$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/40CD7F9A4F4711EFA3EF0919C4F9AE02.roa File: 40CD7F9A4F4711EFA3EF0919C4F9AE02.roa (raw, json) Hash identifier: dZTlmyix1EKKmRUhOv3aoiGKASHuL52iJGnAWYXODvU= Subject key identifier: A0:87:9A:59:A8:0D:4F:58:22:6D:AD:2F:3C:78:9B:E7:0D:9F:2D:30 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2083 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/40CD7F9A4F4711EFA3EF0919C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:05:40 +0000 ROA not before: Thu 28 Aug 2025 14:50:46 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135912 IP address blocks: 160.19.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8323 (0x2083) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:50:46 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a609b4-b027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ef:48:d3:a8:7a:76:2b:e0:02:1a:c9:9e:51: f7:a2:ac:ac:cb:63:06:49:3f:83:20:56:03:c7:81: 39:98:e1:36:7d:92:8f:49:f7:48:c1:64:c9:26:41: 0d:bb:3d:30:0a:e1:be:c2:37:2b:01:29:76:35:1b: 6d:2e:10:e2:97:be:67:ff:bf:94:3b:e3:63:c2:c6: 64:ac:e2:08:17:05:28:bf:d3:4c:e2:e5:4d:52:12: 18:04:04:1f:be:7f:65:4a:7f:82:b2:08:71:22:c1: 74:2f:97:0b:61:c5:f3:c8:cc:02:10:8f:ec:94:18: d9:b1:fe:81:1f:e3:64:22:94:da:da:c8:2d:f6:5f: bd:33:18:f9:b5:02:00:0b:07:c2:4b:d6:ce:00:3c: 5c:1b:42:38:41:0e:2a:7b:75:ce:e5:f7:43:57:e7: af:7c:ba:c2:71:6d:65:7d:6d:c6:c7:e3:f7:aa:3f: 3e:ac:53:16:1a:af:3a:c1:c9:7a:75:5a:9c:61:c2: 88:f6:e0:96:c4:27:f1:a2:52:04:67:71:d8:9a:37: 70:fb:53:27:1f:7c:b3:08:39:77:67:dd:da:2f:98: 7f:88:b4:51:0e:ab:c7:4b:3e:3b:47:3c:b8:ef:56: 52:f4:1f:dc:1e:7d:6f:77:5e:81:ab:58:30:66:99: bd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:87:9A:59:A8:0D:4F:58:22:6D:AD:2F:3C:78:9B:E7:0D:9F:2D:30 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/40CD7F9A4F4711EFA3EF0919C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.19.159.0/24 Signature Algorithm: sha256WithRSAEncryption 69:21:ec:7c:21:af:dd:a4:93:fd:1c:29:6b:e2:f0:69:db:29: a1:2d:14:e7:47:9b:60:88:48:a6:22:d5:97:cc:70:82:d9:6b: 8d:a3:da:ff:0b:5f:7d:d9:18:88:23:85:bf:02:f2:dc:1c:c1: 80:0e:80:f8:d8:2f:2c:35:55:4c:99:ec:1f:74:49:ba:bc:3b: 68:09:c2:e6:41:4c:8f:45:c4:92:c1:c7:fc:3b:bd:73:33:0c: a2:2c:c2:2e:d5:11:34:d8:bc:ca:db:fa:9e:47:82:62:52:f2: 0f:36:17:5c:30:13:fe:10:92:d2:dc:8b:93:42:ce:8e:8e:af: 21:e9:6c:4a:7d:e0:37:6b:05:16:e5:93:81:ae:1c:77:d5:5f: a0:8f:91:79:83:b8:c6:32:79:72:7e:e3:7b:e9:6a:99:8d:9b: aa:43:02:67:b9:57:dd:05:e0:ae:a7:ce:23:97:4e:e3:e1:74: 67:d5:15:d7:ee:e4:c1:d2:97:2b:1f:6c:76:e0:d5:75:c8:56: 15:31:56:7a:8b:65:3a:d9:81:b9:b6:94:af:05:82:15:9e:93: 0f:18:a6:7d:f9:75:f2:e6:bc:10:a9:54:ec:bd:dc:13:d1:5f: 88:fb:8e:05:81:31:e3:cd:96:47:0a:ef:af:fb:79:4f:b9:dd: 7f:11:d4:9d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIIMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MDQ2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MDliNC1iMDI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyO9I06h6divgAhrJnlH3oqysy2MGST+DIFYDx4E5mOE2fZKPSfdIwWTJJkEN uz0wCuG+wjcrASl2NRttLhDil75n/7+UO+NjwsZkrOIIFwUov9NM4uVNUhIYBAQf vn9lSn+CsghxIsF0L5cLYcXzyMwCEI/slBjZsf6BH+NkIpTa2sgt9l+9Mxj5tQIA CwfCS9bOADxcG0I4QQ4qe3XO5fdDV+evfLrCcW1lfW3Gx+P3qj8+rFMWGq86wcl6 dVqcYcKI9uCWxCfxolIEZ3HYmjdw+1MnH3yzCDl3Z93aL5h/iLRRDqvHSz47Rzy4 71ZS9B/cHn1vd16Bq1gwZpm9dQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKCHmlmo DU9YIm2tLzx4m+cNny0wMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNDBDRDdGOUE0 RjQ3MTFFRkEzRUYwOTE5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoBOfMA0GCSqGSIb3DQEBCwUAA4IBAQBpIex8Ia/dpJP9HClr4vBp 2ymhLRTnR5tgiEimItWXzHCC2WuNo9r/C1992RiII4W/AvLcHMGADoD42C8sNVVM mewfdEm6vDtoCcLmQUyPRcSSwcf8O71zMwyiLMIu1RE02LzK2/qeR4JiUvIPNhdc MBP+EJLS3IuTQs6Ojq8h6WxKfeA3awUW5ZOBrhx31V+gj5F5g7jGMnlyfuN76WqZ jZuqQwJnuVfdBeCup84jl07j4XRn1RXX7uTB0pcrH2x24NV1yFYVMVZ6i2U62YG5 tpSvBYIVnpMPGKZ9+XXy5rwQqVTsvdwT0V+I+44FgTHjzZZHCu+v+3lPud1/EdSd -----END CERTIFICATE-----Generated at Sat Mar 7 22:52:29 2026 by rpki-client