$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/1DF1E5F8173A11F1A94BC0C1113D8C67.roa File: 1DF1E5F8173A11F1A94BC0C1113D8C67.roa (raw, json) Hash identifier: Qz2x+NUZ1Z4D7iIuBKK98wEGhrLq2XYhy61uyekxUx8= Subject key identifier: 2B:CD:6C:67:28:7A:3F:B0:16:7C:0F:C3:D0:BD:A9:31:10:15:17:08 Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 017E Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/1DF1E5F8173A11F1A94BC0C1113D8C67.roa Signing time: Tue 03 Mar 2026 19:49:40 +0000 ROA not before: Tue 03 Mar 2026 19:49:40 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 136396 IP address blocks: 160.20.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 22:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 382 (0x17e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Mar 3 19:49:40 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a73b54-286b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:3a:d8:ef:0a:c4:ee:97:ab:16:ea:12:f8:e3: 73:16:17:ca:99:6d:26:6a:64:df:45:47:e4:ad:95: 3e:84:b3:35:44:02:6b:db:a0:29:91:45:31:6e:56: ed:ce:67:0e:c0:a9:34:fa:82:ce:98:58:5a:06:7c: 66:da:b9:5d:8b:7f:c8:ed:90:4e:1f:21:4d:3e:4c: 44:f5:3e:f5:67:5e:5a:4e:ee:06:58:6c:9f:b5:19: dd:d2:90:5d:21:c1:fa:e1:7a:d1:0f:15:af:f7:2a: d8:24:81:5d:5b:9b:a5:81:bb:c2:b0:9e:85:9a:8c: 84:4a:16:bb:3a:a9:8b:cb:0a:85:6f:6f:df:f2:51: 3a:21:5f:00:34:2b:12:f5:46:b9:56:59:aa:ba:c4: f8:e2:ea:07:9b:77:16:0f:bd:a6:7a:f6:03:65:b1: b7:82:99:8a:66:92:04:b7:04:ea:62:07:d6:ed:a8: cf:bf:c8:d6:f9:97:b6:ef:b6:3a:99:57:ed:24:7d: 45:af:cb:b5:7f:08:96:5c:b7:e0:e0:6c:b3:99:aa: 0d:6e:15:71:91:24:85:41:8f:16:d4:96:e8:6e:91: e7:b9:8e:aa:e4:7d:8c:d5:cb:37:99:83:32:79:21: 26:b8:eb:1a:5c:49:56:65:69:9c:27:1e:13:29:47: e5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CD:6C:67:28:7A:3F:B0:16:7C:0F:C3:D0:BD:A9:31:10:15:17:08 X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/1DF1E5F8173A11F1A94BC0C1113D8C67.roa sbgp-ipAddrBlock: critical IPv4: 160.20.121.0/24 Signature Algorithm: sha256WithRSAEncryption d2:ef:e3:6f:a3:e4:2b:5d:e5:4b:3d:df:02:5c:8b:cc:7c:b3: fb:b3:a0:2e:9f:8e:ee:71:48:18:05:0b:ea:3b:9e:50:f5:9c: 35:ab:76:0b:1c:b6:80:f5:e7:22:b4:63:3b:9c:cd:00:8b:2f: 94:d2:84:16:6e:dc:9f:b0:0b:72:7d:04:51:4c:a5:20:4b:cb: c8:bc:39:7d:c6:48:70:ef:b6:0a:81:7e:6e:6e:5e:9b:b0:5e: 8e:61:86:10:8b:b6:18:cb:c2:79:98:bd:58:a7:86:9c:97:fb: 47:59:e9:b7:fe:cd:bc:34:c5:a4:45:17:cb:30:c8:8a:f7:a5: c2:93:39:9a:11:88:a0:d1:3e:ae:37:23:0b:68:de:10:f7:94: f5:f6:7a:5d:c2:db:47:df:4e:a2:49:8f:93:1f:3b:85:1a:ee: 53:e5:25:dc:48:45:52:7d:f5:84:6d:47:5c:88:3a:16:79:1d: c2:71:45:83:7a:d0:28:24:bb:76:2a:e9:51:29:85:05:6f:68: 4c:95:0b:6c:13:e8:71:01:3d:5d:18:d9:cf:96:2c:05:bd:ee: 98:2f:fa:c9:8d:1c:68:d0:21:16:0a:7f:87:6d:59:5f:bd:90: 18:86:24:0c:30:22:6d:7d:2c:2e:2f:c9:d7:e5:bc:12:9a:57: 13:45:b1:6d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAX4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjYwMzAzMTk0OTQwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE3M2I1NC0yODZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1zrY7wrE7perFuoS+ONzFhfKmW0mamTfRUfkrZU+hLM1RAJr26ApkUUxblbt zmcOwKk0+oLOmFhaBnxm2rldi3/I7ZBOHyFNPkxE9T71Z15aTu4GWGyftRnd0pBd IcH64XrRDxWv9yrYJIFdW5ulgbvCsJ6FmoyESha7OqmLywqFb2/f8lE6IV8ANCsS 9Ua5VlmqusT44uoHm3cWD72mevYDZbG3gpmKZpIEtwTqYgfW7ajPv8jW+Ze277Y6 mVftJH1Fr8u1fwiWXLfg4GyzmaoNbhVxkSSFQY8W1JbobpHnuY6q5H2M1cs3mYMy eSEmuOsaXElWZWmcJx4TKUfl9wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCvNbGco ej+wFnwPw9C9qTEQFRcIMB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgwQzIvOTgzRTYxNTAxNzFBMTFFRjg2NTc3NTRGQzRGOUFFMDIvMURGMUU1Rjgx NzNBMTFGMUE5NEJDMEMxMTEzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoBR5MA0GCSqGSIb3DQEBCwUAA4IBAQDS7+Nvo+QrXeVLPd8CXIvM fLP7s6Aun47ucUgYBQvqO55Q9Zw1q3YLHLaA9ecitGM7nM0Aiy+U0oQWbtyfsAty fQRRTKUgS8vIvDl9xkhw77YKgX5ubl6bsF6OYYYQi7YYy8J5mL1Yp4acl/tHWem3 /s28NMWkRRfLMMiK96XCkzmaEYig0T6uNyMLaN4Q95T19npdwttH306iSY+THzuF Gu5T5SXcSEVSffWEbUdciDoWeR3CcUWDetAoJLt2KulRKYUFb2hMlQtsE+hxAT1d GNnPliwFve6YL/rJjRxo0CEWCn+HbVlfvZAYhiQMMCJtfSwuL8nX5bwSmlcTRbFt -----END CERTIFICATE-----Generated at Wed Mar 4 09:52:52 2026 by rpki-client