$ rpki-client -vvvf rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/F1C7A044D91E11EFAD3C7613C4F9AE02.roa File: F1C7A044D91E11EFAD3C7613C4F9AE02.roa (raw, json) Hash identifier: u8F36rbb3MJiWZT69qWiPFv6z90jcQZPFE5OZpQvAOc= Subject key identifier: 3E:63:63:F8:2C:14:0F:26:67:28:09:9F:48:77:FB:73:9E:91:0D:DC Certificate issuer: /CN=A91514B1/serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Certificate serial: 0659 Authority key identifier: 96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/F1C7A044D91E11EFAD3C7613C4F9AE02.roa Signing time: Wed 02 Sep 2026 23:43:39 +0000 ROA not before: Wed 02 Sep 2026 23:43:39 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 4804 IP address blocks: 161.43.224.0/21 maxlen: 21 161.43.232.0/21 maxlen: 21 192.131.13.0/24 maxlen: 24 198.142.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 22:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1625 (0x659) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91514B1, serialNumber=9682C2ABE25323580776B1D0E275D2FD2D697EB6 Validity Not Before: Sep 2 23:43:39 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a98b4ab-10ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6d:53:00:a5:15:f1:4f:e3:25:9f:1b:0c:bb: e9:67:83:29:ce:89:a4:98:c5:53:19:11:c0:38:ef: 21:2c:dd:ea:39:8a:e0:f7:61:71:75:b5:be:1d:14: 83:d6:d8:a1:5e:10:95:3e:0f:36:6c:ee:86:21:b9: a5:0b:26:ba:10:63:0c:47:4d:3b:be:13:89:80:29: d3:ce:4b:06:e9:c7:1c:17:83:d3:a7:c9:52:a7:11: e8:36:5d:b7:65:e7:78:61:47:68:2f:fb:9a:b8:82: 5e:ed:91:3a:b0:50:20:42:5e:92:b3:69:57:b9:f1: 6c:18:da:a9:e7:d4:d2:fa:c3:53:fd:f0:06:c6:47: 84:0b:bb:1c:92:5b:9d:18:a3:b9:ce:81:b0:0a:04: 85:16:28:cf:cd:28:a1:73:13:fd:b0:cb:40:4b:4a: be:fb:54:ed:bb:6d:df:09:60:ea:fc:e7:32:4f:a3: f3:13:25:f0:ac:3a:d4:51:c4:60:a5:0b:7a:b6:b6: 7e:4a:9c:a5:32:19:50:0d:09:7a:a4:57:b2:82:38: fd:ad:1e:bc:8b:b2:67:da:29:b8:2f:90:e4:14:d5: 5b:b9:3a:e7:9a:e7:1c:e7:7f:bb:d3:ce:f0:15:2a: f3:7f:bb:f9:70:5c:e2:b2:8e:89:9e:60:ed:74:2f: d4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:63:63:F8:2C:14:0F:26:67:28:09:9F:48:77:FB:73:9E:91:0D:DC X509v3 Authority Key Identifier: keyid:96:82:C2:AB:E2:53:23:58:07:76:B1:D0:E2:75:D2:FD:2D:69:7E:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/loLCq-JTI1gHdrHQ4nXS_S1pfrY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/loLCq-JTI1gHdrHQ4nXS_S1pfrY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91514B1/7A8864ACFBE411EB82B6264FC4F9AE02/F1C7A044D91E11EFAD3C7613C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.43.224.0/20 192.131.13.0/24 198.142.0.0/16 Signature Algorithm: sha256WithRSAEncryption 46:51:70:19:4d:ec:18:63:ca:b4:08:c7:41:e7:53:8a:92:f0: ac:9f:15:b3:1a:80:25:06:72:5b:f4:a3:81:40:44:ff:d0:6a: 8a:17:c3:99:ea:42:f2:b4:ab:86:4b:c4:a5:80:f6:a6:4a:6c: 82:86:3e:c0:48:46:18:e6:e4:71:99:b9:fa:82:91:5c:f7:cf: cb:32:50:16:9e:9c:be:ee:67:40:d2:2b:d9:21:68:29:fe:46: 4f:c5:d5:77:ba:de:b1:24:d1:a5:ac:2d:38:ff:b2:2f:9d:a1: dd:33:ef:89:34:bf:1a:62:ce:95:15:7b:78:20:80:26:e3:87: d0:75:e4:da:dd:4b:97:0b:55:a6:fb:7a:e7:f1:41:c9:2f:5d: 41:5b:89:cf:07:b3:f9:17:c9:07:a5:26:ec:16:0d:a6:61:99: 05:6e:eb:84:64:41:a4:fd:00:5a:43:19:bc:9a:c5:5e:45:73: d8:cf:44:84:75:8a:21:3d:4f:64:2a:b8:4a:3f:03:3b:bf:df: 8c:c5:4d:66:9b:e0:ac:9e:37:35:5b:16:b1:eb:e1:a7:21:88: 1a:e4:8b:80:16:8c:38:51:bc:e0:3d:50:63:d1:d8:7f:31:8a: 6e:4f:c7:29:58:c4:06:32:71:30:3a:44:20:af:dc:2b:09:d4: d4:03:6d:46 -----BEGIN CERTIFICATE----- MIIFRzCCBC+gAwIBAgICBlkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTE0QjExMTAvBgNVBAUTKDk2ODJDMkFCRTI1MzIzNTgwNzc2QjFEMEUyNzVEMkZE MkQ2OTdFQjYwHhcNMjYwOTAyMjM0MzM5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTk4YjRhYi0xMGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAym1TAKUV8U/jJZ8bDLvpZ4MpzomkmMVTGRHAOO8hLN3qOYrg92FxdbW+HRSD 1tihXhCVPg82bO6GIbmlCya6EGMMR007vhOJgCnTzksG6cccF4PTp8lSpxHoNl23 Zed4YUdoL/uauIJe7ZE6sFAgQl6Ss2lXufFsGNqp59TS+sNT/fAGxkeEC7scklud GKO5zoGwCgSFFijPzSihcxP9sMtAS0q++1Ttu23fCWDq/OcyT6PzEyXwrDrUUcRg pQt6trZ+SpylMhlQDQl6pFeygjj9rR68i7Jn2im4L5DkFNVbuTrnmucc53+7087w FSrzf7v5cFziso6JnmDtdC/UuwIDAQABo4ICazCCAmcwHQYDVR0OBBYEFD5jY/gs FA8mZygJn0h3+3OekQ3cMB8GA1UdIwQYMBaAFJaCwqviUyNYB3ax0OJ10v0taX62 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTRCMS83QTg4NjRBQ0ZC RTQxMUVCODJCNjI2NEZDNEY5QUUwMi9sb0xDcS1KVEkxZ0hkckhRNG5YU19TMXBm clkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xvTENxLUpUSTFnSGRySFE0blhTX1MxcGZyWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTE0QjEvN0E4ODY0QUNGQkU0MTFFQjgyQjYyNjRGQzRGOUFFMDIvRjFDN0EwNDRE OTFFMTFFRkFEM0M3NjEzQzRGOUFFMDIucm9hMCoGCCsGAQUFBwEHAQH/BBswGTAX BAIAATARAwQEoSvgAwQAwIMNAwMAxo4wDQYJKoZIhvcNAQELBQADggEBAEZRcBlN 7BhjyrQIx0HnU4qS8KyfFbMagCUGclv0o4FARP/QaooXw5nqQvK0q4ZLxKWA9qZK bIKGPsBIRhjm5HGZufqCkVz3z8syUBaenL7uZ0DSK9khaCn+Rk/F1Xe63rEk0aWs LTj/si+dod0z74k0vxpizpUVe3gggCbjh9B15NrdS5cLVab7eufxQckvXUFbic8H s/kXyQelJuwWDaZhmQVu64RkQaT9AFpDGbyaxV5Fc9jPRIR1iiE9T2QquEo/Azu/ 34zFTWab4KyeNzVbFrHr4achiBrki4AWjDhRvOA9UGPR2H8xim5PxylYxAYycTA6 RCCv3CsJ1NQDbUY= -----END CERTIFICATE-----Generated at Tue Sep 15 10:10:32 2026 by rpki-client