$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF1FE2BAB5E511EFBD3C4A3EC4F9AE02.roa File: CF1FE2BAB5E511EFBD3C4A3EC4F9AE02.roa (raw, json) Hash identifier: cTetcXFxdTC2WED4K98kks4UE/O0CoYiZati6aEKNrg= Subject key identifier: 6E:51:A9:0C:73:64:D1:93:7F:85:82:EB:99:F5:10:E9:5A:1C:02:48 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2143 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF1FE2BAB5E511EFBD3C4A3EC4F9AE02.roa Signing time: Mon 02 Mar 2026 23:22:13 +0000 ROA not before: Thu 28 Aug 2025 14:51:41 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153005 IP address blocks: 160.187.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8515 (0x2143) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:41 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61ba5-52bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:94:8d:7f:60:a0:d8:42:fc:86:5c:cd:a3:b5: 95:98:2e:2d:74:97:00:ba:64:72:f4:d5:09:bf:a8: e9:e1:6b:06:d8:56:75:f3:cf:79:9a:e5:f0:cb:dc: d6:d6:59:02:08:44:ba:18:64:5d:b6:16:3e:8e:fa: dd:24:3b:19:95:9c:1b:29:95:30:3b:28:11:e4:d9: 20:8e:41:f5:c7:56:22:50:64:8b:14:2f:93:96:c2: dd:01:14:9d:a6:fd:14:39:2e:eb:48:75:4c:ad:80: 8e:7e:a6:ba:50:e1:06:2a:ad:8f:de:66:4f:58:40: 4a:1c:08:73:82:c7:d8:9b:25:33:23:61:9e:6c:53: 4b:49:aa:ba:9d:9b:ac:c3:d6:0d:86:de:bd:90:a6: e6:b6:ed:fc:63:3f:ee:0e:7d:8f:bc:fa:b3:ff:f0: d9:da:55:73:00:40:96:16:15:73:b1:fb:3d:36:b8: 15:46:05:03:0b:43:10:2f:56:5e:4c:8e:6b:dc:9d: f3:1a:ff:78:a0:e9:96:fd:67:f2:46:2a:42:f0:ad: b3:ff:d8:97:c0:8d:0b:3d:80:3c:21:79:7a:0c:62: b9:97:5f:c2:dd:55:7f:cd:05:af:a7:78:f0:77:26: f6:22:f9:1a:3d:03:c4:42:7f:da:78:33:84:c9:de: e1:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:51:A9:0C:73:64:D1:93:7F:85:82:EB:99:F5:10:E9:5A:1C:02:48 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF1FE2BAB5E511EFBD3C4A3EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.187.156.0/23 Signature Algorithm: sha256WithRSAEncryption 83:88:9d:c3:5e:b6:a3:3a:6c:dc:96:ec:fd:ee:f3:49:50:37: 5a:f8:7a:8e:28:c7:65:67:fb:6b:4b:56:c4:6c:53:8e:b4:83: e8:8e:42:eb:aa:71:59:c3:45:b0:27:9d:d4:e9:57:74:88:9e: 39:a0:ce:04:98:60:f0:05:30:31:7d:78:6d:e7:1a:55:a7:fd: fe:2d:77:28:b2:0c:5e:96:fd:6b:d0:a3:f6:d5:18:6d:3f:a1: f3:89:cc:fb:cd:3b:35:9a:3e:33:e4:80:c3:2d:21:c2:fc:ef: 94:1f:ce:d4:5e:57:eb:2e:d6:fa:c0:db:dd:27:df:a3:34:b5: 14:9a:c5:52:7c:2c:f9:b3:c9:11:7c:f6:6c:f5:70:40:dd:a8: 9b:9e:a2:fd:d8:13:46:0e:c1:84:9e:56:0b:9d:73:fa:8e:3d: 16:e6:f9:85:88:77:95:0f:53:89:fb:17:d5:37:cc:13:ef:e9: bc:bb:c4:80:8d:de:2d:7e:b1:b7:af:07:94:60:1e:55:24:4a: af:ab:69:db:c9:4f:e7:09:39:07:0c:5a:a9:8a:a3:cb:92:cb: ff:81:52:4d:6c:9e:dd:ca:a6:b7:ea:78:02:69:35:42:7e:0b: 11:e7:ef:8c:8a:0d:c5:dd:a7:59:d9:76:7d:4c:74:aa:c6:76: 02:48:93:fd -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIUMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTQxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWJhNS01MmJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA65SNf2Cg2EL8hlzNo7WVmC4tdJcAumRy9NUJv6jp4WsG2FZ18895muXwy9zW 1lkCCES6GGRdthY+jvrdJDsZlZwbKZUwOygR5NkgjkH1x1YiUGSLFC+TlsLdARSd pv0UOS7rSHVMrYCOfqa6UOEGKq2P3mZPWEBKHAhzgsfYmyUzI2GebFNLSaq6nZus w9YNht69kKbmtu38Yz/uDn2PvPqz//DZ2lVzAECWFhVzsfs9NrgVRgUDC0MQL1Ze TI5r3J3zGv94oOmW/WfyRipC8K2z/9iXwI0LPYA8IXl6DGK5l1/C3VV/zQWvp3jw dyb2IvkaPQPEQn/aeDOEyd7howIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFG5RqQxz ZNGTf4WC65n1EOlaHAJIMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQ0YxRkUyQkFC NUU1MTFFRkJEM0M0QTNFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoLucMA0GCSqGSIb3DQEBCwUAA4IBAQCDiJ3DXrajOmzcluz97vNJ UDda+HqOKMdlZ/trS1bEbFOOtIPojkLrqnFZw0WwJ53U6Vd0iJ45oM4EmGDwBTAx fXht5xpVp/3+LXcosgxelv1r0KP21RhtP6Hzicz7zTs1mj4z5IDDLSHC/O+UH87U XlfrLtb6wNvdJ9+jNLUUmsVSfCz5s8kRfPZs9XBA3aibnqL92BNGDsGEnlYLnXP6 jj0W5vmFiHeVD1OJ+xfVN8wT7+m8u8SAjd4tfrG3rweUYB5VJEqvq2nbyU/nCTkH DFqpiqPLksv/gVJNbJ7dyqa36ngCaTVCfgsR5++Mig3F3adZ2XZ9THSqxnYCSJP9 -----END CERTIFICATE-----Generated at Sat Mar 7 22:51:33 2026 by rpki-client