$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4F2C3D2C00A111F0890E9154C4F9AE02.roa File: 4F2C3D2C00A111F0890E9154C4F9AE02.roa (raw, json) Hash identifier: VjT2O7aFcHIYWtPArPUPzqa6D/04af6sLyMC+MkuF7o= Subject key identifier: 71:AA:0C:19:C4:29:08:DC:6D:17:65:C5:65:DE:3F:3F:47:BF:9A:8C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 5EC9 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4F2C3D2C00A111F0890E9154C4F9AE02.roa Signing time: Mon 02 Mar 2026 22:19:42 +0000 ROA not before: Thu 28 Aug 2025 14:56:38 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153683 IP address blocks: 163.223.58.0/23 maxlen: 23 2001:df5:33c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24265 (0x5ec9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 28 14:56:38 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a60cfe-b206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:3c:58:01:ab:86:2c:c1:10:4c:31:20:ef:c1: bd:98:0d:00:99:84:be:39:87:de:4f:94:da:b1:ce: 73:99:52:c4:ff:ce:ce:d4:67:d3:ad:44:1d:f6:17: 88:69:48:f7:78:5b:16:67:df:c3:4d:c0:a9:9a:dd: 09:b0:0e:45:cf:d4:98:e9:39:1c:1d:9c:c6:e3:09: b3:4e:2d:f1:a3:14:3f:8d:37:72:72:ab:e7:bf:5e: e5:78:28:f4:6d:4c:45:5d:2c:61:71:de:64:af:89: ce:3d:f3:eb:8e:96:84:dc:14:ae:91:f8:52:c5:eb: 7d:e7:3b:72:7b:bd:5b:1f:bf:82:65:f5:97:f1:ef: 33:2b:d9:c1:68:d7:30:4f:b5:94:3c:1b:6e:c2:ee: 0c:62:f0:de:c5:80:8b:68:bd:0f:8b:8b:b5:40:c1: bc:70:30:93:0a:da:40:4c:16:d0:06:59:5c:8c:67: d8:03:68:5c:5d:78:ea:c4:e0:fa:9b:9f:33:7c:c6: e6:bc:ca:f8:a0:0f:6b:7d:ed:15:25:51:64:91:e1: 5e:ea:be:7f:67:e5:55:79:78:d4:a5:d2:91:bf:0f: 82:57:ec:c9:91:55:67:ab:87:f7:3f:1b:9a:89:58: 34:11:b2:c3:ef:f6:23:54:b0:4c:f0:d8:53:c0:d6: df:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:AA:0C:19:C4:29:08:DC:6D:17:65:C5:65:DE:3F:3F:47:BF:9A:8C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/4F2C3D2C00A111F0890E9154C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.223.58.0/23 IPv6: 2001:df5:33c0::/48 Signature Algorithm: sha256WithRSAEncryption 87:a3:ac:95:87:44:79:ee:ff:17:8d:a5:a8:52:13:1b:de:09: e2:61:7f:73:3d:4c:6f:ec:fe:91:6e:46:cd:f7:43:f8:3e:cf: 5e:2b:c0:a7:c3:c8:0c:3e:86:91:50:8f:41:fd:04:60:a3:1c: a1:f3:b4:b6:21:1a:40:98:31:94:6e:6d:c7:6c:e2:75:44:34: 67:39:86:f8:0d:47:9e:6c:50:52:a0:f8:2a:23:32:37:44:6b: 84:18:dc:a8:8e:8c:0b:79:b7:50:bd:31:d7:49:64:50:04:98: f2:3e:8a:35:99:0e:26:33:22:c9:b3:52:06:98:70:21:61:e2: f3:e6:d8:d5:15:ab:8d:8e:43:eb:07:9a:7e:0d:9d:92:75:45: f7:59:79:95:29:d3:dd:68:56:b8:80:48:9c:b8:0f:b6:6d:6f: 92:53:85:2c:1f:48:96:9c:a2:e5:4a:3f:51:d7:c4:26:a3:12: 8e:f6:68:68:3e:41:40:e7:72:e1:18:7e:23:e8:df:de:30:50: 56:2c:7b:a7:2e:f5:f3:47:bb:57:24:87:34:2a:d7:f3:28:bd: e0:8e:16:1b:08:24:8b:e9:ec:9c:49:83:74:91:dd:ae:0d:35: 07:5d:f0:be:8c:51:8e:55:0b:47:71:03:b8:86:83:ec:07:e3: 35:5d:6f:43 -----BEGIN CERTIFICATE----- MIIFTTCCBDWgAwIBAgICXskwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODI4MTQ1NjM4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MGNmZS1iMjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+TxYAauGLMEQTDEg78G9mA0AmYS+OYfeT5Tasc5zmVLE/87O1GfTrUQd9heI aUj3eFsWZ9/DTcCpmt0JsA5Fz9SY6TkcHZzG4wmzTi3xoxQ/jTdycqvnv17leCj0 bUxFXSxhcd5kr4nOPfPrjpaE3BSukfhSxet95ztye71bH7+CZfWX8e8zK9nBaNcw T7WUPBtuwu4MYvDexYCLaL0Pi4u1QMG8cDCTCtpATBbQBllcjGfYA2hcXXjqxOD6 m58zfMbmvMr4oA9rfe0VJVFkkeFe6r5/Z+VVeXjUpdKRvw+CV+zJkVVnq4f3Pxua iVg0EbLD7/YjVLBM8NhTwNbfVQIDAQABo4ICcTCCAm0wHQYDVR0OBBYEFHGqDBnE KQjcbRdlxWXePz9Hv5qMMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNEYyQzNEMkMw MEExMTFGMDg5MEU5MTU0QzRGOUFFMDIucm9hMDAGCCsGAQUFBwEHAQH/BCEwHzAM BAIAATAGAwQBo986MA8EAgACMAkDBwAgAQ31M8AwDQYJKoZIhvcNAQELBQADggEB AIejrJWHRHnu/xeNpahSExveCeJhf3M9TG/s/pFuRs33Q/g+z14rwKfDyAw+hpFQ j0H9BGCjHKHztLYhGkCYMZRubcds4nVENGc5hvgNR55sUFKg+CojMjdEa4QY3KiO jAt5t1C9MddJZFAEmPI+ijWZDiYzIsmzUgaYcCFh4vPm2NUVq42OQ+sHmn4NnZJ1 RfdZeZUp091oVriASJy4D7Ztb5JThSwfSJacouVKP1HXxCajEo72aGg+QUDncuEY fiPo394wUFYse6cu9fNHu1ckhzQq1/MoveCOFhsIJIvp7JxJg3SR3a4NNQdd8L6M UY5VC0dxA7iGg+wH4zVdb0M= -----END CERTIFICATE-----Generated at Sat Mar 7 22:43:02 2026 by rpki-client