$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7F7DA0D8002911F0AAAD203FC4F9AE02.roa File: 7F7DA0D8002911F0AAAD203FC4F9AE02.roa (raw, json) Hash identifier: 3GgCcG8MH6OHl9VrpSfKakRWT07dwoI5SiPNTXY9aKw= Subject key identifier: A3:56:01:2A:B0:EA:F2:CC:B5:63:36:06:4E:E8:28:AB:88:0F:76:ED Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2128 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7F7DA0D8002911F0AAAD203FC4F9AE02.roa Signing time: Mon 02 Mar 2026 23:21:46 +0000 ROA not before: Thu 28 Aug 2025 14:52:06 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45538 IP address blocks: 160.191.248.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8488 (0x2128) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:52:06 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61b89-c521 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:cd:a4:45:cd:50:32:de:0a:d3:b1:71:4f:ca: c3:85:fb:60:70:c3:41:f3:86:7c:37:fd:1d:4d:28: 8d:58:31:0c:0f:e3:0c:03:6f:2b:88:f1:71:77:ae: 14:3f:50:ef:22:5c:4f:44:75:fd:35:ba:81:05:31: cc:3a:da:32:61:89:17:69:04:75:18:a4:7d:71:35: 70:17:48:4c:ff:3d:3c:f2:b9:39:4a:b3:cb:0f:c7: 61:46:0d:9f:88:ea:9c:da:34:13:ea:0e:3b:c5:21: da:46:7f:b9:a0:4e:c9:1c:e7:9c:4d:0f:0b:53:30: 11:e9:91:00:3c:a6:2e:33:94:97:be:07:92:8b:98: 77:8e:bf:03:6e:be:55:9e:e8:2b:4e:38:7c:e4:d1: f4:ca:c5:9f:f8:32:c8:67:af:11:51:1c:c9:8d:14: 31:c2:67:7f:cb:3c:1c:9a:70:c9:7f:3a:cf:72:88: 67:1c:bf:d7:c0:ee:50:56:80:41:d1:7d:8d:e3:f0: 09:52:9d:ff:57:a2:bc:fd:15:1f:95:fa:eb:f9:1d: 03:8f:5f:3e:49:92:a9:95:75:2e:2c:31:52:0a:f4: 3d:c9:da:e9:2f:c8:9a:19:47:4e:97:fe:e7:be:86: c0:c8:d3:71:3f:d9:fc:a2:28:aa:92:c6:61:ad:91: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:56:01:2A:B0:EA:F2:CC:B5:63:36:06:4E:E8:28:AB:88:0F:76:ED X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7F7DA0D8002911F0AAAD203FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.191.248.0/23 Signature Algorithm: sha256WithRSAEncryption 3d:3e:ec:22:13:a3:e6:4f:e9:d3:b2:e6:f7:75:b5:99:6b:d1: d2:3f:b0:6e:d1:89:7b:fb:ee:35:92:ee:a7:b9:72:d8:31:30: ae:16:e3:7b:df:2f:f3:f0:91:62:91:d4:37:09:c1:96:95:de: 0c:4d:82:6a:66:95:f0:13:5d:ea:4e:dd:cb:86:4d:c0:97:20: ad:0c:03:d4:d1:32:44:c9:cd:e2:33:26:78:8f:28:d2:f3:f6: 43:ad:1f:16:0d:dc:ce:76:c3:c9:bf:99:ac:2b:fd:06:6d:e2: 0b:4d:50:6d:56:8e:a2:19:bd:19:82:a5:b9:69:81:0a:0a:f9: 2c:a6:e6:c7:00:15:52:a9:7d:3e:aa:e6:3a:ed:25:ec:0a:fe: 0d:4d:59:69:45:6e:3a:2b:73:75:d7:41:b2:73:aa:af:51:74: 54:0b:77:6a:18:e4:62:f6:16:4b:54:14:38:3d:d5:e8:0d:62: 70:e8:1f:28:08:92:3b:77:8a:54:91:1d:6c:99:72:dc:22:ee: d8:cc:b4:f9:7e:33:d2:97:bd:f4:16:09:00:5f:96:bf:bb:34: 03:8f:8f:b5:14:cf:6f:b4:2e:f6:38:26:50:ea:ac:bb:92:14: 3d:ac:16:ea:2a:40:b7:c3:59:91:e4:b6:72:a1:c2:63:7d:09: 53:01:1a:74 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICISgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MjA2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWI4OS1jNTIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjs2kRc1QMt4K07FxT8rDhftgcMNB84Z8N/0dTSiNWDEMD+MMA28riPFxd64U P1DvIlxPRHX9NbqBBTHMOtoyYYkXaQR1GKR9cTVwF0hM/z088rk5SrPLD8dhRg2f iOqc2jQT6g47xSHaRn+5oE7JHOecTQ8LUzAR6ZEAPKYuM5SXvgeSi5h3jr8Dbr5V nugrTjh85NH0ysWf+DLIZ68RURzJjRQxwmd/yzwcmnDJfzrPcohnHL/XwO5QVoBB 0X2N4/AJUp3/V6K8/RUflfrr+R0Dj18+SZKplXUuLDFSCvQ9ydrpL8iaGUdOl/7n vobAyNNxP9n8oiiqksZhrZH+fQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKNWASqw 6vLMtWM2Bk7oKKuID3btMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvN0Y3REEwRDgw MDI5MTFGMEFBQUQyMDNGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoL/4MA0GCSqGSIb3DQEBCwUAA4IBAQA9PuwiE6PmT+nTsub3dbWZ a9HSP7Bu0Yl7++41ku6nuXLYMTCuFuN73y/z8JFikdQ3CcGWld4MTYJqZpXwE13q Tt3Lhk3AlyCtDAPU0TJEyc3iMyZ4jyjS8/ZDrR8WDdzOdsPJv5msK/0GbeILTVBt Vo6iGb0ZgqW5aYEKCvkspubHABVSqX0+quY67SXsCv4NTVlpRW46K3N110Gyc6qv UXRUC3dqGORi9hZLVBQ4PdXoDWJw6B8oCJI7d4pUkR1smXLcIu7YzLT5fjPSl730 FgkAX5a/uzQDj4+1FM9vtC72OCZQ6qy7khQ9rBbqKkC3w1mR5LZyocJjfQlTARp0 -----END CERTIFICATE-----Generated at Sat Mar 7 22:52:19 2026 by rpki-client