$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/4988E222A5FF11F08004B67CC4F9AE02.roa File: 4988E222A5FF11F08004B67CC4F9AE02.roa (raw, json) Hash identifier: G9FNuAU8h0eYcNdJ/v+kuiqEGbw+uC7kAoaWzDV1Tvw= Subject key identifier: D9:19:90:A9:BA:1A:C4:28:E5:68:A0:06:2F:A8:9F:92:D8:3C:AB:A6 Certificate issuer: /CN=A91E3493/serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Certificate serial: 6D Authority key identifier: 31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/4988E222A5FF11F08004B67CC4F9AE02.roa Signing time: Sun 01 Mar 2026 16:50:10 +0000 ROA not before: Tue 18 Nov 2025 22:44:56 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 53766 IP address blocks: 152.65.192.0/18 maxlen: 21 152.65.192.0/19 maxlen: 24 152.65.224.0/20 maxlen: 24 152.65.240.0/21 maxlen: 24 152.65.248.0/22 maxlen: 24 199.247.160.0/20 maxlen: 24 207.66.112.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:31:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 109 (0x6d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3493, serialNumber=31311CFCC1401BD6D0E6B6B39167B65C21092114 Validity Not Before: Nov 18 22:44:56 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a46e42-f09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:7e:f6:61:d4:4f:f1:9b:51:ba:0e:9f:d8:71: d1:10:e9:42:08:97:01:f5:df:b6:be:56:06:77:75: 71:4d:49:5f:27:28:28:9a:32:53:3e:f8:4c:ea:3b: 13:24:81:a6:90:1a:6f:db:a6:2f:0f:ec:36:1b:41: 14:c6:18:6a:60:bd:9e:ba:7f:e9:6c:ee:27:c7:cc: 4e:b0:93:7e:3f:7d:6e:51:f8:18:5b:13:28:e2:9d: 68:33:cb:09:33:26:67:de:9a:88:90:91:8b:c1:fe: c5:73:cd:79:90:85:64:28:63:82:64:29:7c:eb:e8: 1b:f0:78:ce:6b:ad:df:e9:cc:49:4d:1a:e8:86:68: 26:89:54:b1:a8:fa:df:11:a4:22:1d:ce:7c:72:3e: a5:7d:ba:57:30:0f:56:2c:af:2a:28:6e:7a:fb:59: 2e:0d:46:6a:81:0c:2a:9e:6c:e5:ad:22:dd:64:60: 4e:48:cd:fa:25:88:23:57:60:07:ba:84:f9:ad:1f: 87:38:e2:30:7a:e6:33:2b:ec:39:c1:78:b5:04:d0: dc:f4:ca:34:56:06:7b:e6:36:26:9d:74:6e:d0:a9: a6:73:92:f8:05:8f:6d:2e:6b:e8:de:e7:77:26:a1: d3:e0:55:aa:0b:9b:b0:52:51:4e:4e:a3:76:e0:70: b8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:19:90:A9:BA:1A:C4:28:E5:68:A0:06:2F:A8:9F:92:D8:3C:AB:A6 X509v3 Authority Key Identifier: keyid:31:31:1C:FC:C1:40:1B:D6:D0:E6:B6:B3:91:67:B6:5C:21:09:21:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/MTEc_MFAG9bQ5razkWe2XCEJIRQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MTEc_MFAG9bQ5razkWe2XCEJIRQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3493/E52C14C09FFA11F0BAD50B61C4F9AE02/4988E222A5FF11F08004B67CC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 152.65.192.0/18 199.247.160.0/20 207.66.112.0/21 Signature Algorithm: sha256WithRSAEncryption d5:1e:44:db:61:86:15:70:f2:bf:cb:b0:9a:02:33:db:97:fb: d3:5f:72:79:61:87:93:e1:b2:19:fd:0e:39:a1:4d:c6:09:81: 30:eb:43:09:15:97:1a:8d:33:6e:e1:5e:82:79:68:a7:ff:c1: 28:30:9f:eb:76:8d:11:c6:45:84:77:38:4a:65:0d:14:80:a9: a2:2b:4d:e5:ff:42:91:f8:4f:d1:e4:52:d9:a6:90:c8:ff:d7: 2c:39:dc:ba:b8:6c:1a:fd:a5:c2:1a:19:7f:9a:95:9c:7f:9a: 88:e7:76:db:c2:81:52:99:a0:29:88:a8:13:c1:54:49:7f:11: ce:ee:a0:ed:32:c5:ea:d6:95:80:10:a7:11:55:38:4e:e8:2a: 92:5d:e4:3c:c7:bc:bb:84:a5:a8:12:9f:03:fb:50:e3:43:80: a9:62:a4:6a:cd:47:2f:92:0e:44:90:99:f3:94:bb:00:45:ca: 68:c4:75:c2:68:56:08:ac:89:43:f4:4f:33:2a:09:8c:29:61: 61:44:9e:24:a1:9b:ad:6d:1f:47:cc:e8:b0:9e:65:6f:95:61: a0:b9:88:90:43:8e:f4:41:48:7d:cd:e7:7a:41:10:87:c4:1c: 6b:63:27:1c:11:36:20:0c:c7:a8:1a:86:e1:aa:56:5f:f4:59: 4f:ca:62:26 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgIBbTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MzQ5MzExMC8GA1UEBRMoMzEzMTFDRkNDMTQwMUJENkQwRTZCNkIzOTE2N0I2NUMy MTA5MjExNDAeFw0yNTExMTgyMjQ0NTZaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTQ2ZTQyLWYwOWUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC2fvZh1E/xm1G6Dp/YcdEQ6UIIlwH137a+VgZ3dXFNSV8nKCiaMlM++EzqOxMk gaaQGm/bpi8P7DYbQRTGGGpgvZ66f+ls7ifHzE6wk34/fW5R+BhbEyjinWgzywkz JmfemoiQkYvB/sVzzXmQhWQoY4JkKXzr6BvweM5rrd/pzElNGuiGaCaJVLGo+t8R pCIdznxyPqV9ulcwD1Ysryoobnr7WS4NRmqBDCqebOWtIt1kYE5IzfoliCNXYAe6 hPmtH4c44jB65jMr7DnBeLUE0Nz0yjRWBnvmNiaddG7QqaZzkvgFj20ua+je53cm odPgVaoLm7BSUU5Oo3bgcLjDAgMBAAGjggJsMIICaDAdBgNVHQ4EFgQU2RmQqboa xCjlaKAGL6ifktg8q6YwHwYDVR0jBBgwFoAUMTEc/MFAG9bQ5razkWe2XCEJIRQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzNDkzL0U1MkMxNEMwOUZG QTExRjBCQUQ1MEI2MUM0RjlBRTAyL01URWNfTUZBRzliUTVyYXprV2UyWENFSklS US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVRFY19NRkFHOWJRNXJhemtXZTJYQ0VKSVJRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MzQ5My9FNTJDMTRDMDlGRkExMUYwQkFENTBCNjFDNEY5QUUwMi80OTg4RTIyMkE1 RkYxMUYwODAwNEI2N0NDNEY5QUUwMi5yb2EwKwYIKwYBBQUHAQcBAf8EHDAaMBgE AgABMBIDBAaYQcADBATH96ADBAPPQnAwDQYJKoZIhvcNAQELBQADggEBANUeRNth hhVw8r/LsJoCM9uX+9Nfcnlhh5Phshn9DjmhTcYJgTDrQwkVlxqNM27hXoJ5aKf/ wSgwn+t2jRHGRYR3OEplDRSAqaIrTeX/QpH4T9HkUtmmkMj/1yw53Lq4bBr9pcIa GX+alZx/mojndtvCgVKZoCmIqBPBVEl/Ec7uoO0yxerWlYAQpxFVOE7oKpJd5DzH vLuEpagSnwP7UONDgKlipGrNRy+SDkSQmfOUuwBFymjEdcJoVgisiUP0TzMqCYwp YWFEniShm61tH0fM6LCeZW+VYaC5iJBDjvRBSH3N53pBEIfEHGtjJxwRNiAMx6ga huGqVl/0WU/KYiY= -----END CERTIFICATE-----Generated at Mon Mar 2 08:16:31 2026 by rpki-client