$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/961F0878679311F0BBE7DC25C4F9AE02.roa File: 961F0878679311F0BBE7DC25C4F9AE02.roa (raw, json) Hash identifier: Kpamje3MD4FVMx4SjeQPMxKCJe8btQn7cQgfyVIkxIE= Subject key identifier: EC:46:5E:CE:A7:DB:CC:BD:A4:4D:83:0E:C8:0E:8A:E0:01:CC:FD:24 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 085C Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/961F0878679311F0BBE7DC25C4F9AE02.roa Signing time: Sun 01 Mar 2026 21:15:59 +0000 ROA not before: Fri 30 Jan 2026 09:49:45 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135935 IP address blocks: 148.222.82.0/24 maxlen: 24 148.222.83.0/24 maxlen: 24 148.222.88.0/24 maxlen: 24 148.222.89.0/24 maxlen: 24 148.222.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2140 (0x85c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Jan 30 09:49:45 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4ac8f-bb5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:75:8e:ee:5b:16:7d:7a:4d:24:28:1b:b0:57: 1d:b0:2e:74:f0:98:eb:2e:55:97:74:b4:76:ac:d9: a5:d7:33:82:43:75:e8:56:19:0a:92:d2:17:7c:9e: 60:42:65:e6:c1:d6:39:ba:56:28:40:aa:89:45:03: f8:58:6f:77:3d:52:97:0f:d8:bd:24:43:c7:e8:7c: 1c:8d:96:e7:d5:47:e0:15:58:b2:1b:af:d7:82:c5: dc:24:15:e9:5e:a5:a9:ab:8f:fa:4a:e7:6d:47:fb: 37:bd:60:4c:a1:5a:c4:bc:1f:58:99:4d:f2:77:4b: 74:32:4f:42:94:c6:42:9f:8c:e9:7e:29:c8:2c:dc: 7f:e8:f3:80:7d:dd:97:a2:24:52:9c:88:d1:d6:32: a5:3e:f0:51:05:3b:ff:f9:d7:46:52:1c:2f:d6:f8: 91:a3:75:23:3c:89:de:8e:27:e3:08:cd:ee:b2:9a: d3:a2:bd:72:c9:c4:20:3e:eb:29:17:7e:11:f2:1d: 72:80:2c:96:e7:53:31:3a:62:eb:78:0e:5a:c3:51: 61:0c:5d:05:56:54:1d:d9:71:23:73:f1:3c:35:c2: ae:47:d3:cf:34:65:51:78:79:20:13:83:ae:4a:62: 5b:15:3a:78:08:b8:b3:be:9a:c7:e2:bf:18:bb:a0: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:46:5E:CE:A7:DB:CC:BD:A4:4D:83:0E:C8:0E:8A:E0:01:CC:FD:24 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/961F0878679311F0BBE7DC25C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 148.222.82.0/23 148.222.88.0/23 148.222.94.0/24 Signature Algorithm: sha256WithRSAEncryption 3f:06:1b:c3:c8:f9:41:52:46:b4:ed:26:60:6c:fb:99:24:b6: 1f:26:93:23:f0:b7:1f:1d:5b:42:92:7f:e2:9d:e6:45:f6:e9: 60:6e:94:1f:ff:1b:3a:c1:b3:03:47:30:60:85:6b:7e:9d:07: 25:09:4c:3a:95:ad:3d:6e:c8:09:83:bd:03:01:a7:77:61:23: c6:d6:00:25:6d:ae:4d:08:51:8e:0d:d9:4a:66:c2:3f:d1:35: 01:b1:bd:9a:8d:10:79:1e:1d:42:1e:f9:0c:e5:3e:7d:c9:8b: 9d:8f:b8:fe:e2:33:0e:e7:2a:9b:96:a2:03:53:6f:8f:e6:f7: e1:c4:b3:f6:2f:d0:60:b9:4f:db:d9:fe:27:34:5d:d8:88:f5: e0:8b:90:e5:88:3a:ea:b7:65:87:c4:20:d2:99:f7:3a:4c:a8: 6f:53:87:7c:24:e9:fe:fb:9c:db:2e:49:a5:6d:f0:87:aa:6a: 7c:a1:15:1f:bb:7f:97:57:1c:cb:5c:a1:ef:e5:20:44:8e:ca: 60:1a:f6:f9:36:2a:56:98:07:ca:ec:30:65:35:44:ca:62:df: 1d:75:5e:dd:84:28:9c:33:10:ce:83:a1:26:a1:85:25:95:bd: 0c:9b:d6:04:d6:e2:47:1a:40:f1:84:97:7f:9a:ec:c5:a8:83: 1d:8d:fa:95 -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICCFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYwMTMwMDk0OTQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWM4Zi1iYjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArHWO7lsWfXpNJCgbsFcdsC508JjrLlWXdLR2rNml1zOCQ3XoVhkKktIXfJ5g QmXmwdY5ulYoQKqJRQP4WG93PVKXD9i9JEPH6HwcjZbn1UfgFViyG6/XgsXcJBXp XqWpq4/6SudtR/s3vWBMoVrEvB9YmU3yd0t0Mk9ClMZCn4zpfinILNx/6POAfd2X oiRSnIjR1jKlPvBRBTv/+ddGUhwv1viRo3UjPInejifjCM3usprTor1yycQgPusp F34R8h1ygCyW51MxOmLreA5aw1FhDF0FVlQd2XEjc/E8NcKuR9PPNGVReHkgE4Ou SmJbFTp4CLizvprH4r8Yu6BlJQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFOxGXs6n 28y9pE2DDsgOiuABzP0kMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvOTYxRjA4Nzg2 NzkzMTFGMEJCRTdEQzI1QzRGOUFFMDIucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBlN5SAwQBlN5YAwQAlN5eMA0GCSqGSIb3DQEBCwUAA4IBAQA/BhvD yPlBUka07SZgbPuZJLYfJpMj8LcfHVtCkn/ineZF9ulgbpQf/xs6wbMDRzBghWt+ nQclCUw6la09bsgJg70DAad3YSPG1gAlba5NCFGODdlKZsI/0TUBsb2ajRB5Hh1C HvkM5T59yYudj7j+4jMO5yqblqIDU2+P5vfhxLP2L9BguU/b2f4nNF3YiPXgi5Dl iDrqt2WHxCDSmfc6TKhvU4d8JOn++5zbLkmlbfCHqmp8oRUfu3+XVxzLXKHv5SBE jspgGvb5NipWmAfK7DBlNUTKYt8ddV7dhCicMxDOg6EmoYUllb0Mm9YE1uJHGkDx hJd/muzFqIMdjfqV -----END CERTIFICATE-----Generated at Mon Mar 2 06:20:13 2026 by rpki-client