$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D8F3720ED7DA11EFAEC65586C4F9AE02.roa File: D8F3720ED7DA11EFAEC65586C4F9AE02.roa (raw, json) Hash identifier: kjBZRAHSZN+FCZ9bxockGREhtN07yPKbTk5vDRMxQ+0= Subject key identifier: 31:97:37:40:80:C9:80:2E:15:41:45:0F:4A:28:24:EA:FE:76:08:87 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2134 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D8F3720ED7DA11EFAEC65586C4F9AE02.roa Signing time: Mon 02 Mar 2026 23:21:56 +0000 ROA not before: Thu 28 Aug 2025 14:51:54 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153507 IP address blocks: 161.248.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8500 (0x2134) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:54 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61b94-865f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:61:f2:3f:a0:33:1c:e0:73:63:25:8e:57:3d: 56:22:0b:99:c1:08:b7:98:00:60:d1:96:e2:4c:12: 2b:b2:82:ae:97:17:a2:6a:67:c2:39:bb:a4:cd:8f: 7c:68:70:35:e5:b5:58:a7:c8:5f:0b:01:64:a2:e1: 6d:8e:51:2e:b1:16:80:6c:8a:df:e3:7a:a0:a5:50: 8e:96:1a:ce:1a:9c:91:a2:c9:f0:f4:9c:b3:0d:a7: de:9a:d4:23:4b:c4:b4:4c:29:b4:cd:df:28:8a:dc: b2:9b:1d:74:2f:3d:9a:a8:d9:15:e7:91:7f:b1:2f: 3a:90:66:ca:67:a3:97:da:e0:9b:8c:28:40:3e:28: 0c:15:04:8e:51:94:d9:25:5a:1a:a3:64:f8:52:49: 01:2d:a1:2d:93:24:66:06:1b:d2:68:76:7a:c6:e4: 21:c1:c4:fa:37:09:9d:58:31:b3:4a:12:ca:c1:01: 62:d4:57:0f:c8:0b:b7:e9:87:21:c3:2e:90:8f:be: 37:38:98:44:ee:6c:b8:0f:83:c9:dc:70:59:92:f4: c0:55:ca:99:3e:80:a8:6e:29:0c:11:55:00:1f:a5: d0:d0:a2:86:a7:4a:d2:2c:60:ee:09:bf:07:9f:5c: ec:34:5f:38:0a:23:29:51:aa:14:3d:95:b4:16:a4: c9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:97:37:40:80:C9:80:2E:15:41:45:0F:4A:28:24:EA:FE:76:08:87 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D8F3720ED7DA11EFAEC65586C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.148.0/23 Signature Algorithm: sha256WithRSAEncryption 16:73:04:09:65:3a:7e:ce:2e:71:c5:2a:bf:6d:70:72:32:c3: 1e:e6:99:46:63:15:38:cc:64:b8:85:74:90:fc:a7:4e:f3:80: 5f:bc:a5:5e:06:3c:74:19:7c:0f:73:c8:25:81:d8:39:a0:19: 98:62:06:0e:7e:48:45:56:2b:4c:b4:df:12:1e:51:13:1e:8e: d1:e9:c4:03:58:ca:7a:14:ae:92:47:81:6f:98:f0:90:77:fb: ae:c9:75:02:da:5c:5d:13:67:70:3a:e0:f7:65:8d:7a:5e:89: 9b:8d:12:06:24:ef:8d:f1:81:f8:ec:04:ad:58:c6:28:4a:c3: 7f:e3:0a:d4:4a:73:4c:7f:6f:6d:58:5a:18:e1:5f:8b:60:1e: f6:42:db:b0:6f:f0:4a:1f:0f:b9:80:15:be:97:2e:59:ff:ee: f6:86:41:c9:49:2e:d1:d1:f1:cf:08:d8:07:09:11:5d:b3:f2: b9:a4:5c:74:ab:1b:0d:f6:e6:60:42:77:d8:0c:48:33:b8:be: bc:c8:1e:46:9d:dc:70:62:22:e5:f8:d9:9e:1d:76:76:d3:ab: 8d:40:2a:a7:c7:f2:92:2d:2f:2f:27:b3:ee:07:c3:27:79:7c: 92:91:30:a1:9c:ce:e9:78:1d:2d:a4:69:44:9e:66:93:15:6e: 20:db:ea:7c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICITQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTU0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWI5NC04NjVmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn2HyP6AzHOBzYyWOVz1WIguZwQi3mABg0ZbiTBIrsoKulxeiamfCObukzY98 aHA15bVYp8hfCwFkouFtjlEusRaAbIrf43qgpVCOlhrOGpyRosnw9JyzDafemtQj S8S0TCm0zd8oityymx10Lz2aqNkV55F/sS86kGbKZ6OX2uCbjChAPigMFQSOUZTZ JVoao2T4UkkBLaEtkyRmBhvSaHZ6xuQhwcT6NwmdWDGzShLKwQFi1FcPyAu36Ych wy6Qj743OJhE7my4D4PJ3HBZkvTAVcqZPoCobikMEVUAH6XQ0KKGp0rSLGDuCb8H n1zsNF84CiMpUaoUPZW0FqTJKQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDGXN0CA yYAuFUFFD0ooJOr+dgiHMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRDhGMzcyMEVE N0RBMTFFRkFFQzY1NTg2QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofiUMA0GCSqGSIb3DQEBCwUAA4IBAQAWcwQJZTp+zi5xxSq/bXBy MsMe5plGYxU4zGS4hXSQ/KdO84BfvKVeBjx0GXwPc8glgdg5oBmYYgYOfkhFVitM tN8SHlETHo7R6cQDWMp6FK6SR4FvmPCQd/uuyXUC2lxdE2dwOuD3ZY16XombjRIG JO+N8YH47AStWMYoSsN/4wrUSnNMf29tWFoY4V+LYB72Qtuwb/BKHw+5gBW+ly5Z /+72hkHJSS7R0fHPCNgHCRFds/K5pFx0qxsN9uZgQnfYDEgzuL68yB5GndxwYiLl +NmeHXZ206uNQCqnx/KSLS8vJ7PuB8MneXySkTChnM7peB0tpGlEnmaTFW4g2+p8 -----END CERTIFICATE-----Generated at Sat Mar 7 22:52:18 2026 by rpki-client