$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa File: 7390E6C4B69011EEA6557474C4F9AE02.roa (raw, json) Hash identifier: LUTn5rd+nzeJDXfcYw537tjJEn7PsKQcmlNRL6IwtUA= Subject key identifier: C4:9E:68:79:11:C8:CD:B1:D8:E9:97:AD:DB:08:12:66:3F:A7:6B:1D Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 211D Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa Signing time: Mon 02 Mar 2026 23:21:35 +0000 ROA not before: Tue 16 Dec 2025 09:10:34 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 63737 IP address blocks: 144.79.12.0/23 maxlen: 24 157.10.48.0/23 maxlen: 23 157.10.50.0/23 maxlen: 23 157.66.156.0/23 maxlen: 23 157.66.158.0/23 maxlen: 23 160.25.76.0/23 maxlen: 23 160.25.168.0/23 maxlen: 24 160.25.234.0/23 maxlen: 23 160.30.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8477 (0x211d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Dec 16 09:10:34 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61b7f-958d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:a9:22:f0:30:69:71:ae:5b:a1:e4:e4:27: 93:da:af:66:e4:00:77:61:ad:11:2e:47:6a:c3:4d: e9:39:a7:81:73:12:22:ef:d7:35:f6:4e:f3:0f:1f: 82:04:21:a4:37:af:94:a6:c7:e4:d8:40:49:5b:8f: 92:ee:81:c7:34:8c:dc:80:66:96:72:cd:02:4e:d4: ae:45:bb:63:58:f0:a3:cd:d1:d8:9c:7e:da:9c:89: 01:61:fe:93:17:18:db:96:64:52:1d:0b:81:76:1d: f8:aa:a9:ef:55:73:20:af:17:b1:d5:10:e4:49:2a: e5:3c:03:65:c6:bc:60:10:40:66:7f:f0:3e:b8:43: 55:ce:de:54:a0:99:dc:bf:75:94:2f:ad:8a:47:f6: 68:77:45:94:17:23:1a:f7:2a:45:3e:a8:76:47:4c: f8:ef:bf:e1:6a:6f:dd:b2:b9:43:f2:88:cf:1e:dc: 6d:df:8a:fa:88:ca:92:8e:60:8e:44:e8:90:d1:e1: 20:e3:70:19:14:d7:36:c3:1a:cc:0b:15:3f:f8:b6: 5d:b8:82:1f:5f:61:56:cf:99:20:d2:e0:d0:5c:e7: 15:3a:4e:83:dd:d3:63:7c:c6:6b:a3:f6:67:6e:7d: ad:e4:1a:93:f1:a2:82:89:a6:22:cd:e7:e2:a2:67: d6:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9E:68:79:11:C8:CD:B1:D8:E9:97:AD:DB:08:12:66:3F:A7:6B:1D X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7390E6C4B69011EEA6557474C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.79.12.0/23 157.10.48.0/22 157.66.156.0/22 160.25.76.0/23 160.25.168.0/23 160.25.234.0/23 160.30.204.0/23 Signature Algorithm: sha256WithRSAEncryption 55:94:82:5a:c4:63:f8:1c:3a:cd:bc:61:5f:f0:93:41:24:fe: 74:5d:cd:3b:31:89:95:b5:47:d5:7d:99:de:46:48:e4:e8:39: a8:ec:ab:1d:ac:b5:c1:a5:58:22:d7:41:53:1d:26:a7:96:5d: be:0d:6f:8f:16:09:b8:02:28:4e:0e:05:54:64:17:a6:1e:41: fd:47:64:e9:5e:ca:05:dd:2d:e5:a7:eb:98:3b:e2:c2:25:fc: a3:77:13:75:25:42:4d:1c:4f:e9:37:23:4b:4f:4e:f8:28:9a: 28:d5:1c:09:85:65:e7:a3:a5:3b:05:1b:41:8f:ca:be:92:2e: 16:6e:03:ac:8b:9b:1e:d3:5e:6c:4c:24:da:89:76:91:35:fa: 7a:0a:01:d6:c6:cd:9e:7a:9c:be:8e:4e:cd:00:85:63:76:ad: aa:02:5a:a7:23:d5:91:79:d9:98:25:d8:5f:16:0e:07:ba:d5: 7b:c8:c5:ed:ce:36:5c:1c:34:43:ef:12:6f:c6:3a:fd:91:2c: 5f:2b:9a:cd:bc:1a:68:74:84:25:cb:a8:e6:ad:e5:ea:45:80: eb:e8:34:4f:51:77:51:e5:eb:4f:ac:f1:08:a4:39:76:8b:79: 5e:1b:d4:da:c4:0f:b6:f1:6e:b3:6d:e3:9c:3c:48:fe:7c:e5: 69:a8:8c:51 -----BEGIN CERTIFICATE----- MIIFYDCCBEigAwIBAgICIR0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUxMjE2MDkxMDM0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWI3Zi05NThkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUWpIvAwaXGuW6Hk5CeT2q9m5AB3Ya0RLkdqw03pOaeBcxIi79c19k7zDx+C BCGkN6+Upsfk2EBJW4+S7oHHNIzcgGaWcs0CTtSuRbtjWPCjzdHYnH7anIkBYf6T FxjblmRSHQuBdh34qqnvVXMgrxex1RDkSSrlPANlxrxgEEBmf/A+uENVzt5UoJnc v3WUL62KR/Zod0WUFyMa9ypFPqh2R0z477/ham/dsrlD8ojPHtxt34r6iMqSjmCO ROiQ0eEg43AZFNc2wxrMCxU/+LZduIIfX2FWz5kg0uDQXOcVOk6D3dNjfMZro/Zn bn2t5BqT8aKCiaYizefiomfWiwIDAQABo4IChDCCAoAwHQYDVR0OBBYEFMSeaHkR yM2x2OmXrdsIEmY/p2sdMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNzM5MEU2QzRC NjkwMTFFRUE2NTU3NDc0QzRGOUFFMDIucm9hMEMGCCsGAQUFBwEHAQH/BDQwMjAw BAIAATAqAwQBkE8MAwQCnQowAwQCnUKcAwQBoBlMAwQBoBmoAwQBoBnqAwQBoB7M MA0GCSqGSIb3DQEBCwUAA4IBAQBVlIJaxGP4HDrNvGFf8JNBJP50Xc07MYmVtUfV fZneRkjk6Dmo7KsdrLXBpVgi10FTHSanll2+DW+PFgm4AihODgVUZBemHkH9R2Tp XsoF3S3lp+uYO+LCJfyjdxN1JUJNHE/pNyNLT074KJoo1RwJhWXno6U7BRtBj8q+ ki4WbgOsi5se015sTCTaiXaRNfp6CgHWxs2eepy+jk7NAIVjdq2qAlqnI9WRedmY JdhfFg4HutV7yMXtzjZcHDRD7xJvxjr9kSxfK5rNvBpodIQly6jmreXqRYDr6DRP UXdR5etPrPEIpDl2i3leG9TaxA+28W6zbeOcPEj+fOVpqIxR -----END CERTIFICATE-----Generated at Sat Mar 7 22:53:20 2026 by rpki-client