$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa File: 742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa (raw, json) Hash identifier: 6iHji3vW0ySaxRjW00e4mbIYN9cBbO6xkCt4FYUieO4= Subject key identifier: 87:41:3B:19:30:9C:1D:40:09:5F:26:90:B5:63:39:F2:28:42:30:11 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 085E Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa Signing time: Sun 01 Mar 2026 21:16:01 +0000 ROA not before: Thu 26 Feb 2026 09:51:37 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150895 IP address blocks: 157.66.48.0/23 maxlen: 23 157.66.222.0/23 maxlen: 23 157.66.224.0/23 maxlen: 23 160.22.80.0/23 maxlen: 24 160.22.120.0/23 maxlen: 23 160.25.72.0/23 maxlen: 23 160.30.50.0/23 maxlen: 23 160.30.136.0/23 maxlen: 23 160.191.86.0/23 maxlen: 24 160.191.160.0/24 maxlen: 24 160.191.214.0/23 maxlen: 23 160.250.4.0/23 maxlen: 23 160.250.128.0/23 maxlen: 23 160.250.132.0/23 maxlen: 23 160.250.180.0/23 maxlen: 24 160.250.186.0/23 maxlen: 24 161.248.4.0/23 maxlen: 23 161.248.178.0/23 maxlen: 23 161.248.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2142 (0x85e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Feb 26 09:51:37 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4ac91-dce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a7:4a:c1:b9:ca:d6:7f:8a:c0:43:8f:28:2f: 62:ef:45:dc:72:e8:10:c3:77:6e:0c:c9:26:85:ed: 16:b4:9c:fe:e6:47:12:b6:51:9d:84:fa:e6:dd:4f: 22:35:82:64:7d:de:17:f3:3f:3b:8f:73:1d:85:aa: 92:f2:17:53:74:15:3d:fa:6d:d3:c3:83:0a:13:9b: d3:f7:e3:cc:b0:3a:b3:17:4f:2c:8c:41:0e:49:22: ee:28:1d:64:9f:a5:f1:f5:a2:fd:4b:32:69:50:37: 7d:89:76:79:13:c5:73:72:92:13:44:91:a6:b0:70: 2c:e2:11:46:b6:8b:af:76:38:ef:c2:eb:3b:d9:84: d7:08:90:c6:a6:8b:db:4e:a0:7d:5b:d5:2a:66:6f: 0c:f6:14:71:18:86:48:1c:ab:9f:94:6c:32:9b:68: 63:b4:f7:8b:de:84:ab:4b:0a:ad:12:db:7a:47:9d: 58:c3:85:46:ae:e8:4b:d4:99:62:f6:30:ad:d3:0b: 09:1c:1e:c5:b9:a9:ac:73:b6:30:0d:ac:b7:4c:1f: 04:96:4e:aa:2a:91:7f:2f:82:b6:1b:2a:b0:02:93: 8d:9f:b1:b8:5b:d4:fd:ef:70:b9:2d:c9:5f:ab:67: bf:f0:3e:f8:ef:bc:cd:7a:53:a0:5f:c4:ec:a2:2c: ca:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:41:3B:19:30:9C:1D:40:09:5F:26:90:B5:63:39:F2:28:42:30:11 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.66.48.0/23 157.66.222.0-157.66.225.255 160.22.80.0/23 160.22.120.0/23 160.25.72.0/23 160.30.50.0/23 160.30.136.0/23 160.191.86.0/23 160.191.160.0/24 160.191.214.0/23 160.250.4.0/23 160.250.128.0/23 160.250.132.0/23 160.250.180.0/23 160.250.186.0/23 161.248.4.0/23 161.248.178.0/23 161.248.238.0/23 Signature Algorithm: sha256WithRSAEncryption 49:30:4f:19:13:93:ad:a7:5c:10:e4:9a:c5:e9:ca:29:ae:8a: 3e:b6:c0:00:a0:1b:d8:ef:02:98:15:72:bc:2f:32:22:e6:00: 85:9b:12:26:10:5d:29:1d:f7:58:0a:d9:bb:99:dc:26:ec:07: 0a:9c:c4:ce:e6:9d:24:71:32:92:c4:23:41:38:4a:a4:92:07: 09:d1:2c:97:5f:d6:af:ad:8a:08:69:78:5d:04:af:15:8d:51: 17:17:cd:1b:58:32:b4:39:b5:54:c2:32:0d:b3:e8:6e:60:ba: dd:38:6d:ad:15:72:f9:40:df:5c:c1:38:69:81:ba:fd:0d:49: 96:48:35:64:d2:a7:19:7e:a6:72:ac:2f:7f:90:1e:b4:7b:32: 6b:0e:c6:26:9b:d6:ca:6d:0a:ff:da:2d:be:ce:bd:88:65:6e: b0:8a:5e:78:fa:e2:37:b1:1b:3f:3e:bb:72:96:52:3e:5f:80: 00:35:6a:d1:f1:ac:ee:f0:63:e6:85:49:b9:66:02:41:e1:37: d7:68:be:8b:b9:56:a4:3e:24:07:c6:e6:37:d1:08:c4:17:e6: 72:a4:d9:ea:9d:04:ac:e4:09:4b:7c:68:64:fb:f8:3b:82:c7: d9:d9:15:67:42:79:1a:e1:e0:79:fb:c9:8b:57:96:61:3f:b8: 41:82:e3:47 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgICCF4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYwMjI2MDk1MTM3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWM5MS1kY2U3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqadKwbnK1n+KwEOPKC9i70XccugQw3duDMkmhe0WtJz+5kcStlGdhPrm3U8i NYJkfd4X8z87j3MdhaqS8hdTdBU9+m3Tw4MKE5vT9+PMsDqzF08sjEEOSSLuKB1k n6Xx9aL9SzJpUDd9iXZ5E8VzcpITRJGmsHAs4hFGtouvdjjvwus72YTXCJDGpovb TqB9W9UqZm8M9hRxGIZIHKuflGwym2hjtPeL3oSrSwqtEtt6R51Yw4VGruhL1Jli 9jCt0wsJHB7Fuamsc7YwDay3TB8Elk6qKpF/L4K2GyqwApONn7G4W9T973C5Lclf q2e/8D7477zNelOgX8TsoizKjwIDAQABo4ICzzCCAsswHQYDVR0OBBYEFIdBOxkw nB1ACV8mkLVjOfIoQjARMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNzQyQzQwQzBB RTBBMTFFRjlCMUE5QjNGQzRGOUFFMDIucm9hMIGNBggrBgEFBQcBBwEB/wR+MHww egQCAAEwdAMEAZ1CMDAMAwQBnULeAwQBnULgAwQBoBZQAwQBoBZ4AwQBoBlIAwQB oB4yAwQBoB6IAwQBoL9WAwQAoL+gAwQBoL/WAwQBoPoEAwQBoPqAAwQBoPqEAwQB oPq0AwQBoPq6AwQBofgEAwQBofiyAwQBofjuMA0GCSqGSIb3DQEBCwUAA4IBAQBJ ME8ZE5Otp1wQ5JrF6coproo+tsAAoBvY7wKYFXK8LzIi5gCFmxImEF0pHfdYCtm7 mdwm7AcKnMTO5p0kcTKSxCNBOEqkkgcJ0SyXX9avrYoIaXhdBK8VjVEXF80bWDK0 ObVUwjINs+huYLrdOG2tFXL5QN9cwThpgbr9DUmWSDVk0qcZfqZyrC9/kB60ezJr DsYmm9bKbQr/2i2+zr2IZW6wil54+uI3sRs/PrtyllI+X4AANWrR8azu8GPmhUm5 ZgJB4TfXaL6LuVakPiQHxuY30QjEF+ZypNnqnQSs5AlLfGhk+/g7gsfZ2RVnQnka 4eB5+8mLV5ZhP7hBguNH -----END CERTIFICATE-----Generated at Mon Mar 2 06:19:55 2026 by rpki-client