$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BFD94B4C6D5611F0925A6B7BC4F9AE02.roa File: BFD94B4C6D5611F0925A6B7BC4F9AE02.roa (raw, json) Hash identifier: 2XRMYkURFr08Wmvi5mmCloNpSlNGQfC+lhcIezBA4GA= Subject key identifier: EB:DE:4F:59:CD:13:77:BB:37:9D:EE:58:BB:DC:AE:70:09:58:E0:DE Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 07F4 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BFD94B4C6D5611F0925A6B7BC4F9AE02.roa Signing time: Sun 01 Mar 2026 21:14:28 +0000 ROA not before: Thu 28 Aug 2025 14:50:52 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140810 IP address blocks: 160.250.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2036 (0x7f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:50:52 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4ac34-0da7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c6:9b:45:9a:4f:59:03:a0:16:92:33:45:b8: d4:3b:10:f0:01:f7:67:4c:5c:50:4a:68:41:51:07: b3:24:68:4c:a6:3d:b8:11:94:fe:b3:62:4b:86:9f: 1f:5b:47:fc:96:52:e1:87:7d:02:e0:2e:38:1d:f0: 8f:df:ea:1f:03:9f:05:de:74:91:54:e2:3f:dc:c1: b9:14:53:b2:f6:46:7f:61:10:86:d8:5d:7b:9a:2a: 57:e4:76:db:a6:f2:66:7f:7b:c5:88:5e:02:7d:40: 4a:e1:e2:19:be:5e:ae:a6:0a:8e:59:d9:15:03:fa: 52:25:1d:f4:8f:c2:15:2b:8a:aa:44:1b:96:f1:c8: dc:12:28:cc:40:aa:5b:b6:bf:5e:29:5f:ee:c2:82: 95:ef:73:48:13:2f:16:0e:6f:45:2e:aa:20:0b:e9: 47:01:5b:e1:c3:c1:3d:4a:40:67:18:a3:fb:81:dd: b9:f5:79:99:75:a5:f4:47:e8:2b:1f:36:b5:b9:fc: ec:2f:a0:ad:84:66:c2:2c:62:e9:bf:2f:50:e8:91: a5:99:c7:f4:0a:33:5f:29:d7:39:28:12:6d:90:7d: 77:6a:16:90:10:3f:3d:c0:e3:01:b3:e6:32:45:6a: 85:8f:da:4f:6a:3d:40:af:f7:d5:af:d5:39:91:81: f6:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:DE:4F:59:CD:13:77:BB:37:9D:EE:58:BB:DC:AE:70:09:58:E0:DE X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BFD94B4C6D5611F0925A6B7BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.250.216.0/23 Signature Algorithm: sha256WithRSAEncryption 92:7f:6f:e6:3b:f0:94:d3:9b:31:90:6f:82:b6:24:68:5f:7e: 39:d1:e5:5e:85:99:a8:bd:b8:56:da:50:99:d5:b3:3c:4e:03: 8a:95:a3:8a:e6:6d:b0:fc:a1:1a:32:b0:0e:82:30:6e:72:cc: 6f:93:03:58:03:fb:82:af:3f:62:59:29:cf:dc:ab:8a:ae:f7: 09:0b:56:74:8a:25:10:89:45:3d:7f:c7:04:8e:46:31:4f:86: 56:13:b3:bc:83:fb:bc:01:07:0e:63:8b:ff:66:87:d0:c7:8d: 03:b8:a7:34:99:d4:e9:fa:39:3c:84:08:4b:36:80:03:d6:bb: 8f:48:55:ff:ca:5f:67:a4:33:d5:8d:6d:2e:ec:2c:e0:d7:b4: e3:e0:56:a8:2c:c2:f0:b9:cd:93:03:ac:1d:1f:ad:8d:4d:56: c0:7d:ee:7e:72:f2:c5:f5:26:9c:75:d0:6f:3d:de:34:03:6f: f9:8a:7b:4c:e1:6a:3c:eb:7c:2b:e0:4a:cb:c9:c2:72:74:21: 1e:86:ff:c2:db:b9:0f:f9:4b:1d:10:38:0e:65:75:ae:6c:d7: b5:a6:23:fa:ee:1c:dc:ec:3c:ae:43:a9:52:2b:8f:a4:59:05: 7e:90:6a:7d:c1:db:82:09:38:ff:5d:1f:50:6d:bc:93:18:14: 7d:e0:60:22 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICB/QwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MDUyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWMzNC0wZGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh8abRZpPWQOgFpIzRbjUOxDwAfdnTFxQSmhBUQezJGhMpj24EZT+s2JLhp8f W0f8llLhh30C4C44HfCP3+ofA58F3nSRVOI/3MG5FFOy9kZ/YRCG2F17mipX5Hbb pvJmf3vFiF4CfUBK4eIZvl6upgqOWdkVA/pSJR30j8IVK4qqRBuW8cjcEijMQKpb tr9eKV/uwoKV73NIEy8WDm9FLqogC+lHAVvhw8E9SkBnGKP7gd259XmZdaX0R+gr Hza1ufzsL6CthGbCLGLpvy9Q6JGlmcf0CjNfKdc5KBJtkH13ahaQED89wOMBs+Yy RWqFj9pPaj1Ar/fVr9U5kYH2uQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOveT1nN E3e7N53uWLvcrnAJWODeMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQkZEOTRCNEM2 RDU2MTFGMDkyNUE2QjdCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoPrYMA0GCSqGSIb3DQEBCwUAA4IBAQCSf2/mO/CU05sxkG+CtiRo X3450eVehZmovbhW2lCZ1bM8TgOKlaOK5m2w/KEaMrAOgjBucsxvkwNYA/uCrz9i WSnP3KuKrvcJC1Z0iiUQiUU9f8cEjkYxT4ZWE7O8g/u8AQcOY4v/ZofQx40DuKc0 mdTp+jk8hAhLNoAD1ruPSFX/yl9npDPVjW0u7Czg17Tj4FaoLMLwuc2TA6wdH62N TVbAfe5+cvLF9SacddBvPd40A2/5intM4Wo863wr4ErLycJydCEehv/C27kP+Usd EDgOZXWubNe1piP67hzc7DyuQ6lSK4+kWQV+kGp9wduCCTj/XR9QbbyTGBR94GAi -----END CERTIFICATE-----Generated at Mon Mar 2 04:33:17 2026 by rpki-client