$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/22B4D1705AF911F09FF3D30BC4F9AE02.roa File: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (raw, json) Hash identifier: CNoBDdWKHlS5zMcPnKORydFQCwgOqUzsqQv9svT1ja4= Subject key identifier: 4F:83:62:EF:10:F4:82:71:BE:9C:42:21:8F:D6:0A:E0:39:E7:0F:89 Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: D6 Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/22B4D1705AF911F09FF3D30BC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:08:58 +0000 ROA not before: Mon 07 Jul 2025 06:10:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 56194 IP address blocks: 161.248.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 14:38:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 214 (0xd6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Jul 7 06:10:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a58bea-c465 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:04:06:08:17:f4:f3:6a:62:d1:4b:71:08:23: bb:a8:76:a6:e7:09:e5:ea:d2:11:a0:a4:5b:3c:f7: 6d:fb:c8:0b:00:2d:27:34:a5:2f:81:a0:1e:70:b9: 7e:82:bf:bd:e9:79:0e:0c:f7:4d:de:7b:7a:9e:c1: 06:3a:ff:4f:58:6e:7e:2c:7c:e9:f9:1f:bf:ab:ba: 22:49:53:b3:6e:57:07:9c:ad:cb:fa:50:c7:54:a6: cd:c0:9f:31:98:49:ad:bf:f0:67:40:fe:e6:d6:b1: 78:42:b6:9e:43:72:c5:b4:f6:36:3b:ee:b9:9f:c4: 57:fb:ff:b9:0f:66:06:5a:41:cc:b1:85:e2:92:57: cf:2a:f2:7c:e7:b6:fd:51:6f:ab:f0:0f:44:3e:43: 16:a4:63:47:6b:0f:30:03:df:03:af:6c:4b:8c:da: a8:c3:15:5e:40:87:34:13:1e:18:88:b3:e0:90:cb: c9:a9:53:66:11:5d:7f:d7:da:8f:a7:88:a2:36:39: c0:d4:3e:71:7a:7e:5d:fd:ac:4d:97:6d:87:78:11: f4:75:c1:00:50:af:55:2e:42:75:83:ae:e3:fd:66: 51:3e:77:9a:21:c1:cd:f8:e6:3f:65:29:96:01:72: 75:0b:8d:f4:b0:f2:25:02:ab:4f:99:c7:74:d9:d4: 45:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:83:62:EF:10:F4:82:71:BE:9C:42:21:8F:D6:0A:E0:39:E7:0F:89 X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/22B4D1705AF911F09FF3D30BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.252.0/23 Signature Algorithm: sha256WithRSAEncryption a5:45:4e:75:01:04:40:80:fb:e1:e9:af:8d:cc:22:57:9e:41: df:0c:7b:53:85:bf:ee:ee:26:80:10:18:5a:a2:77:ca:85:8c: 31:dc:a8:54:9c:13:7a:76:a2:4b:9f:3f:c1:3f:58:66:98:7c: ea:d4:18:56:58:39:fe:3f:c3:95:e4:ca:32:81:5d:18:0b:f0: 77:b9:bb:c6:24:17:26:6a:50:db:b2:32:87:1a:82:2c:05:8b: 32:df:bd:3a:de:29:10:5d:c5:98:e5:fa:a8:9a:32:7e:38:44: 5e:e0:d7:d3:92:73:2e:fd:43:b7:28:6b:38:02:48:ac:95:cf: f5:3f:64:d9:ea:61:5e:9f:d7:a3:0b:f8:c5:bf:bb:a0:98:e0: 9a:61:90:b2:27:b6:55:c3:3c:f8:d5:11:ab:2c:c7:d8:95:51: 2f:14:4e:8c:f7:04:83:aa:35:3d:6d:f5:fc:74:e3:db:56:19: 89:bd:99:d6:7f:1c:bc:fb:15:a7:7e:fd:37:23:10:97:ee:6c: c7:58:8e:c4:df:6d:2f:06:1a:1e:2b:5a:0d:d0:a7:fb:77:f6: 59:e9:3a:e6:48:dc:de:32:46:e4:0f:22:90:a0:31:31:08:a0: eb:c2:2b:e1:54:a5:32:b8:06:fe:4c:da:3b:00:01:1e:16:21: 61:21:ca:29 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICANYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REE4OTgxMTAvBgNVBAUTKEZERTc0Q0QxNjU2RDRFQ0FGMkIwRTZCQkMzMTM1RDRF Qjg0MDc4MkIwHhcNMjUwNzA3MDYxMDUzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGJlYS1jNDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxQQGCBf082pi0UtxCCO7qHam5wnl6tIRoKRbPPdt+8gLAC0nNKUvgaAecLl+ gr+96XkODPdN3nt6nsEGOv9PWG5+LHzp+R+/q7oiSVOzblcHnK3L+lDHVKbNwJ8x mEmtv/BnQP7m1rF4QraeQ3LFtPY2O+65n8RX+/+5D2YGWkHMsYXiklfPKvJ857b9 UW+r8A9EPkMWpGNHaw8wA98Dr2xLjNqowxVeQIc0Ex4YiLPgkMvJqVNmEV1/19qP p4iiNjnA1D5xen5d/axNl22HeBH0dcEAUK9VLkJ1g67j/WZRPneaIcHN+OY/ZSmW AXJ1C430sPIlAqtPmcd02dRFgQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE+DYu8Q 9IJxvpxCIY/WCuA55w+JMB8GA1UdIwQYMBaAFP3nTNFlbU7K8rDmu8MTXU64QHgr MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQTg5OC80MDdBMjVFQUQ4 N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi9fZWRNMFdWdFRzcnlzT2E3d3hOZFRyaEFl Q3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVDcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REE4OTgvNDA3QTI1RUFEODdGMTFFRjkxQ0M1MzQ2QzRGOUFFMDIvMjJCNEQxNzA1 QUY5MTFGMDlGRjNEMzBCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofj8MA0GCSqGSIb3DQEBCwUAA4IBAQClRU51AQRAgPvh6a+NzCJX nkHfDHtThb/u7iaAEBhaonfKhYwx3KhUnBN6dqJLnz/BP1hmmHzq1BhWWDn+P8OV 5MoygV0YC/B3ubvGJBcmalDbsjKHGoIsBYsy37063ikQXcWY5fqomjJ+OERe4NfT knMu/UO3KGs4Akislc/1P2TZ6mFen9ejC/jFv7ugmOCaYZCyJ7ZVwzz41RGrLMfY lVEvFE6M9wSDqjU9bfX8dOPbVhmJvZnWfxy8+xWnfv03IxCX7mzHWI7E320vBhoe K1oN0Kf7d/ZZ6TrmSNzeMkbkDyKQoDExCKDrwivhVKUyuAb+TNo7AAEeFiFhIcop -----END CERTIFICATE-----Generated at Mon Mar 2 19:41:55 2026 by rpki-client