$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/1F4E1CC014D311EA81309110C4F9AE02.roa File: 1F4E1CC014D311EA81309110C4F9AE02.roa (raw, json) Hash identifier: onq3kLqhAx1MRzvzSd2yOhdRNFOh2mwuifP1Le+Ju0M= Subject key identifier: 8A:62:86:9B:27:77:9D:C9:BF:FD:32:92:E8:50:49:5C:8A:75:0D:7A Certificate issuer: /CN=A91CFFA0/serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Certificate serial: 0DED Authority key identifier: 05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/1F4E1CC014D311EA81309110C4F9AE02.roa Signing time: Sun 01 Mar 2026 17:09:40 +0000 ROA not before: Wed 14 Jan 2026 18:14:52 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 17744 IP address blocks: 134.159.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 22:56:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3565 (0xded) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFA0, serialNumber=05433C3AEA8A49702C9A82EEC95D16B5503CEA60 Validity Not Before: Jan 14 18:14:52 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a472d4-acab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:08:a5:f3:fd:72:de:ff:b5:08:57:ab:93:18: e1:71:87:3a:75:1b:8b:2d:d9:40:cd:55:44:b1:82: a7:11:fb:a0:8e:69:b9:ec:bd:0e:07:0d:75:84:80: ab:a6:27:e4:f0:5f:62:ad:29:1e:7d:a4:db:70:c7: ae:d3:32:39:a6:c2:32:dc:2f:92:33:51:09:82:02: 04:c9:1d:9e:77:98:82:3b:f7:09:74:10:a0:45:4a: 8d:80:bf:8c:41:2f:8a:5f:d1:83:d1:a6:51:b6:38: 8e:c3:7d:f5:e0:18:c4:92:42:b6:63:55:64:b3:a6: 89:c8:5c:a6:4b:69:b9:3a:32:cb:3a:d1:a9:12:3f: cc:c7:ff:f4:85:3a:43:aa:df:4d:b6:f9:6b:c7:51: 29:53:5e:d5:c4:96:f3:d9:e8:17:55:37:f1:2c:4d: 2f:33:16:29:ac:cc:78:50:40:93:ad:d0:75:4f:2c: a9:72:10:ba:ee:5a:18:f1:76:b3:39:43:2b:3d:e1: 15:d2:01:e0:21:4b:51:4a:c9:7f:30:3d:76:17:c5: f1:bf:19:35:6b:87:60:d8:22:da:a7:29:03:40:ec: 8a:d0:79:02:af:a6:7b:50:f3:4e:0f:ac:b4:f6:ca: ca:3d:36:8f:aa:e6:ef:8f:70:ac:85:fe:c3:30:00: 35:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:62:86:9B:27:77:9D:C9:BF:FD:32:92:E8:50:49:5C:8A:75:0D:7A X509v3 Authority Key Identifier: keyid:05:43:3C:3A:EA:8A:49:70:2C:9A:82:EE:C9:5D:16:B5:50:3C:EA:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/BUM8OuqKSXAsmoLuyV0WtVA86mA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BUM8OuqKSXAsmoLuyV0WtVA86mA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFA0/150BF690D8CB11E9BAE24D21C4F9AE02/1F4E1CC014D311EA81309110C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 134.159.177.0/24 Signature Algorithm: sha256WithRSAEncryption 81:15:95:4a:6f:fe:e6:c0:91:73:66:26:38:c0:50:a0:a3:6d: 84:d0:b9:5d:7a:fa:83:db:a7:52:54:43:13:05:1f:7e:42:34: 11:2c:48:6e:ab:6b:b7:dc:d8:3c:3e:d9:76:9e:36:87:f4:17: 3e:f2:08:c5:7a:75:e1:41:01:5c:df:4d:f8:7b:77:0e:7e:8a: bd:29:4f:00:af:54:6c:03:35:ca:ee:5a:16:3b:db:da:ee:13: 72:20:4f:16:e4:e1:a8:4e:07:be:b1:c4:38:9e:64:c9:3f:47: 30:75:52:37:33:81:54:9f:01:6d:cb:18:02:ec:9c:4d:57:68: 01:65:e4:4f:53:7c:07:38:72:b3:28:2f:f9:31:7a:a8:be:36: c9:44:fe:6a:2c:6d:73:e1:ac:b1:b0:65:87:c8:e4:0b:b9:a1: 55:63:b2:6a:49:38:78:d0:e4:c8:07:58:6f:c1:ab:bf:7c:3a: 88:6b:05:10:a3:b0:d7:da:85:cf:de:7f:99:29:e4:3d:71:cf: 6f:cc:a2:b1:db:dd:4b:10:89:1b:04:f6:ac:8c:7e:8c:53:b9: 1b:98:32:1e:47:09:97:91:91:67:04:38:ad:bc:0a:6e:9a:12: d4:0e:e9:f5:9c:f1:9b:e5:ed:37:74:47:dc:93:af:f6:c7:9c: ab:14:d9:57 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDe0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGQTAxMTAvBgNVBAUTKDA1NDMzQzNBRUE4QTQ5NzAyQzlBODJFRUM5NUQxNkI1 NTAzQ0VBNjAwHhcNMjYwMTE0MTgxNDUyWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzJkNC1hY2FiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Qil8/1y3v+1CFerkxjhcYc6dRuLLdlAzVVEsYKnEfugjmm57L0OBw11hICr pifk8F9irSkefaTbcMeu0zI5psIy3C+SM1EJggIEyR2ed5iCO/cJdBCgRUqNgL+M QS+KX9GD0aZRtjiOw3314BjEkkK2Y1Vks6aJyFymS2m5OjLLOtGpEj/Mx//0hTpD qt9Ntvlrx1EpU17VxJbz2egXVTfxLE0vMxYprMx4UECTrdB1TyypchC67loY8Xaz OUMrPeEV0gHgIUtRSsl/MD12F8Xxvxk1a4dg2CLapykDQOyK0HkCr6Z7UPNOD6y0 9srKPTaPqubvj3Cshf7DMAA1lQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIpihpsn d53Jv/0ykuhQSVyKdQ16MB8GA1UdIwQYMBaAFAVDPDrqiklwLJqC7sldFrVQPOpg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZBMC8xNTBCRjY5MEQ4 Q0IxMUU5QkFFMjREMjFDNEY5QUUwMi9CVU04T3VxS1NYQXNtb0x1eVYwV3RWQTg2 bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JVTThPdXFLU1hBc21vTHV5VjBXdFZBODZtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGQTAvMTUwQkY2OTBEOENCMTFFOUJBRTI0RDIxQzRGOUFFMDIvMUY0RTFDQzAx NEQzMTFFQTgxMzA5MTEwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAhp+xMA0GCSqGSIb3DQEBCwUAA4IBAQCBFZVKb/7mwJFzZiY4wFCg o22E0LldevqD26dSVEMTBR9+QjQRLEhuq2u33Ng8Ptl2njaH9Bc+8gjFenXhQQFc 3034e3cOfoq9KU8Ar1RsAzXK7loWO9va7hNyIE8W5OGoTge+scQ4nmTJP0cwdVI3 M4FUnwFtyxgC7JxNV2gBZeRPU3wHOHKzKC/5MXqovjbJRP5qLG1z4ayxsGWHyOQL uaFVY7JqSTh40OTIB1hvwau/fDqIawUQo7DX2oXP3n+ZKeQ9cc9vzKKx291LEIkb BPasjH6MU7kbmDIeRwmXkZFnBDitvApumhLUDun1nPGb5e03dEfck6/2x5yrFNlX -----END CERTIFICATE-----Generated at Mon Mar 2 18:48:42 2026 by rpki-client