$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa File: 4A181CDA609011F0AB85BC5AC4F9AE02.roa (raw, json) Hash identifier: cKklwWKOzxuPhrVwlImIk+EJfv5tvqRec/HvCWsnzCQ= Subject key identifier: DE:F8:72:91:00:C1:59:44:7C:12:65:A5:A8:26:A6:76:95:DE:25:22 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 084C Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa Signing time: Sun 01 Mar 2026 21:15:45 +0000 ROA not before: Sun 26 Oct 2025 01:56:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151858 IP address blocks: 157.10.52.0/23 maxlen: 23 157.15.84.0/23 maxlen: 23 157.20.82.0/23 maxlen: 23 160.25.166.0/23 maxlen: 23 160.187.146.0/23 maxlen: 23 160.191.86.0/23 maxlen: 23 160.191.88.0/23 maxlen: 23 160.250.180.0/23 maxlen: 23 161.248.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2124 (0x84c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 26 01:56:34 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4ac81-bb9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:44:76:b6:98:1f:2d:a7:77:82:ef:84:21:cd: e1:05:cf:45:34:f9:12:21:80:94:6b:8c:5e:20:06: 6c:92:7b:2c:28:67:ea:ce:fd:e2:11:c7:0b:f8:fd: 00:c0:1c:77:4b:36:8e:3f:98:c0:42:24:5f:39:1e: 5e:b0:51:e4:c7:3a:f9:a8:67:41:1d:a7:21:a7:c8: e1:34:9f:66:73:a8:63:9a:1f:39:cf:a2:8a:9d:d4: 82:85:36:16:4d:6c:6a:0c:5b:67:7f:65:62:7e:ec: fe:50:32:43:58:01:32:fe:56:17:26:5b:ae:4a:29: 62:b3:fb:fc:c3:cb:28:03:5c:05:31:35:9b:74:42: ba:17:ff:82:0f:d3:f6:a4:6f:20:ea:fe:00:be:36: 31:ca:92:6f:e6:91:9c:1c:5f:91:a6:32:e7:a7:28: 41:10:52:46:9e:e3:30:9f:e3:b9:51:ed:87:11:75: cc:a5:69:d8:64:0b:c6:27:ad:f3:03:a9:9d:4a:90: b9:26:5d:0b:59:ce:70:dd:52:9a:ca:53:a5:3b:9c: 38:3b:37:78:5d:1d:f8:a8:a8:e3:64:ad:f4:f0:ae: 6d:58:2a:f7:e1:2c:69:45:76:b3:c8:79:de:08:16: 44:d2:cd:b5:fb:9a:93:06:61:5b:af:85:0e:66:6b: fe:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:F8:72:91:00:C1:59:44:7C:12:65:A5:A8:26:A6:76:95:DE:25:22 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.52.0/23 157.15.84.0/23 157.20.82.0/23 160.25.166.0/23 160.187.146.0/23 160.191.86.0-160.191.89.255 160.250.180.0/23 161.248.82.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:9c:14:9c:a4:dd:24:25:5f:69:dd:d8:71:41:ef:48:77:37: 16:3d:44:d9:0b:cf:48:02:26:64:96:09:7c:0f:33:0d:7b:44: ae:c9:28:80:22:d1:f9:3c:bd:33:59:a5:f7:d4:85:6c:ea:df: 06:5c:cf:f0:e6:e0:1a:94:1a:12:c8:11:af:b6:b0:e6:99:87: 47:0e:07:78:21:af:32:cb:f1:01:45:80:5a:8c:4b:74:3a:73: 55:51:86:b2:2f:8a:72:20:a1:8d:7f:20:6c:14:b2:29:37:10: b6:ad:9e:3d:46:78:c4:2b:4e:52:a6:0f:b8:c8:90:7e:d8:c1: 5c:26:1d:5f:83:42:cb:8a:0d:ca:17:6f:65:71:6b:83:1b:4c: f9:8a:bf:4b:74:71:75:0a:23:5c:32:09:f4:76:49:b9:55:4f: 30:64:8b:14:4a:c6:41:13:29:2a:88:81:08:08:35:b3:6a:a6: e2:fa:bf:92:45:ef:e4:af:26:d1:9e:ea:f2:b3:3e:0b:bc:94: bb:6c:aa:5d:a8:b9:21:fb:b9:61:5d:53:4c:16:06:e7:7a:8d: 20:74:1e:ce:c4:a5:fe:bb:65:b1:b3:ff:72:7b:4a:25:66:2d: cc:88:bc:18:9a:40:80:f3:c7:06:75:12:60:1e:ad:dc:5b:79: 07:85:24:d1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgICCEwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUxMDI2MDE1NjM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWM4MS1iYjljMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtER2tpgfLad3gu+EIc3hBc9FNPkSIYCUa4xeIAZsknssKGfqzv3iEccL+P0A wBx3SzaOP5jAQiRfOR5esFHkxzr5qGdBHachp8jhNJ9mc6hjmh85z6KKndSChTYW TWxqDFtnf2Vifuz+UDJDWAEy/lYXJluuSilis/v8w8soA1wFMTWbdEK6F/+CD9P2 pG8g6v4AvjYxypJv5pGcHF+RpjLnpyhBEFJGnuMwn+O5Ue2HEXXMpWnYZAvGJ63z A6mdSpC5Jl0LWc5w3VKaylOlO5w4Ozd4XR34qKjjZK308K5tWCr34SxpRXazyHne CBZE0s21+5qTBmFbr4UOZmv+WwIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFN74cpEA wVlEfBJlpagmpnaV3iUiMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNEExODFDREE2 MDkwMTFGMEFCODVCQzVBQzRGOUFFMDIucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+ BAIAATA4AwQBnQo0AwQBnQ9UAwQBnRRSAwQBoBmmAwQBoLuSMAwDBAGgv1YDBAGg v1gDBAGg+rQDBAGh+FIwDQYJKoZIhvcNAQELBQADggEBAAycFJyk3SQlX2nd2HFB 70h3NxY9RNkLz0gCJmSWCXwPMw17RK7JKIAi0fk8vTNZpffUhWzq3wZcz/Dm4BqU GhLIEa+2sOaZh0cOB3ghrzLL8QFFgFqMS3Q6c1VRhrIvinIgoY1/IGwUsik3ELat nj1GeMQrTlKmD7jIkH7YwVwmHV+DQsuKDcoXb2Vxa4MbTPmKv0t0cXUKI1wyCfR2 SblVTzBkixRKxkETKSqIgQgINbNqpuL6v5JF7+SvJtGe6vKzPgu8lLtsql2ouSH7 uWFdU0wWBud6jSB0Hs7Epf67ZbGz/3J7SiVmLcyIvBiaQIDzxwZ1EmAerdxbeQeF JNE= -----END CERTIFICATE-----Generated at Mon Mar 2 04:30:45 2026 by rpki-client