$ rpki-client -vvf rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/1201EAF6083911F0B43D9172C4F9AE02.roa File: 1201EAF6083911F0B43D9172C4F9AE02.roa (raw, json) Hash identifier: rbHttiCNfct4rPH7XHoUz+IWP4BlD4I/02xhzj8Jyag= Subject key identifier: 80:D0:B1:70:81:D0:1E:14:92:1C:43:C2:E4:57:7C:63:4D:19:A8:BA Certificate issuer: /CN=A91847A4/serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Certificate serial: BE Authority key identifier: 4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/1201EAF6083911F0B43D9172C4F9AE02.roa Signing time: Mon 02 Mar 2026 14:38:20 +0000 ROA not before: Sat 01 Nov 2025 07:20:48 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 142631 IP address blocks: 160.191.18.0/23 maxlen: 23 160.191.18.0/24 maxlen: 24 160.191.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 06:42:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91847A4, serialNumber=4CDF99E707F902338E14D510249A9625BCA0FF9D Validity Not Before: Nov 1 07:20:48 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a5a0dc-a13f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ee:b3:ea:5d:df:7f:7f:62:68:27:c0:41:ff: c3:b1:f2:de:51:f1:3c:b1:54:c7:d1:ae:c5:f5:18: 05:6b:01:38:61:e0:25:6c:6c:1c:7a:6d:d7:44:30: 16:61:ff:4a:be:94:87:d0:81:00:67:b1:3f:a8:6a: 49:31:11:43:95:f8:cd:05:7c:3a:38:45:3b:c3:80: 9c:e7:ce:c3:b1:97:54:e8:d9:1a:0e:bb:2f:d3:97: ca:1f:dd:01:f5:a9:9f:5e:3e:fc:db:f2:06:ab:03: 5e:10:85:ab:ad:22:3c:30:e9:76:eb:ac:e9:ef:75: 7d:29:83:63:ea:81:b7:c8:48:6b:cf:18:b4:b7:ec: 9e:be:52:82:e2:a2:08:fa:aa:3d:ea:e4:a7:e5:2c: 86:1e:28:ad:23:88:3a:d2:5f:21:7c:3c:ac:b7:e8: fb:63:eb:2f:44:5b:ee:8d:e9:b3:a5:29:15:2d:39: f7:53:5a:47:44:50:4e:46:fb:b2:47:94:58:80:7e: c5:de:37:86:91:da:db:61:35:1f:6d:a6:ea:da:05: 23:69:c9:94:ef:23:16:ad:d7:96:8d:0d:05:01:dd: e7:4a:a3:61:f0:92:25:2a:50:db:fc:90:93:d2:59: bb:56:8b:63:00:ef:4a:91:b7:c7:33:73:c2:ad:ba: 3b:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:D0:B1:70:81:D0:1E:14:92:1C:43:C2:E4:57:7C:63:4D:19:A8:BA X509v3 Authority Key Identifier: keyid:4C:DF:99:E7:07:F9:02:33:8E:14:D5:10:24:9A:96:25:BC:A0:FF:9D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/TN-Z5wf5AjOOFNUQJJqWJbyg_50.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TN-Z5wf5AjOOFNUQJJqWJbyg_50.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91847A4/F29EB20A07E011F0B6185162C4F9AE02/1201EAF6083911F0B43D9172C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.191.18.0/23 Signature Algorithm: sha256WithRSAEncryption 73:0c:54:bc:38:ab:e5:8d:10:16:d4:92:0b:b4:3f:87:65:bf: 2c:52:07:bc:84:8e:a0:61:35:2f:39:d5:e1:9d:f7:f9:16:08: c5:8d:59:08:55:ca:02:86:27:a2:6b:90:08:07:8f:5a:6d:8e: 42:a2:91:ed:7d:ac:97:3b:1a:ee:fa:ff:41:91:10:60:13:53: e2:97:96:fe:4e:40:45:be:36:12:45:e7:4e:27:c3:1d:f0:4e: dc:92:de:a8:7e:bf:2e:85:4c:92:ca:dc:69:cc:2d:98:b7:44: 42:16:23:b4:ba:4a:6b:94:39:cc:79:aa:f4:12:1e:3e:63:7d: 50:46:da:49:74:fa:53:9e:a1:96:f9:21:d5:ef:ae:e7:45:f4: 3c:87:79:82:8f:73:7d:38:f8:42:c1:59:e2:5a:49:f9:5a:6d: 16:f2:3f:d2:35:9c:fa:4d:11:f4:17:3a:07:ab:1d:a7:f2:ca: 26:8c:01:53:9c:60:89:5b:38:0c:fb:61:24:cd:11:4a:38:2e: 78:4f:10:45:e1:a3:f7:f8:07:18:17:52:34:14:d4:23:de:ba: d4:de:0a:c1:43:6c:d7:8d:df:4c:01:87:b1:c7:be:e4:ee:e7: d9:21:88:6a:92:3b:a5:82:ee:99:d6:53:78:2b:91:fe:e2:30: 0d:2a:27:ed -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODQ3QTQxMTAvBgNVBAUTKDRDREY5OUU3MDdGOTAyMzM4RTE0RDUxMDI0OUE5NjI1 QkNBMEZGOUQwHhcNMjUxMTAxMDcyMDQ4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTBkYy1hMTNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAse6z6l3ff39iaCfAQf/DsfLeUfE8sVTH0a7F9RgFawE4YeAlbGwcem3XRDAW Yf9KvpSH0IEAZ7E/qGpJMRFDlfjNBXw6OEU7w4Cc587DsZdU6NkaDrsv05fKH90B 9amfXj782/IGqwNeEIWrrSI8MOl266zp73V9KYNj6oG3yEhrzxi0t+yevlKC4qII +qo96uSn5SyGHiitI4g60l8hfDyst+j7Y+svRFvujemzpSkVLTn3U1pHRFBORvuy R5RYgH7F3jeGkdrbYTUfbabq2gUjacmU7yMWrdeWjQ0FAd3nSqNh8JIlKlDb/JCT 0lm7VotjAO9KkbfHM3PCrbo78QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIDQsXCB 0B4UkhxDwuRXfGNNGai6MB8GA1UdIwQYMBaAFEzfmecH+QIzjhTVECSaliW8oP+d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDdBNC9GMjlFQjIwQTA3 RTAxMUYwQjYxODUxNjJDNEY5QUUwMi9UTi1aNXdmNUFqT09GTlVRSkpxV0pieWdf NTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ROLVo1d2Y1QWpPT0ZOVVFKSnFXSmJ5Z181MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODQ3QTQvRjI5RUIyMEEwN0UwMTFGMEI2MTg1MTYyQzRGOUFFMDIvMTIwMUVBRjYw ODM5MTFGMEI0M0Q5MTcyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoL8SMA0GCSqGSIb3DQEBCwUAA4IBAQBzDFS8OKvljRAW1JILtD+H Zb8sUge8hI6gYTUvOdXhnff5FgjFjVkIVcoChieia5AIB49abY5CopHtfayXOxru +v9BkRBgE1Pil5b+TkBFvjYSRedOJ8Md8E7ckt6ofr8uhUySytxpzC2Yt0RCFiO0 ukprlDnMear0Eh4+Y31QRtpJdPpTnqGW+SHV767nRfQ8h3mCj3N9OPhCwVniWkn5 Wm0W8j/SNZz6TRH0FzoHqx2n8somjAFTnGCJWzgM+2EkzRFKOC54TxBF4aP3+AcY F1I0FNQj3rrU3grBQ2zXjd9MAYexx77k7ufZIYhqkjulgu6Z1lN4K5H+4jANKift -----END CERTIFICATE-----Generated at Wed Mar 4 10:08:59 2026 by rpki-client