$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7E4DA1FCC5F611F08DB9CA4BC4F9AE02.roa File: 7E4DA1FCC5F611F08DB9CA4BC4F9AE02.roa (raw, json) Hash identifier: F04IUnSpgbqyvga6sdU+yvTsi81gJb00APihmzGFoD4= Subject key identifier: 0D:64:44:94:E8:9E:FF:F5:83:FE:55:C3:65:6F:1A:65:DB:85:9B:D5 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2121 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7E4DA1FCC5F611F08DB9CA4BC4F9AE02.roa Signing time: Mon 02 Mar 2026 23:21:39 +0000 ROA not before: Thu 20 Nov 2025 09:51:32 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 131429 IP address blocks: 165.99.16.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8481 (0x2121) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Nov 20 09:51:32 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61b83-a5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cd:4d:0f:c7:75:34:4a:fd:89:4f:1d:2e:16: 5f:0b:e1:be:77:d6:1a:e1:f9:3d:16:d1:96:c0:99: 74:d5:96:df:28:34:b3:72:25:08:fd:35:ab:7f:60: 07:b3:af:2b:2f:7c:6f:a8:4b:82:f0:42:92:35:88: 3f:2a:3c:b9:15:e3:17:fe:a0:a2:ae:9b:e6:64:83: 0c:f2:dd:80:ea:1d:46:31:ba:aa:41:12:d1:d5:e8: 97:53:bf:9c:3d:89:c8:8c:b0:27:00:47:c9:f6:cc: 00:d9:e6:7e:f0:15:27:ee:d8:40:e8:84:cf:6c:53: 2d:b6:ac:7d:b1:5d:dd:53:7b:be:a0:ce:bf:c7:d5: b5:55:25:07:39:67:b1:71:b6:bd:24:ef:ac:5c:dc: 99:56:eb:9d:26:21:80:7f:11:61:f8:a5:ba:fc:1a: e1:10:15:3a:00:c9:29:93:ce:1b:72:4d:3e:3f:00: a4:43:74:75:57:5f:21:ad:d6:b9:ff:01:94:38:d4: 04:42:0a:c6:07:32:8f:4d:2b:3d:6f:3c:e8:d2:df: ab:16:bc:f7:71:bb:1c:d7:4d:db:b4:76:49:52:17: a5:0f:b3:90:ae:9b:21:a3:55:9d:4d:89:00:1c:7a: ba:11:4e:f3:30:ff:e6:95:f9:fb:f4:45:8b:84:70: 4c:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:64:44:94:E8:9E:FF:F5:83:FE:55:C3:65:6F:1A:65:DB:85:9B:D5 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7E4DA1FCC5F611F08DB9CA4BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.99.16.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:56:2b:27:63:f5:71:54:8d:dd:1b:6c:7b:10:3e:75:cf:57: c7:5f:69:16:33:d1:8e:d2:bf:d0:97:11:e2:47:73:96:07:ec: 9b:8d:96:5f:a8:56:cf:1b:37:35:bd:04:98:5d:e8:b8:e6:a4: 97:b2:a3:75:76:48:1c:23:d4:fe:ef:cf:f0:07:36:af:61:0f: 26:f5:16:1e:d6:6a:ca:0d:13:05:27:cf:ed:7f:21:f6:07:84: c5:69:6f:f5:6d:6f:23:25:93:14:59:fd:b6:5c:29:1b:8d:07: 0a:e0:bb:e2:0e:99:26:e5:86:a6:0b:78:7a:f5:16:d6:e3:e4: 1d:d5:96:3f:b1:2c:20:73:b6:a4:6e:ec:db:b9:a4:ff:e9:69: 6c:51:31:08:b0:d1:2a:c1:60:54:30:29:73:5d:72:cd:6d:7e: 83:b6:a1:4b:2f:13:f0:2c:fb:e4:35:3d:0d:cc:82:f9:b3:12: dc:b1:01:7d:5c:1e:e1:24:2d:19:16:ee:d4:e0:b0:d9:ea:81: 3f:78:1e:94:b5:6f:b0:c4:b2:16:c5:56:07:a7:3a:15:03:d5: cb:d4:56:95:76:e7:8c:6c:ca:91:d5:50:f0:4f:83:f7:22:2e: 2a:47:b2:03:fe:c7:b4:30:a8:00:b8:e0:36:01:13:ce:02:e0: 83:ed:9a:a6 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICISEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUxMTIwMDk1MTMyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWI4My1hNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAys1ND8d1NEr9iU8dLhZfC+G+d9Ya4fk9FtGWwJl01ZbfKDSzciUI/TWrf2AH s68rL3xvqEuC8EKSNYg/Kjy5FeMX/qCirpvmZIMM8t2A6h1GMbqqQRLR1eiXU7+c PYnIjLAnAEfJ9swA2eZ+8BUn7thA6ITPbFMttqx9sV3dU3u+oM6/x9W1VSUHOWex cba9JO+sXNyZVuudJiGAfxFh+KW6/BrhEBU6AMkpk84bck0+PwCkQ3R1V18hrda5 /wGUONQEQgrGBzKPTSs9bzzo0t+rFrz3cbsc103btHZJUhelD7OQrpsho1WdTYkA HHq6EU7zMP/mlfn79EWLhHBMwQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA1kRJTo nv/1g/5Vw2VvGmXbhZvVMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvN0U0REExRkND NUY2MTFGMDhEQjlDQTRCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWMQMA0GCSqGSIb3DQEBCwUAA4IBAQAKVisnY/VxVI3dG2x7ED51 z1fHX2kWM9GO0r/QlxHiR3OWB+ybjZZfqFbPGzc1vQSYXei45qSXsqN1dkgcI9T+ 78/wBzavYQ8m9RYe1mrKDRMFJ8/tfyH2B4TFaW/1bW8jJZMUWf22XCkbjQcK4Lvi Dpkm5YamC3h69RbW4+Qd1ZY/sSwgc7akbuzbuaT/6WlsUTEIsNEqwWBUMClzXXLN bX6DtqFLLxPwLPvkNT0NzIL5sxLcsQF9XB7hJC0ZFu7U4LDZ6oE/eB6UtW+wxLIW xVYHpzoVA9XL1FaVdueMbMqR1VDwT4P3Ii4qR7ID/se0MKgAuOA2ARPOAuCD7Zqm -----END CERTIFICATE-----Generated at Sat Mar 7 22:51:31 2026 by rpki-client