$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/65A422A8C3F411EEB1191654C4F9AE02.roa File: 65A422A8C3F411EEB1191654C4F9AE02.roa (raw, json) Hash identifier: s3pplahrtkEIiqFvq9bDswEXkbohC1ZEoUg/qiNs0L4= Subject key identifier: 96:3E:1F:DA:2F:2B:F0:1F:8D:C5:CB:80:2F:00:30:AF:95:59:F4:7F Certificate issuer: /CN=A91AAF02/serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Certificate serial: 0239 Authority key identifier: 18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/65A422A8C3F411EEB1191654C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:48:31 +0000 ROA not before: Tue 02 Dec 2025 17:18:13 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 4767 IP address blocks: 192.41.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:40:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 569 (0x239) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAF02, serialNumber=18CD26F2F5D444B720C452A8C6C920C6D0A61805 Validity Not Before: Dec 2 17:18:13 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a443af-e3c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:48:08:15:19:ab:e9:25:3d:de:1a:10:ab:a1: 85:ba:0e:1b:26:41:ba:c0:d1:b8:9f:05:98:28:07: 70:8a:a7:d3:c2:5e:35:c3:ed:51:a9:67:d7:16:a7: 76:97:b0:b6:b1:13:9d:2b:f1:0a:7c:b4:a9:ee:ba: aa:17:97:24:50:a3:dd:5a:da:34:94:99:6d:ff:e8: 69:ed:40:9d:a8:8a:f1:36:1f:e9:67:1a:6f:8f:bf: b4:c4:4c:c9:f6:4f:2a:eb:25:54:8b:93:1b:10:18: 7c:e3:26:d7:b6:6f:33:58:1a:3c:45:24:66:30:8d: 4f:17:2a:d0:b1:84:c0:48:fc:65:51:51:08:dc:4c: 62:e9:c0:1a:7a:1c:6f:f1:27:95:ed:03:21:5d:f6: 3f:df:57:2b:3f:0e:af:33:fd:35:3b:47:53:90:d4: 08:69:a6:05:8a:ae:73:8f:80:be:7d:aa:b5:c6:ca: e6:17:b6:2d:67:8e:f7:d5:52:0d:c3:9e:af:f7:ce: 6f:28:34:8a:84:e1:64:62:1a:49:80:40:0a:f3:47: a9:80:84:b5:1d:e5:8d:fe:ee:f0:a7:1c:06:e3:04: 56:16:ba:0a:b7:42:23:a5:5f:be:15:b6:11:49:1e: 66:a7:2b:2e:51:41:0c:c9:83:7b:0f:27:67:19:92: 3f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3E:1F:DA:2F:2B:F0:1F:8D:C5:CB:80:2F:00:30:AF:95:59:F4:7F X509v3 Authority Key Identifier: keyid:18:CD:26:F2:F5:D4:44:B7:20:C4:52:A8:C6:C9:20:C6:D0:A6:18:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/GM0m8vXURLcgxFKoxskgxtCmGAU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/GM0m8vXURLcgxFKoxskgxtCmGAU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAF02/261F34D8C1F711EDB426747BC4F9AE02/65A422A8C3F411EEB1191654C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 192.41.170.0/24 Signature Algorithm: sha256WithRSAEncryption 75:fc:20:fa:e5:3c:86:39:43:a0:41:fb:9c:0b:c3:19:5b:87: 2d:f7:e1:f9:98:ad:80:9b:8d:98:bd:0b:17:44:b7:09:36:82: 45:fb:40:ab:63:e5:7b:84:b2:e2:b9:c6:c0:87:4f:50:2b:64: 24:e6:95:3a:09:40:8b:68:6e:77:68:c2:7d:f4:bb:2b:d9:41: 9c:6b:63:bc:a0:7b:ce:d5:d0:59:8f:b9:e8:f3:60:92:72:19: 48:ba:80:6b:c6:bd:5a:ba:55:4c:df:90:fa:57:57:f3:08:f9: c4:36:da:79:71:88:7d:16:d1:82:11:26:fb:02:bc:f9:86:f3: 61:f8:da:51:ec:92:32:4d:77:65:89:d6:9a:1b:06:1a:02:43: 66:2f:f7:ac:f2:37:c8:4b:27:e9:87:4b:ff:8a:b9:79:31:90: a8:86:c2:ac:ee:f6:42:9e:fb:ba:80:91:78:b4:06:99:7e:bc: 79:f2:35:53:20:22:01:cd:cb:ca:29:06:3e:91:b4:4f:7b:90: aa:45:d9:f1:d7:0f:33:aa:0c:93:5b:de:9d:21:4c:0e:b4:ca: 96:72:7d:ff:2c:33:14:43:0e:eb:aa:0e:f9:56:38:b5:79:fd: 9a:a5:d4:e7:b0:c4:20:04:aa:f2:9a:01:67:3e:5f:37:fc:00: b8:ef:79:c3 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAjkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFGMDIxMTAvBgNVBAUTKDE4Q0QyNkYyRjVENDQ0QjcyMEM0NTJBOEM2QzkyMEM2 RDBBNjE4MDUwHhcNMjUxMjAyMTcxODEzWhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDNhZi1lM2M5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7UgIFRmr6SU93hoQq6GFug4bJkG6wNG4nwWYKAdwiqfTwl41w+1RqWfXFqd2 l7C2sROdK/EKfLSp7rqqF5ckUKPdWto0lJlt/+hp7UCdqIrxNh/pZxpvj7+0xEzJ 9k8q6yVUi5MbEBh84ybXtm8zWBo8RSRmMI1PFyrQsYTASPxlUVEI3Exi6cAaehxv 8SeV7QMhXfY/31crPw6vM/01O0dTkNQIaaYFiq5zj4C+faq1xsrmF7YtZ4731VIN w56v985vKDSKhOFkYhpJgEAK80epgIS1HeWN/u7wpxwG4wRWFroKt0IjpV++FbYR SR5mpysuUUEMyYN7DydnGZI/bQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJY+H9ov K/AfjcXLgC8AMK+VWfR/MB8GA1UdIwQYMBaAFBjNJvL11ES3IMRSqMbJIMbQphgF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUYwMi8yNjFGMzREOEMx RjcxMUVEQjQyNjc0N0JDNEY5QUUwMi9HTTBtOHZYVVJMY2d4RktveHNrZ3h0Q21H QVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0dNMG04dlhVUkxjZ3hGS294c2tneHRDbUdBVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFGMDIvMjYxRjM0RDhDMUY3MTFFREI0MjY3NDdCQzRGOUFFMDIvNjVBNDIyQThD M0Y0MTFFRUIxMTkxNjU0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAwCmqMA0GCSqGSIb3DQEBCwUAA4IBAQB1/CD65TyGOUOgQfucC8MZ W4ct9+H5mK2Am42YvQsXRLcJNoJF+0CrY+V7hLLiucbAh09QK2Qk5pU6CUCLaG53 aMJ99Lsr2UGca2O8oHvO1dBZj7no82CSchlIuoBrxr1aulVM35D6V1fzCPnENtp5 cYh9FtGCESb7Arz5hvNh+NpR7JIyTXdlidaaGwYaAkNmL/es8jfISyfph0v/irl5 MZCohsKs7vZCnvu6gJF4tAaZfrx58jVTICIBzcvKKQY+kbRPe5CqRdnx1w8zqgyT W96dIUwOtMqWcn3/LDMUQw7rqg75Vji1ef2apdTnsMQgBKrymgFnPl83/AC473nD -----END CERTIFICATE-----Generated at Mon Mar 2 06:00:39 2026 by rpki-client