$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/8A5FD86448E711EDA6CDF473C4F9AE02.roa File: 8A5FD86448E711EDA6CDF473C4F9AE02.roa (raw, json) Hash identifier: kDxO50GD5AXFe4GFX5YhHhfReI3EK8WF+6AhrrSnCTE= Subject key identifier: A6:86:E3:56:0F:DC:DE:84:2D:1C:18:FC:DE:96:13:E6:5A:31:F6:72 Certificate issuer: /CN=A91EAE3D/serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Certificate serial: 19DC Authority key identifier: C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/8A5FD86448E711EDA6CDF473C4F9AE02.roa Signing time: Sun 01 Mar 2026 18:50:54 +0000 ROA not before: Fri 20 Feb 2026 17:15:03 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 9398 IP address blocks: 180.148.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6620 (0x19dc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE3D, serialNumber=C7269B124C420C55E29FB51D3C1B0D9D476CBD00 Validity Not Before: Feb 20 17:15:03 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a48a8e-5fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:bb:16:99:3d:87:2c:bf:45:32:f2:c2:5d:5d: c8:ae:d5:0f:85:c8:85:e3:21:9c:a8:46:16:55:6b: 82:0e:cb:e2:41:19:a0:20:b2:e8:e6:f2:6a:90:46: 8f:ef:35:c6:7e:9a:52:94:50:24:98:0b:f6:1e:29: 8e:39:a1:a8:75:3f:95:d6:24:62:79:a6:4a:b9:96: 2a:ef:8f:20:36:aa:49:85:c2:fc:25:30:ba:5d:8b: 48:f5:b6:44:d5:db:16:fb:b9:bc:ad:15:06:84:18: a4:99:50:b2:cd:b0:bb:67:b8:a7:2d:2e:d0:8b:56: 34:70:71:90:c7:06:63:8f:5b:a0:2c:f3:31:b8:97: 24:4c:e8:64:d4:3a:6e:08:a6:03:62:24:07:3c:38: 58:82:bf:0e:76:18:4f:86:00:21:a4:eb:d1:35:b3: 9b:27:cd:3c:e9:7d:0e:81:bf:55:d5:be:e7:59:32: b1:48:0e:12:59:97:bf:86:23:69:90:56:c2:52:46: de:92:67:9c:ce:2a:f9:d8:82:ee:b6:f1:25:74:0b: 19:fe:e2:e4:03:63:20:76:d0:5b:93:00:49:65:73: 8b:0d:5c:d9:e9:f9:ec:77:a6:81:b5:77:23:84:d2: c3:da:57:11:ce:4b:9c:de:1a:be:66:1b:87:c5:73: 09:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:86:E3:56:0F:DC:DE:84:2D:1C:18:FC:DE:96:13:E6:5A:31:F6:72 X509v3 Authority Key Identifier: keyid:C7:26:9B:12:4C:42:0C:55:E2:9F:B5:1D:3C:1B:0D:9D:47:6C:BD:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/xyabEkxCDFXin7UdPBsNnUdsvQA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xyabEkxCDFXin7UdPBsNnUdsvQA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/97B6E0CE75DE11E8B704A246C4F9AE02/8A5FD86448E711EDA6CDF473C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 180.148.64.0/19 Signature Algorithm: sha256WithRSAEncryption 6d:91:8c:98:2b:c3:ec:34:06:b1:59:ae:54:bd:6b:d4:61:e6: 33:62:77:95:03:cd:be:e8:d4:3f:75:12:4a:e1:97:03:b0:1c: dd:e4:18:06:d5:57:5a:a3:42:15:eb:58:d4:4a:38:76:f4:6b: 49:39:ee:49:e0:72:83:8c:c4:77:5a:35:1f:35:9e:7b:15:9b: bc:19:dd:e5:b2:61:0e:c1:94:d1:9c:84:5e:0f:3a:aa:e4:2c: b8:b8:b5:2d:de:83:32:9c:ee:62:57:71:b0:9d:3d:78:ee:e2: 9b:6b:20:e9:1e:b4:99:51:6c:0c:74:41:a7:de:78:83:da:41: 6b:25:3a:51:94:6c:e1:6c:51:0a:d2:33:0a:7f:a9:58:de:0c: ee:77:2d:52:50:67:b4:24:2f:26:d2:fe:eb:1b:20:d5:16:26: 45:97:a5:10:ec:0b:5f:5e:80:07:ba:dd:16:ee:2f:ba:76:cc: 78:5a:46:ca:18:13:8f:7e:19:79:9c:7c:72:cf:31:4b:b2:51: a3:1d:58:d3:7c:24:a5:f6:2d:9a:58:87:79:81:db:9e:0d:75: 6e:97:52:13:c1:6c:0b:64:93:d4:d0:a0:02:9f:81:8d:6a:2f: 0f:ee:37:17:15:98:da:4b:a0:e3:f8:b8:6e:8d:24:7a:69:b1: 92:d1:6b:84 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICGdwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUFFM0QxMTAvBgNVBAUTKEM3MjY5QjEyNEM0MjBDNTVFMjlGQjUxRDNDMUIwRDlE NDc2Q0JEMDAwHhcNMjYwMjIwMTcxNTAzWhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0OGE4ZS01ZmQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlbsWmT2HLL9FMvLCXV3IrtUPhciF4yGcqEYWVWuCDsviQRmgILLo5vJqkEaP 7zXGfppSlFAkmAv2HimOOaGodT+V1iRieaZKuZYq748gNqpJhcL8JTC6XYtI9bZE 1dsW+7m8rRUGhBikmVCyzbC7Z7inLS7Qi1Y0cHGQxwZjj1ugLPMxuJckTOhk1Dpu CKYDYiQHPDhYgr8OdhhPhgAhpOvRNbObJ8086X0Ogb9V1b7nWTKxSA4SWZe/hiNp kFbCUkbekmeczir52ILutvEldAsZ/uLkA2MgdtBbkwBJZXOLDVzZ6fnsd6aBtXcj hNLD2lcRzkuc3hq+ZhuHxXMJXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKaG41YP 3N6ELRwY/N6WE+ZaMfZyMB8GA1UdIwQYMBaAFMcmmxJMQgxV4p+1HTwbDZ1HbL0A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUUzRC85N0I2RTBDRTc1 REUxMUU4QjcwNEEyNDZDNEY5QUUwMi94eWFiRWt4Q0RGWGluN1VkUEJzTm5VZHN2 UUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3h5YWJFa3hDREZYaW43VWRQQnNOblVkc3ZRQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUFFM0QvOTdCNkUwQ0U3NURFMTFFOEI3MDRBMjQ2QzRGOUFFMDIvOEE1RkQ4NjQ0 OEU3MTFFREE2Q0RGNDczQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQFtJRAMA0GCSqGSIb3DQEBCwUAA4IBAQBtkYyYK8PsNAaxWa5UvWvU YeYzYneVA82+6NQ/dRJK4ZcDsBzd5BgG1Vdao0IV61jUSjh29GtJOe5J4HKDjMR3 WjUfNZ57FZu8Gd3lsmEOwZTRnIReDzqq5Cy4uLUt3oMynO5iV3GwnT147uKbayDp HrSZUWwMdEGn3niD2kFrJTpRlGzhbFEK0jMKf6lY3gzudy1SUGe0JC8m0v7rGyDV FiZFl6UQ7AtfXoAHut0W7i+6dsx4WkbKGBOPfhl5nHxyzzFLslGjHVjTfCSl9i2a WId5gdueDXVul1ITwWwLZJPU0KACn4GNai8P7jcXFZjaS6Dj+LhujSR6abGS0WuE -----END CERTIFICATE-----Generated at Mon Mar 2 17:41:03 2026 by rpki-client