$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/88A31320809211EB938F4016C4F9AE02.roa File: 88A31320809211EB938F4016C4F9AE02.roa (raw, json) Hash identifier: hQTt0AFzBYtxdeGsE5h3TYl3htX01dC5soXQmdrd9Fo= Subject key identifier: 15:71:4A:F8:F6:10:F2:09:35:C6:DD:1F:C0:B1:2E:5F:46:4E:49:47 Certificate issuer: /CN=A91F89C1/serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Certificate serial: 070B Authority key identifier: D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/88A31320809211EB938F4016C4F9AE02.roa Signing time: Sun 01 Mar 2026 14:13:38 +0000 ROA not before: Thu 24 Jul 2025 23:03:39 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132321 IP address blocks: 155.205.0.0/16 maxlen: 16 155.205.0.0/17 maxlen: 17 155.205.128.0/17 maxlen: 17 155.205.204.0/24 maxlen: 24 155.205.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1803 (0x70b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F89C1, serialNumber=D8C1CC8A463A3150CBEC08654E617800D66E53E9 Validity Not Before: Jul 24 23:03:39 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a44992-e41b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d8:c7:5b:4a:de:ff:f5:8c:c7:48:d3:0a:1e: 2e:80:2a:eb:a6:d5:d3:b1:48:5f:f9:a3:4b:78:61: a9:6f:12:9e:aa:6a:70:c1:cb:18:ef:8a:ef:9c:51: 38:2b:45:58:d6:7d:60:06:af:87:4b:6c:28:e0:2e: 3c:f8:a6:af:34:4a:3f:06:70:99:ea:90:2f:ed:31: 04:3d:71:56:cc:5c:b1:d1:6e:44:2d:8a:cd:bd:20: c5:3d:d5:f2:29:26:c7:ec:08:3c:b7:8d:b7:32:9b: 3d:45:b5:1c:44:e2:b6:19:72:88:ac:3f:c2:d3:35: f8:40:ff:fc:54:a8:7b:00:e4:a0:b8:f9:de:5a:b9: a0:f8:e0:8b:bb:67:da:d4:e4:8a:05:b9:0d:32:28: a9:61:7e:74:98:46:af:18:4a:5c:05:9c:ef:63:44: 94:6b:13:ed:c6:e3:67:4b:bb:e1:a1:12:94:a2:d5: ef:1e:c2:07:35:76:6b:c5:f6:ad:31:01:a9:ab:82: 1d:b3:c4:cb:cd:51:75:aa:d9:ff:c2:7f:38:78:9b: 30:99:04:21:7e:54:de:85:da:22:6b:cb:7d:e9:d3: f6:31:9a:02:8f:44:77:32:f1:b9:af:48:e8:9c:5c: a8:b4:f9:28:64:3c:df:f1:e4:4d:d1:27:fe:e2:f3: 6e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:71:4A:F8:F6:10:F2:09:35:C6:DD:1F:C0:B1:2E:5F:46:4E:49:47 X509v3 Authority Key Identifier: keyid:D8:C1:CC:8A:46:3A:31:50:CB:EC:08:65:4E:61:78:00:D6:6E:53:E9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/2MHMikY6MVDL7AhlTmF4ANZuU-k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2MHMikY6MVDL7AhlTmF4ANZuU-k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89C1/0A3F269C808611EBB4C6D116C4F9AE02/88A31320809211EB938F4016C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 155.205.0.0/16 Signature Algorithm: sha256WithRSAEncryption 9d:93:bb:20:1f:1e:c0:9c:d9:12:74:47:34:8c:4e:7b:b5:00: fe:f8:a0:13:a2:d4:52:88:4c:5f:a4:51:be:89:3b:b8:c8:a3: 3c:b2:bc:ca:54:9c:85:8e:3f:be:fc:32:f8:cd:63:52:0c:54: 08:59:98:d7:c5:4a:95:ed:fb:05:ef:55:35:82:9a:56:9a:3c: e7:aa:08:c7:9f:39:70:02:9d:0d:52:08:bf:3d:ac:3e:aa:04: 0b:72:b9:a6:7b:6b:52:a8:69:fc:f2:7c:47:1b:83:6d:fd:0c: d8:44:64:87:b0:e3:29:9a:6d:4c:17:84:60:95:f5:33:aa:19: 7e:b9:8f:c1:0d:04:ce:d4:8e:7c:2c:25:45:16:c1:c1:1b:21: 29:f1:9f:c8:00:a8:f2:dc:e7:40:9a:79:bd:9b:21:6c:21:cd: f1:fb:2a:ce:ed:2b:e4:f7:d9:08:ce:b6:dc:06:c7:83:32:47: c4:1f:87:f2:29:2e:99:75:6a:ad:18:4e:5a:e4:36:b2:81:ea: 6d:6f:5e:53:fd:58:ec:f9:06:46:97:ef:13:c8:4b:0d:57:15: dd:13:01:a6:a1:51:b5:eb:68:c7:c5:59:4b:4f:c6:18:21:72: f3:27:e3:c0:9f:db:b9:d7:59:ea:98:4a:d7:60:65:1b:a8:43: e5:a4:e7:6b -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgICBwswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjg5QzExMTAvBgNVBAUTKEQ4QzFDQzhBNDYzQTMxNTBDQkVDMDg2NTRFNjE3ODAw RDY2RTUzRTkwHhcNMjUwNzI0MjMwMzM5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NDk5Mi1lNDFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNjHW0re//WMx0jTCh4ugCrrptXTsUhf+aNLeGGpbxKeqmpwwcsY74rvnFE4 K0VY1n1gBq+HS2wo4C48+KavNEo/BnCZ6pAv7TEEPXFWzFyx0W5ELYrNvSDFPdXy KSbH7Ag8t423Mps9RbUcROK2GXKIrD/C0zX4QP/8VKh7AOSguPneWrmg+OCLu2fa 1OSKBbkNMiipYX50mEavGEpcBZzvY0SUaxPtxuNnS7vhoRKUotXvHsIHNXZrxfat MQGpq4Ids8TLzVF1qtn/wn84eJswmQQhflTehdoia8t96dP2MZoCj0R3MvG5r0jo nFyotPkoZDzf8eRN0Sf+4vNu1wIDAQABo4ICXzCCAlswHQYDVR0OBBYEFBVxSvj2 EPIJNcbdH8CxLl9GTklHMB8GA1UdIwQYMBaAFNjBzIpGOjFQy+wIZU5heADWblPp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODlDMS8wQTNGMjY5Qzgw ODYxMUVCQjRDNkQxMTZDNEY5QUUwMi8yTUhNaWtZNk1WREw3QWhsVG1GNEFOWnVV LWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJNSE1pa1k2TVZETDdBaGxUbUY0QU5adVUtay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjg5QzEvMEEzRjI2OUM4MDg2MTFFQkI0QzZEMTE2QzRGOUFFMDIvODhBMzEzMjA4 MDkyMTFFQjkzOEY0MDE2QzRGOUFFMDIucm9hMB4GCCsGAQUFBwEHAQH/BA8wDTAL BAIAATAFAwMAm80wDQYJKoZIhvcNAQELBQADggEBAJ2TuyAfHsCc2RJ0RzSMTnu1 AP74oBOi1FKITF+kUb6JO7jIozyyvMpUnIWOP778MvjNY1IMVAhZmNfFSpXt+wXv VTWCmlaaPOeqCMefOXACnQ1SCL89rD6qBAtyuaZ7a1KoafzyfEcbg239DNhEZIew 4ymabUwXhGCV9TOqGX65j8ENBM7UjnwsJUUWwcEbISnxn8gAqPLc50Caeb2bIWwh zfH7Ks7tK+T32QjOttwGx4MyR8Qfh/IpLpl1aq0YTlrkNrKB6m1vXlP9WOz5BkaX 7xPISw1XFd0TAaahUbXraMfFWUtPxhghcvMn48Cf27nXWeqYStdgZRuoQ+Wk52s= -----END CERTIFICATE-----Generated at Mon Mar 2 11:59:15 2026 by rpki-client