$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E59030F0AB2511F083A1D935C4F9AE02.roa File: E59030F0AB2511F083A1D935C4F9AE02.roa (raw, json) Hash identifier: fE5WWaaVB9HL0HAnW+AYQrr0ieu0ViYaWXnqT9yNyeo= Subject key identifier: 82:6E:A2:23:A5:C9:CC:F8:84:46:98:25:01:CC:CE:C4:63:40:63:4C Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2116 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E59030F0AB2511F083A1D935C4F9AE02.roa Signing time: Mon 02 Mar 2026 23:21:27 +0000 ROA not before: Fri 30 Jan 2026 08:41:36 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45899 IP address blocks: 144.79.188.0/23 maxlen: 24 160.19.78.0/23 maxlen: 23 160.22.2.0/23 maxlen: 24 160.25.74.0/23 maxlen: 24 160.30.54.0/23 maxlen: 24 160.191.52.0/23 maxlen: 24 161.248.30.0/23 maxlen: 24 165.99.58.0/24 maxlen: 24 165.99.59.0/24 maxlen: 24 165.101.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8470 (0x2116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Jan 30 08:41:36 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61b77-8c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d1:aa:28:35:66:d8:e1:69:41:95:87:7e:e8: ff:95:f2:a5:4d:92:19:4d:d7:49:74:21:42:f6:83: 11:43:ee:84:48:07:2c:02:5f:9c:22:42:29:a8:1f: f3:3f:a3:ce:62:f5:ef:87:30:9f:32:83:72:4f:3b: 96:19:8d:5d:34:51:32:8e:19:79:dc:46:c9:f5:1f: cf:92:4b:00:43:95:84:0e:da:3a:e1:ce:12:6c:b5: cf:ae:bd:a9:e9:5e:f3:a4:ca:6c:0a:f9:a8:62:50: 7e:fb:da:83:e7:12:42:67:2e:c7:24:e5:0a:65:0f: 97:3a:a7:4c:48:7b:ef:6d:8d:f4:bb:10:a9:a7:f4: 3b:f8:88:a1:b2:93:33:3a:60:65:73:f4:9c:50:de: ce:53:a7:f4:40:d6:eb:b3:5a:4e:3b:ec:96:5c:cd: 52:f0:e8:3f:63:12:19:9d:4d:b1:cf:cd:2d:c4:70: 47:81:7a:ec:46:92:5a:86:fa:6f:c3:79:7a:08:11: 71:4a:71:0c:3d:91:f7:81:29:68:cd:69:0d:35:a2: 71:62:e8:e5:7d:a0:ca:2e:63:ae:5f:b1:f9:91:1b: 1f:5c:44:a6:25:b3:bb:a4:bd:92:2f:c8:5a:39:76: c1:5e:9d:49:52:97:04:5b:c4:9c:d2:34:a9:fb:e1: 63:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:6E:A2:23:A5:C9:CC:F8:84:46:98:25:01:CC:CE:C4:63:40:63:4C X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E59030F0AB2511F083A1D935C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.79.188.0/23 160.19.78.0/23 160.22.2.0/23 160.25.74.0/23 160.30.54.0/23 160.191.52.0/23 161.248.30.0/23 165.99.58.0/23 165.101.234.0/23 Signature Algorithm: sha256WithRSAEncryption b6:f9:cf:8d:58:e5:e7:ab:b3:3e:be:0a:f9:96:76:63:25:de: 53:c2:38:36:54:dc:41:fc:78:84:98:e4:2b:10:12:4e:41:54: 30:51:8f:9d:5c:21:7e:d0:da:36:8c:99:f9:22:85:4c:16:6b: 59:f8:9a:b9:a9:ed:84:f4:6b:a9:13:5a:1f:18:5c:ce:a6:5f: ab:c3:a1:a3:3b:9a:33:74:01:a8:53:2c:82:4a:53:7b:48:75: c8:5d:57:de:97:94:02:79:c1:22:d1:0d:99:0c:2e:bb:14:ba: b5:a2:7f:b3:a7:05:cd:31:26:94:dd:6f:0b:38:f5:46:93:69: ca:2e:7a:2a:10:41:d4:ee:31:85:90:5a:bb:a0:70:7d:c2:51: 1d:bb:c4:36:9a:47:b8:7e:01:5a:51:36:b5:80:cb:e9:89:80: 66:3d:7b:2d:46:50:b6:3a:29:59:72:e3:29:37:88:ab:2b:d7: 81:d9:bc:f7:89:f0:8e:09:a0:64:e6:86:85:e3:09:43:63:2b: 5d:1d:9b:6e:1b:50:45:92:5a:21:9b:a3:63:a1:9b:19:29:ac: 37:05:65:2e:1d:f4:c7:9d:03:5b:43:52:fa:8e:6a:6b:76:a2: 5c:53:4d:2a:0d:2c:ad:c6:4f:14:b1:c9:cb:7b:0f:ca:61:12: b9:1d:0a:ab -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICIRYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYwMTMwMDg0MTM2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWI3Ny04YzY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqtGqKDVm2OFpQZWHfuj/lfKlTZIZTddJdCFC9oMRQ+6ESAcsAl+cIkIpqB/z P6POYvXvhzCfMoNyTzuWGY1dNFEyjhl53EbJ9R/PkksAQ5WEDto64c4SbLXPrr2p 6V7zpMpsCvmoYlB++9qD5xJCZy7HJOUKZQ+XOqdMSHvvbY30uxCpp/Q7+IihspMz OmBlc/ScUN7OU6f0QNbrs1pOO+yWXM1S8Og/YxIZnU2xz80txHBHgXrsRpJahvpv w3l6CBFxSnEMPZH3gSlozWkNNaJxYujlfaDKLmOuX7H5kRsfXESmJbO7pL2SL8ha OXbBXp1JUpcEW8Sc0jSp++FjiwIDAQABo4ICkDCCAowwHQYDVR0OBBYEFIJuoiOl ycz4hEaYJQHMzsRjQGNMMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRTU5MDMwRjBB QjI1MTFGMDgzQTFEOTM1QzRGOUFFMDIucm9hME8GCCsGAQUFBwEHAQH/BEAwPjA8 BAIAATA2AwQBkE+8AwQBoBNOAwQBoBYCAwQBoBlKAwQBoB42AwQBoL80AwQBofge AwQBpWM6AwQBpWXqMA0GCSqGSIb3DQEBCwUAA4IBAQC2+c+NWOXnq7M+vgr5lnZj Jd5Twjg2VNxB/HiEmOQrEBJOQVQwUY+dXCF+0No2jJn5IoVMFmtZ+Jq5qe2E9Gup E1ofGFzOpl+rw6GjO5ozdAGoUyyCSlN7SHXIXVfel5QCecEi0Q2ZDC67FLq1on+z pwXNMSaU3W8LOPVGk2nKLnoqEEHU7jGFkFq7oHB9wlEdu8Q2mke4fgFaUTa1gMvp iYBmPXstRlC2OilZcuMpN4irK9eB2bz3ifCOCaBk5oaF4wlDYytdHZtuG1BFkloh m6NjoZsZKaw3BWUuHfTHnQNbQ1L6jmprdqJcU00qDSytxk8UscnLew/KYRK5HQqr -----END CERTIFICATE-----Generated at Sat Mar 7 19:31:38 2026 by rpki-client