$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF59AD0AA00C11F08A127882C4F9AE02.roa File: FF59AD0AA00C11F08A127882C4F9AE02.roa (raw, json) Hash identifier: LQnoyk586cqXDEuHKl1PnEBtgkpneqNUd5bY8hTokLw= Subject key identifier: 66:1E:A6:DD:BF:35:41:C9:C2:5D:2F:3D:1C:5A:F3:58:2B:23:C4:62 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6BDB Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF59AD0AA00C11F08A127882C4F9AE02.roa Signing time: Mon 02 Mar 2026 23:31:08 +0000 ROA not before: Fri 03 Oct 2025 03:56:53 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154144 IP address blocks: 49.213.40.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 14:32:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27611 (0x6bdb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 3 03:56:53 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61dbc-b207 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5b:e0:6e:82:bf:a3:1c:a8:ad:e5:c3:3b:ab: 12:55:35:5a:93:ff:a9:ae:30:df:28:40:66:5a:ba: d9:c0:34:51:c9:11:80:2d:07:9e:d6:00:db:a7:20: 0f:0f:78:a5:8e:2f:69:e8:a6:fa:7a:e5:e4:97:57: d5:94:03:cd:05:31:f5:0e:f6:4f:41:05:da:93:08: 48:37:6d:9b:a7:d5:2d:2a:5b:3d:a6:d8:63:0a:7e: 40:b1:88:f5:db:5f:06:96:2f:28:d0:30:f8:66:03: 70:6e:4b:ba:fe:c9:2e:29:06:1c:d1:be:bd:1a:e7: d6:3b:50:e6:1a:fe:cd:8f:ca:a5:bc:56:13:2b:85: 15:f6:36:67:53:c8:57:bc:df:9f:5b:1e:26:b3:f7: 23:82:37:53:b5:ef:33:28:10:f5:68:15:31:cd:d4: b8:75:f5:92:c8:5b:01:66:02:47:7e:01:9a:55:c1: 4f:c9:a8:cf:bc:a7:b2:87:9a:1a:d0:f2:fc:2b:63: 10:99:12:e4:7a:69:b7:df:ab:62:06:3c:02:19:d0: 7b:c1:f8:c1:4d:f8:60:f5:58:eb:b3:15:83:ea:c1: 60:47:30:de:3f:83:13:bf:d7:f1:69:89:bb:12:09: 07:82:a8:18:7d:dd:a8:ce:97:b0:e7:06:49:97:9f: 84:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1E:A6:DD:BF:35:41:C9:C2:5D:2F:3D:1C:5A:F3:58:2B:23:C4:62 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/FF59AD0AA00C11F08A127882C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 49.213.40.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:d0:cb:7e:4c:8c:f6:c5:8d:62:e0:71:f6:52:7a:b7:2e:1b: d2:9b:b7:ce:75:41:0b:47:e4:63:c1:93:fb:8b:e2:15:f6:f9: 54:3f:8c:ae:fe:0d:6c:b4:72:20:7c:7f:9d:26:97:88:bb:26: 1a:58:19:83:f9:ab:f8:f2:7d:21:47:d1:99:fb:a6:0a:2c:c7: ae:03:5e:9e:70:dc:c8:8e:51:11:d9:7d:4c:19:66:97:aa:69: 20:6e:75:0f:13:00:90:37:7f:5f:2a:ea:1e:bd:80:ff:f9:1f: ef:7e:56:0f:37:d8:9b:25:40:c4:8f:ee:cf:10:99:1c:01:af: 7a:f5:84:19:a6:a0:f1:60:1c:82:2b:f6:a4:49:a4:37:be:eb: 44:54:80:4e:8a:8e:85:36:01:36:3f:8c:42:c7:0b:01:97:3e: df:53:3e:a6:23:1e:f4:0f:6e:5f:11:b6:79:d3:2c:21:11:4f: 55:9d:01:6b:d2:64:2b:e0:d5:ae:f8:59:76:49:e7:83:c6:c5: d2:7f:62:a1:d6:08:db:f6:ec:d5:27:d7:ef:99:0d:37:72:bd: 79:df:2d:7c:7d:43:7e:81:62:83:f1:b0:4e:a6:2c:ee:77:25: 6c:11:09:f7:ba:47:7c:2a:92:37:19:ae:4e:54:1f:38:3b:1f: e3:77:a5:5f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICa9swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUxMDAzMDM1NjUzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWRiYy1iMjA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoFvgboK/oxyoreXDO6sSVTVak/+prjDfKEBmWrrZwDRRyRGALQee1gDbpyAP D3ilji9p6Kb6euXkl1fVlAPNBTH1DvZPQQXakwhIN22bp9UtKls9pthjCn5AsYj1 218Gli8o0DD4ZgNwbku6/skuKQYc0b69GufWO1DmGv7Nj8qlvFYTK4UV9jZnU8hX vN+fWx4ms/cjgjdTte8zKBD1aBUxzdS4dfWSyFsBZgJHfgGaVcFPyajPvKeyh5oa 0PL8K2MQmRLkemm336tiBjwCGdB7wfjBTfhg9VjrsxWD6sFgRzDeP4MTv9fxaYm7 EgkHgqgYfd2ozpew5wZJl5+ELwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGYept2/ NUHJwl0vPRxa81grI8RiMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRkY1OUFEMEFB MDBDMTFGMDhBMTI3ODgyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBMdUoMA0GCSqGSIb3DQEBCwUAA4IBAQAs0Mt+TIz2xY1i4HH2Unq3 LhvSm7fOdUELR+RjwZP7i+IV9vlUP4yu/g1stHIgfH+dJpeIuyYaWBmD+av48n0h R9GZ+6YKLMeuA16ecNzIjlER2X1MGWaXqmkgbnUPEwCQN39fKuoevYD/+R/vflYP N9ibJUDEj+7PEJkcAa969YQZpqDxYByCK/akSaQ3vutEVIBOio6FNgE2P4xCxwsB lz7fUz6mIx70D25fEbZ50ywhEU9VnQFr0mQr4NWu+Fl2SeeDxsXSf2Kh1gjb9uzV J9fvmQ03cr153y18fUN+gWKD8bBOpizudyVsEQn3ukd8KpI3Ga5OVB84Ox/jd6Vf -----END CERTIFICATE-----Generated at Sat Mar 7 22:44:07 2026 by rpki-client