$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa File: B23569E2756511EFB018F20DC4F9AE02.roa (raw, json) Hash identifier: /fpFKtFcwh7KjBndTGfGIO4WW4Bx9KlPmCwqANIq6FA= Subject key identifier: 22:B3:45:26:0C:A2:BA:93:4A:02:77:ED:A9:16:DC:58:0F:84:C6:EA Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Certificate serial: 012A Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa Signing time: Mon 02 Mar 2026 12:32:42 +0000 ROA not before: Tue 16 Sep 2025 04:37:00 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138166 IP address blocks: 160.30.212.0/23 maxlen: 23 160.30.212.0/24 maxlen: 24 160.30.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 05:22:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 298 (0x12a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Validity Not Before: Sep 16 04:37:00 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69a5836a-ed98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:05:34:4c:0c:31:d8:d8:aa:1f:e4:35:7c:af: 96:3d:c5:d8:51:d1:07:63:4b:f7:5b:c2:8f:e6:a9: 61:ad:af:e0:5b:f5:44:74:6f:b0:d7:9b:60:85:c0: 68:d7:f0:44:d4:5a:45:91:f6:99:04:35:23:40:5d: 66:4a:8f:57:9e:a5:1e:e3:87:09:60:c7:a9:74:cf: 32:be:d2:01:31:d3:63:6a:e0:ee:46:23:0d:5d:80: 77:db:23:33:c9:df:dd:3e:e3:d9:a7:8d:a1:e9:87: 45:60:6b:23:fa:c8:81:7d:fe:2f:5c:a5:36:4e:6d: cf:ce:63:c9:cc:b2:a4:1b:16:f4:ae:c2:83:14:54: 68:3c:ee:7c:aa:39:d6:b7:b5:56:c6:85:98:a8:32: 88:4b:bb:6c:65:ae:0c:e7:93:c7:01:83:0e:e3:9f: 90:c7:62:e8:13:1e:e7:f3:d5:29:7c:75:24:8c:7f: ec:fe:52:ab:dc:db:78:29:e4:f8:e0:d0:dc:2e:97: fc:8e:96:7f:55:7f:ae:aa:fa:99:95:be:e3:bc:41: fa:ae:69:ae:bd:47:46:de:ad:b3:9b:2c:a7:0a:fb: 87:3f:d3:0d:fb:7e:c6:84:87:c9:ed:2f:07:bf:bd: d3:2d:07:d2:8a:fd:7a:8e:4a:73:f2:0e:47:df:92: ff:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B3:45:26:0C:A2:BA:93:4A:02:77:ED:A9:16:DC:58:0F:84:C6:EA X509v3 Authority Key Identifier: keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.30.212.0/23 Signature Algorithm: sha256WithRSAEncryption 0e:3d:c7:b8:e1:bc:fa:ea:29:9c:cf:6f:15:5d:e3:41:bf:0a: e3:95:fc:db:b2:e4:6f:79:a8:23:e6:e9:5c:ba:c8:90:7e:5f: 05:c0:24:91:48:99:a8:05:bb:eb:00:c1:7a:13:34:e8:20:bc: dd:7c:3c:3b:11:b2:c2:40:ab:26:92:57:9b:73:af:48:b1:54: 0a:02:82:1a:2a:49:b3:c6:f8:78:04:6a:bb:35:18:b9:3b:10: 94:7a:03:2b:27:32:fe:6b:86:36:aa:d5:8b:cf:74:ce:f9:f9: 4b:4f:a2:26:b9:b3:94:30:63:ef:36:23:7a:3b:7f:1f:86:a1: 78:dc:9e:64:92:d5:c9:47:eb:f1:38:e9:bb:dd:d2:61:19:6e: f6:dc:8c:f2:90:18:78:cf:eb:90:6d:e1:d4:47:54:c5:19:13: 55:fb:91:be:26:01:94:f9:85:36:23:27:6a:72:a7:92:c8:80: 4a:4f:f2:c3:77:ed:e9:0e:13:44:98:52:93:5d:02:55:7f:25: c1:7f:16:b3:09:a6:2c:ad:47:f5:6c:45:dc:fe:f3:07:0d:8d: 27:cb:03:3a:5e:c7:a4:e2:01:63:cd:1e:cc:b7:43:4d:78:49: e1:56:6e:e6:f8:ca:84:7c:c5:23:25:d8:b4:fd:7a:76:78:91: 99:bd:71:8f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICASowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy Rjc3RDJDRkQwHhcNMjUwOTE2MDQzNzAwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1ODM2YS1lZDk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvQU0TAwx2NiqH+Q1fK+WPcXYUdEHY0v3W8KP5qlhra/gW/VEdG+w15tghcBo 1/BE1FpFkfaZBDUjQF1mSo9XnqUe44cJYMepdM8yvtIBMdNjauDuRiMNXYB32yMz yd/dPuPZp42h6YdFYGsj+siBff4vXKU2Tm3PzmPJzLKkGxb0rsKDFFRoPO58qjnW t7VWxoWYqDKIS7tsZa4M55PHAYMO45+Qx2LoEx7n89UpfHUkjH/s/lKr3Nt4KeT4 4NDcLpf8jpZ/VX+uqvqZlb7jvEH6rmmuvUdG3q2zmyynCvuHP9MN+37GhIfJ7S8H v73TLQfSiv16jkpz8g5H35L/nwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCKzRSYM orqTSgJ37akW3FgPhMbqMB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ0QkUvMDI4QUJFNDI2OTIyMTFFRkJGODdCQjBFQzRGOUFFMDIvQjIzNTY5RTI3 NTY1MTFFRkIwMThGMjBEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoB7UMA0GCSqGSIb3DQEBCwUAA4IBAQAOPce44bz66imcz28VXeNB vwrjlfzbsuRveagj5ulcusiQfl8FwCSRSJmoBbvrAMF6EzToILzdfDw7EbLCQKsm klebc69IsVQKAoIaKkmzxvh4BGq7NRi5OxCUegMrJzL+a4Y2qtWLz3TO+flLT6Im ubOUMGPvNiN6O38fhqF43J5kktXJR+vxOOm73dJhGW723IzykBh4z+uQbeHUR1TF GRNV+5G+JgGU+YU2IydqcqeSyIBKT/LDd+3pDhNEmFKTXQJVfyXBfxazCaYsrUf1 bEXc/vMHDY0nywM6Xsek4gFjzR7Mt0NNeEnhVm7m+MqEfMUjJdi0/Xp2eJGZvXGP -----END CERTIFICATE-----Generated at Wed Mar 4 10:08:48 2026 by rpki-client