$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/CAA5A90CC47811F0833DFF5DC4F9AE02.roa File: CAA5A90CC47811F0833DFF5DC4F9AE02.roa (raw, json) Hash identifier: H8pE2g5ZUOoAMl+wWqQ1EZjDZWZf77Qbks8/czGrNQ0= Subject key identifier: D7:18:07:CA:F9:C5:39:DD:0A:F8:69:6E:F3:77:3D:BD:E7:76:BC:9E Certificate issuer: /CN=A91E1BB0/serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898 Certificate serial: 37 Authority key identifier: 17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/CAA5A90CC47811F0833DFF5DC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:00:49 +0000 ROA not before: Tue 18 Nov 2025 12:19:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153351 IP address blocks: 160.187.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 09:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55 (0x37) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1BB0, serialNumber=17A2365B640ADAB2034339E1E5FF344E478B5898 Validity Not Before: Nov 18 12:19:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a3d611-aefe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0c:5c:46:20:ed:fc:83:3f:06:c4:f2:4e:64: 42:4d:f5:d1:cb:a0:d4:a7:c4:f7:2f:24:62:93:99: 5d:af:d3:a3:50:8c:4d:0d:d9:d3:bf:d6:99:90:e9: 41:63:87:a0:e7:d6:0d:c6:98:a1:0c:b0:86:80:ce: 88:a7:82:f2:70:07:fe:57:e1:36:1c:5d:cc:9a:62: 91:c1:71:7a:2c:7f:48:cb:4b:8e:74:05:d8:b6:41: 2b:ba:ca:f2:2c:11:21:12:35:31:61:d3:b5:57:db: 79:9e:75:78:ba:b8:04:98:9a:93:d6:15:7b:58:26: ac:81:01:c5:bb:bf:70:5b:d2:3f:73:85:4e:39:bc: 9a:31:bc:61:86:02:47:34:1b:8a:3e:52:ec:51:8b: d3:3f:ed:ec:e9:e2:04:8a:68:f4:43:56:c5:4a:bf: 35:0b:c4:35:05:6e:28:13:0b:50:eb:37:53:67:2a: 7d:4d:c2:b9:0c:9e:42:1f:c0:b7:7c:33:53:7a:ed: 2c:18:37:cb:d7:af:a0:22:84:fe:4c:f5:2c:bd:2b: d2:2b:fe:ba:bb:e1:88:9f:0d:4c:66:ca:04:d7:3f: 00:49:ec:fd:da:a2:c7:88:1f:0e:aa:64:19:52:cc: 95:40:b4:c6:94:3a:fc:e7:43:50:3c:8b:30:ee:b5: 0e:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:18:07:CA:F9:C5:39:DD:0A:F8:69:6E:F3:77:3D:BD:E7:76:BC:9E X509v3 Authority Key Identifier: keyid:17:A2:36:5B:64:0A:DA:B2:03:43:39:E1:E5:FF:34:4E:47:8B:58:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/F6I2W2QK2rIDQznh5f80TkeLWJg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F6I2W2QK2rIDQznh5f80TkeLWJg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BB0/53EDB4D0C47811F085385025C4F9AE02/CAA5A90CC47811F0833DFF5DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.187.215.0/24 Signature Algorithm: sha256WithRSAEncryption 2e:c1:6c:68:0a:84:08:cc:66:9f:a0:5d:0b:53:61:01:15:47: 3f:a1:81:14:db:d3:61:c3:6f:57:16:89:a5:ce:9e:20:5e:bb: 83:84:6c:18:51:13:9f:cf:ff:8e:2f:58:f7:37:70:6f:f7:a2: 84:24:df:84:55:9f:ab:fd:47:38:b5:96:78:c7:75:49:e6:76: f8:22:d4:89:fc:49:68:1e:af:b9:17:2c:47:5a:9d:53:fb:d8: 84:d4:79:a6:14:b9:ed:a7:85:77:96:8b:e2:5c:75:d8:1a:54: 6c:49:7d:0a:3e:5f:a5:2e:bf:ff:af:26:fc:a7:7b:98:27:b8: 9c:1b:b4:e2:be:67:12:88:94:27:0c:f7:03:61:5d:47:8b:08: 35:fe:a5:37:92:77:d2:7f:a9:4f:6e:94:fc:ba:55:c5:5e:5d: 7f:f8:e3:86:27:b2:27:67:c7:dd:fa:c1:02:3a:33:86:98:ff: 66:ec:9c:26:80:83:dc:02:3d:07:7e:fc:c2:dd:a8:24:57:25: 46:20:37:6c:f0:d6:c6:cc:a6:ee:ba:bf:95:e9:07:ea:5c:5d: 8f:ae:8a:a4:cd:54:73:f5:28:c2:e7:82:b3:fc:84:96:cf:22: fb:3e:17:3b:81:c8:4b:35:c6:94:33:0f:ab:27:61:9c:65:10: 84:21:07:b9 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBNzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUJCMDExMC8GA1UEBRMoMTdBMjM2NUI2NDBBREFCMjAzNDMzOUUxRTVGRjM0NEU0 NzhCNTg5ODAeFw0yNTExMTgxMjE5MTJaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkNjExLWFlZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDiDFxGIO38gz8GxPJOZEJN9dHLoNSnxPcvJGKTmV2v06NQjE0N2dO/1pmQ6UFj h6Dn1g3GmKEMsIaAzoingvJwB/5X4TYcXcyaYpHBcXosf0jLS450Bdi2QSu6yvIs ESESNTFh07VX23medXi6uASYmpPWFXtYJqyBAcW7v3Bb0j9zhU45vJoxvGGGAkc0 G4o+UuxRi9M/7ezp4gSKaPRDVsVKvzULxDUFbigTC1DrN1NnKn1NwrkMnkIfwLd8 M1N67SwYN8vXr6AihP5M9Sy9K9Ir/rq74YifDUxmygTXPwBJ7P3aoseIHw6qZBlS zJVAtMaUOvznQ1A8izDutQ4BAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU1xgHyvnF Od0K+Glu83c9ved2vJ4wHwYDVR0jBBgwFoAUF6I2W2QK2rIDQznh5f80TkeLWJgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxQkIwLzUzRURCNEQwQzQ3 ODExRjA4NTM4NTAyNUM0RjlBRTAyL0Y2STJXMlFLMnJJRFF6bmg1ZjgwVGtlTFdK Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjZJMlcyUUsycklEUXpuaDVmODBUa2VMV0pnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUJCMC81M0VEQjREMEM0NzgxMUYwODUzODUwMjVDNEY5QUUwMi9DQUE1QTkwQ0M0 NzgxMUYwODMzREZGNURDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACgu9cwDQYJKoZIhvcNAQELBQADggEBAC7BbGgKhAjMZp+gXQtTYQEV Rz+hgRTb02HDb1cWiaXOniBeu4OEbBhRE5/P/44vWPc3cG/3ooQk34RVn6v9Rzi1 lnjHdUnmdvgi1In8SWger7kXLEdanVP72ITUeaYUue2nhXeWi+JcddgaVGxJfQo+ X6Uuv/+vJvyne5gnuJwbtOK+ZxKIlCcM9wNhXUeLCDX+pTeSd9J/qU9ulPy6VcVe XX/444Ynsidnx936wQI6M4aY/2bsnCaAg9wCPQd+/MLdqCRXJUYgN2zw1sbMpu66 v5XpB+pcXY+uiqTNVHP1KMLngrP8hJbPIvs+FzuByEs1xpQzD6snYZxlEIQhB7k= -----END CERTIFICATE-----Generated at Mon Mar 2 18:09:31 2026 by rpki-client