$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/4EA15AE44FD811ED8AEB0282C4F9AE02.roa File: 4EA15AE44FD811ED8AEB0282C4F9AE02.roa (raw, json) Hash identifier: hBNhJd1RE1CKp6fZPq7DAXxvhGg9uUgn9HcytzOG94E= Subject key identifier: A1:74:BA:9C:DC:2D:C5:D3:4A:69:10:B1:11:15:E1:F7:89:9C:40:B8 Certificate issuer: /CN=A91EA198/serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Certificate serial: 1EC1 Authority key identifier: 5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/4EA15AE44FD811ED8AEB0282C4F9AE02.roa Signing time: Sun 01 Mar 2026 16:59:05 +0000 ROA not before: Fri 12 Dec 2025 16:13:50 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 134963 IP address blocks: 8.208.0.0/12 maxlen: 15 8.208.0.0/16 maxlen: 24 8.209.0.0/16 maxlen: 24 8.210.0.0/16 maxlen: 24 8.211.0.0/16 maxlen: 24 8.212.0.0/16 maxlen: 24 8.213.0.0/16 maxlen: 24 8.214.0.0/16 maxlen: 24 8.215.0.0/16 maxlen: 24 8.216.0.0/16 maxlen: 24 8.217.0.0/16 maxlen: 24 8.218.0.0/16 maxlen: 24 8.219.0.0/16 maxlen: 24 8.220.0.0/16 maxlen: 24 8.221.0.0/16 maxlen: 24 8.222.0.0/16 maxlen: 24 8.223.0.0/16 maxlen: 24 149.129.0.0/16 maxlen: 16 161.117.0.0/16 maxlen: 24 170.33.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7873 (0x1ec1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA198, serialNumber=5FEEDE9D382543F051527FA533D47A917077E632 Validity Not Before: Dec 12 16:13:50 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a47059-6943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:00:03:00:19:9d:d6:6d:2c:75:be:e1:4f:6c: 4c:44:9e:e7:82:bc:e6:83:0b:a7:b8:bd:8e:d8:35: 08:78:66:fe:d7:f5:59:a8:41:d2:49:8b:d5:71:03: 52:26:87:77:83:08:4f:77:44:0c:9a:15:1f:fa:0e: 36:f8:3b:94:dc:13:cd:fc:22:f7:6c:59:09:0d:55: 26:22:9c:e7:05:1d:fd:3f:5e:58:7b:b0:cb:c5:7f: 6b:21:9e:27:6a:c4:b4:ee:bf:76:05:eb:88:95:ba: c3:d6:f7:33:de:5f:d6:48:69:25:0a:69:bd:03:01: d3:c8:65:7e:fc:dd:64:2e:c0:01:f0:10:e8:65:47: d9:d5:1e:55:57:50:a3:5f:7f:81:75:99:b7:9a:d2: c5:b1:ed:82:8b:55:f4:75:4f:5d:07:6f:fd:ae:1d: 93:e2:0d:0f:13:7e:9c:eb:dd:3a:89:3c:da:8c:d8: 55:a1:d0:6c:4c:0b:9f:61:ed:ae:19:8a:5d:33:6d: f3:e2:81:bb:8e:2d:00:49:8b:14:f6:f7:17:e4:51: c5:04:c4:68:1b:0c:53:55:7c:cf:c6:ca:31:a5:9a: 9d:b4:03:91:52:cd:50:f3:9f:63:a1:f5:ef:7a:2c: dd:f2:59:84:01:c6:ce:16:ef:64:88:38:82:f1:43: 18:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:74:BA:9C:DC:2D:C5:D3:4A:69:10:B1:11:15:E1:F7:89:9C:40:B8 X509v3 Authority Key Identifier: keyid:5F:EE:DE:9D:38:25:43:F0:51:52:7F:A5:33:D4:7A:91:70:77:E6:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/X-7enTglQ_BRUn-lM9R6kXB35jI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X-7enTglQ_BRUn-lM9R6kXB35jI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA198/AD629222B52511E6AF6C895EC4F9AE02/4EA15AE44FD811ED8AEB0282C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 8.208.0.0/12 149.129.0.0/16 161.117.0.0/16 170.33.0.0/16 Signature Algorithm: sha256WithRSAEncryption 3d:e3:c7:c2:03:8d:5f:bb:0c:c9:3d:aa:55:ea:56:30:1f:7e: 40:89:fa:0b:8f:b2:60:35:1c:f7:2c:f6:40:c5:96:98:93:5c: 95:27:10:31:83:c9:d9:66:e2:62:f5:d3:16:d6:e8:4f:46:75: 00:8b:c9:3f:92:63:24:ca:c4:e6:bc:07:06:5c:2f:eb:3d:de: c8:72:b8:e9:b6:f3:0f:8f:b2:82:82:78:71:23:9f:b3:6b:07: 11:aa:db:70:69:60:ba:43:30:a5:bd:ca:34:e0:57:93:6d:7b: 01:af:1c:00:e0:e0:08:56:6b:51:7a:c9:cc:9d:32:e1:39:ec: 27:22:89:c5:6d:44:f4:17:c6:d8:31:5f:97:94:48:16:fd:94: 33:d3:05:26:6c:71:67:11:b4:b8:35:a2:21:b5:a5:88:e5:61: 38:bf:2e:b2:ab:66:b1:56:15:73:5f:f8:ab:66:06:58:d5:58: ce:f7:5f:08:da:de:3c:45:b0:c9:b6:40:b7:66:df:bd:0f:10: b5:93:39:9f:c5:d5:2b:63:69:88:13:32:8b:2c:07:da:5a:13: f0:3a:41:61:67:d7:f3:20:9a:d3:cd:c7:2e:7b:34:ff:66:ed: d3:d5:81:44:4f:ba:4f:7e:8f:87:fe:55:e0:16:a9:c1:63:b3: 71:9f:15:d2 -----BEGIN CERTIFICATE----- MIIFSjCCBDKgAwIBAgICHsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUExOTgxMTAvBgNVBAUTKDVGRUVERTlEMzgyNTQzRjA1MTUyN0ZBNTMzRDQ3QTkx NzA3N0U2MzIwHhcNMjUxMjEyMTYxMzUwWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NzA1OS02OTQzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8QADABmd1m0sdb7hT2xMRJ7ngrzmgwunuL2O2DUIeGb+1/VZqEHSSYvVcQNS Jod3gwhPd0QMmhUf+g42+DuU3BPN/CL3bFkJDVUmIpznBR39P15Ye7DLxX9rIZ4n asS07r92BeuIlbrD1vcz3l/WSGklCmm9AwHTyGV+/N1kLsAB8BDoZUfZ1R5VV1Cj X3+BdZm3mtLFse2Ci1X0dU9dB2/9rh2T4g0PE36c6906iTzajNhVodBsTAufYe2u GYpdM23z4oG7ji0ASYsU9vcX5FHFBMRoGwxTVXzPxsoxpZqdtAORUs1Q859jofXv eizd8lmEAcbOFu9kiDiC8UMYxQIDAQABo4ICbjCCAmowHQYDVR0OBBYEFKF0upzc LcXTSmkQsREV4feJnEC4MB8GA1UdIwQYMBaAFF/u3p04JUPwUVJ/pTPUepFwd+Yy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTE5OC9BRDYyOTIyMkI1 MjUxMUU2QUY2Qzg5NUVDNEY5QUUwMi9YLTdlblRnbFFfQlJVbi1sTTlSNmtYQjM1 akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1gtN2VuVGdsUV9CUlVuLWxNOVI2a1hCMzVqSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUExOTgvQUQ2MjkyMjJCNTI1MTFFNkFGNkM4OTVFQzRGOUFFMDIvNEVBMTVBRTQ0 RkQ4MTFFRDhBRUIwMjgyQzRGOUFFMDIucm9hMC0GCCsGAQUFBwEHAQH/BB4wHDAa BAIAATAUAwMECNADAwCVgQMDAKF1AwMAqiEwDQYJKoZIhvcNAQELBQADggEBAD3j x8IDjV+7DMk9qlXqVjAffkCJ+guPsmA1HPcs9kDFlpiTXJUnEDGDydlm4mL10xbW 6E9GdQCLyT+SYyTKxOa8BwZcL+s93shyuOm28w+PsoKCeHEjn7NrBxGq23BpYLpD MKW9yjTgV5NtewGvHADg4AhWa1F6ycydMuE57CciicVtRPQXxtgxX5eUSBb9lDPT BSZscWcRtLg1oiG1pYjlYTi/LrKrZrFWFXNf+KtmBljVWM73Xwja3jxFsMm2QLdm 370PELWTOZ/F1StjaYgTMossB9paE/A6QWFn1/MgmtPNxy57NP9m7dPVgURPuk9+ j4f+VeAWqcFjs3GfFdI= -----END CERTIFICATE-----Generated at Mon Mar 2 02:39:13 2026 by rpki-client