$ rpki-client -vvf rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/CF5EEDA6894411F0BE628977C4F9AE02.roa File: CF5EEDA6894411F0BE628977C4F9AE02.roa (raw, json) Hash identifier: ShsUMsywl9E1H2PFgHzZA8lMp301kfVtL6IIVaO52qw= Subject key identifier: 29:01:41:DF:19:33:8B:6E:D1:06:DB:D4:39:BC:3B:94:3B:3B:19:CC Certificate issuer: /CN=A91992FA/serialNumber=057B537740382678A078F5BF284C726794B9D134 Certificate serial: C4 Authority key identifier: 05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/CF5EEDA6894411F0BE628977C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:04:51 +0000 ROA not before: Thu 04 Sep 2025 04:08:28 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 153611 IP address blocks: 163.61.150.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91992FA, serialNumber=057B537740382678A078F5BF284C726794B9D134 Validity Not Before: Sep 4 04:08:28 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=69a3f323-9d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:cf:3e:90:8f:cd:eb:dc:74:8a:1a:d3:6c:14: 4d:37:df:30:8f:cc:94:4c:04:b7:da:c0:7d:48:92: eb:a0:df:eb:5c:7c:cd:b7:97:42:4a:63:e2:06:a2: 69:52:3f:25:1e:6d:5b:6f:67:5a:cd:8f:77:2e:40: bc:00:13:d3:b8:33:32:29:16:4f:43:7e:dd:b1:79: 22:09:62:ea:c1:29:b9:84:d6:9f:45:0d:85:df:15: 8b:94:5a:af:44:28:8c:7e:ed:5f:5e:9f:5c:1e:cb: 34:e4:29:42:2a:40:59:a5:c0:04:dc:9c:3e:e2:37: 61:1e:0d:8d:b1:5a:38:a2:c6:6a:e2:12:4e:24:1b: cf:a8:47:a4:d3:04:16:76:a2:d0:bc:c9:34:82:13: 74:ba:8f:2b:1f:11:9a:e7:7a:eb:90:46:80:1d:a1: 2b:56:ff:46:0a:11:a6:9d:7c:43:f1:45:f4:a9:8b: a7:03:b4:66:5d:94:84:99:60:d6:fb:7f:0d:1e:90: 0f:1f:cf:ee:09:24:bb:63:c1:33:11:89:33:d1:1d: af:e8:1b:2e:fd:62:26:8e:2a:00:c7:08:4f:6b:5f: 4f:72:96:89:92:80:ac:7d:b4:3b:b7:7d:3b:18:f5: c4:be:0c:c7:d0:a4:d8:91:61:b8:41:8d:71:42:3f: 79:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:01:41:DF:19:33:8B:6E:D1:06:DB:D4:39:BC:3B:94:3B:3B:19:CC X509v3 Authority Key Identifier: keyid:05:7B:53:77:40:38:26:78:A0:78:F5:BF:28:4C:72:67:94:B9:D1:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/BXtTd0A4JnigePW_KExyZ5S50TQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BXtTd0A4JnigePW_KExyZ5S50TQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91992FA/FA46E0D2EE0311EF9C2B8A49C4F9AE02/CF5EEDA6894411F0BE628977C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.61.150.0/23 Signature Algorithm: sha256WithRSAEncryption 6d:a6:6a:8e:38:ea:be:69:3d:47:61:fc:7f:e5:14:94:20:14: bd:2f:b5:10:cd:51:ea:73:1c:76:12:49:28:8a:68:7f:cf:73: 17:f7:34:05:66:56:d3:51:66:9e:4d:75:e7:ab:9b:79:f9:bb: 56:ac:a0:3a:86:a2:98:bb:c0:0c:db:69:4a:15:88:81:32:28: 3f:e1:fe:67:f9:7a:e9:69:90:4d:7d:79:1a:64:1c:6c:3d:6d: c6:25:0f:ff:13:1a:36:24:a9:e4:4e:d4:b1:ec:07:c3:19:f1: 6f:aa:6c:de:7f:ff:1b:7d:da:53:2a:34:ef:04:c5:4b:30:25: 16:30:08:59:18:a8:4f:d5:8c:25:0d:dc:da:82:dd:e3:a6:12: 78:69:2c:fe:f1:04:73:5f:cb:6e:da:55:f4:92:80:dd:c9:7f: dc:27:aa:b8:a6:24:91:6f:81:f1:dc:06:d4:22:34:c5:31:65: 96:cb:e6:69:d1:e9:83:70:cc:e8:94:b3:0c:50:b7:22:98:ab: 73:51:b3:b5:80:cf:09:1d:d7:30:e7:d8:90:57:fe:0f:5d:1c: bc:3a:ef:32:ec:92:fc:a8:0f:72:ee:9c:66:b4:d8:3c:48:5f: 42:4b:41:61:8f:0e:fd:6b:dd:0e:f7:b1:12:e9:7f:1e:f4:5f: d7:ae:38:ea -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkyRkExMTAvBgNVBAUTKDA1N0I1Mzc3NDAzODI2NzhBMDc4RjVCRjI4NEM3MjY3 OTRCOUQxMzQwHhcNMjUwOTA0MDQwODI4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjMyMy05ZDc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyc8+kI/N69x0ihrTbBRNN98wj8yUTAS32sB9SJLroN/rXHzNt5dCSmPiBqJp Uj8lHm1bb2dazY93LkC8ABPTuDMyKRZPQ37dsXkiCWLqwSm5hNafRQ2F3xWLlFqv RCiMfu1fXp9cHss05ClCKkBZpcAE3Jw+4jdhHg2NsVo4osZq4hJOJBvPqEek0wQW dqLQvMk0ghN0uo8rHxGa53rrkEaAHaErVv9GChGmnXxD8UX0qYunA7RmXZSEmWDW +38NHpAPH8/uCSS7Y8EzEYkz0R2v6Bsu/WImjioAxwhPa19PcpaJkoCsfbQ7t307 GPXEvgzH0KTYkWG4QY1xQj95uQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCkBQd8Z M4tu0Qbb1Dm8O5Q7OxnMMB8GA1UdIwQYMBaAFAV7U3dAOCZ4oHj1vyhMcmeUudE0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTJGQS9GQTQ2RTBEMkVF MDMxMUVGOUMyQjhBNDlDNEY5QUUwMi9CWHRUZDBBNEpuaWdlUFdfS0V4eVo1UzUw VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JYdFRkMEE0Sm5pZ2VQV19LRXh5WjVTNTBUUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkyRkEvRkE0NkUwRDJFRTAzMTFFRjlDMkI4QTQ5QzRGOUFFMDIvQ0Y1RUVEQTY4 OTQ0MTFGMEJFNjI4OTc3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoz2WMA0GCSqGSIb3DQEBCwUAA4IBAQBtpmqOOOq+aT1HYfx/5RSU IBS9L7UQzVHqcxx2Ekkoimh/z3MX9zQFZlbTUWaeTXXnq5t5+btWrKA6hqKYu8AM 22lKFYiBMig/4f5n+XrpaZBNfXkaZBxsPW3GJQ//Exo2JKnkTtSx7AfDGfFvqmze f/8bfdpTKjTvBMVLMCUWMAhZGKhP1YwlDdzagt3jphJ4aSz+8QRzX8tu2lX0koDd yX/cJ6q4piSRb4Hx3AbUIjTFMWWWy+Zp0emDcMzolLMMULcimKtzUbO1gM8JHdcw 59iQV/4PXRy8Ou8y7JL8qA9y7pxmtNg8SF9CS0Fhjw79a90O97ES6X8e9F/Xrjjq -----END CERTIFICATE-----Generated at Sun Mar 1 22:41:21 2026 by rpki-client