99:94:9e:bd:c0:86:ab:d8: ac:ea:19:9b:86:5c:05:cd:d1:aa:07:80:28:b9:03: b3:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:9A:7F:5B:03:3C:C1:D5:26:72:11:0E:0C:A8:C2:E4:79:A7:E5:94 X509v3 Authority Key Identifier: keyid:17:6B:CE:15:C8:62:D4:7B:A7:60:A1:F6:65:38:F8:1D:5C:49:3B:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/F2vOFchi1HunYKH2ZTj4HVxJO4E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F2vOFchi1HunYKH2ZTj4HVxJO4E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91706E4/32E993C0A68411EF8F5ED37FC4F9AE02/2CE10886A68511EFB0CF9981C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.191.228.0/23 Signature Algorithm: sha256WithRSAEncryption c2:55:18:4d:c9:2b:83:43:89:1b:e1:7c:9b:ed:31:89:cc:fe: 2c:38:14:e2:9f:b2:48:5f:7c:99:64:e4:1e:34:df:75:f0:11: 57:45:5e:5f:af:62:3d:40:ef:cd:2e:d8:e0:2f:b6:da:e9:b9: 79:12:a1:08:4f:ea:86:06:ce:b9:c2:db:6b:91:4b:ee:0d:23: 89:84:08:1e:31:9c:2c:7e:4f:b8:5e:08:45:33:82:4a:9a:4c: 02:dd:31:a5:44:4b:34:7f:a0:e3:bf:4e:c5:76:7a:f6:fc:4b: 9e:fb:b2:41:d1:b9:b6:94:0b:5d:dd:c6:00:12:67:4c:87:12: c8:a6:97:16:78:cf:6a:ef:d8:f0:5a:b1:18:a5:58:fa:1f:8b: 8b:17:4e:a3:9f:e3:94:79:79:d8:b1:92:cf:b2:94:93:d6:e0: a5:5a:13:79:d7:56:a3:0c:82:00:b4:21:c2:29:c5:1b:4e:46: 34:25:ce:14:68:c9:84:ae:1a:85:18:74:79:92:65:78:25:a2: f7:a0:a9:57:92:80:e8:7f:42:57:f4:87:24:31:d3:8e:65:b0: 43:8f:eb:59:4d:e2:06:12:48:e4:a4:61:15:05:ac:d1:84:7b: d9:7e:40:41:ae:ea:ec:de:7e:e7:f1:5b:f2:0d:14:18:9b:dc: b0:b2:e7:2e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzA2RTQxMTAvBgNVBAUTKDE3NkJDRTE1Qzg2MkQ0N0JBNzYwQTFGNjY1MzhGODFE NUM0OTNCODEwHhcNMjYwMTAxMDUyNDM1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWVmZS00NmYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+uHPM3p0OiQLtVmnaAXOxzE8M7bvYwJgdluioqKeLFyYXFSO8P4DmaI5+lbW 7MT2P6p73DaWDUh7Al7C4xlwvnnxYDJRZ91sY1SxO3OfcWjuYcKmkg8icjl98BUK AG0+zgFrU9jO/FhB4/eIT106xxdLsfBPqD53wsl2jox3EHIV1NTZs7lc8QvCQctA IHzA1O7qS17aaCScFzi5RALAhkHIXaoHF68sr8SwC3DqnaB/UxrvCwtsd3YvY3+4 Qwvbdgxqd+Az9YIY+fNH3Y6fk/+jL2Go2HPmuvEnsRrRfXIcmvDdjBGemZSevcCG q9is6hmbhlwFzdGqB4AouQOz1QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDiaf1sD PMHVJnIRDgyowuR5p+WUMB8GA1UdIwQYMBaAFBdrzhXIYtR7p2Ch9mU4+B1cSTuB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDZFNC8zMkU5OTNDMEE2 ODQxMUVGOEY1RUQzN0ZDNEY5QUUwMi9GMnZPRmNoaTFIdW5ZS0gyWlRqNEhWeEpP NEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Yydk9GY2hpMUh1bllLSDJaVGo0SFZ4Sk80RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzA2RTQvMzJFOTkzQzBBNjg0MTFFRjhGNUVEMzdGQzRGOUFFMDIvMkNFMTA4ODZB Njg1MTFFRkIwQ0Y5OTgxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoL/kMA0GCSqGSIb3DQEBCwUAA4IBAQDCVRhNySuDQ4kb4Xyb7TGJ zP4sOBTin7JIX3yZZOQeNN918BFXRV5fr2I9QO/NLtjgL7ba6bl5EqEIT+qGBs65 wttrkUvuDSOJhAgeMZwsfk+4XghFM4JKmkwC3TGlREs0f6Djv07Fdnr2/Eue+7JB 0bm2lAtd3cYAEmdMhxLIppcWeM9q79jwWrEYpVj6H4uLF06jn+OUeXnYsZLPspST 1uClWhN511ajDIIAtCHCKcUbTkY0Jc4UaMmErhqFGHR5kmV4JaL3oKlXkoDof0JX 9IckMdOOZbBDj+tZTeIGEkjkpGEVBazRhHvZfkBBrurs3n7n8VvyDRQYm9ywsucu -----END CERTIFICATE-----Generated at Mon Mar 2 06:20:51 2026 by rpki-client