$ rpki-client -vvf rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/C54DD1F45EDA11F0A5EAB579C4F9AE02.roa File: C54DD1F45EDA11F0A5EAB579C4F9AE02.roa (raw, json) Hash identifier: Hc8ozT9yDfNYsIpquS99Gm4q+mTiTQ1cphIlHACdz5k= Subject key identifier: E8:D7:7D:41:43:F1:33:68:8C:69:3F:0D:57:05:B3:49:0B:CC:EE:D1 Certificate issuer: /CN=A91A25DF/serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B Certificate serial: 7A Authority key identifier: D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/C54DD1F45EDA11F0A5EAB579C4F9AE02.roa Signing time: Sun 01 Mar 2026 07:10:35 +0000 ROA not before: Sat 12 Jul 2025 04:43:35 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154031 IP address blocks: 165.101.154.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.crl rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:06:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 122 (0x7a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A25DF, serialNumber=D3CF64D5DB1761FCB6A552F068091330C5B5F53B Validity Not Before: Jul 12 04:43:35 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a3e66b-557d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:4a:b8:ef:06:a5:92:47:24:f4:68:b2:02:94: ce:42:34:9e:1c:60:cb:dd:a3:1e:a6:48:8b:d5:1a: 98:37:81:a2:11:1a:a9:29:42:3f:03:b6:1b:5a:01: 68:13:2d:2a:ce:b2:e5:4b:e6:2b:fa:42:ac:ec:28: 83:fe:3f:31:04:50:ae:d0:b0:4a:d7:49:6c:4e:c1: d4:e3:6d:b7:1e:45:fb:28:a3:bc:49:e9:32:3e:04: 13:86:96:1a:c0:ba:0b:e7:8f:ac:cd:2f:56:92:b8: 38:7e:aa:03:ba:1f:8a:69:df:13:26:f1:37:87:03: a8:0e:bc:fb:0a:c4:d2:63:47:df:f7:6a:b2:d1:ba: 97:2d:c0:d1:ab:65:f6:c2:cb:f5:f1:cf:7b:71:2b: c1:10:c7:72:18:92:1d:a4:95:f3:63:04:77:fc:5d: 4e:cb:bd:14:8d:f8:2e:94:3e:7c:15:80:4f:48:b6: 24:98:64:01:ae:fb:4c:67:8f:e3:1d:16:5b:e8:7a: 52:c3:72:56:61:96:42:17:0c:f0:03:e1:9c:75:9c: 44:c3:4f:e3:ac:ee:41:67:52:01:28:f8:25:1d:05: 86:b1:fa:a8:28:cc:f7:13:39:87:b5:5f:55:95:5c: 2e:7e:ba:2b:33:af:4a:f9:74:c9:da:6d:45:b6:bb: 41:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D7:7D:41:43:F1:33:68:8C:69:3F:0D:57:05:B3:49:0B:CC:EE:D1 X509v3 Authority Key Identifier: keyid:D3:CF:64:D5:DB:17:61:FC:B6:A5:52:F0:68:09:13:30:C5:B5:F5:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/089k1dsXYfy2pVLwaAkTMMW19Ts.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/089k1dsXYfy2pVLwaAkTMMW19Ts.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A25DF/E61240825ED511F09CF1D50CC4F9AE02/C54DD1F45EDA11F0A5EAB579C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.154.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:c7:4c:d1:6a:10:a7:03:06:0f:ef:d9:14:0a:a2:69:4e:fd: ee:24:a5:af:8f:f6:f9:a6:54:77:95:01:75:7f:0b:ec:86:19: c6:12:76:ca:6b:65:39:4c:41:cd:42:6f:25:cf:5f:99:f2:ee: 6f:0c:14:e7:f9:00:85:f3:ff:d7:b4:90:fe:91:60:84:c9:1f: fa:ff:e5:ba:ef:65:55:82:8f:99:9f:20:65:c6:af:f2:90:68: c3:22:bb:51:bd:8f:9d:f0:6a:a9:69:63:65:eb:4e:f7:a2:6b: b9:d7:50:dc:81:c7:59:47:a2:8c:21:df:9d:5f:07:72:41:2e: 54:73:83:d0:73:51:1a:09:d6:2d:b0:c5:f5:9d:2a:76:be:69: 19:44:de:5e:73:2b:02:73:10:e9:31:1a:55:88:68:eb:cd:af: e0:ff:ea:d7:46:09:d8:8b:f6:b1:f5:02:0c:6e:9f:1e:8a:18: 3c:05:70:9f:85:b3:ee:2a:5b:20:72:d4:5e:ef:6c:3f:9d:45: 4f:dc:74:53:91:81:ee:49:c6:bd:a5:1b:a9:42:c3:d9:46:55: 5c:2f:49:a6:e5:dc:99:b5:13:63:e4:ab:de:62:85:5b:82:5c: 1c:81:73:29:0a:2b:fe:81:16:a6:4f:9f:93:50:8d:e7:a7:7d: bc:3c:f7:9a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBejANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB MjVERjExMC8GA1UEBRMoRDNDRjY0RDVEQjE3NjFGQ0I2QTU1MkYwNjgwOTEzMzBD NUI1RjUzQjAeFw0yNTA3MTIwNDQzMzVaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNlNjZiLTU1N2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCxSrjvBqWSRyT0aLIClM5CNJ4cYMvdox6mSIvVGpg3gaIRGqkpQj8DthtaAWgT LSrOsuVL5iv6QqzsKIP+PzEEUK7QsErXSWxOwdTjbbceRfsoo7xJ6TI+BBOGlhrA ugvnj6zNL1aSuDh+qgO6H4pp3xMm8TeHA6gOvPsKxNJjR9/3arLRupctwNGrZfbC y/Xxz3txK8EQx3IYkh2klfNjBHf8XU7LvRSN+C6UPnwVgE9ItiSYZAGu+0xnj+Md FlvoelLDclZhlkIXDPAD4Zx1nETDT+Os7kFnUgEo+CUdBYax+qgozPcTOYe1X1WV XC5+uiszr0r5dMnabUW2u0G1AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU6Nd9QUPx M2iMaT8NVwWzSQvM7tEwHwYDVR0jBBgwFoAU089k1dsXYfy2pVLwaAkTMMW19Tsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUEyNURGL0U2MTI0MDgyNUVE NTExRjA5Q0YxRDUwQ0M0RjlBRTAyLzA4OWsxZHNYWWZ5MnBWTHdhQWtUTU1XMTlU cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvMDg5azFkc1hZZnkycFZMd2FBa1RNTVcxOVRzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB MjVERi9FNjEyNDA4MjVFRDUxMUYwOUNGMUQ1MENDNEY5QUUwMi9DNTRERDFGNDVF REExMUYwQTVFQUI1NzlDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGlZZowDQYJKoZIhvcNAQELBQADggEBAHzHTNFqEKcDBg/v2RQKomlO /e4kpa+P9vmmVHeVAXV/C+yGGcYSdsprZTlMQc1CbyXPX5ny7m8MFOf5AIXz/9e0 kP6RYITJH/r/5brvZVWCj5mfIGXGr/KQaMMiu1G9j53waqlpY2XrTveia7nXUNyB x1lHoowh351fB3JBLlRzg9BzURoJ1i2wxfWdKna+aRlE3l5zKwJzEOkxGlWIaOvN r+D/6tdGCdiL9rH1Agxunx6KGDwFcJ+Fs+4qWyBy1F7vbD+dRU/cdFORge5Jxr2l G6lCw9lGVVwvSabl3Jm1E2Pkq95ihVuCXByBcykKK/6BFqZPn5NQjeenfbw895o= -----END CERTIFICATE-----Generated at Mon Mar 2 05:34:25 2026 by rpki-client