$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/CEF8F2768AAD11EF9133DE6EC4F9AE02.roa File: CEF8F2768AAD11EF9133DE6EC4F9AE02.roa (raw, json) Hash identifier: XAAQs6VvWW3MlpS05j2NWzqBVUmAKDnHpobUBOoE4/o= Subject key identifier: 19:3D:EF:1B:F4:2E:99:01:A5:CA:0C:F7:CE:60:44:DA:69:2F:1F:CA Certificate issuer: /CN=A91CCAF1/serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Certificate serial: 0116 Authority key identifier: 66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/CEF8F2768AAD11EF9133DE6EC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:07:26 +0000 ROA not before: Fri 03 Oct 2025 06:33:29 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 45248 IP address blocks: 160.187.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 02:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 278 (0x116) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CCAF1, serialNumber=66941DA7EAF30E9344E0321F0B754E7AEFFC3529 Validity Not Before: Oct 3 06:33:29 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a5999e-86c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d9:fc:83:c1:33:1b:3c:e4:77:29:09:be:dd: 2b:77:4b:8b:58:0f:f3:91:57:59:51:1d:24:10:4d: e1:39:e2:a7:97:31:92:62:86:2b:a6:d0:a7:f5:fe: 41:b1:f8:6e:60:f6:48:2a:fa:55:ea:b7:58:21:21: a0:23:2c:2a:9c:71:ea:1a:f2:f4:c4:5f:94:f8:84: 28:0e:f1:1b:c5:66:d4:1d:11:22:d3:b7:fd:5f:a3: 6f:78:33:04:5d:51:b7:58:85:75:51:03:59:85:e4: 59:cb:62:d6:c1:0d:61:3d:6f:7b:d1:73:42:8a:40: 3a:60:c8:f5:af:b5:89:08:5b:d7:d8:74:63:f4:27: da:94:a3:2e:0a:72:77:8e:61:98:ea:bb:e3:e4:c9: a8:08:ab:6f:5c:9c:49:4e:25:91:0e:82:d4:66:c1: 82:3c:cd:c9:fe:96:71:77:84:0f:90:69:02:1b:4c: 5f:ac:d0:f7:f7:d3:70:c9:42:a2:45:e1:ed:27:40: d0:23:64:3b:9b:f0:33:1c:84:d9:35:89:98:60:6d: 60:b4:0e:95:36:10:f3:ea:bb:ae:62:d7:20:e7:d7: 75:9b:7e:b7:90:43:55:da:89:0a:00:f4:e0:00:d8: 89:92:44:c0:13:4f:b4:6b:85:55:e4:e4:9d:05:ea: 3e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:3D:EF:1B:F4:2E:99:01:A5:CA:0C:F7:CE:60:44:DA:69:2F:1F:CA X509v3 Authority Key Identifier: keyid:66:94:1D:A7:EA:F3:0E:93:44:E0:32:1F:0B:75:4E:7A:EF:FC:35:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ZpQdp-rzDpNE4DIfC3VOeu_8NSk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCAF1/00313C328AAD11EFBEF9166AC4F9AE02/CEF8F2768AAD11EF9133DE6EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.187.248.0/24 Signature Algorithm: sha256WithRSAEncryption 22:f7:44:9b:24:8a:a7:3b:e2:9f:31:43:1e:08:6a:c5:eb:ba: 03:12:11:5c:eb:2e:17:da:dc:c1:af:92:18:cc:96:31:60:89: d1:95:53:20:69:97:a2:61:b0:89:95:15:79:c9:b8:42:0a:d0: f2:d3:3e:aa:88:1e:1d:80:75:9e:d5:49:b9:03:2f:a5:f3:c1: d5:88:65:c3:0c:50:1b:e6:9d:34:3b:57:ab:71:c8:b6:f9:11: 30:32:2d:85:1e:7c:23:fa:95:c9:0e:f5:7a:33:91:ce:9b:8a: ac:cc:ad:03:4f:6f:53:0d:cd:08:39:67:d2:0b:01:27:c0:f1: 43:93:a2:c8:20:1a:86:f7:25:31:7b:7c:c3:b5:de:79:39:ea: 93:d6:c4:aa:17:34:92:22:16:d9:06:15:e0:76:e5:b3:41:23: ec:1d:3b:bc:13:4d:2f:88:0b:b9:c8:78:dc:1d:55:d8:2c:fb: 63:51:0e:4c:40:e4:12:6b:f2:a3:8d:9e:bf:8b:1f:92:c9:33: f3:1d:16:ea:d3:4f:df:18:15:c5:b8:83:ec:4e:af:f0:9f:79: 6f:98:50:f9:b1:98:a4:72:29:93:e5:cd:cf:c0:4a:dc:36:e1: 95:64:e0:28:42:9d:fb:82:95:ea:68:77:39:5a:d5:2f:79:c7: 39:7b:f0:30 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICARYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0NBRjExMTAvBgNVBAUTKDY2OTQxREE3RUFGMzBFOTM0NEUwMzIxRjBCNzU0RTdB RUZGQzM1MjkwHhcNMjUxMDAzMDYzMzI5WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTk5ZS04NmMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmdn8g8EzGzzkdykJvt0rd0uLWA/zkVdZUR0kEE3hOeKnlzGSYoYrptCn9f5B sfhuYPZIKvpV6rdYISGgIywqnHHqGvL0xF+U+IQoDvEbxWbUHREi07f9X6NveDME XVG3WIV1UQNZheRZy2LWwQ1hPW970XNCikA6YMj1r7WJCFvX2HRj9CfalKMuCnJ3 jmGY6rvj5MmoCKtvXJxJTiWRDoLUZsGCPM3J/pZxd4QPkGkCG0xfrND399NwyUKi ReHtJ0DQI2Q7m/AzHITZNYmYYG1gtA6VNhDz6ruuYtcg59d1m363kENV2okKAPTg ANiJkkTAE0+0a4VV5OSdBeo+wQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBk97xv0 LpkBpcoM985gRNppLx/KMB8GA1UdIwQYMBaAFGaUHafq8w6TROAyHwt1Tnrv/DUp MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQ0FGMS8wMDMxM0MzMjhB QUQxMUVGQkVGOTE2NkFDNEY5QUUwMi9acFFkcC1yekRwTkU0RElmQzNWT2V1XzhO U2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1pwUWRwLXJ6RHBORTRESWZDM1ZPZXVfOE5Tay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0NBRjEvMDAzMTNDMzI4QUFEMTFFRkJFRjkxNjZBQzRGOUFFMDIvQ0VGOEYyNzY4 QUFEMTFFRjkxMzNERTZFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoLv4MA0GCSqGSIb3DQEBCwUAA4IBAQAi90SbJIqnO+KfMUMeCGrF 67oDEhFc6y4X2tzBr5IYzJYxYInRlVMgaZeiYbCJlRV5ybhCCtDy0z6qiB4dgHWe 1Um5Ay+l88HViGXDDFAb5p00O1ercci2+REwMi2FHnwj+pXJDvV6M5HOm4qszK0D T29TDc0IOWfSCwEnwPFDk6LIIBqG9yUxe3zDtd55OeqT1sSqFzSSIhbZBhXgduWz QSPsHTu8E00viAu5yHjcHVXYLPtjUQ5MQOQSa/KjjZ6/ix+SyTPzHRbq00/fGBXF uIPsTq/wn3lvmFD5sZikcimT5c3PwErcNuGVZOAoQp37gpXqaHc5WtUvecc5e/Aw -----END CERTIFICATE-----Generated at Sun Mar 15 08:28:18 2026 by rpki-client