$ rpki-client -vvf rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/8F7DFE66C96E11EF98B64E15C4F9AE02.roa File: 8F7DFE66C96E11EF98B64E15C4F9AE02.roa (raw, json) Hash identifier: 0O2Y56VE28BDUyW/y7K+tvSZF089IWlNTSJ1ih9VrPA= Subject key identifier: 09:2C:E7:66:DA:99:AF:96:89:74:B2:E6:90:38:A7:C8:D5:08:DD:88 Certificate issuer: /CN=A91D837B/serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Certificate serial: EA Authority key identifier: FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/8F7DFE66C96E11EF98B64E15C4F9AE02.roa Signing time: Sun 01 Mar 2026 11:13:21 +0000 ROA not before: Mon 05 Jan 2026 05:28:02 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 210000 IP address blocks: 160.250.164.0/24 maxlen: 24 160.250.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:22:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D837B, serialNumber=FA22801C52AE2A5FC491B7CBEBE68EFCA2C8D1D9 Validity Not Before: Jan 5 05:28:02 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a41f51-2704 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e8:c6:58:6c:32:e4:d3:c9:86:a1:55:76:b4: 84:9a:fd:48:a9:07:89:90:1f:d6:ce:c7:57:92:39: 10:13:27:9a:d0:3c:e0:5a:bd:8b:71:41:8e:38:09: 2a:cf:3a:b1:39:87:22:1b:e9:04:a1:f4:e0:9a:5b: b3:7c:fc:ed:f1:c5:9e:47:2d:ac:6e:f2:aa:98:26: 3b:56:59:e4:c4:71:6f:5a:85:8b:16:95:06:83:d1: c7:f8:ff:f5:2d:71:a3:23:5d:67:93:9d:5f:7e:7d: 8f:ca:1e:16:56:c9:8a:e7:01:f9:6c:03:65:15:f4: e6:77:c8:9e:72:bc:8d:3e:73:b5:2b:cb:96:ad:48: 0b:6f:e1:ec:f6:38:90:5a:92:cc:3e:a5:fd:dc:ae: 71:00:a9:48:ec:12:ec:3d:ca:11:8b:a2:01:03:43: 2d:2e:0d:b9:39:c2:af:68:dc:f0:b8:28:9c:c0:ef: 1b:a1:8f:80:e7:56:a8:3c:d5:1f:60:91:46:35:88: 89:33:79:58:9c:1a:66:25:0c:15:fb:50:ba:b9:c5: 88:71:d0:3e:a1:10:db:0a:fd:da:ae:74:74:70:8c: e7:e0:03:61:ac:62:c1:db:3d:7c:00:3b:13:b3:ea: f4:82:f2:42:f6:a1:d5:96:fb:19:2f:59:93:e5:06: f0:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2C:E7:66:DA:99:AF:96:89:74:B2:E6:90:38:A7:C8:D5:08:DD:88 X509v3 Authority Key Identifier: keyid:FA:22:80:1C:52:AE:2A:5F:C4:91:B7:CB:EB:E6:8E:FC:A2:C8:D1:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/-iKAHFKuKl_EkbfL6-aO_KLI0dk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-iKAHFKuKl_EkbfL6-aO_KLI0dk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D837B/158D7F3CB99C11EF9638F769C4F9AE02/8F7DFE66C96E11EF98B64E15C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.250.164.0/23 Signature Algorithm: sha256WithRSAEncryption 86:df:da:2c:b1:8e:8c:66:2a:8f:14:88:62:be:a6:05:b5:6c: 1f:2c:9e:aa:e4:7f:11:7a:48:2b:0a:e8:14:19:75:65:e4:f6: 2e:2c:39:1d:9b:b6:ce:9c:e9:6c:c7:6a:f8:ef:80:24:e3:5d: 5e:c9:20:fe:cc:58:e7:54:07:ec:ca:60:61:cc:ec:ee:e6:62: e2:49:89:2d:e4:02:9f:46:3b:0f:4d:c6:43:b9:21:64:e8:0f: c2:28:29:9c:ec:c9:b5:4a:c9:1f:e6:d3:17:bd:50:32:cf:d2: 1c:27:cf:aa:63:ec:99:c0:de:22:38:8b:ce:9d:60:07:07:d8: f1:e0:34:3f:36:a4:14:91:bb:dc:10:e8:a7:01:62:5d:a4:d3: e4:00:f6:9e:c5:76:bd:78:22:bd:ab:0d:8b:a5:1e:35:b0:8b: 8f:fe:49:38:9c:ac:cc:c0:f3:22:21:74:56:ab:f8:3f:5e:83: 05:6b:d1:38:0a:af:f5:8b:ed:fd:8a:33:7c:b1:41:61:ce:88: 9a:1a:bc:78:b6:ec:3c:ad:d0:d4:b4:79:26:25:51:f7:92:f2: ef:dd:3a:7f:88:2e:dd:da:4f:13:29:f6:5a:7e:6c:8f:36:d9: a9:a3:c2:22:a3:9d:5d:ea:35:ca:2d:d6:2e:ce:b1:d0:91:91: 4a:09:f3:7d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDgzN0IxMTAvBgNVBAUTKEZBMjI4MDFDNTJBRTJBNUZDNDkxQjdDQkVCRTY4RUZD QTJDOEQxRDkwHhcNMjYwMTA1MDUyODAyWhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MWY1MS0yNzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu+jGWGwy5NPJhqFVdrSEmv1IqQeJkB/WzsdXkjkQEyea0DzgWr2LcUGOOAkq zzqxOYciG+kEofTgmluzfPzt8cWeRy2sbvKqmCY7VlnkxHFvWoWLFpUGg9HH+P/1 LXGjI11nk51ffn2Pyh4WVsmK5wH5bANlFfTmd8iecryNPnO1K8uWrUgLb+Hs9jiQ WpLMPqX93K5xAKlI7BLsPcoRi6IBA0MtLg25OcKvaNzwuCicwO8boY+A51aoPNUf YJFGNYiJM3lYnBpmJQwV+1C6ucWIcdA+oRDbCv3arnR0cIzn4ANhrGLB2z18ADsT s+r0gvJC9qHVlvsZL1mT5QbwBQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAks52ba ma+WiXSy5pA4p8jVCN2IMB8GA1UdIwQYMBaAFPoigBxSripfxJG3y+vmjvyiyNHZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODM3Qi8xNThEN0YzQ0I5 OUMxMUVGOTYzOEY3NjlDNEY5QUUwMi8taUtBSEZLdUtsX0VrYmZMNi1hT19LTEkw ZGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLy1pS0FIRkt1S2xfRWtiZkw2LWFPX0tMSTBkay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDgzN0IvMTU4RDdGM0NCOTlDMTFFRjk2MzhGNzY5QzRGOUFFMDIvOEY3REZFNjZD OTZFMTFFRjk4QjY0RTE1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoPqkMA0GCSqGSIb3DQEBCwUAA4IBAQCG39ossY6MZiqPFIhivqYF tWwfLJ6q5H8RekgrCugUGXVl5PYuLDkdm7bOnOlsx2r474Ak411eySD+zFjnVAfs ymBhzOzu5mLiSYkt5AKfRjsPTcZDuSFk6A/CKCmc7Mm1Sskf5tMXvVAyz9IcJ8+q Y+yZwN4iOIvOnWAHB9jx4DQ/NqQUkbvcEOinAWJdpNPkAPaexXa9eCK9qw2LpR41 sIuP/kk4nKzMwPMiIXRWq/g/XoMFa9E4Cq/1i+39ijN8sUFhzoiaGrx4tuw8rdDU tHkmJVH3kvLv3Tp/iC7d2k8TKfZafmyPNtmpo8Iio51d6jXKLdYuzrHQkZFKCfN9 -----END CERTIFICATE-----Generated at Sun Mar 22 12:34:19 2026 by rpki-client