$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FFE79CEB30E11F0B1F91F33C4F9AE02.roa File: 5FFE79CEB30E11F0B1F91F33C4F9AE02.roa (raw, json) Hash identifier: CO+k1GZ+eJfgLE5DJN9tA7sBB26Au2+oGW7mtDicD9M= Subject key identifier: A3:A3:7A:2C:D5:1F:1B:A3:E5:41:3D:D7:82:A0:F0:B4:B2:5E:9E:59 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2123 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FFE79CEB30E11F0B1F91F33C4F9AE02.roa Signing time: Mon 02 Mar 2026 23:21:41 +0000 ROA not before: Tue 04 Nov 2025 10:14:45 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153410 IP address blocks: 160.191.230.0/23 maxlen: 23 165.101.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8483 (0x2123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Nov 4 10:14:45 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61b85-a856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:4a:4b:37:0c:8c:2c:e0:f9:4e:61:6c:56:b1: 43:5d:94:21:dd:c4:76:2f:c6:f0:c0:f3:ef:0a:f2: 3a:9e:12:08:ad:6e:4e:27:2f:97:c1:01:bd:b0:65: 58:64:15:bd:64:f0:d2:fe:9e:d6:34:8b:31:d4:04: bb:e0:b4:fd:56:d5:a2:41:05:71:98:f8:2a:08:1a: 8a:ba:91:f5:6b:3f:84:ed:ee:2d:f2:32:37:13:d4: d0:60:a6:bd:c1:6f:bc:7b:83:41:b5:66:9d:a1:f6: 65:fe:4d:48:39:26:5d:f7:c4:6a:1b:c3:b3:59:71: 24:fd:d5:77:c1:c9:0b:22:cf:44:38:23:7a:2a:7c: 2f:d5:88:98:cf:b4:76:21:56:03:9b:17:91:96:e5: ee:41:7d:0b:ec:5f:7f:1a:3a:30:df:26:cd:ea:c3: f5:3c:d7:7a:f1:3f:6b:40:2c:33:11:4f:ae:a5:56: 63:55:35:12:89:2a:03:c9:a4:22:ec:cf:c5:5b:6b: d5:8b:36:7b:2f:1c:e9:bc:52:74:d8:b3:d6:f8:c1: ae:39:f0:b9:5b:21:66:54:c9:c6:51:3e:7d:f0:ed: 59:0f:d9:09:f0:6a:fb:8d:dc:b3:73:af:22:19:6f: 15:71:65:e8:b8:36:c1:ef:dc:37:fb:c8:f3:eb:c1: b9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A3:7A:2C:D5:1F:1B:A3:E5:41:3D:D7:82:A0:F0:B4:B2:5E:9E:59 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5FFE79CEB30E11F0B1F91F33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.191.230.0/23 165.101.38.0/23 Signature Algorithm: sha256WithRSAEncryption 1a:71:cb:50:28:bb:9c:d1:4a:01:1f:9f:65:45:56:30:b2:71: 39:8e:c4:67:78:41:94:fd:3a:68:54:d4:84:84:a7:62:fd:79: f1:da:3d:2b:f6:b7:c1:a2:75:8b:0f:29:3d:f8:39:71:5a:b3: 54:b2:3a:e6:34:23:0b:e3:a4:05:6b:68:ec:ab:65:cd:1e:68: 0c:49:fb:87:e4:a1:38:d7:4d:10:c0:6c:54:bc:e7:f8:e8:64: 69:56:a7:60:c6:a2:4f:6c:6d:bc:a9:e0:b6:c8:52:06:dc:05: 1e:fa:45:71:49:86:7b:d9:c4:ec:52:cc:10:42:d8:b3:b8:89: ea:dd:75:15:71:f3:64:bf:f9:74:46:29:12:b6:2c:f7:48:26: 83:dd:f1:49:82:82:46:e0:28:4c:3d:4f:32:e9:56:ba:9f:dc: a8:f9:51:ab:c0:be:13:d6:91:e5:a8:ba:5e:f6:23:f4:2c:5c: 21:50:7d:04:94:50:8b:db:80:00:52:95:c8:bc:dd:1c:9e:d9: 03:7a:a4:68:86:9d:56:cf:33:f5:0b:37:8b:a9:fe:cb:00:da: 36:3e:c4:8a:2b:64:a5:b4:b5:ca:87:db:06:63:19:16:5b:2b: c8:f0:21:7c:55:33:fb:88:c5:b2:f5:f7:da:3c:5a:f1:52:92: 08:ea:da:10 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICISMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUxMTA0MTAxNDQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWI4NS1hODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz0pLNwyMLOD5TmFsVrFDXZQh3cR2L8bwwPPvCvI6nhIIrW5OJy+XwQG9sGVY ZBW9ZPDS/p7WNIsx1AS74LT9VtWiQQVxmPgqCBqKupH1az+E7e4t8jI3E9TQYKa9 wW+8e4NBtWadofZl/k1IOSZd98RqG8OzWXEk/dV3wckLIs9EOCN6Knwv1YiYz7R2 IVYDmxeRluXuQX0L7F9/Gjow3ybN6sP1PNd68T9rQCwzEU+upVZjVTUSiSoDyaQi 7M/FW2vVizZ7LxzpvFJ02LPW+MGuOfC5WyFmVMnGUT598O1ZD9kJ8Gr7jdyzc68i GW8VcWXouDbB79w3+8jz68G5VQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFKOjeizV Hxuj5UE914Kg8LSyXp5ZMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNUZGRTc5Q0VC MzBFMTFGMEIxRjkxRjMzQzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBoL/mAwQBpWUmMA0GCSqGSIb3DQEBCwUAA4IBAQAacctQKLuc0UoB H59lRVYwsnE5jsRneEGU/TpoVNSEhKdi/Xnx2j0r9rfBonWLDyk9+DlxWrNUsjrm NCML46QFa2jsq2XNHmgMSfuH5KE4100QwGxUvOf46GRpVqdgxqJPbG28qeC2yFIG 3AUe+kVxSYZ72cTsUswQQtizuInq3XUVcfNkv/l0RikStiz3SCaD3fFJgoJG4ChM PU8y6Va6n9yo+VGrwL4T1pHlqLpe9iP0LFwhUH0ElFCL24AAUpXIvN0cntkDeqRo hp1WzzP1CzeLqf7LANo2PsSKK2SltLXKh9sGYxkWWyvI8CF8VTP7iMWy9ffaPFrx UpII6toQ -----END CERTIFICATE-----Generated at Sat Mar 7 22:52:35 2026 by rpki-client