$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa File: 742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa (raw, json) Hash identifier: YBqViBQesbOLuiyWG1mxKSfgFJnBXFW/RQV3LMU20Ts= Subject key identifier: 66:63:4D:91:DA:BC:1D:8B:62:9D:FF:56:05:7E:03:0D:8C:73:08:F1 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2112 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa Signing time: Mon 02 Mar 2026 23:21:24 +0000 ROA not before: Thu 26 Feb 2026 09:51:37 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150895 IP address blocks: 157.66.48.0/23 maxlen: 23 157.66.222.0/23 maxlen: 23 157.66.224.0/23 maxlen: 23 160.22.80.0/23 maxlen: 24 160.22.120.0/23 maxlen: 23 160.25.72.0/23 maxlen: 23 160.30.50.0/23 maxlen: 23 160.30.136.0/23 maxlen: 23 160.191.86.0/23 maxlen: 24 160.191.160.0/24 maxlen: 24 160.191.214.0/23 maxlen: 23 160.250.4.0/23 maxlen: 23 160.250.128.0/23 maxlen: 23 160.250.132.0/23 maxlen: 23 160.250.180.0/23 maxlen: 24 160.250.186.0/23 maxlen: 24 161.248.4.0/23 maxlen: 23 161.248.178.0/23 maxlen: 23 161.248.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8466 (0x2112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Feb 26 09:51:37 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61b74-022a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:06:d5:77:00:99:19:36:45:ce:38:f5:53:78: 10:da:78:ad:f2:7f:a5:f1:30:50:99:fc:39:ff:dc: fa:3b:99:67:a4:ea:02:c4:f7:54:8d:8a:4e:ef:33: 3a:5c:92:79:88:7e:f9:d2:a9:41:26:18:e8:3c:9b: e9:26:d8:e8:ac:0e:59:b7:02:0f:a3:d6:27:6f:54: 13:df:bb:5d:df:e5:10:cb:8d:ab:d1:d1:69:d9:aa: 2a:7e:2e:06:b8:97:ef:ba:9a:49:00:eb:a4:d7:20: 60:55:12:ee:67:60:a6:fb:ba:46:6a:8a:7f:9a:4b: ff:c7:fb:94:40:57:3f:27:60:41:7f:d2:eb:07:b1: 5e:34:6b:76:65:dc:59:a7:af:c5:55:4f:9d:e7:8b: d8:a2:b0:2d:0a:ac:00:d7:23:1a:8b:0a:68:0a:e0: 1f:c2:dc:60:4a:97:ce:5a:8f:6c:f6:09:92:81:cf: 14:5c:4b:cb:59:48:c2:be:52:9e:8e:18:ba:e8:91: eb:d9:b2:47:79:f3:f5:dc:32:ea:64:4d:c6:53:60: c4:be:7b:e9:f7:f1:c2:3f:8c:c2:33:d9:3a:04:e8: 36:01:6a:f2:43:9f:29:72:cf:64:26:f7:6e:3f:9d: db:fb:7c:d8:30:31:45:34:45:97:23:14:8b:37:f0: a3:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:63:4D:91:DA:BC:1D:8B:62:9D:FF:56:05:7E:03:0D:8C:73:08:F1 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.66.48.0/23 157.66.222.0-157.66.225.255 160.22.80.0/23 160.22.120.0/23 160.25.72.0/23 160.30.50.0/23 160.30.136.0/23 160.191.86.0/23 160.191.160.0/24 160.191.214.0/23 160.250.4.0/23 160.250.128.0/23 160.250.132.0/23 160.250.180.0/23 160.250.186.0/23 161.248.4.0/23 161.248.178.0/23 161.248.238.0/23 Signature Algorithm: sha256WithRSAEncryption 97:77:16:f4:d2:be:50:85:b8:7b:b5:17:8d:03:94:89:11:aa: 95:bc:f2:dc:b8:b1:2d:a2:9c:1b:c6:41:0a:54:20:f1:89:0c: 7c:3a:83:3a:d3:c1:32:a2:a5:40:62:3d:ba:6d:69:62:ef:cb: 69:5c:de:d0:69:a3:22:e8:18:b8:7a:ce:e1:8b:c5:9d:ca:8f: fc:a4:c5:d7:fc:c1:5f:70:e7:94:f3:c5:21:75:83:7f:7b:97: 4f:6e:92:e5:ab:35:ef:6d:f8:6f:8e:9d:4f:69:1a:22:c5:76: b4:61:8d:8d:39:1e:4b:c3:e0:69:82:70:9c:cb:70:c6:ed:58: ba:29:43:0e:1b:7f:d2:a7:20:b2:2e:cc:cf:88:e4:29:3b:e0: 5b:59:b1:59:0e:3e:de:7d:51:41:4e:e3:6f:06:2f:1d:1b:ea: 77:82:e7:56:98:39:86:09:02:7f:d5:50:95:c7:20:5b:f6:27: c0:59:e0:e1:14:d6:8d:ad:18:fa:43:c9:4d:cf:cc:e5:66:4d: 71:30:58:f2:3f:83:dc:a3:5d:e2:a2:56:f9:34:4a:c5:31:e0: 7e:52:d1:e7:60:3d:ab:17:cd:d8:31:50:e7:3c:8c:2c:1e:29: 31:d3:87:01:10:7c:fd:34:6a:18:22:4b:a0:4a:99:94:f1:61: 46:fb:fe:b2 -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgICIRIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYwMjI2MDk1MTM3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWI3NC0wMjJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQbVdwCZGTZFzjj1U3gQ2nit8n+l8TBQmfw5/9z6O5lnpOoCxPdUjYpO7zM6 XJJ5iH750qlBJhjoPJvpJtjorA5ZtwIPo9Ynb1QT37td3+UQy42r0dFp2aoqfi4G uJfvuppJAOuk1yBgVRLuZ2Cm+7pGaop/mkv/x/uUQFc/J2BBf9LrB7FeNGt2ZdxZ p6/FVU+d54vYorAtCqwA1yMaiwpoCuAfwtxgSpfOWo9s9gmSgc8UXEvLWUjCvlKe jhi66JHr2bJHefP13DLqZE3GU2DEvnvp9/HCP4zCM9k6BOg2AWryQ58pcs9kJvdu P53b+3zYMDFFNEWXIxSLN/CjFwIDAQABo4ICzzCCAsswHQYDVR0OBBYEFGZjTZHa vB2LYp3/VgV+Aw2McwjxMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNzQyQzQwQzBB RTBBMTFFRjlCMUE5QjNGQzRGOUFFMDIucm9hMIGNBggrBgEFBQcBBwEB/wR+MHww egQCAAEwdAMEAZ1CMDAMAwQBnULeAwQBnULgAwQBoBZQAwQBoBZ4AwQBoBlIAwQB oB4yAwQBoB6IAwQBoL9WAwQAoL+gAwQBoL/WAwQBoPoEAwQBoPqAAwQBoPqEAwQB oPq0AwQBoPq6AwQBofgEAwQBofiyAwQBofjuMA0GCSqGSIb3DQEBCwUAA4IBAQCX dxb00r5Qhbh7tReNA5SJEaqVvPLcuLEtopwbxkEKVCDxiQx8OoM608EyoqVAYj26 bWli78tpXN7QaaMi6Bi4es7hi8Wdyo/8pMXX/MFfcOeU88UhdYN/e5dPbpLlqzXv bfhvjp1PaRoixXa0YY2NOR5Lw+BpgnCcy3DG7Vi6KUMOG3/SpyCyLszPiOQpO+Bb WbFZDj7efVFBTuNvBi8dG+p3gudWmDmGCQJ/1VCVxyBb9ifAWeDhFNaNrRj6Q8lN z8zlZk1xMFjyP4Pco13iolb5NErFMeB+UtHnYD2rF83YMVDnPIwsHikx04cBEHz9 NGoYIkugSpmU8WFG+/6y -----END CERTIFICATE-----Generated at Sat Mar 7 22:53:58 2026 by rpki-client