$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D8F3720ED7DA11EFAEC65586C4F9AE02.roa File: D8F3720ED7DA11EFAEC65586C4F9AE02.roa (raw, json) Hash identifier: L0hZUL19G29+mnGl0rGK+8NSRxnzUt7lKC3Ob/H7NPs= Subject key identifier: D8:32:24:89:6F:AB:08:31:19:45:D6:55:99:BE:67:D5:0C:C6:F8:2D Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 083C Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D8F3720ED7DA11EFAEC65586C4F9AE02.roa Signing time: Sun 01 Mar 2026 21:15:30 +0000 ROA not before: Thu 28 Aug 2025 14:51:54 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153507 IP address blocks: 161.248.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2108 (0x83c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:54 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4ac72-83e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7d:9e:bb:8e:52:57:ad:4e:6a:76:90:57:9e: fb:e8:d5:0b:18:f4:55:16:e2:2f:6e:b7:cb:de:0e: 8a:d6:a8:fa:0c:a9:eb:0c:5f:30:b9:bb:2f:3a:15: e3:41:cf:58:c7:13:8d:c1:7e:2a:8e:17:1e:43:09: 3a:09:92:fe:f4:ed:9a:bf:8a:41:82:53:53:fe:88: 50:fb:aa:6c:97:dd:83:f9:23:62:db:3d:ac:9e:ab: 2c:0a:78:50:29:70:dc:19:5e:fb:0b:a5:e3:fd:20: ad:7b:7a:ee:fb:1e:c6:18:07:cf:73:07:9b:2d:be: 5b:2e:c2:c0:ec:d3:09:12:53:c3:b7:28:ff:bb:ac: d1:d1:aa:3e:62:e9:80:bc:1f:05:2e:6f:fa:bd:8e: d0:85:d9:a8:1f:81:d8:ee:3f:3d:71:2d:c2:fc:fe: ec:0b:0e:5b:86:fa:9f:a6:8a:37:2c:4b:dc:be:d0: b3:69:b0:7a:7a:8e:cf:fb:b6:23:6a:80:73:7d:1f: 56:63:e2:4f:e2:d6:9a:30:42:76:84:df:6d:88:08: f7:86:0e:e2:6b:d4:02:e8:31:ac:5b:41:e3:3a:20: b0:e8:f7:16:d7:02:20:9f:17:29:9b:6c:01:39:d9: 29:2a:47:d3:65:82:0d:bf:6f:ef:cc:7f:01:7c:20: b3:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:32:24:89:6F:AB:08:31:19:45:D6:55:99:BE:67:D5:0C:C6:F8:2D X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D8F3720ED7DA11EFAEC65586C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.148.0/23 Signature Algorithm: sha256WithRSAEncryption 93:ca:96:a5:db:92:4e:f3:2a:53:17:20:b3:80:33:5d:77:ca: 5e:23:81:d3:0e:4d:c2:98:fe:67:d0:1c:1f:b4:cc:06:a7:3a: c1:ac:3d:b2:3d:77:72:ef:bc:9e:0f:9c:73:42:2a:41:6e:84: 68:2f:ac:ee:1c:7b:bc:23:6c:00:06:3d:00:f8:84:0f:68:87: 92:08:0c:52:0b:16:08:e0:19:cf:26:01:d5:b0:63:ec:10:63: c1:af:9f:00:39:52:f1:55:1f:0a:90:f0:b4:e5:56:2b:e1:a2: 1c:f8:11:4a:c4:dc:13:21:9e:43:2a:e8:9d:00:aa:fd:93:1e: 7e:37:35:fd:0c:07:2d:15:2a:90:03:4a:0f:72:64:66:ca:2a: 95:d3:35:5e:95:11:26:87:c0:0f:b8:f3:89:b5:8f:a7:2d:48: e9:00:5b:e4:87:ef:f8:3d:20:ec:7d:24:78:e1:da:a8:82:95: 86:3a:86:48:d4:58:29:08:27:69:99:d9:c3:73:2a:a1:9e:f0: 09:d9:2d:36:75:06:41:58:fe:35:bf:1c:83:a4:04:75:fd:28: 0e:79:9c:d1:ff:81:3b:4c:77:62:bc:cd:a5:bd:c3:12:c3:d2: b5:36:1e:20:44:57:d3:87:fb:af:41:e3:49:ee:41:31:ec:b1: b2:4a:54:f9 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICCDwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTU0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWM3Mi04M2UxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtn2eu45SV61OanaQV5776NULGPRVFuIvbrfL3g6K1qj6DKnrDF8wubsvOhXj Qc9YxxONwX4qjhceQwk6CZL+9O2av4pBglNT/ohQ+6psl92D+SNi2z2snqssCnhQ KXDcGV77C6Xj/SCte3ru+x7GGAfPcwebLb5bLsLA7NMJElPDtyj/u6zR0ao+YumA vB8FLm/6vY7QhdmoH4HY7j89cS3C/P7sCw5bhvqfpoo3LEvcvtCzabB6eo7P+7Yj aoBzfR9WY+JP4taaMEJ2hN9tiAj3hg7ia9QC6DGsW0HjOiCw6PcW1wIgnxcpm2wB OdkpKkfTZYINv2/vzH8BfCCzLQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNgyJIlv qwgxGUXWVZm+Z9UMxvgtMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRDhGMzcyMEVE N0RBMTFFRkFFQzY1NTg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofiUMA0GCSqGSIb3DQEBCwUAA4IBAQCTypal25JO8ypTFyCzgDNd d8peI4HTDk3CmP5n0BwftMwGpzrBrD2yPXdy77yeD5xzQipBboRoL6zuHHu8I2wA Bj0A+IQPaIeSCAxSCxYI4BnPJgHVsGPsEGPBr58AOVLxVR8KkPC05VYr4aIc+BFK xNwTIZ5DKuidAKr9kx5+NzX9DActFSqQA0oPcmRmyiqV0zVelREmh8APuPOJtY+n LUjpAFvkh+/4PSDsfSR44dqogpWGOoZI1FgpCCdpmdnDcyqhnvAJ2S02dQZBWP41 vxyDpAR1/SgOeZzR/4E7THdivM2lvcMSw9K1Nh4gRFfTh/uvQeNJ7kEx7LGySlT5 -----END CERTIFICATE-----Generated at Mon Mar 2 08:02:45 2026 by rpki-client