$ rpki-client -vvf rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa File: B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa (raw, json) Hash identifier: BWEm8D7sFlvcEVtQhqLjMN5S3jhBuXaJAzjBNUqp7Bk= Subject key identifier: B2:2D:6E:DB:C7:8D:6F:37:8D:EF:0E:2E:88:3E:EF:FA:01:F4:C0:83 Certificate issuer: /CN=A91B1FA8/serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Certificate serial: 13D1 Authority key identifier: 0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa Signing time: Mon 02 Mar 2026 17:20:07 +0000 ROA not before: Mon 02 Mar 2026 17:20:06 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 4764 IP address blocks: 144.6.0.0/16 maxlen: 22 157.211.0.0/16 maxlen: 16 159.196.0.0/18 maxlen: 23 159.196.64.0/18 maxlen: 24 159.196.128.0/18 maxlen: 23 159.196.168.0/24 maxlen: 24 159.196.169.0/24 maxlen: 24 159.196.170.0/24 maxlen: 24 159.196.171.0/24 maxlen: 24 159.196.192.0/18 maxlen: 24 167.179.128.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Mar 2026 16:48:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5073 (0x13d1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1FA8, serialNumber=0DEEED1362143C362F24F97C67C8E4ECE2C7A561 Validity Not Before: Mar 2 17:20:06 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69a5c6c6-02fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:6c:5f:10:90:5f:b6:c5:4c:c7:c8:da:51:61: b6:1b:f7:01:71:d0:d0:37:6c:7a:0b:59:b9:4b:f8: 06:ef:a2:20:0b:77:f2:4a:6f:2f:04:90:f6:da:bb: 07:bf:85:fe:e8:82:d6:48:a3:17:06:80:e7:4d:07: 81:66:f9:2a:4c:70:51:1f:61:e5:30:4a:e7:d1:dc: e4:bc:de:b5:2c:30:89:e2:3e:93:3f:9e:93:11:9b: 69:dc:7c:d8:b7:f4:83:0d:ee:d6:72:d4:80:fe:ec: e3:13:7e:15:2e:e7:11:45:69:ae:d6:9e:e7:61:8c: bc:c9:7a:40:d1:57:93:70:be:bb:d3:e1:59:a1:2a: ed:53:d7:2f:a6:26:ef:21:96:92:44:39:db:a9:5f: a3:c9:bb:29:3a:5a:c4:2b:9d:d7:95:0d:24:7c:7e: 31:91:e2:77:7a:35:87:e6:ad:b2:5a:17:e2:a8:85: 13:df:d1:7b:4b:8c:19:82:7f:8f:13:9f:03:70:a8: 88:43:cd:a1:c0:f0:b0:cd:25:5d:da:a8:36:b9:2b: 72:7d:0a:53:49:03:5c:31:75:4c:fe:a8:55:13:a6: 9f:2b:54:3f:98:25:db:11:fb:bd:2f:8d:4b:83:69: 53:88:27:ee:65:8d:3a:88:57:9b:3e:60:90:66:4a: 76:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:2D:6E:DB:C7:8D:6F:37:8D:EF:0E:2E:88:3E:EF:FA:01:F4:C0:83 X509v3 Authority Key Identifier: keyid:0D:EE:ED:13:62:14:3C:36:2F:24:F9:7C:67:C8:E4:EC:E2:C7:A5:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/De7tE2IUPDYvJPl8Z8jk7OLHpWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/De7tE2IUPDYvJPl8Z8jk7OLHpWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1FA8/DF470902AFD911E8B2ED4C7FC4F9AE02/B8B7B5BA64BE11EBA96DF40DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.6.0.0/16 157.211.0.0/16 159.196.0.0/16 167.179.128.0/18 Signature Algorithm: sha256WithRSAEncryption 0b:35:67:2b:4b:42:61:36:f1:55:3e:88:14:46:15:4f:b2:37: ea:eb:8a:4f:4c:8c:14:b1:34:14:c3:cc:a1:38:3a:5c:d6:58: 62:c8:de:12:89:e0:70:4b:55:f3:9b:dc:30:80:3e:18:50:cd: ff:75:de:44:79:cf:25:ac:e3:2c:9e:d4:a6:8b:ce:90:21:ff: 1d:59:49:20:d9:62:0f:be:54:57:4f:8e:fe:71:76:47:f3:05: 45:52:9f:ed:53:d0:78:bc:83:a2:92:08:ac:03:b0:4d:bd:7a: a5:4a:29:aa:16:ff:df:4a:41:d6:5c:59:4d:04:06:fe:ac:8d: 0d:e6:e9:50:bb:36:52:e9:5c:1e:b7:63:a9:bf:da:c3:fe:92: 1a:18:f9:d6:db:0d:44:07:93:21:80:b0:ce:2d:ee:d3:48:f6: 2e:93:6a:72:4d:f5:4a:20:42:a7:53:67:61:f4:c3:41:ee:23: 84:c9:1f:8e:c9:ba:d1:5e:e1:c5:5a:93:f5:3f:c2:72:24:d6: a1:5b:25:bb:13:7b:c0:60:c8:99:70:7e:3c:c0:d8:e0:fa:37: 33:68:a9:dd:c8:12:1d:08:71:bd:12:a8:ed:d6:7d:f5:e5:cf: 7b:20:17:13:e1:a6:64:ea:12:42:82:e7:1a:de:f0:6d:ee:45: ad:0f:30:7d -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICE9EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjFGQTgxMTAvBgNVBAUTKDBERUVFRDEzNjIxNDNDMzYyRjI0Rjk3QzY3QzhFNEVD RTJDN0E1NjEwHhcNMjYwMzAyMTcyMDA2WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YzZjNi0wMmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA62xfEJBftsVMx8jaUWG2G/cBcdDQN2x6C1m5S/gG76IgC3fySm8vBJD22rsH v4X+6ILWSKMXBoDnTQeBZvkqTHBRH2HlMErn0dzkvN61LDCJ4j6TP56TEZtp3HzY t/SDDe7WctSA/uzjE34VLucRRWmu1p7nYYy8yXpA0VeTcL670+FZoSrtU9cvpibv IZaSRDnbqV+jybspOlrEK53XlQ0kfH4xkeJ3ejWH5q2yWhfiqIUT39F7S4wZgn+P E58DcKiIQ82hwPCwzSVd2qg2uStyfQpTSQNcMXVM/qhVE6afK1Q/mCXbEfu9L41L g2lTiCfuZY06iFebPmCQZkp2WwIDAQABo4ICbzCCAmswHQYDVR0OBBYEFLItbtvH jW83je8OLog+7/oB9MCDMB8GA1UdIwQYMBaAFA3u7RNiFDw2LyT5fGfI5Ozix6Vh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMUZBOC9ERjQ3MDkwMkFG RDkxMUU4QjJFRDRDN0ZDNEY5QUUwMi9EZTd0RTJJVVBEWXZKUGw4WjhqazdPTEhw V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0RlN3RFMklVUERZdkpQbDhaOGprN09MSHBXRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjFGQTgvREY0NzA5MDJBRkQ5MTFFOEIyRUQ0QzdGQzRGOUFFMDIvQjhCN0I1QkE2 NEJFMTFFQkE5NkRGNDBEQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAb BAIAATAVAwMAkAYDAwCd0wMDAJ/EAwQGp7OAMA0GCSqGSIb3DQEBCwUAA4IBAQAL NWcrS0JhNvFVPogURhVPsjfq64pPTIwUsTQUw8yhODpc1lhiyN4SieBwS1Xzm9ww gD4YUM3/dd5Eec8lrOMsntSmi86QIf8dWUkg2WIPvlRXT47+cXZH8wVFUp/tU9B4 vIOikgisA7BNvXqlSimqFv/fSkHWXFlNBAb+rI0N5ulQuzZS6Vwet2Opv9rD/pIa GPnW2w1EB5MhgLDOLe7TSPYuk2pyTfVKIEKnU2dh9MNB7iOEyR+OybrRXuHFWpP1 P8JyJNahWyW7E3vAYMiZcH48wNjg+jczaKndyBIdCHG9Eqjt1n315c97IBcT4aZk 6hJCguca3vBt7kWtDzB9 -----END CERTIFICATE-----Generated at Sun Mar 8 00:02:50 2026 by rpki-client