$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa File: B8DEDE725E0911EFA6193958C4F9AE02.roa (raw, json) Hash identifier: JWBF1W7jDyAoLTIIEiZs2PXK5/n7cBdKBp+shTt424Q= Subject key identifier: 54:31:55:E3:61:FD:78:76:8E:22:35:3E:5B:BB:DD:81:F3:55:34:F3 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 07F1 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa Signing time: Sun 01 Mar 2026 21:14:26 +0000 ROA not before: Thu 28 Aug 2025 14:50:50 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135967 IP address blocks: 160.30.86.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2033 (0x7f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:50:50 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4ac32-ff87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:86:02:10:e4:98:e1:be:2a:d7:e6:36:b8:f2: 63:34:7a:bf:a0:6c:11:56:f2:40:83:5b:81:42:7f: 8f:c5:23:84:51:08:4d:6b:ff:61:f1:64:ff:7a:ba: e3:ab:00:c6:84:0a:c9:22:28:b1:87:f5:a5:88:c6: 16:c6:9d:a6:c6:32:cb:75:19:a0:fc:74:b8:2e:46: 4a:6c:ee:4e:39:bf:36:e0:06:cb:37:20:03:bd:21: 42:05:03:1c:01:17:62:7f:66:bc:9f:94:26:d6:5a: 5d:44:f3:4b:63:8b:0a:ea:4d:4d:40:c5:a5:d8:63: 96:09:bb:1e:4e:6a:93:91:d9:c9:75:e7:07:50:09: ce:c9:1a:2c:18:43:7e:d7:56:f6:97:45:e5:e5:f6: b2:40:23:1e:ce:cc:b1:21:bf:55:95:1c:13:27:70: 7b:05:9f:5f:34:7b:36:e4:00:28:82:66:36:6a:0e: 3c:b9:be:cf:1f:3f:ab:37:7a:92:b3:17:eb:39:3d: 46:98:02:e8:46:9c:98:fe:ed:2c:05:c1:c2:90:30: b0:0c:56:96:98:ff:84:59:11:bd:15:f9:48:95:c7: 50:10:4e:7b:1a:41:31:d8:8d:d5:62:2d:3a:e5:be: 8f:56:65:ee:09:30:90:39:09:71:af:b8:1b:2c:dc: b5:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:31:55:E3:61:FD:78:76:8E:22:35:3E:5B:BB:DD:81:F3:55:34:F3 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/B8DEDE725E0911EFA6193958C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.30.86.0/23 Signature Algorithm: sha256WithRSAEncryption 99:1d:20:0b:86:a6:ce:6c:1a:f9:2a:09:b9:6a:7b:39:52:41: f4:59:92:5b:db:a7:5c:a1:46:e6:9b:1f:d5:dc:e0:8a:17:06: 27:2c:98:8d:ea:22:5d:f2:90:be:71:e5:87:12:e1:f4:70:91: 47:b9:97:70:76:77:55:0b:52:7b:50:47:d5:55:bc:bb:fb:2f: 63:73:e4:2e:12:ed:e4:ae:a5:a7:aa:97:05:a5:45:65:c4:ca: fc:a2:36:14:ac:80:f5:de:28:22:0f:e1:31:91:4e:2c:83:43: 10:93:3d:20:1f:f8:cc:b0:e4:b8:e7:8f:57:9b:ee:ea:6b:2b: 3f:5c:01:4b:72:68:27:da:75:f2:56:bc:85:38:a1:41:04:b1: 7a:57:c1:70:e8:04:c0:22:f6:ad:bb:9f:4f:f5:3c:e9:5d:c2: 36:7f:d8:8b:eb:79:d1:ba:d9:9b:a1:c7:f2:83:8a:f7:6e:9f: b0:19:c4:0c:f3:0f:5a:48:62:58:3a:67:aa:b3:85:25:e7:7a: 27:49:c8:1e:6f:66:d7:4c:c5:04:b2:ba:97:fb:4a:7a:09:a0: 13:6c:98:f2:68:04:c7:8a:20:5d:19:f0:64:04:6e:5f:bf:1a: 8d:b9:00:9a:34:73:04:48:b1:0c:de:bc:5c:97:89:ed:3c:2a: 7d:a8:65:cc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MDUwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWMzMi1mZjg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0IYCEOSY4b4q1+Y2uPJjNHq/oGwRVvJAg1uBQn+PxSOEUQhNa/9h8WT/errj qwDGhArJIiixh/WliMYWxp2mxjLLdRmg/HS4LkZKbO5OOb824AbLNyADvSFCBQMc ARdif2a8n5Qm1lpdRPNLY4sK6k1NQMWl2GOWCbseTmqTkdnJdecHUAnOyRosGEN+ 11b2l0Xl5fayQCMezsyxIb9VlRwTJ3B7BZ9fNHs25AAogmY2ag48ub7PHz+rN3qS sxfrOT1GmALoRpyY/u0sBcHCkDCwDFaWmP+EWRG9FflIlcdQEE57GkEx2I3VYi06 5b6PVmXuCTCQOQlxr7gbLNy13wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFQxVeNh /Xh2jiI1Plu73YHzVTTzMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQjhERURFNzI1 RTA5MTFFRkE2MTkzOTU4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoB5WMA0GCSqGSIb3DQEBCwUAA4IBAQCZHSALhqbObBr5Kgm5ans5 UkH0WZJb26dcoUbmmx/V3OCKFwYnLJiN6iJd8pC+ceWHEuH0cJFHuZdwdndVC1J7 UEfVVby7+y9jc+QuEu3krqWnqpcFpUVlxMr8ojYUrID13igiD+ExkU4sg0MQkz0g H/jMsOS4549Xm+7qays/XAFLcmgn2nXyVryFOKFBBLF6V8Fw6ATAIvatu59P9Tzp XcI2f9iL63nRutmbocfyg4r3bp+wGcQM8w9aSGJYOmeqs4Ul53onScgeb2bXTMUE srqX+0p6CaATbJjyaATHiiBdGfBkBG5fvxqNuQCaNHMESLEM3rxcl4ntPCp9qGXM -----END CERTIFICATE-----Generated at Mon Mar 2 10:14:42 2026 by rpki-client