$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/1E008B864B7411F09B3DF33BC4F9AE02.roa File: 1E008B864B7411F09B3DF33BC4F9AE02.roa (raw, json) Hash identifier: /zMdVLhGNollmYFXdF4G2YH+XX/SiRIlk1GXQ7DqDSs= Subject key identifier: 96:EB:F6:DB:95:C7:A9:D6:F8:B3:6A:4F:3F:56:D8:85:51:C3:4B:19 Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Certificate serial: 85 Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/1E008B864B7411F09B3DF33BC4F9AE02.roa Signing time: Sun 01 Mar 2026 07:08:35 +0000 ROA not before: Tue 17 Jun 2025 12:10:54 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 153935 IP address blocks: 165.99.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 08:56:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Validity Not Before: Jun 17 12:10:54 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a3e5f3-d532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:28:31:1e:04:80:11:41:ff:c0:f1:a6:f2:fd: c2:08:73:90:17:55:56:61:b0:80:19:68:57:6a:0d: e9:ee:32:26:1e:a4:a4:7b:8e:1f:88:b2:58:f0:2c: a9:e4:3e:5f:fa:bc:3a:3c:c5:4b:41:d9:85:63:43: 1c:c3:b3:8a:fd:52:33:54:eb:01:89:c6:87:57:68: 08:81:94:4e:64:4f:7c:73:b2:6c:29:3b:26:67:b9: 3b:c4:09:06:45:15:a7:e3:82:6d:34:70:44:17:8e: c3:ff:39:b6:a4:52:ec:64:e9:d3:47:bc:59:e0:14: f9:58:b4:68:cf:6e:af:41:6e:8f:37:5e:2a:f1:82: ff:d1:3f:e1:01:42:44:5d:17:c6:38:46:69:a3:1e: e5:31:f4:0d:46:73:0a:82:1a:f6:96:18:34:66:ac: 05:e6:3b:dd:43:98:d1:9b:bb:4b:27:ac:06:57:5f: 90:98:d6:7c:a9:a6:fd:4f:80:3e:5a:6c:9f:4f:38: f7:7f:9a:0a:8c:b5:e6:d2:56:55:1e:42:e9:ea:e0: 2b:bf:b1:cd:c4:7c:45:78:ec:1c:fd:d3:ed:4b:17: 71:30:38:ff:f1:51:ef:1a:34:78:b0:c9:55:00:e0: 37:b8:02:52:4d:61:1d:54:d9:66:6a:e7:58:fe:f4: c4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:EB:F6:DB:95:C7:A9:D6:F8:B3:6A:4F:3F:56:D8:85:51:C3:4B:19 X509v3 Authority Key Identifier: keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/1E008B864B7411F09B3DF33BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.196.0/23 Signature Algorithm: sha256WithRSAEncryption a9:fd:ac:55:1c:24:30:4a:4d:b2:98:d4:25:4e:fc:f3:bb:72: 95:23:32:72:65:a3:1a:32:ed:96:fc:dd:f4:51:34:c4:0d:cc: 76:8c:88:31:aa:6a:64:15:17:93:f0:27:e2:36:19:ee:d8:72: ad:df:34:40:c9:1c:c7:57:2a:76:76:e1:72:81:8b:0c:48:c7: 5d:44:c2:54:c9:cb:86:a7:78:7c:9c:2c:8c:0a:66:a6:d9:6f: 3e:74:b3:1b:52:d3:18:96:83:98:81:e1:2e:dc:04:02:e7:f3: 9f:19:95:dc:fa:6a:b3:96:53:48:f0:df:2a:1a:7e:0f:6e:70: 1e:c9:9d:c7:c4:49:eb:19:36:f1:46:86:7f:5a:b6:cc:50:d7: 9b:cf:31:00:8a:a0:5b:ba:ff:ab:93:a1:df:2c:79:da:41:b7: 75:cc:75:be:b8:3f:4a:f8:df:83:85:a2:b9:1b:fc:4f:55:8d: bc:b7:95:c1:8d:81:28:17:76:a0:3c:7f:fd:8f:4a:1e:f5:bf: 7a:f9:b9:af:3a:0f:64:3e:9a:8c:f4:da:3d:6d:71:be:78:79: b3:68:31:e3:36:12:62:2a:42:9a:4b:ac:13:65:51:d3:f9:c7: 03:43:db:99:10:2e:0d:fe:54:2c:5e:8b:7e:05:7b:6d:50:84: 7b:6f:03:41 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNFODAxMTAvBgNVBAUTKDlBNTg3RTRFQ0Y2OEVDNzcyOUQ4REU0MzVGRkRBQURD RUE1QjQ5MzkwHhcNMjUwNjE3MTIxMDU0WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZTVmMy1kNTMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzSgxHgSAEUH/wPGm8v3CCHOQF1VWYbCAGWhXag3p7jImHqSke44fiLJY8Cyp 5D5f+rw6PMVLQdmFY0Mcw7OK/VIzVOsBicaHV2gIgZROZE98c7JsKTsmZ7k7xAkG RRWn44JtNHBEF47D/zm2pFLsZOnTR7xZ4BT5WLRoz26vQW6PN14q8YL/0T/hAUJE XRfGOEZpox7lMfQNRnMKghr2lhg0ZqwF5jvdQ5jRm7tLJ6wGV1+QmNZ8qab9T4A+ WmyfTzj3f5oKjLXm0lZVHkLp6uArv7HNxHxFeOwc/dPtSxdxMDj/8VHvGjR4sMlV AOA3uAJSTWEdVNlmaudY/vTE+QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJbr9tuV x6nW+LNqTz9W2IVRw0sZMB8GA1UdIwQYMBaAFJpYfk7PaOx3KdjeQ1/9qtzqW0k5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0U4MC8zNTQzM0YyMjRC NjYxMUYwQjg4NTI0MzlDNEY5QUUwMi9tbGgtVHM5bzdIY3AyTjVEWF8ycTNPcGJT VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21saC1UczlvN0hjcDJONURYXzJxM09wYlNUay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNFODAvMzU0MzNGMjI0QjY2MTFGMEI4ODUyNDM5QzRGOUFFMDIvMUUwMDhCODY0 Qjc0MTFGMDlCM0RGMzNCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWPEMA0GCSqGSIb3DQEBCwUAA4IBAQCp/axVHCQwSk2ymNQlTvzz u3KVIzJyZaMaMu2W/N30UTTEDcx2jIgxqmpkFReT8CfiNhnu2HKt3zRAyRzHVyp2 duFygYsMSMddRMJUycuGp3h8nCyMCmam2W8+dLMbUtMYloOYgeEu3AQC5/OfGZXc +mqzllNI8N8qGn4PbnAeyZ3HxEnrGTbxRoZ/WrbMUNebzzEAiqBbuv+rk6HfLHna Qbd1zHW+uD9K+N+DhaK5G/xPVY28t5XBjYEoF3agPH/9j0oe9b96+bmvOg9kPpqM 9No9bXG+eHmzaDHjNhJiKkKaS6wTZVHT+ccDQ9uZEC4N/lQsXot+BXttUIR7bwNB -----END CERTIFICATE-----Generated at Mon Mar 2 17:07:30 2026 by rpki-client