$ rpki-client -vvf rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/AE31872C5DBD11F083DD7F61C4F9AE02.roa File: AE31872C5DBD11F083DD7F61C4F9AE02.roa (raw, json) Hash identifier: PtmJapetaAUxJ5KEUkr9vfhR8x3TFcjZY4x2L67+TqA= Subject key identifier: 9A:51:17:45:99:C1:74:11:93:22:71:E2:26:78:91:9D:61:7A:2C:35 Certificate issuer: /CN=A91A99C5/serialNumber=564B69178F269EFB96B76916F78170754E8F0C87 Certificate serial: 85 Authority key identifier: 56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/AE31872C5DBD11F083DD7F61C4F9AE02.roa Signing time: Mon 02 Mar 2026 15:20:48 +0000 ROA not before: Thu 04 Dec 2025 09:21:02 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 153998 IP address blocks: 165.101.68.0/23 maxlen: 23 165.101.68.0/24 maxlen: 24 165.101.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 133 (0x85) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A99C5, serialNumber=564B69178F269EFB96B76916F78170754E8F0C87 Validity Not Before: Dec 4 09:21:02 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a5aad0-ad10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:00:e0:c4:75:58:f0:f3:d4:aa:1e:cd:cc:17: 6d:29:03:3c:73:00:50:c3:9c:30:a5:d6:07:44:80: 79:b8:c1:17:71:ff:1f:2d:ce:b1:78:ab:ef:98:3a: 59:16:4c:f3:f5:32:ab:56:a0:6f:2f:aa:c6:b9:9a: 71:3d:24:a7:d6:87:a6:6d:c1:6d:29:16:fa:b1:fa: 47:dd:37:84:88:55:a3:1c:c6:8e:12:08:f9:6b:1c: ed:64:29:0e:8c:83:77:5e:5f:08:3d:39:99:69:a8: d6:6d:89:c4:ff:8d:df:d0:24:05:fd:2a:c0:0a:9d: 93:ee:7c:8f:82:fe:f0:18:76:c2:ce:dd:e6:87:9e: d1:ec:e8:0a:3f:a1:68:cc:2f:fa:8c:bc:3c:16:8b: d6:1b:7e:f5:0c:c2:f6:51:1d:29:cf:2d:45:67:20: 86:3c:1c:57:8a:36:0d:a3:9c:9f:83:d4:ad:fd:1a: 3a:c6:05:93:b8:15:e1:50:6b:d6:4e:c3:4b:4c:25: d0:19:9b:29:62:cd:23:d8:4e:d4:ab:16:59:0f:62: e1:31:da:3b:c1:b9:06:c3:85:9b:88:fc:99:a2:d1: d3:e5:28:69:b0:90:bc:65:bd:24:c7:3c:75:37:ab: b3:73:65:23:53:ce:a0:a5:67:ad:19:3f:a3:1e:8e: 9f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:51:17:45:99:C1:74:11:93:22:71:E2:26:78:91:9D:61:7A:2C:35 X509v3 Authority Key Identifier: keyid:56:4B:69:17:8F:26:9E:FB:96:B7:69:16:F7:81:70:75:4E:8F:0C:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/VktpF48mnvuWt2kW94FwdU6PDIc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/VktpF48mnvuWt2kW94FwdU6PDIc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A99C5/FC01E87C5DBB11F09AA17850C4F9AE02/AE31872C5DBD11F083DD7F61C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 165.101.68.0/23 Signature Algorithm: sha256WithRSAEncryption 27:e2:83:7c:41:8a:c2:95:fc:4e:83:4f:70:82:3e:1e:d6:aa: 3a:15:47:4d:73:c9:e9:12:28:f7:23:c7:f8:ba:6e:4f:22:ce: 0f:b8:18:46:74:b4:90:63:7b:6a:4d:e9:08:46:03:27:9c:85: 2f:32:fb:03:63:c1:a5:c9:c9:ce:86:71:0d:6c:9d:e9:57:6a: 10:3a:1a:8c:f4:28:f9:69:b7:4a:58:1f:e0:ac:2a:5b:65:7f: 41:c4:55:8b:07:99:fa:92:66:05:0c:85:dd:77:5b:ab:39:52: 1e:53:37:3d:db:34:36:f5:b5:4c:e9:5c:73:de:b3:0f:56:c2: 26:52:6d:fb:f8:98:b1:e8:16:c2:78:2c:75:ca:22:7b:a2:bb: 3d:28:7e:e4:59:bd:95:91:f0:4d:ff:c6:21:ff:08:16:3a:c6: 2f:52:4e:c1:79:68:59:65:d6:b0:8d:8c:b0:51:4a:b4:f8:17: b7:b8:47:ef:3d:eb:1c:f5:b1:9e:dd:d4:bc:60:26:a9:74:79: dd:d0:53:52:d1:3d:66:36:dd:95:51:39:51:ed:0d:0d:77:d6: c7:2d:33:c7:10:5d:39:e1:c8:bf:ba:74:14:9f:4a:ea:1f:f2: 95:bc:3f:4a:1d:b8:86:3a:e0:38:7b:1a:66:ec:2d:4d:c1:ff: 02:39:4b:6d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTk5QzUxMTAvBgNVBAUTKDU2NEI2OTE3OEYyNjlFRkI5NkI3NjkxNkY3ODE3MDc1 NEU4RjBDODcwHhcNMjUxMjA0MDkyMTAyWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YWFkMC1hZDEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQDgxHVY8PPUqh7NzBdtKQM8cwBQw5wwpdYHRIB5uMEXcf8fLc6xeKvvmDpZ Fkzz9TKrVqBvL6rGuZpxPSSn1oembcFtKRb6sfpH3TeEiFWjHMaOEgj5axztZCkO jIN3Xl8IPTmZaajWbYnE/43f0CQF/SrACp2T7nyPgv7wGHbCzt3mh57R7OgKP6Fo zC/6jLw8FovWG371DML2UR0pzy1FZyCGPBxXijYNo5yfg9St/Ro6xgWTuBXhUGvW TsNLTCXQGZspYs0j2E7UqxZZD2LhMdo7wbkGw4WbiPyZotHT5ShpsJC8Zb0kxzx1 N6uzc2UjU86gpWetGT+jHo6fuQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJpRF0WZ wXQRkyJx4iZ4kZ1heiw1MB8GA1UdIwQYMBaAFFZLaRePJp77lrdpFveBcHVOjwyH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOTlDNS9GQzAxRTg3QzVE QkIxMUYwOUFBMTc4NTBDNEY5QUUwMi9Wa3RwRjQ4bW52dVd0MmtXOTRGd2RVNlBE SWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1ZrdHBGNDhtbnZ1V3Qya1c5NEZ3ZFU2UERJYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTk5QzUvRkMwMUU4N0M1REJCMTFGMDlBQTE3ODUwQzRGOUFFMDIvQUUzMTg3MkM1 REJEMTFGMDgzREQ3RjYxQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBpWVEMA0GCSqGSIb3DQEBCwUAA4IBAQAn4oN8QYrClfxOg09wgj4e 1qo6FUdNc8npEij3I8f4um5PIs4PuBhGdLSQY3tqTekIRgMnnIUvMvsDY8GlycnO hnENbJ3pV2oQOhqM9Cj5abdKWB/grCpbZX9BxFWLB5n6kmYFDIXdd1urOVIeUzc9 2zQ29bVM6Vxz3rMPVsImUm37+Jix6BbCeCx1yiJ7ors9KH7kWb2VkfBN/8Yh/wgW OsYvUk7BeWhZZdawjYywUUq0+Be3uEfvPesc9bGe3dS8YCapdHnd0FNS0T1mNt2V UTlR7Q0Nd9bHLTPHEF054ci/unQUn0rqH/KVvD9KHbiGOuA4expm7C1Nwf8COUtt -----END CERTIFICATE-----Generated at Wed Mar 4 10:09:19 2026 by rpki-client