$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/A4CC914E9EA011F0A7B92A1EC4F9AE02.roa File: A4CC914E9EA011F0A7B92A1EC4F9AE02.roa (raw, json) Hash identifier: dFwsjOhAIReUbf7K2DQx8a4Fhhb7HR1SVPVBMnSDExA= Subject key identifier: 28:96:2F:84:36:F0:A5:AD:A3:21:D2:91:98:13:46:6D:56:CB:91:A4 Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: 51 Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/A4CC914E9EA011F0A7B92A1EC4F9AE02.roa Signing time: Sun 01 Mar 2026 06:15:36 +0000 ROA not before: Wed 01 Oct 2025 08:28:45 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 151660 IP address blocks: 160.222.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 81 (0x51) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: Oct 1 08:28:45 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a3d987-c355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:dd:2b:b9:8f:64:a0:49:b0:88:e8:1d:58:43: a8:ed:d0:7b:e5:d7:84:f8:5b:40:54:36:fe:42:4d: d7:03:37:b0:9b:b5:7f:eb:5d:2d:09:52:4a:42:8e: 55:b3:48:e9:16:5a:92:bc:1c:ed:78:7f:21:4d:3c: da:b8:61:8c:40:e8:ae:0a:11:a4:df:59:45:09:c5: 41:71:f3:2b:d1:a5:6d:52:56:12:81:68:53:ab:bf: b4:b1:e9:61:5e:f2:de:42:94:96:ba:a0:fe:9e:9a: 19:9c:e4:9e:36:8d:79:bd:71:fd:b9:7f:e6:95:b5: fb:6e:94:0a:f2:97:43:ac:a7:44:05:22:3d:88:3b: 8c:fb:7f:eb:31:ca:0a:ad:4d:a0:93:5c:3b:25:80: 44:8c:cc:4a:54:f3:f4:6f:0e:3f:16:24:79:a1:90: dc:bc:52:eb:79:87:19:81:a6:c9:c8:14:1b:1a:27: 0a:f2:bd:c3:33:c0:d8:5f:40:a2:7e:91:ce:ad:e3: a2:77:a9:9c:56:a3:57:20:ca:c0:4e:8c:02:1f:96: f4:d5:f0:12:99:41:26:d9:b0:11:71:d5:19:43:19: 3f:ff:58:d8:85:ac:a9:e2:6d:b8:ac:8a:90:80:b6: 95:72:55:ff:67:6d:8d:12:29:3f:fa:b6:61:ac:eb: 37:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:96:2F:84:36:F0:A5:AD:A3:21:D2:91:98:13:46:6D:56:CB:91:A4 X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/A4CC914E9EA011F0A7B92A1EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.222.152.0/21 Signature Algorithm: sha256WithRSAEncryption 43:86:6e:f3:b1:ef:e6:49:e1:9b:7f:a3:10:5d:ae:25:22:8f: 87:3e:5c:38:1d:96:f6:25:1a:2c:c8:5a:d7:43:76:5e:16:a8: ba:a0:0f:15:ec:09:26:ba:2b:33:9c:ef:a8:d8:06:95:33:49: a6:08:7f:68:88:b3:f1:dc:22:3f:6d:95:be:3b:f2:d7:2f:c4: 12:a0:8c:43:71:8c:f9:14:40:54:17:ae:3a:47:23:cc:ef:7d: 72:8a:9d:63:8a:9d:47:86:44:a2:00:87:39:f7:62:7e:38:d8: cc:8b:50:39:26:40:59:ee:79:0f:a9:2e:67:14:4d:ed:29:b3: 67:66:e1:b5:85:a1:49:cd:9d:c5:31:61:50:67:57:4e:a7:2a: 0c:a3:b1:b5:95:fc:ac:0c:64:c8:52:85:27:03:16:07:ac:c2: 0b:78:2d:19:44:2d:09:63:30:73:e7:da:fc:5d:7e:26:fc:6a: 31:b4:a9:fb:d6:72:e6:b3:2c:58:c6:f8:ce:79:37:d0:01:cf: 1e:ab:62:a9:82:5b:d9:9e:7a:10:71:44:4c:01:00:ed:d6:5e: e6:be:47:f5:30:d5:bb:db:a7:b1:b1:70:e6:89:8b:e0:d2:5c: 16:fa:7f:8c:1d:97:d6:5b:8b:b3:01:60:69:3c:c3:5f:2d:9d: 11:c5:33:a6 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBUTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0YzQzExMC8GA1UEBRMoMDk3MTBCNUI2Njc0OUUzMzlEMTI0Q0RFNkQ2NkNFMzY2 QUNDQUJCMDAeFw0yNTEwMDEwODI4NDVaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY5YTNkOTg3LWMzNTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCh3Su5j2SgSbCI6B1YQ6jt0Hvl14T4W0BUNv5CTdcDN7CbtX/rXS0JUkpCjlWz SOkWWpK8HO14fyFNPNq4YYxA6K4KEaTfWUUJxUFx8yvRpW1SVhKBaFOrv7Sx6WFe 8t5ClJa6oP6emhmc5J42jXm9cf25f+aVtftulAryl0Osp0QFIj2IO4z7f+sxygqt TaCTXDslgESMzEpU8/RvDj8WJHmhkNy8Uut5hxmBpsnIFBsaJwryvcMzwNhfQKJ+ kc6t46J3qZxWo1cgysBOjAIflvTV8BKZQSbZsBFx1RlDGT//WNiFrKnibbisipCA tpVyVf9nbY0SKT/6tmGs6zdlAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUKJYvhDbw pa2jIdKRmBNGbVbLkaQwHwYDVR0jBBgwFoAUCXELW2Z0njOdEkzebWbONmrMq7Aw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRjNDL0EwRDQ5Q0M4OUU5 RTExRjA5MEZGMEQ0RkM0RjlBRTAyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3 QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ1hFTFcyWjBuak9kRWt6ZWJXYk9ObXJNcTdBLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0YzQy9BMEQ0OUNDODlFOUUxMUYwOTBGRjBENEZDNEY5QUUwMi9BNENDOTE0RTlF QTAxMUYwQTdCOTJBMUVDNEY5QUUwMi5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAOg3pgwDQYJKoZIhvcNAQELBQADggEBAEOGbvOx7+ZJ4Zt/oxBdriUi j4c+XDgdlvYlGizIWtdDdl4WqLqgDxXsCSa6KzOc76jYBpUzSaYIf2iIs/HcIj9t lb478tcvxBKgjENxjPkUQFQXrjpHI8zvfXKKnWOKnUeGRKIAhzn3Yn442MyLUDkm QFnueQ+pLmcUTe0ps2dm4bWFoUnNncUxYVBnV06nKgyjsbWV/KwMZMhShScDFges wgt4LRlELQljMHPn2vxdfib8ajG0qfvWcuazLFjG+M55N9ABzx6rYqmCW9meehBx REwBAO3WXua+R/Uw1bvbp7GxcOaJi+DSXBb6f4wdl9Zbi7MBYGk8w18tnRHFM6Y= -----END CERTIFICATE-----Generated at Mon Mar 2 07:39:18 2026 by rpki-client