$ rpki-client -vvf rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/61FC1B6A60B511F0A2C58668C4F9AE02.roa File: 61FC1B6A60B511F0A2C58668C4F9AE02.roa (raw, json) Hash identifier: oCr3aQd1HSJF91DdiESRPlphTmJf2c8Lshvn2EKkib4= Subject key identifier: 14:91:64:C0:67:F8:15:14:E0:41:A5:2C:A6:0A:AE:E5:87:E6:B3:41 Certificate issuer: /CN=A91951DE/serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Certificate serial: 7A Authority key identifier: 6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/61FC1B6A60B511F0A2C58668C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:10:47 +0000 ROA not before: Mon 14 Jul 2025 13:21:00 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154047 IP address blocks: 165.101.188.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91951DE, serialNumber=6B8296A5815430278EC311B5E9CBEB7FF0A90DC6 Validity Not Before: Jul 14 13:21:00 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3e677-7bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:59:26:fe:57:94:54:ca:ea:93:35:3d:a6: 96:21:92:da:5b:a7:93:ad:ff:b5:e7:0c:e5:f4:b9: a6:2c:d4:5e:f5:39:20:cc:85:c3:8c:09:44:ef:e5: 1d:9d:9f:b8:3d:36:0e:60:f8:aa:02:9f:b8:c8:69: 97:eb:55:d0:54:62:1a:e9:59:fe:15:e6:21:a6:7b: 1f:01:f0:59:a9:fd:d0:8d:d7:62:18:34:cf:cb:2e: ba:98:5a:8e:9d:e9:b5:cd:6a:c6:1b:2e:42:15:dc: 52:4b:6c:15:cd:f2:0a:4d:88:b7:4e:f7:34:4b:ec: ce:92:85:2f:cf:d7:36:a2:72:9f:34:f6:c0:3b:ad: b0:d7:38:b4:91:f1:77:86:1f:63:17:87:42:f1:17: f7:02:bb:7a:c3:94:ac:fd:66:6f:c6:c1:b9:e7:6c: ae:43:50:5e:96:33:51:95:5c:4a:0f:e7:91:33:77: b5:82:0b:38:6f:da:85:3b:d0:0c:d9:a2:fa:3c:1f: fe:4c:25:93:78:3c:71:d9:ad:b6:b9:cb:72:a9:8b: 1f:6d:06:df:bc:7b:a8:8c:fb:84:9e:b1:79:4c:ec: 20:4d:7d:38:5f:58:7b:c4:45:75:02:e1:8a:9f:30: 77:71:ee:24:59:19:b0:93:9c:93:5c:d2:59:ea:7b: b3:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:91:64:C0:67:F8:15:14:E0:41:A5:2C:A6:0A:AE:E5:87:E6:B3:41 X509v3 Authority Key Identifier: keyid:6B:82:96:A5:81:54:30:27:8E:C3:11:B5:E9:CB:EB:7F:F0:A9:0D:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/a4KWpYFUMCeOwxG16cvrf_CpDcY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a4KWpYFUMCeOwxG16cvrf_CpDcY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91951DE/871FDA3660B411F08ED7AE63C4F9AE02/61FC1B6A60B511F0A2C58668C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.188.0/23 Signature Algorithm: sha256WithRSAEncryption 23:8d:18:36:71:f9:e1:64:aa:dc:bc:cd:5b:cf:a9:55:c4:aa: e5:b1:b8:d9:78:8d:b7:6c:f9:ab:07:2a:18:83:6d:00:06:57: ac:5b:da:6f:f0:5f:55:b7:60:4b:43:70:f5:23:2a:14:17:f3: da:4d:e6:1b:7e:85:97:77:c2:79:57:22:72:aa:cf:b5:0c:14: 38:70:82:73:70:21:eb:28:f8:df:f1:10:70:b5:f4:e9:c8:1d: 62:a6:4d:5c:7c:c6:b4:f2:11:9d:f0:7d:19:e2:83:c6:28:6b: b9:ff:5a:da:bb:40:c6:c8:b5:6f:b4:56:56:50:d8:59:09:83: 04:30:92:02:15:15:29:d3:91:91:bb:06:90:70:98:1e:04:e0: 1c:c9:2d:9b:52:46:9c:7e:a5:4b:26:fc:0c:10:ca:c4:80:3e: ed:5d:19:cd:2e:a7:26:3d:ef:82:05:53:e6:30:10:df:60:b8: 0d:d9:d9:18:5d:63:65:ba:c2:22:9a:ed:f4:49:d8:dd:d5:50: 8d:c7:11:c4:28:2a:f5:e5:1f:15:6b:99:09:ff:75:f0:44:2a: 67:06:31:71:6e:ac:f0:1e:d8:58:03:b1:c1:3f:ac:14:56:cf: 43:c0:9e:06:d7:6b:ac:8a:90:db:2d:2a:2c:16:f9:70:e6:d6: 58:fd:9a:49 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5 NTFERTExMC8GA1UEBRMoNkI4Mjk2QTU4MTU0MzAyNzhFQzMxMUI1RTlDQkVCN0ZG MEE5MERDNjAeFw0yNTA3MTQxMzIxMDBaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNlNjc3LTdiZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCiAFkm/leUVMrqkzU9ppYhktpbp5Ot/7XnDOX0uaYs1F71OSDMhcOMCUTv5R2d n7g9Ng5g+KoCn7jIaZfrVdBUYhrpWf4V5iGmex8B8Fmp/dCN12IYNM/LLrqYWo6d 6bXNasYbLkIV3FJLbBXN8gpNiLdO9zRL7M6ShS/P1zaicp809sA7rbDXOLSR8XeG H2MXh0LxF/cCu3rDlKz9Zm/GwbnnbK5DUF6WM1GVXEoP55Ezd7WCCzhv2oU70AzZ ovo8H/5MJZN4PHHZrba5y3Kpix9tBt+8e6iM+4SesXlM7CBNfThfWHvERXUC4Yqf MHdx7iRZGbCTnJNc0lnqe7O/AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUFJFkwGf4 FRTgQaUspgqu5Yfms0EwHwYDVR0jBBgwFoAUa4KWpYFUMCeOwxG16cvrf/CpDcYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTk1MURFLzg3MUZEQTM2NjBC NDExRjA4RUQ3QUU2M0M0RjlBRTAyL2E0S1dwWUZVTUNlT3d4RzE2Y3ZyZl9DcERj WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYTRLV3BZRlVNQ2VPd3hHMTZjdnJmX0NwRGNZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NTFERS84NzFGREEzNjYwQjQxMUYwOEVEN0FFNjNDNEY5QUUwMi82MUZDMUI2QTYw QjUxMUYwQTJDNTg2NjhDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGlZbwwDQYJKoZIhvcNAQELBQADggEBACONGDZx+eFkqty8zVvPqVXE quWxuNl4jbds+asHKhiDbQAGV6xb2m/wX1W3YEtDcPUjKhQX89pN5ht+hZd3wnlX InKqz7UMFDhwgnNwIeso+N/xEHC19OnIHWKmTVx8xrTyEZ3wfRnig8Yoa7n/Wtq7 QMbItW+0VlZQ2FkJgwQwkgIVFSnTkZG7BpBwmB4E4BzJLZtSRpx+pUsm/AwQysSA Pu1dGc0upyY974IFU+YwEN9guA3Z2RhdY2W6wiKa7fRJ2N3VUI3HEcQoKvXlHxVr mQn/dfBEKmcGMXFurPAe2FgDscE/rBRWz0PAngbXa6yKkNstKiwW+XDm1lj9mkk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:51:18 2026 by rpki-client