$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/A8F5426250E311F09F3F2B1BC4F9AE02.roa File: A8F5426250E311F09F3F2B1BC4F9AE02.roa (raw, json) Hash identifier: /ylmPLoqNPkXI0WwNkgwXyjpwWePDXl4PjOB+BkYIxc= Subject key identifier: 67:1B:01:72:35:BA:61:18:8F:33:76:B3:6C:7C:B3:08:C1:9D:5F:01 Certificate issuer: /CN=A91A4690/serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Certificate serial: 013B Authority key identifier: 02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/A8F5426250E311F09F3F2B1BC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:14:49 +0000 ROA not before: Thu 27 Nov 2025 03:21:59 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 36352 IP address blocks: 59.153.160.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 315 (0x13b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4690, serialNumber=02CFF7798F053E9C81FDCCED7962ECBB76C1D21A Validity Not Before: Nov 27 03:21:59 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a58d48-6334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:80:a1:65:58:bc:0c:61:09:5b:2a:e5:26:24: 84:91:31:3f:72:db:73:ae:d5:e9:bc:a5:e8:78:f9: 16:0a:2c:65:62:ee:83:ef:ba:32:e4:46:88:59:78: 8b:d9:d7:e8:f4:81:f5:02:5e:45:8a:4f:bd:1f:a4: 82:3b:f4:93:24:dd:73:ec:6f:35:9d:5a:75:4a:df: bb:fa:8b:7f:a6:f7:8f:73:25:89:48:2c:a6:dd:46: f8:e8:05:d4:2b:8f:46:d4:34:74:29:53:c2:b1:e2: ad:41:c3:53:47:3b:19:29:f4:91:c5:c5:0e:10:a9: 05:e1:c2:ff:9a:76:fc:04:71:57:eb:64:f6:d9:0a: 79:6c:05:7b:35:8a:c0:2f:bc:24:17:52:81:5f:39: f3:92:00:b5:43:0e:9f:f1:85:d5:d7:cd:34:2c:02: 4d:02:d6:d4:06:fc:f7:ff:e9:c5:08:0f:5a:dc:e4: 33:bc:0b:44:26:0c:4e:a1:5b:0d:e7:80:6c:2d:c9: cd:a7:4c:91:62:b3:52:57:e7:d7:d5:5e:0f:2e:e1: ff:70:58:e4:fc:7e:45:d9:f2:7b:95:4c:86:c1:7d: 96:2d:64:93:91:e9:48:76:1d:04:ce:8a:4b:75:08: 19:df:96:d5:4f:0c:21:4e:0d:00:0c:0f:1e:ca:6b: 9e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:1B:01:72:35:BA:61:18:8F:33:76:B3:6C:7C:B3:08:C1:9D:5F:01 X509v3 Authority Key Identifier: keyid:02:CF:F7:79:8F:05:3E:9C:81:FD:CC:ED:79:62:EC:BB:76:C1:D2:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/As_3eY8FPpyB_czteWLsu3bB0ho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/As_3eY8FPpyB_czteWLsu3bB0ho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4690/409C970A5AE011EF8582707FC4F9AE02/A8F5426250E311F09F3F2B1BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 59.153.160.0/22 Signature Algorithm: sha256WithRSAEncryption 48:fe:c2:05:98:af:b7:ef:fe:94:c4:db:67:fe:8a:18:a9:17: 55:68:c1:7d:40:c6:2b:dc:81:1c:30:ef:28:bb:bc:06:a0:1b: 41:05:aa:ca:9c:8f:f8:a2:32:80:5c:03:11:b2:90:c0:2e:59: 6a:05:4e:d9:e2:7d:08:df:92:86:e1:8f:4c:d4:7f:7a:a7:dc: 8a:f0:d9:89:9f:48:b0:9a:98:ff:0d:7b:6c:2e:4f:6c:fb:ac: fe:75:70:11:4c:55:fb:e8:93:c4:8f:66:a1:68:c8:7e:53:b9: 0e:31:79:93:3e:83:c2:b9:3b:cf:1c:03:c8:92:48:2d:bc:94: 94:01:74:42:f6:59:b4:1d:bb:1b:4f:a1:24:b4:36:4e:71:46: 84:31:21:ec:5c:f0:e3:28:85:16:c1:72:ef:a5:f7:13:84:0e: bd:6d:be:66:b6:d3:1b:35:11:bb:4c:7b:8d:1f:65:9c:aa:80: 42:ab:ec:42:ca:86:ef:13:85:19:07:8b:68:07:da:9c:51:fd: 21:29:65:72:0f:4e:06:40:67:36:8d:ad:e7:74:a6:9f:4d:ca: e1:41:eb:f5:fd:31:d7:2a:dc:79:b7:1d:a4:42:f6:ba:9e:5b: cd:ea:d6:7c:ed:d1:c9:e5:65:71:bf:17:7b:cb:89:b3:42:a1: bd:e0:98:b6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICATswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2OTAxMTAvBgNVBAUTKDAyQ0ZGNzc5OEYwNTNFOUM4MUZEQ0NFRDc5NjJFQ0JC NzZDMUQyMUEwHhcNMjUxMTI3MDMyMTU5WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGQ0OC02MzM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxYChZVi8DGEJWyrlJiSEkTE/cttzrtXpvKXoePkWCixlYu6D77oy5EaIWXiL 2dfo9IH1Al5Fik+9H6SCO/STJN1z7G81nVp1St+7+ot/pvePcyWJSCym3Ub46AXU K49G1DR0KVPCseKtQcNTRzsZKfSRxcUOEKkF4cL/mnb8BHFX62T22Qp5bAV7NYrA L7wkF1KBXznzkgC1Qw6f8YXV1800LAJNAtbUBvz3/+nFCA9a3OQzvAtEJgxOoVsN 54BsLcnNp0yRYrNSV+fX1V4PLuH/cFjk/H5F2fJ7lUyGwX2WLWSTkelIdh0EzopL dQgZ35bVTwwhTg0ADA8eymue8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGcbAXI1 umEYjzN2s2x8swjBnV8BMB8GA1UdIwQYMBaAFALP93mPBT6cgf3M7Xli7Lt2wdIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDY5MC80MDlDOTcwQTVB RTAxMUVGODU4MjcwN0ZDNEY5QUUwMi9Bc18zZVk4RlBweUJfY3p0ZVdMc3UzYkIw aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0FzXzNlWThGUHB5Ql9jenRlV0xzdTNiQjBoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ2OTAvNDA5Qzk3MEE1QUUwMTFFRjg1ODI3MDdGQzRGOUFFMDIvQThGNTQyNjI1 MEUzMTFGMDlGM0YyQjFCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQCO5mgMA0GCSqGSIb3DQEBCwUAA4IBAQBI/sIFmK+37/6UxNtn/ooY qRdVaMF9QMYr3IEcMO8ou7wGoBtBBarKnI/4ojKAXAMRspDALllqBU7Z4n0I35KG 4Y9M1H96p9yK8NmJn0iwmpj/DXtsLk9s+6z+dXARTFX76JPEj2ahaMh+U7kOMXmT PoPCuTvPHAPIkkgtvJSUAXRC9lm0HbsbT6EktDZOcUaEMSHsXPDjKIUWwXLvpfcT hA69bb5mttMbNRG7THuNH2WcqoBCq+xCyobvE4UZB4toB9qcUf0hKWVyD04GQGc2 ja3ndKafTcrhQev1/THXKtx5tx2kQva6nlvN6tZ87dHJ5WVxvxd7y4mzQqG94Ji2 -----END CERTIFICATE-----Generated at Sat Mar 21 17:19:44 2026 by rpki-client