$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/4DD6D628C8D211EF9F1BE312C4F9AE02.roa File: 4DD6D628C8D211EF9F1BE312C4F9AE02.roa (raw, json) Hash identifier: Q2Qdv0ZpyDXIc6w4oc2ztFa/mTiFE2ozOR+lXjgvebo= Subject key identifier: B4:A5:68:B9:18:DE:9D:C1:52:AC:F0:CD:FD:43:E6:18:CF:73:D8:FD Certificate issuer: /CN=A91218BB/serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9 Certificate serial: E1 Authority key identifier: 31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/4DD6D628C8D211EF9F1BE312C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:15:27 +0000 ROA not before: Thu 01 Jan 2026 06:23:39 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 137552 IP address blocks: 160.30.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 06:08:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 225 (0xe1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91218BB, serialNumber=31AC9647C7F870A66BA2DE788544CD8C326BDFF9 Validity Not Before: Jan 1 06:23:39 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a43bef-a0e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:03:53:9b:83:d3:8d:9d:cf:c1:6e:8d:48:dd: 20:81:0c:99:d2:c5:c9:cb:d5:b2:b8:5a:86:98:d3: c9:10:37:77:eb:a2:ca:43:9c:83:da:ae:f5:b6:f8: 1e:c1:7e:43:ac:9a:ff:45:5c:a3:c8:2b:21:20:05: 18:f9:3a:65:3b:ad:53:66:cd:77:26:89:21:17:85: 49:11:aa:fd:81:f0:0f:f5:84:02:a8:34:47:c2:0d: 4a:b8:af:47:67:4d:24:78:0b:0f:2b:3e:4a:cb:dd: 7f:0a:12:7a:e0:1f:5e:1a:6b:05:cf:01:91:c8:88: a5:34:e0:35:2b:a5:28:67:a6:bf:bd:b3:fd:0e:46: 02:34:f0:cd:b5:61:2b:7b:3f:6e:d2:ec:85:d8:97: 22:9d:42:ec:51:eb:1d:9a:80:6a:2c:8c:6d:1a:99: 87:df:b8:fb:d5:c7:a9:95:43:c2:99:be:00:9f:a8: 62:2b:6a:cc:ad:02:ce:0e:bf:ae:6d:96:1e:13:f8: 37:cc:1e:cc:13:a4:dd:ab:fb:bb:66:ee:e4:72:37: 73:c0:1a:7c:2e:3d:b0:95:d5:bb:56:77:5a:53:28: 92:84:56:a5:76:98:4b:e0:65:45:fb:55:14:13:fa: d2:84:ae:36:fd:15:88:66:c8:e2:b9:dd:32:b9:0b: 7f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A5:68:B9:18:DE:9D:C1:52:AC:F0:CD:FD:43:E6:18:CF:73:D8:FD X509v3 Authority Key Identifier: keyid:31:AC:96:47:C7:F8:70:A6:6B:A2:DE:78:85:44:CD:8C:32:6B:DF:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/MayWR8f4cKZrot54hUTNjDJr3_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MayWR8f4cKZrot54hUTNjDJr3_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/6A0B2054C8C511EF8EC55565C4F9AE02/4DD6D628C8D211EF9F1BE312C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.30.209.0/24 Signature Algorithm: sha256WithRSAEncryption 32:56:dc:73:5e:40:30:f1:0b:fd:ad:fa:3c:0b:11:7d:bf:4e: e2:4b:31:05:59:2d:c3:7c:64:ac:a3:65:42:53:ad:5f:79:2b: e5:ad:38:9c:00:85:2b:79:b4:0e:e9:76:f4:8c:bb:8f:57:8b: 9c:7f:7e:c7:ce:a8:38:6f:77:bd:c4:69:a5:98:0d:96:7b:dc: 8f:7b:35:44:16:da:e4:19:e9:c2:c6:d9:1c:23:72:00:a6:29: 4d:18:3d:54:ab:b0:74:33:f4:d5:9a:c8:ea:6c:22:f0:a5:42: 55:67:8d:b8:98:f0:88:e6:93:8d:a4:8a:1b:e4:b4:94:12:0b: 01:e2:d7:34:bc:cd:a5:b7:43:17:39:51:f1:4b:f9:6f:16:9e: 45:05:0d:08:5f:c1:82:4c:8f:ab:4b:2c:d3:07:56:25:7f:ce: 2a:f2:52:4f:da:86:db:40:a1:68:d0:61:13:7d:59:97:15:a2: 5c:62:97:a8:f9:39:c3:b4:2d:2f:69:fc:c5:24:27:a7:ae:78: e3:ec:bb:c0:34:e7:c3:a8:81:fe:48:6a:83:11:ec:58:e3:cf: cd:3e:0c:87:be:86:2e:87:7f:c3:3d:8c:92:d2:03:82:f5:6d: 21:de:37:0f:59:96:e7:bd:57:3e:03:a4:11:8c:87:37:68:5a: f9:30:66:97 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjE4QkIxMTAvBgNVBAUTKDMxQUM5NjQ3QzdGODcwQTY2QkEyREU3ODg1NDRDRDhD MzI2QkRGRjkwHhcNMjYwMTAxMDYyMzM5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2JlZi1hMGU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ANTm4PTjZ3PwW6NSN0ggQyZ0sXJy9WyuFqGmNPJEDd366LKQ5yD2q71tvge wX5DrJr/RVyjyCshIAUY+TplO61TZs13JokhF4VJEar9gfAP9YQCqDRHwg1KuK9H Z00keAsPKz5Ky91/ChJ64B9eGmsFzwGRyIilNOA1K6UoZ6a/vbP9DkYCNPDNtWEr ez9u0uyF2JcinULsUesdmoBqLIxtGpmH37j71ceplUPCmb4An6hiK2rMrQLODr+u bZYeE/g3zB7ME6Tdq/u7Zu7kcjdzwBp8Lj2wldW7VndaUyiShFaldphL4GVF+1UU E/rShK42/RWIZsjiud0yuQt/lwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLSlaLkY 3p3BUqzwzf1D5hjPc9j9MB8GA1UdIwQYMBaAFDGslkfH+HCma6LeeIVEzYwya9/5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyMThCQi82QTBCMjA1NEM4 QzUxMUVGOEVDNTU1NjVDNEY5QUUwMi9NYXlXUjhmNGNLWnJvdDU0aFVUTmpESnIz X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL01heVdSOGY0Y0tacm90NTRoVVROakRKcjNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjE4QkIvNkEwQjIwNTRDOEM1MTFFRjhFQzU1NTY1QzRGOUFFMDIvNERENkQ2MjhD OEQyMTFFRjlGMUJFMzEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoB7RMA0GCSqGSIb3DQEBCwUAA4IBAQAyVtxzXkAw8Qv9rfo8CxF9 v07iSzEFWS3DfGSso2VCU61feSvlrTicAIUrebQO6Xb0jLuPV4ucf37Hzqg4b3e9 xGmlmA2We9yPezVEFtrkGenCxtkcI3IApilNGD1Uq7B0M/TVmsjqbCLwpUJVZ424 mPCI5pONpIob5LSUEgsB4tc0vM2lt0MXOVHxS/lvFp5FBQ0IX8GCTI+rSyzTB1Yl f84q8lJP2obbQKFo0GETfVmXFaJcYpeo+TnDtC0vafzFJCenrnjj7LvANOfDqIH+ SGqDEexY48/NPgyHvoYuh3/DPYyS0gOC9W0h3jcPWZbnvVc+A6QRjIc3aFr5MGaX -----END CERTIFICATE-----Generated at Wed Mar 4 10:09:05 2026 by rpki-client