$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/F88154843B9D11F091B39D67C4F9AE02.roa File: F88154843B9D11F091B39D67C4F9AE02.roa (raw, json) Hash identifier: WttgIko4+9s/vHPmH0/bx3r2YOermo25w+xjC3iigHs= Subject key identifier: AE:24:60:E7:77:25:CB:F5:7F:57:A6:9F:FE:05:DA:49:1C:EC:B5:6C Certificate issuer: /CN=A91F6C10/serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Certificate serial: 9A Authority key identifier: E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/F88154843B9D11F091B39D67C4F9AE02.roa Signing time: Sun 01 Mar 2026 13:32:47 +0000 ROA not before: Thu 05 Feb 2026 16:26:28 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 399861 IP address blocks: 161.248.88.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 07:05:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 154 (0x9a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F6C10, serialNumber=E2B0DFA690D2C7EAC43636756E437B7C2626F4BB Validity Not Before: Feb 5 16:26:28 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=69a43fff-97fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:14:c7:d2:47:0c:4b:4d:24:e6:e8:8c:d0:0a: 1d:4e:05:96:33:87:b2:a2:32:83:12:c5:25:98:a5: d7:0f:89:e3:6a:4f:b0:17:7d:48:95:c2:b4:1b:8c: de:9d:3b:76:8e:ab:d7:ac:3a:20:09:e4:f6:0b:fa: c9:5b:32:55:e9:e5:da:6e:88:6f:5e:7b:59:0e:a5: 93:08:56:d3:8a:57:8c:76:28:b8:46:9b:4a:29:61: 32:2b:ad:7d:a5:56:ac:8a:e4:d9:f1:01:c6:c6:6c: 97:ed:53:4e:84:35:e0:60:4b:56:ea:58:d3:8d:9e: 57:02:50:7d:01:ae:45:df:76:8a:18:a7:5b:08:12: fd:74:23:78:6b:d1:44:48:ef:b9:bb:e1:c1:cc:e3: 2e:eb:4d:44:0f:de:52:ce:71:bd:53:bf:24:50:11: 51:ee:e9:0b:9d:09:13:c4:82:ea:ce:e0:fa:29:05: 76:5a:b8:bf:70:f0:81:3c:4b:31:59:25:89:a2:3f: 78:07:c3:0f:64:d3:12:40:d3:c4:06:cd:59:a1:17: 16:32:f0:4e:ac:d6:4e:94:a5:12:dd:c9:e6:e8:61: 87:9f:c2:f6:c2:61:86:7f:f9:59:f3:99:ac:f7:c1: 38:cd:81:c1:cf:a5:58:28:35:8f:21:f4:f1:5f:be: 40:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:24:60:E7:77:25:CB:F5:7F:57:A6:9F:FE:05:DA:49:1C:EC:B5:6C X509v3 Authority Key Identifier: keyid:E2:B0:DF:A6:90:D2:C7:EA:C4:36:36:75:6E:43:7B:7C:26:26:F4:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/4rDfppDSx-rENjZ1bkN7fCYm9Ls.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4rDfppDSx-rENjZ1bkN7fCYm9Ls.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6C10/0E9405BA3B9D11F0901CB262C4F9AE02/F88154843B9D11F091B39D67C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 161.248.88.0/23 Signature Algorithm: sha256WithRSAEncryption 9c:f3:a3:bf:68:94:57:3f:c0:7e:96:b2:4c:7f:3e:61:e0:27: d8:07:cd:a3:89:cc:62:9b:bc:f4:2d:e3:94:5b:ce:e8:fc:c5: 81:15:51:30:5f:51:85:fa:66:76:6b:b0:6f:04:9a:89:3b:e6: d8:ef:fd:03:2a:54:cf:0c:65:5d:f1:70:e8:90:10:5e:a2:59: 92:47:78:c7:0e:1b:c3:d3:2c:13:05:40:c3:05:60:42:d0:a6: 85:82:bd:2b:81:6e:d6:a6:9b:60:d1:74:47:92:f8:57:93:b5: 70:51:28:5b:53:65:5a:42:a1:12:6b:75:7b:af:32:ba:bc:0a: 23:b4:b5:cf:48:eb:96:79:fe:ad:e0:5d:36:0b:ab:46:85:e9: e7:3c:29:da:f6:0d:1e:46:23:fe:78:86:57:f6:23:4a:22:ea: 37:a8:83:9f:38:60:05:90:8c:13:22:f9:2b:16:84:1d:0f:07: d9:d7:e9:40:f4:9a:12:ae:e9:be:3c:f6:bd:09:30:25:13:57: a2:99:be:6c:8a:36:eb:16:d9:6d:03:bf:f4:e3:41:9c:43:9c: 37:03:d4:d8:12:da:01:2e:70:31:b3:24:03:d3:47:63:bc:84: e3:56:d2:7a:be:2f:b3:bd:a9:b6:09:69:07:bc:f4:dd:0a:46: 45:12:06:4c -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAJowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjZDMTAxMTAvBgNVBAUTKEUyQjBERkE2OTBEMkM3RUFDNDM2MzY3NTZFNDM3QjdD MjYyNkY0QkIwHhcNMjYwMjA1MTYyNjI4WhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2ZmZi05N2ZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2BTH0kcMS00k5uiM0AodTgWWM4eyojKDEsUlmKXXD4njak+wF31IlcK0G4ze nTt2jqvXrDogCeT2C/rJWzJV6eXabohvXntZDqWTCFbTileMdii4RptKKWEyK619 pVasiuTZ8QHGxmyX7VNOhDXgYEtW6ljTjZ5XAlB9Aa5F33aKGKdbCBL9dCN4a9FE SO+5u+HBzOMu601ED95SznG9U78kUBFR7ukLnQkTxILqzuD6KQV2Wri/cPCBPEsx WSWJoj94B8MPZNMSQNPEBs1ZoRcWMvBOrNZOlKUS3cnm6GGHn8L2wmGGf/lZ85ms 98E4zYHBz6VYKDWPIfTxX75AQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFK4kYOd3 Jcv1f1emn/4F2kkc7LVsMB8GA1UdIwQYMBaAFOKw36aQ0sfqxDY2dW5De3wmJvS7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkMxMC8wRTk0MDVCQTNC OUQxMUYwOTAxQ0IyNjJDNEY5QUUwMi80ckRmcHBEU3gtckVOaloxYmtON2ZDWW05 THMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzRyRGZwcERTeC1yRU5qWjFia043ZkNZbTlMcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjZDMTAvMEU5NDA1QkEzQjlEMTFGMDkwMUNCMjYyQzRGOUFFMDIvRjg4MTU0ODQz QjlEMTFGMDkxQjM5RDY3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBofhYMA0GCSqGSIb3DQEBCwUAA4IBAQCc86O/aJRXP8B+lrJMfz5h 4CfYB82jicxim7z0LeOUW87o/MWBFVEwX1GF+mZ2a7BvBJqJO+bY7/0DKlTPDGVd 8XDokBBeolmSR3jHDhvD0ywTBUDDBWBC0KaFgr0rgW7Wpptg0XRHkvhXk7VwUShb U2VaQqESa3V7rzK6vAojtLXPSOuWef6t4F02C6tGhennPCna9g0eRiP+eIZX9iNK Iuo3qIOfOGAFkIwTIvkrFoQdDwfZ1+lA9JoSrum+PPa9CTAlE1eimb5sijbrFtlt A7/040GcQ5w3A9TYEtoBLnAxsyQD00djvITjVtJ6vi+zvam2CWkHvPTdCkZFEgZM -----END CERTIFICATE-----Generated at Wed Mar 4 09:48:03 2026 by rpki-client