$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/81E4D4A2053011F09C73001FC4F9AE02.roa File: 81E4D4A2053011F09C73001FC4F9AE02.roa (raw, json) Hash identifier: DA85ff4aMzWQg5AImUfIHcT74CRXr+XSDwxZJMl53Eg= Subject key identifier: 29:E6:A4:5A:1B:51:FA:BA:3C:62:E9:18:10:94:6C:D3:E6:9F:B2:FA Certificate issuer: /CN=A91C1621/serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Certificate serial: E3 Authority key identifier: A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/81E4D4A2053011F09C73001FC4F9AE02.roa Signing time: Sun 01 Mar 2026 15:25:30 +0000 ROA not before: Tue 28 Oct 2025 14:30:04 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 38218 IP address blocks: 161.248.150.0/24 maxlen: 24 161.248.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 227 (0xe3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1621, serialNumber=A027195A4820F3D7264A4D57EE9A9D4C2A10C923 Validity Not Before: Oct 28 14:30:04 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a45a6a-de05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a7:90:9b:94:a6:df:47:ad:3a:3b:5d:bf:bc: 16:4a:48:9a:0e:5e:29:61:75:ff:9b:c2:12:34:7d: 6f:43:76:b5:55:b8:9e:7c:f5:08:8f:00:77:e7:11: 8f:17:8d:3e:84:ca:30:11:37:df:2b:1e:fb:31:d5: 31:b0:a5:3b:df:e1:93:9a:29:87:81:64:7b:8f:67: 91:fc:24:52:35:64:e0:ef:31:bf:59:42:3b:65:2c: b4:a1:47:97:15:3b:a8:27:aa:0a:d9:c7:67:32:74: 08:50:f8:94:88:56:f9:b7:ec:1f:e1:81:c1:f6:9a: 61:ab:5f:43:19:fe:73:42:e4:a7:0d:06:05:8e:6f: ec:46:a0:24:0e:34:da:7c:e2:3c:0b:1b:f5:19:37: 22:2f:40:c7:b3:99:9e:6f:d8:04:02:61:96:5a:fe: 3d:62:51:0a:fc:26:51:79:b0:a5:42:0b:f3:9c:be: 54:6c:aa:5a:1f:f2:d3:cc:39:0f:80:70:1b:52:86: e5:b7:aa:16:e3:61:5a:80:8c:57:f3:a5:72:be:5f: e5:cb:48:33:c5:0e:7f:8f:74:65:94:72:7a:41:0d: 6b:d0:44:bf:8e:e0:6c:52:d0:6b:65:68:99:fd:38: a3:bf:e6:2b:2c:34:84:c5:38:ab:3e:ed:02:ed:0b: 0f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:E6:A4:5A:1B:51:FA:BA:3C:62:E9:18:10:94:6C:D3:E6:9F:B2:FA X509v3 Authority Key Identifier: keyid:A0:27:19:5A:48:20:F3:D7:26:4A:4D:57:EE:9A:9D:4C:2A:10:C9:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/oCcZWkgg89cmSk1X7pqdTCoQySM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/oCcZWkgg89cmSk1X7pqdTCoQySM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/35EDA92ECF0D11EF92F1EC36C4F9AE02/81E4D4A2053011F09C73001FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.150.0/23 Signature Algorithm: sha256WithRSAEncryption 17:3f:3c:e0:8c:f1:46:82:1e:61:27:94:44:aa:93:36:4a:ba: 4c:02:61:6b:cd:ac:ad:31:97:6d:80:8d:a4:a0:8c:39:3a:f8: 93:54:d1:fb:8c:0e:a4:11:8b:8a:f5:07:7d:54:be:38:24:be: 20:0b:06:2e:f2:c3:36:a3:01:e9:0a:13:c0:13:f3:ad:a5:23: 0e:f9:53:5f:ec:f4:90:93:ce:7f:b5:e3:59:46:d4:27:a8:a9: ab:d2:cb:7a:e9:d2:49:44:7b:24:c3:cf:0e:96:04:1d:84:8f: c5:39:f4:82:97:eb:0c:14:f8:b7:d6:18:e7:2b:d5:d6:a5:56: cc:11:ad:8b:87:d9:6e:7c:db:0d:6d:5c:f8:ac:cf:43:e1:11: 1e:ab:85:1d:69:45:83:88:75:a7:da:a4:07:a5:e1:fc:32:b8: 77:05:03:69:43:05:21:1d:1e:91:6c:64:32:7e:fe:95:d2:45: 92:9c:e2:20:04:75:63:8d:dc:bc:a6:a5:96:ff:c5:a8:45:ee: 6e:97:e5:64:7b:ca:f0:2f:cf:73:c0:38:91:c8:98:3f:6e:4b: 4c:fd:b4:48:e4:3c:12:43:c5:46:e5:05:d1:a8:20:c4:d3:b9: 51:de:60:6a:bf:62:32:c2:c1:ec:2f:78:ec:e5:68:8d:02:7f: 4f:88:d1:f4 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzE2MjExMTAvBgNVBAUTKEEwMjcxOTVBNDgyMEYzRDcyNjRBNEQ1N0VFOUE5RDRD MkExMEM5MjMwHhcNMjUxMDI4MTQzMDA0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWE2YS1kZTA1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6eQm5Sm30etOjtdv7wWSkiaDl4pYXX/m8ISNH1vQ3a1VbiefPUIjwB35xGP F40+hMowETffKx77MdUxsKU73+GTmimHgWR7j2eR/CRSNWTg7zG/WUI7ZSy0oUeX FTuoJ6oK2cdnMnQIUPiUiFb5t+wf4YHB9pphq19DGf5zQuSnDQYFjm/sRqAkDjTa fOI8Cxv1GTciL0DHs5meb9gEAmGWWv49YlEK/CZRebClQgvznL5UbKpaH/LTzDkP gHAbUoblt6oW42FagIxX86Vyvl/ly0gzxQ5/j3RllHJ6QQ1r0ES/juBsUtBrZWiZ /Tijv+YrLDSExTirPu0C7QsPpQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCnmpFob Ufq6PGLpGBCUbNPmn7L6MB8GA1UdIwQYMBaAFKAnGVpIIPPXJkpNV+6anUwqEMkj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTYyMS8zNUVEQTkyRUNG MEQxMUVGOTJGMUVDMzZDNEY5QUUwMi9vQ2NaV2tnZzg5Y21TazFYN3BxZFRDb1F5 U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL29DY1pXa2dnODljbVNrMVg3cHFkVENvUXlTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzE2MjEvMzVFREE5MkVDRjBEMTFFRjkyRjFFQzM2QzRGOUFFMDIvODFFNEQ0QTIw NTMwMTFGMDlDNzMwMDFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofiWMA0GCSqGSIb3DQEBCwUAA4IBAQAXPzzgjPFGgh5hJ5REqpM2 SrpMAmFrzaytMZdtgI2koIw5OviTVNH7jA6kEYuK9Qd9VL44JL4gCwYu8sM2owHp ChPAE/OtpSMO+VNf7PSQk85/teNZRtQnqKmr0st66dJJRHskw88OlgQdhI/FOfSC l+sMFPi31hjnK9XWpVbMEa2Lh9lufNsNbVz4rM9D4REeq4UdaUWDiHWn2qQHpeH8 Mrh3BQNpQwUhHR6RbGQyfv6V0kWSnOIgBHVjjdy8pqWW/8WoRe5ul+Vke8rwL89z wDiRyJg/bktM/bRI5DwSQ8VG5QXRqCDE07lR3mBqv2IywsHsL3js5WiNAn9PiNH0 -----END CERTIFICATE-----Generated at Mon Mar 2 03:48:56 2026 by rpki-client