$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/08FA5F2C23D511EF8868CA4EC4F9AE02.roa File: 08FA5F2C23D511EF8868CA4EC4F9AE02.roa (raw, json) Hash identifier: YV4LfZM/DekPTLNkKIFGUEi3Dg/IZbNT5V3DJv9diHw= Subject key identifier: E1:67:6D:CD:2C:68:EE:2A:AB:55:E4:C0:84:2A:25:63:8A:50:A0:DD Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 20A1 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/08FA5F2C23D511EF8868CA4EC4F9AE02.roa Signing time: Mon 02 Mar 2026 22:06:10 +0000 ROA not before: Thu 28 Aug 2025 14:51:15 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151938 IP address blocks: 160.19.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8353 (0x20a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:15 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a609d2-87dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f5:22:f4:d3:95:08:cc:e1:c9:03:c0:de:67: 17:57:09:df:8f:c9:4d:ab:ec:7e:c9:73:4a:01:82: 39:ee:55:09:1d:cc:38:50:70:13:64:ba:73:64:fd: a9:ac:a5:ae:78:f2:ba:59:3e:fe:ec:37:99:7c:38: cd:27:76:9d:ae:39:be:a1:ec:e7:d2:44:9f:2b:d9: d4:1a:49:ff:41:f2:ea:6e:dd:ee:91:82:ee:d2:7b: 6d:77:f9:c2:f0:15:1f:2c:de:c3:99:68:8e:91:91: 61:1c:a8:ec:c1:78:86:3c:25:85:54:ee:4a:a5:d0: a3:8d:fe:86:4c:94:ef:94:8e:90:04:c9:39:b9:4c: 26:6b:57:1a:65:01:4f:2b:22:5e:0d:39:1e:52:2a: d9:14:1f:d6:52:e5:d6:91:3c:15:16:59:77:a7:ad: 28:4d:aa:66:e3:38:2e:f9:5b:13:ef:e0:97:44:c7: 00:68:23:f4:13:ed:ef:49:9f:24:a0:b0:82:83:c1: 39:88:73:5a:58:e9:00:75:66:ad:6f:c4:8e:ab:ed: 31:c0:79:a0:3f:99:cb:b8:79:a0:75:38:34:c3:2f: 51:de:09:bc:51:b0:23:78:8b:52:11:6a:b1:9a:97: aa:d9:59:e4:7d:7b:08:cf:de:6b:e8:2f:8e:71:61: 67:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:67:6D:CD:2C:68:EE:2A:AB:55:E4:C0:84:2A:25:63:8A:50:A0:DD X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/08FA5F2C23D511EF8868CA4EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.19.204.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:ef:09:24:31:e6:bb:4b:1d:3e:15:46:ba:1c:ad:f7:79:6a: b0:10:68:de:0c:f2:b0:c7:f6:65:b1:2d:f7:3d:53:f8:36:a8: c2:92:63:ca:e9:97:fc:fe:ab:e6:05:cf:31:1b:d8:e5:ba:1b: 17:21:40:be:0d:1d:2d:1d:c0:da:5f:2f:ff:74:e3:1a:3d:03: 51:7d:1d:6b:88:3b:3b:16:9c:b2:ac:08:bc:d9:87:67:cd:a7: d0:dd:17:70:36:ac:bd:e1:b1:45:63:a6:2f:a0:bc:65:50:6a: 87:04:bd:4b:49:f4:ef:d8:56:fe:b8:16:63:3c:ae:50:f0:9c: e9:cd:1a:79:5c:f6:d9:40:ab:e9:af:a2:87:f5:df:1a:5d:0f: 6b:72:4a:a8:1e:ee:14:af:1e:21:66:9b:76:cc:b5:f5:4b:49: dc:d2:28:36:bf:45:62:31:03:86:22:89:9e:dd:f0:9a:e9:00: 33:a9:76:47:bb:f7:29:44:f0:0b:c3:09:0b:85:5f:b7:11:91: 34:0a:96:9f:15:b6:db:ff:57:2c:49:30:ce:74:b1:cc:67:8a: 47:29:f4:ca:8b:9a:24:91:21:ae:81:2e:14:2f:6d:73:a8:a0: 7e:76:38:81:4f:21:57:4f:6e:93:c4:a6:eb:b9:74:cc:a3:da: 86:59:00:fe -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIKEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTE1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MDlkMi04N2RjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/Ui9NOVCMzhyQPA3mcXVwnfj8lNq+x+yXNKAYI57lUJHcw4UHATZLpzZP2p rKWuePK6WT7+7DeZfDjNJ3adrjm+oezn0kSfK9nUGkn/QfLqbt3ukYLu0nttd/nC 8BUfLN7DmWiOkZFhHKjswXiGPCWFVO5KpdCjjf6GTJTvlI6QBMk5uUwma1caZQFP KyJeDTkeUirZFB/WUuXWkTwVFll3p60oTapm4zgu+VsT7+CXRMcAaCP0E+3vSZ8k oLCCg8E5iHNaWOkAdWatb8SOq+0xwHmgP5nLuHmgdTg0wy9R3gm8UbAjeItSEWqx mpeq2VnkfXsIz95r6C+OcWFnlwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOFnbc0s aO4qq1XkwIQqJWOKUKDdMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMDhGQTVGMkMy M0Q1MTFFRjg4NjhDQTRFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBPMMA0GCSqGSIb3DQEBCwUAA4IBAQCL7wkkMea7Sx0+FUa6HK33 eWqwEGjeDPKwx/ZlsS33PVP4NqjCkmPK6Zf8/qvmBc8xG9jluhsXIUC+DR0tHcDa Xy//dOMaPQNRfR1riDs7FpyyrAi82YdnzafQ3RdwNqy94bFFY6YvoLxlUGqHBL1L SfTv2Fb+uBZjPK5Q8JzpzRp5XPbZQKvpr6KH9d8aXQ9rckqoHu4Urx4hZpt2zLX1 S0nc0ig2v0ViMQOGIome3fCa6QAzqXZHu/cpRPALwwkLhV+3EZE0CpafFbbb/1cs STDOdLHMZ4pHKfTKi5okkSGugS4UL21zqKB+djiBTyFXT26TxKbruXTMo9qGWQD+ -----END CERTIFICATE-----Generated at Sat Mar 7 22:52:18 2026 by rpki-client