$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/DFAC15B0C22C11EFB3AEE476C4F9AE02.roa File: DFAC15B0C22C11EFB3AEE476C4F9AE02.roa (raw, json) Hash identifier: SlpOf782RmBcU6vc9OruiEeR0DjviJjgOX1TVRThoh8= Subject key identifier: E0:B1:75:19:AB:2A:69:8A:8A:2B:C8:17:4B:9B:B0:25:C1:8A:82:68 Certificate issuer: /CN=A91AF207/serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Certificate serial: E1 Authority key identifier: 2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/DFAC15B0C22C11EFB3AEE476C4F9AE02.roa Signing time: Sun 01 Mar 2026 08:25:46 +0000 ROA not before: Sun 01 Mar 2026 08:25:46 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 135613 IP address blocks: 161.248.16.0/23 maxlen: 23 161.248.16.0/24 maxlen: 24 161.248.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:25:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AF207, serialNumber=2D223B56ED4D17A8178FE9FC63E3801A93B5A1D3 Validity Not Before: Mar 1 08:25:46 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a3f80a-bc31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:73:71:8d:99:eb:67:47:ca:6f:4d:92:93:ec: dc:bb:d3:66:2e:94:d2:d8:9c:d1:37:da:5b:b3:5e: 2c:62:1c:aa:16:5a:f1:5a:d9:8b:b5:ec:20:a8:e6: 90:09:75:2a:fe:19:f2:c5:d9:84:3b:ae:aa:a0:0c: d1:8a:53:b8:ab:be:29:b1:09:5d:6b:79:9d:7f:03: 66:99:29:e6:4a:c1:f1:c4:5f:81:9c:be:46:2d:a0: eb:cc:a3:c5:58:a5:17:5b:b2:43:fc:3f:ae:ad:a5: f8:52:94:2e:2f:ae:0a:6d:73:50:f5:a5:06:6f:1f: 1e:4e:1b:b8:c3:ba:e0:dd:3d:d2:7c:ad:6b:b3:9c: 6c:a4:7a:b7:49:52:8f:c7:97:5d:0e:8b:68:47:8d: 6e:20:63:fb:89:c1:26:48:ec:ba:2c:86:01:3e:4d: 6b:39:3b:14:77:c0:9f:88:41:eb:46:d2:01:44:70: f8:11:54:58:b7:58:89:34:e7:9b:bf:b2:b1:6e:60: 71:e9:60:b2:44:60:87:1d:29:37:88:42:08:1f:ba: b1:3c:94:6e:16:ac:f5:1b:61:65:d4:78:68:57:f8: 3d:9e:1e:cb:1e:04:8b:4f:45:c5:d6:71:47:92:eb: ac:c4:80:30:0f:b8:d8:99:0f:ae:3b:55:f0:93:a6: 68:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:B1:75:19:AB:2A:69:8A:8A:2B:C8:17:4B:9B:B0:25:C1:8A:82:68 X509v3 Authority Key Identifier: keyid:2D:22:3B:56:ED:4D:17:A8:17:8F:E9:FC:63:E3:80:1A:93:B5:A1:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LSI7Vu1NF6gXj-n8Y-OAGpO1odM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/ACB0685EC22811EF86E3484FC4F9AE02/DFAC15B0C22C11EFB3AEE476C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.16.0/23 Signature Algorithm: sha256WithRSAEncryption 65:aa:22:cf:ab:0c:51:9b:e1:ed:7d:c9:b8:4c:03:ca:71:df: 12:6f:70:90:42:5a:5e:8b:40:d4:69:1d:27:e4:dc:7b:c2:0c: 5a:b3:ea:8d:27:49:46:c6:d7:20:b7:e9:50:58:5b:e9:97:99: 06:7b:70:76:fc:0b:e8:09:68:41:69:45:1c:d2:fe:09:e2:fb: ac:dc:7c:61:2c:42:01:32:de:69:b5:73:bf:33:ff:7b:8f:5f: 04:44:e1:ac:79:13:09:32:b6:fa:2d:37:70:70:f3:0e:fb:78: e6:f3:c8:0e:0b:1d:88:dd:d8:58:86:02:66:1a:ed:6c:e8:f2: 71:60:c3:9e:fc:c7:6d:b3:cb:35:20:99:ff:9f:e1:64:30:0d: 8b:b2:05:c4:ac:5a:d3:66:82:3f:91:13:a6:91:73:8c:d5:64: 12:38:b0:3a:87:ce:2d:2a:14:c3:4e:c4:23:72:71:8e:9e:38: ce:84:e7:d5:59:97:fc:c1:48:35:a1:16:f9:9c:0e:78:88:5b: 8d:28:a9:29:a3:09:42:27:f5:8d:91:f9:7c:99:8d:d1:2b:3c: 18:27:ae:50:53:19:4f:c0:ab:79:d5:a2:0a:c5:f5:da:d7:fa: 5e:10:66:3d:17:2f:01:d1:ec:7c:89:46:86:96:b1:18:9e:04: 7e:49:11:c7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUYyMDcxMTAvBgNVBAUTKDJEMjIzQjU2RUQ0RDE3QTgxNzhGRTlGQzYzRTM4MDFB OTNCNUExRDMwHhcNMjYwMzAxMDgyNTQ2WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjgwYS1iYzMxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6nNxjZnrZ0fKb02Sk+zcu9NmLpTS2JzRN9pbs14sYhyqFlrxWtmLtewgqOaQ CXUq/hnyxdmEO66qoAzRilO4q74psQlda3mdfwNmmSnmSsHxxF+BnL5GLaDrzKPF WKUXW7JD/D+uraX4UpQuL64KbXNQ9aUGbx8eThu4w7rg3T3SfK1rs5xspHq3SVKP x5ddDotoR41uIGP7icEmSOy6LIYBPk1rOTsUd8CfiEHrRtIBRHD4EVRYt1iJNOeb v7KxbmBx6WCyRGCHHSk3iEIIH7qxPJRuFqz1G2Fl1HhoV/g9nh7LHgSLT0XF1nFH kuusxIAwD7jYmQ+uO1Xwk6ZoJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOCxdRmr KmmKiivIF0ubsCXBioJoMB8GA1UdIwQYMBaAFC0iO1btTReoF4/p/GPjgBqTtaHT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBRjIwNy9BQ0IwNjg1RUMy MjgxMUVGODZFMzQ4NEZDNEY5QUUwMi9MU0k3VnUxTkY2Z1hqLW44WS1PQUdwTzFv ZE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xTSTdWdTFORjZnWGotbjhZLU9BR3BPMW9kTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUYyMDcvQUNCMDY4NUVDMjI4MTFFRjg2RTM0ODRGQzRGOUFFMDIvREZBQzE1QjBD MjJDMTFFRkIzQUVFNDc2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofgQMA0GCSqGSIb3DQEBCwUAA4IBAQBlqiLPqwxRm+Htfcm4TAPK cd8Sb3CQQlpei0DUaR0n5Nx7wgxas+qNJ0lGxtcgt+lQWFvpl5kGe3B2/AvoCWhB aUUc0v4J4vus3HxhLEIBMt5ptXO/M/97j18EROGseRMJMrb6LTdwcPMO+3jm88gO Cx2I3dhYhgJmGu1s6PJxYMOe/Mdts8s1IJn/n+FkMA2LsgXErFrTZoI/kROmkXOM 1WQSOLA6h84tKhTDTsQjcnGOnjjOhOfVWZf8wUg1oRb5nA54iFuNKKkpowlCJ/WN kfl8mY3RKzwYJ65QUxlPwKt51aIKxfXa1/peEGY9Fy8B0ex8iUaGlrEYngR+SRHH -----END CERTIFICATE-----Generated at Mon Mar 2 02:12:05 2026 by rpki-client