$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/1D58E1D6C62D11F0AAC5916FC4F9AE02.roa File: 1D58E1D6C62D11F0AAC5916FC4F9AE02.roa (raw, json) Hash identifier: 1Ea5IqL5UkUvM7+kDBey5jRPJ/zkpcy3Wf9KPlEnewE= Subject key identifier: CA:D9:63:96:CE:D7:D0:4F:BA:2A:AF:EF:3E:08:78:18:5E:D0:C2:53 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2120 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/1D58E1D6C62D11F0AAC5916FC4F9AE02.roa Signing time: Mon 02 Mar 2026 23:21:38 +0000 ROA not before: Thu 20 Nov 2025 16:22:32 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154350 IP address blocks: 138.252.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8480 (0x2120) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Nov 20 16:22:32 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61b82-6d4f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ad:a6:85:f2:63:9f:8e:35:37:7c:fa:0e:cf: c9:76:85:ce:46:f0:07:e3:12:cd:40:42:89:5a:db: 99:8f:84:95:a8:02:bc:b9:3c:61:06:c4:47:15:d2: df:c6:ba:20:75:81:05:a1:b2:01:7e:46:52:90:4f: b9:f8:29:d0:c6:f0:b6:b6:ce:41:31:db:d8:ae:6e: e6:35:2b:b1:8a:01:1d:30:35:32:60:d0:81:35:ce: ff:03:56:5e:6b:13:61:52:db:1b:c3:84:8a:5d:27: 3e:cd:29:31:52:71:43:70:c7:65:5f:ad:12:db:cf: e3:46:5d:86:35:80:19:28:22:dc:eb:1c:b8:6a:ef: 6a:2c:77:1c:65:80:eb:20:95:1d:42:3d:f5:1c:0d: c8:33:e5:d4:6d:2a:40:15:ea:b9:3c:2c:57:49:09: 5e:9d:7c:6b:2d:4c:09:2f:97:1f:da:59:d3:44:ac: 5c:c4:00:91:c8:ac:02:7b:68:48:81:05:96:70:5c: eb:ba:0c:55:77:d9:be:1a:08:a3:ad:c1:25:f2:7d: 19:26:4f:df:e1:97:01:0d:c3:12:38:e8:28:10:6e: 2e:f1:b8:30:b1:a6:7d:4b:ca:fa:9c:7a:12:20:95: c6:8e:d9:d1:26:b5:13:4e:02:45:84:b5:71:d3:38: 8f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:D9:63:96:CE:D7:D0:4F:BA:2A:AF:EF:3E:08:78:18:5E:D0:C2:53 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/1D58E1D6C62D11F0AAC5916FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 138.252.152.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:a5:ac:0a:f1:bf:1d:db:51:76:c9:d9:cd:2a:71:ad:f1:da: 60:3b:e3:02:93:09:d4:54:9b:02:7d:03:b9:f9:77:ec:56:cc: 91:67:d7:c2:7c:d8:f5:6e:e9:3a:1a:dd:0f:60:b3:3b:0c:5b: ea:b0:a5:a0:82:51:36:cf:ba:0c:a6:be:4b:e3:ed:24:26:78: f5:18:f8:78:7f:07:63:72:24:f0:1c:62:52:90:ca:20:12:97: fe:c5:f2:4f:3e:ec:67:44:6f:e8:51:f8:45:33:6b:24:7d:07: 8c:69:99:38:f3:af:7d:f4:14:fa:b3:b3:2d:31:c7:ca:a0:46: cf:d3:fc:e7:38:0e:f4:a1:73:6d:68:c9:65:89:aa:8a:32:25: 79:22:26:e5:6e:18:23:28:0a:b7:42:39:85:96:5d:c5:1c:54: a6:a2:de:8d:36:58:6e:94:95:39:a1:b1:ce:a8:b9:ba:ec:c3: a5:20:d8:3e:bf:a0:1b:a1:3c:ca:b3:d5:f2:86:77:da:b9:9b: b5:9c:29:4a:f8:27:9b:fe:ca:8b:a7:7e:60:84:e6:fc:3a:2b: ea:55:a4:c8:1d:2e:43:06:a6:c4:4f:db:f0:00:aa:88:06:45: d4:59:59:63:ee:8f:b8:ed:91:6d:cf:b5:7c:5a:80:37:93:c1: 80:99:3c:6a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICISAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUxMTIwMTYyMjMyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWI4Mi02ZDRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAm62mhfJjn441N3z6Ds/JdoXORvAH4xLNQEKJWtuZj4SVqAK8uTxhBsRHFdLf xrogdYEFobIBfkZSkE+5+CnQxvC2ts5BMdvYrm7mNSuxigEdMDUyYNCBNc7/A1Ze axNhUtsbw4SKXSc+zSkxUnFDcMdlX60S28/jRl2GNYAZKCLc6xy4au9qLHccZYDr IJUdQj31HA3IM+XUbSpAFeq5PCxXSQlenXxrLUwJL5cf2lnTRKxcxACRyKwCe2hI gQWWcFzrugxVd9m+GgijrcEl8n0ZJk/f4ZcBDcMSOOgoEG4u8bgwsaZ9S8r6nHoS IJXGjtnRJrUTTgJFhLVx0ziP2wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFMrZY5bO 19BPuiqv7z4IeBhe0MJTMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMUQ1OEUxRDZD NjJEMTFGMEFBQzU5MTZGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBivyYMA0GCSqGSIb3DQEBCwUAA4IBAQAKpawK8b8d21F2ydnNKnGt 8dpgO+MCkwnUVJsCfQO5+XfsVsyRZ9fCfNj1buk6Gt0PYLM7DFvqsKWgglE2z7oM pr5L4+0kJnj1GPh4fwdjciTwHGJSkMogEpf+xfJPPuxnRG/oUfhFM2skfQeMaZk4 86999BT6s7MtMcfKoEbP0/znOA70oXNtaMlliaqKMiV5IiblbhgjKAq3QjmFll3F HFSmot6NNlhulJU5obHOqLm67MOlINg+v6AboTzKs9XyhnfauZu1nClK+Ceb/sqL p35ghOb8OivqVaTIHS5DBqbET9vwAKqIBkXUWVlj7o+47ZFtz7V8WoA3k8GAmTxq -----END CERTIFICATE-----Generated at Sat Mar 7 22:53:58 2026 by rpki-client