$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF94F4D82B1F11F0A19F8C33C4F9AE02.roa File: CF94F4D82B1F11F0A19F8C33C4F9AE02.roa (raw, json) Hash identifier: MbmkyvTU+86WUP5nMrNpYSs0RJ5xo3wh1YrF74xjCMU= Subject key identifier: 40:A1:F2:C7:5E:68:E0:38:33:AE:15:42:2D:56:74:C4:E7:49:FD:6B Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 07FA Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF94F4D82B1F11F0A19F8C33C4F9AE02.roa Signing time: Sun 01 Mar 2026 21:14:33 +0000 ROA not before: Thu 28 Aug 2025 14:50:56 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 149107 IP address blocks: 157.66.24.0/23 maxlen: 23 157.66.26.0/23 maxlen: 23 160.30.18.0/23 maxlen: 23 160.191.164.0/23 maxlen: 23 160.250.182.0/23 maxlen: 23 160.250.184.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2042 (0x7fa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:50:56 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4ac39-27b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:bb:4d:3e:08:6d:d7:5d:2e:c0:98:d1:d6: f7:98:ce:bb:c8:c7:aa:94:e9:d2:cf:a8:db:0e:5b: db:58:1a:ec:41:62:96:59:b3:b8:33:a3:9a:4b:ac: 71:b8:9d:c1:3e:83:3c:1d:8f:b9:b7:35:ac:5c:fd: e5:76:e2:e2:ee:95:ff:9c:78:ec:02:1f:e8:79:12: 8d:25:f9:a4:a8:4e:6a:c9:31:83:f2:b1:5f:0e:00: 6b:37:c0:fa:8f:03:cb:23:96:84:95:6f:a4:e1:9c: ad:f1:b6:45:12:db:8e:82:ae:41:6f:bf:bc:84:aa: af:15:56:5d:c9:89:22:1f:3e:95:33:c5:f0:db:4b: 99:c3:ae:19:8a:b7:47:30:89:a8:1c:25:f6:4e:b8: d2:bf:a9:81:52:6d:f8:1e:38:d3:30:c9:23:53:5a: 1c:4f:a5:86:e0:03:66:41:c7:41:23:a1:31:9c:1f: 73:a8:f1:13:76:9d:93:a7:a3:49:7c:0a:b4:12:6b: 0e:14:93:b8:ca:3d:e6:33:7b:da:d6:21:cb:35:2f: b5:a4:57:1a:ec:58:5d:8d:db:f3:1a:e0:0c:4f:99: 1b:db:8b:25:a0:c6:23:8f:c2:23:0b:48:b5:b5:b9: 5b:ac:36:89:da:a7:0e:18:ab:b2:21:83:fa:1e:38: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A1:F2:C7:5E:68:E0:38:33:AE:15:42:2D:56:74:C4:E7:49:FD:6B X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF94F4D82B1F11F0A19F8C33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.66.24.0/22 160.30.18.0/23 160.191.164.0/23 160.250.182.0-160.250.185.255 Signature Algorithm: sha256WithRSAEncryption 83:b8:33:a9:21:b5:13:ed:d4:92:e2:60:f6:2f:2a:2b:5d:72: 42:6d:4c:97:36:5c:4a:43:3d:a6:cb:f7:6d:44:0d:34:b1:41: 56:9c:94:84:e2:95:ed:b6:75:8d:27:dc:31:4b:18:3c:21:6f: 44:97:a2:e7:e2:7c:93:71:57:67:e6:3a:a8:68:7d:65:cf:95: 3b:94:b5:8d:77:50:60:a9:1a:4c:f0:3d:e9:38:15:e1:f1:8e: 48:40:2e:ce:60:63:7e:9a:7b:6b:5e:22:75:bc:53:1f:a7:50: 6c:6c:fc:55:a1:45:03:96:88:5f:4b:0e:88:47:ad:5c:0b:66: c3:e9:7f:ce:bb:23:ec:12:da:a2:06:7f:50:4c:3a:01:30:53: e8:68:08:ed:74:0b:e0:e9:55:46:6c:8e:cd:2e:de:27:f6:cd: 58:4a:db:c7:8b:d1:e0:e0:f4:4d:fa:66:ad:d2:00:13:7b:85: 2b:4a:bd:49:69:a4:95:84:18:ce:3c:d4:59:2d:9b:e1:7e:08: cd:15:ab:45:a1:ea:fb:47:81:01:ad:84:6d:bb:ff:13:e8:82: ed:c9:19:cd:89:4c:8b:57:3c:50:93:c3:90:ff:93:8e:9b:8b: c3:6a:4a:9f:b6:d9:02:34:42:cf:25:14:03:2b:9a:ea:ad:f2: 55:bd:0e:c5 -----BEGIN CERTIFICATE----- MIIFVjCCBD6gAwIBAgICB/owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MDU2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWMzOS0yN2I5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAziC7TT4IbdddLsCY0db3mM67yMeqlOnSz6jbDlvbWBrsQWKWWbO4M6OaS6xx uJ3BPoM8HY+5tzWsXP3lduLi7pX/nHjsAh/oeRKNJfmkqE5qyTGD8rFfDgBrN8D6 jwPLI5aElW+k4Zyt8bZFEtuOgq5Bb7+8hKqvFVZdyYkiHz6VM8Xw20uZw64ZirdH MImoHCX2TrjSv6mBUm34HjjTMMkjU1ocT6WG4ANmQcdBI6ExnB9zqPETdp2Tp6NJ fAq0EmsOFJO4yj3mM3va1iHLNS+1pFca7FhdjdvzGuAMT5kb24sloMYjj8IjC0i1 tblbrDaJ2qcOGKuyIYP6Hjib2wIDAQABo4ICejCCAnYwHQYDVR0OBBYEFECh8sde aOA4M64VQi1WdMTnSf1rMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQ0Y5NEY0RDgy QjFGMTFGMEExOUY4QzMzQzRGOUFFMDIucm9hMDkGCCsGAQUFBwEHAQH/BCowKDAm BAIAATAgAwQCnUIYAwQBoB4SAwQBoL+kMAwDBAGg+rYDBAGg+rgwDQYJKoZIhvcN AQELBQADggEBAIO4M6khtRPt1JLiYPYvKitdckJtTJc2XEpDPabL921EDTSxQVac lITile22dY0n3DFLGDwhb0SXoufifJNxV2fmOqhofWXPlTuUtY13UGCpGkzwPek4 FeHxjkhALs5gY36ae2teInW8Ux+nUGxs/FWhRQOWiF9LDohHrVwLZsPpf867I+wS 2qIGf1BMOgEwU+hoCO10C+DpVUZsjs0u3if2zVhK28eL0eDg9E36Zq3SABN7hStK vUlppJWEGM481Fktm+F+CM0Vq0Wh6vtHgQGthG27/xPogu3JGc2JTItXPFCTw5D/ k46bi8NqSp+22QI0Qs8lFAMrmuqt8lW9DsU= -----END CERTIFICATE-----Generated at Mon Mar 2 04:30:38 2026 by rpki-client