$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CE76D260A87511EF9905FE0AC4F9AE02.roa File: CE76D260A87511EF9905FE0AC4F9AE02.roa (raw, json) Hash identifier: PWJIetUwuuT+U7cIEhaoWes2mw/rjNbwevtndczD6xM= Subject key identifier: D7:B3:B0:2B:87:4F:9F:02:22:F6:A9:07:1D:D3:DA:6B:D0:2F:4C:38 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 07FF Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CE76D260A87511EF9905FE0AC4F9AE02.roa Signing time: Sun 01 Mar 2026 21:14:38 +0000 ROA not before: Thu 28 Aug 2025 14:51:00 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150820 IP address blocks: 157.15.38.0/23 maxlen: 23 157.20.62.0/23 maxlen: 23 157.66.252.0/23 maxlen: 23 160.22.172.0/23 maxlen: 23 160.22.174.0/23 maxlen: 23 160.30.190.0/23 maxlen: 23 160.187.120.0/23 maxlen: 23 160.191.176.0/23 maxlen: 23 160.191.240.0/23 maxlen: 23 160.250.46.0/23 maxlen: 23 161.248.208.0/23 maxlen: 23 165.99.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2047 (0x7ff) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:00 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4ac3e-09e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f2:1b:0b:ae:23:dd:40:1d:6a:74:cd:8c:95: e2:e3:bb:83:c7:2c:ff:6c:a5:75:56:84:84:87:c0: 8e:d3:1d:4a:85:d3:40:03:01:7d:b6:d3:80:68:6a: b1:0f:39:95:5f:70:35:1a:2e:f7:0c:e8:ea:7c:58: b6:e4:18:f7:a5:6d:c2:3e:f6:d3:44:c0:d2:f9:e4: 69:62:94:e3:2b:34:5a:d5:39:af:62:3f:b5:d2:c2: 8a:2c:3d:36:73:a3:a3:7a:43:2d:54:28:12:ff:6d: d9:3b:e4:88:ee:4d:6a:4f:0e:17:d4:bc:e9:85:eb: 58:c8:88:76:8a:9f:21:1a:9c:4e:eb:4d:5a:aa:ed: 5e:ea:2d:25:6e:41:44:76:eb:1e:7c:ba:0d:d0:f0: c8:93:90:a0:97:e1:25:0c:f2:e6:82:38:f0:07:93: 7c:79:28:7f:bb:12:9b:b5:61:26:46:5a:5f:02:22: b0:ef:a2:36:5b:62:3d:61:02:ea:92:3b:d8:bf:13: f2:29:db:9a:80:4e:40:64:ea:e4:39:23:60:5e:86: 05:5a:3e:f7:d9:9e:c2:c5:2a:2c:9e:45:60:ad:1b: b4:53:1f:66:c8:71:1c:fd:98:e7:b7:c8:f9:8e:79: e7:51:16:6c:af:67:54:b4:ab:20:89:d4:63:3f:2e: 98:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B3:B0:2B:87:4F:9F:02:22:F6:A9:07:1D:D3:DA:6B:D0:2F:4C:38 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CE76D260A87511EF9905FE0AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.15.38.0/23 157.20.62.0/23 157.66.252.0/23 160.22.172.0/22 160.30.190.0/23 160.187.120.0/23 160.191.176.0/23 160.191.240.0/23 160.250.46.0/23 161.248.208.0/23 165.99.14.0/23 Signature Algorithm: sha256WithRSAEncryption 71:b0:66:16:5c:a0:b8:18:1e:e1:8e:99:dd:1f:dc:8c:da:f1: 7e:5a:fc:fd:0b:1f:33:b6:e8:c3:5c:ca:a3:f4:3d:67:df:b4: c3:58:56:23:0c:0d:73:eb:7e:a3:0a:5e:ab:3c:97:25:fa:9d: ef:6a:3a:a5:4f:aa:41:8d:25:9f:3e:8e:df:44:08:35:b2:11: 34:9f:4b:66:ef:53:e5:0d:ed:f7:1c:98:be:08:e1:c1:c7:4f: 4e:2d:52:fa:20:cb:9e:e1:f8:5d:c7:cd:c6:ef:94:59:00:db: d1:24:03:3d:70:1b:10:e7:6a:3c:d1:0b:d5:f3:6b:ac:e5:49: 21:d0:a1:e0:7d:23:b1:02:62:76:07:a3:b9:d6:a6:4b:6d:6a: 5b:25:48:a5:6e:81:bf:78:61:cf:08:7d:71:fb:f4:f8:d6:52: 1c:3e:8a:2f:b8:3f:0e:2c:42:1f:27:30:a8:66:1b:fb:5b:7b: f5:1e:11:04:ca:3b:e7:cc:cd:74:25:2d:97:ff:1d:d2:57:b1: f7:27:ed:d6:44:64:dd:85:c8:18:7a:5a:70:fb:67:3f:da:20: f0:b7:35:2d:6e:97:b0:d1:01:72:91:0e:71:1f:e9:80:3d:73: 6b:a0:78:0e:30:85:2e:73:c9:13:09:ec:03:c1:17:95:36:a6: c7:98:63:94 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgICB/8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTAwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWMzZS0wOWU0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0fIbC64j3UAdanTNjJXi47uDxyz/bKV1VoSEh8CO0x1KhdNAAwF9ttOAaGqx DzmVX3A1Gi73DOjqfFi25Bj3pW3CPvbTRMDS+eRpYpTjKzRa1TmvYj+10sKKLD02 c6OjekMtVCgS/23ZO+SI7k1qTw4X1LzphetYyIh2ip8hGpxO601aqu1e6i0lbkFE dusefLoN0PDIk5Cgl+ElDPLmgjjwB5N8eSh/uxKbtWEmRlpfAiKw76I2W2I9YQLq kjvYvxPyKduagE5AZOrkOSNgXoYFWj732Z7CxSosnkVgrRu0Ux9myHEc/Zjnt8j5 jnnnURZsr2dUtKsgidRjPy6Y5wIDAQABo4ICnDCCApgwHQYDVR0OBBYEFNezsCuH T58CIvapBx3T2mvQL0w4MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQ0U3NkQyNjBB ODc1MTFFRjk5MDVGRTBBQzRGOUFFMDIucm9hMFsGCCsGAQUFBwEHAQH/BEwwSjBI BAIAATBCAwQBnQ8mAwQBnRQ+AwQBnUL8AwQCoBasAwQBoB6+AwQBoLt4AwQBoL+w AwQBoL/wAwQBoPouAwQBofjQAwQBpWMOMA0GCSqGSIb3DQEBCwUAA4IBAQBxsGYW XKC4GB7hjpndH9yM2vF+Wvz9Cx8ztujDXMqj9D1n37TDWFYjDA1z636jCl6rPJcl +p3vajqlT6pBjSWfPo7fRAg1shE0n0tm71PlDe33HJi+COHBx09OLVL6IMue4fhd x83G75RZANvRJAM9cBsQ52o80QvV82us5Ukh0KHgfSOxAmJ2B6O51qZLbWpbJUil boG/eGHPCH1x+/T41lIcPoovuD8OLEIfJzCoZhv7W3v1HhEEyjvnzM10JS2X/x3S V7H3J+3WRGTdhcgYelpw+2c/2iDwtzUtbpew0QFykQ5xH+mAPXNroHgOMIUuc8kT CewDwReVNqbHmGOU -----END CERTIFICATE-----Generated at Mon Mar 2 04:33:46 2026 by rpki-client