$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa File: 4A181CDA609011F0AB85BC5AC4F9AE02.roa (raw, json) Hash identifier: OCB7lSH8OjfwIB5qW0F7amuPtylesL0tH2ZsOp/wbTU= Subject key identifier: 8D:D4:68:1F:53:0A:5C:97:AA:96:1C:DF:31:5B:2B:BC:A1:0D:4B:FA Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2124 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa Signing time: Mon 02 Mar 2026 23:21:42 +0000 ROA not before: Sun 26 Oct 2025 01:56:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151858 IP address blocks: 157.10.52.0/23 maxlen: 23 157.15.84.0/23 maxlen: 23 157.20.82.0/23 maxlen: 23 160.25.166.0/23 maxlen: 23 160.187.146.0/23 maxlen: 23 160.191.86.0/23 maxlen: 23 160.191.88.0/23 maxlen: 23 160.250.180.0/23 maxlen: 23 161.248.82.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8484 (0x2124) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 26 01:56:34 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61b86-1fe0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ff:16:5b:76:ed:80:5e:33:ea:c1:10:bb:db: be:e1:9b:7e:f2:fc:ca:f1:a4:85:91:28:b2:a8:04: 57:63:0b:08:22:82:41:15:0b:bc:be:2a:3e:41:1e: 95:ea:d2:93:b4:35:84:33:dc:57:e8:3c:36:69:5d: a6:78:85:9b:96:75:20:a9:f4:91:cf:8b:cb:13:d1: 5d:8b:50:a9:d7:49:09:92:7a:45:a5:be:1d:b2:41: 37:23:d2:0b:94:d8:e4:ec:d6:c9:1f:77:59:22:ea: 5a:4d:5c:f3:c0:38:f3:a8:c7:60:cf:8c:4e:5f:49: bb:4f:40:d4:3f:0b:4d:a7:ef:54:ea:bb:d6:5e:47: 0a:a4:fe:49:3c:a2:d3:95:fe:7c:01:a7:cd:c9:84: f7:82:2e:25:62:a1:73:a8:8a:7b:59:8f:ac:e9:1f: 78:40:a8:d1:9c:d2:5c:ab:31:21:51:d5:48:0c:6f: 71:fa:9d:42:ef:d7:79:a8:c7:bc:5d:c7:62:29:da: be:b8:5f:e0:80:c4:4f:20:fd:d2:1e:e3:4f:7f:1d: f6:31:35:96:17:bd:8b:21:2e:99:33:9d:7f:18:90: 5d:fa:ee:a3:32:ee:c7:4f:3d:ab:a6:45:61:a5:1d: b2:e6:98:d0:0a:ec:df:98:78:8a:7e:ac:05:09:c4: e2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:D4:68:1F:53:0A:5C:97:AA:96:1C:DF:31:5B:2B:BC:A1:0D:4B:FA X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/4A181CDA609011F0AB85BC5AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.52.0/23 157.15.84.0/23 157.20.82.0/23 160.25.166.0/23 160.187.146.0/23 160.191.86.0-160.191.89.255 160.250.180.0/23 161.248.82.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:b0:d9:1a:1e:a8:64:91:c5:87:a5:f9:57:ca:11:f3:eb:8c: 86:47:3b:d5:15:e0:2f:be:1a:db:3c:c9:5d:b8:61:c3:78:b5: 41:32:21:dc:5a:b3:fc:b2:fb:be:21:f6:36:d2:19:ce:68:67: 86:a5:3e:28:41:12:49:99:17:81:d1:44:14:f7:ac:2e:30:22: f4:35:02:bc:10:e9:c1:58:24:50:e5:ab:de:67:c1:3f:92:8c: f9:87:fc:7e:90:5d:d4:ef:f2:c2:0f:2e:ec:91:b0:e8:13:91: 42:bf:a6:01:5d:f9:64:98:2d:78:1b:26:a1:ef:06:c9:1f:ab: 83:5e:89:7c:dd:2b:c2:68:3f:0c:0e:07:98:fe:d8:29:09:c1: 65:ee:18:ab:8f:ec:5c:fc:c2:7f:23:63:8d:69:da:60:e7:c7: 8d:21:e5:32:eb:5b:a0:aa:f0:26:e3:57:f4:08:22:3e:1a:be: 9d:1b:99:a3:2e:6a:f2:42:ef:65:99:b6:3a:18:82:48:3d:f2: 4c:5f:48:d0:03:dd:66:fa:23:eb:ad:0f:53:31:10:da:fb:d4: c7:dd:98:58:f6:5e:92:b9:6a:7d:75:f5:de:34:a2:c8:8a:49: 25:15:f4:42:fb:52:a0:9f:3c:3a:aa:78:2b:05:ef:49:e3:97: 74:a2:e7:1e -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgICISQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUxMDI2MDE1NjM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWI4Ni0xZmUwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoP8WW3btgF4z6sEQu9u+4Zt+8vzK8aSFkSiyqARXYwsIIoJBFQu8vio+QR6V 6tKTtDWEM9xX6Dw2aV2meIWblnUgqfSRz4vLE9Fdi1Cp10kJknpFpb4dskE3I9IL lNjk7NbJH3dZIupaTVzzwDjzqMdgz4xOX0m7T0DUPwtNp+9U6rvWXkcKpP5JPKLT lf58AafNyYT3gi4lYqFzqIp7WY+s6R94QKjRnNJcqzEhUdVIDG9x+p1C79d5qMe8 XcdiKdq+uF/ggMRPIP3SHuNPfx32MTWWF72LIS6ZM51/GJBd+u6jMu7HTz2rpkVh pR2y5pjQCuzfmHiKfqwFCcTiWwIDAQABo4ICkjCCAo4wHQYDVR0OBBYEFI3UaB9T ClyXqpYc3zFbK7yhDUv6MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNEExODFDREE2 MDkwMTFGMEFCODVCQzVBQzRGOUFFMDIucm9hMFEGCCsGAQUFBwEHAQH/BEIwQDA+ BAIAATA4AwQBnQo0AwQBnQ9UAwQBnRRSAwQBoBmmAwQBoLuSMAwDBAGgv1YDBAGg v1gDBAGg+rQDBAGh+FIwDQYJKoZIhvcNAQELBQADggEBAHqw2RoeqGSRxYel+VfK EfPrjIZHO9UV4C++Gts8yV24YcN4tUEyIdxas/yy+74h9jbSGc5oZ4alPihBEkmZ F4HRRBT3rC4wIvQ1ArwQ6cFYJFDlq95nwT+SjPmH/H6QXdTv8sIPLuyRsOgTkUK/ pgFd+WSYLXgbJqHvBskfq4NeiXzdK8JoPwwOB5j+2CkJwWXuGKuP7Fz8wn8jY41p 2mDnx40h5TLrW6Cq8CbjV/QIIj4avp0bmaMuavJC72WZtjoYgkg98kxfSNAD3Wb6 I+utD1MxENr71MfdmFj2XpK5an119d40osiKSSUV9EL7UqCfPDqqeCsF70njl3Si 5x4= -----END CERTIFICATE-----Generated at Sat Mar 7 22:52:30 2026 by rpki-client