$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/408104A8C3E011F0A31AE55EC4F9AE02.roa File: 408104A8C3E011F0A31AE55EC4F9AE02.roa (raw, json) Hash identifier: pcYphfTrqjt0UtYRyrIEyy/aiUJOYlWwvIqALwmywFk= Subject key identifier: F7:BB:4C:6E:DC:4F:AA:7B:33:7E:CF:43:B7:C5:D0:F2:99:9D:8B:62 Certificate issuer: /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Certificate serial: 0112 Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/408104A8C3E011F0A31AE55EC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:11:25 +0000 ROA not before: Thu 27 Nov 2025 04:21:57 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 141988 IP address blocks: 160.191.128.0/23 maxlen: 23 160.191.128.0/24 maxlen: 24 160.191.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 274 (0x112) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Validity Not Before: Nov 27 04:21:57 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=69a59a8d-27a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ae:c7:be:22:2a:66:82:28:e7:03:f9:8a:79: 04:36:80:fc:28:4d:bc:ec:4a:d3:72:f6:27:1d:fa: 9a:5d:62:a4:db:bc:73:70:5f:f1:66:4a:13:17:d7: 95:06:71:e7:5c:32:6c:08:31:47:80:ea:94:f3:6c: 42:15:75:da:2d:fe:d5:e3:91:08:19:94:ea:f9:0b: 02:bf:6d:8a:77:82:d7:d6:c5:2c:4c:1b:0d:ba:77: 9e:28:9f:3d:ad:95:d4:e9:2c:f2:fb:c6:4f:fd:d0: 58:03:e9:a2:bc:5b:0d:f8:a5:f4:d2:26:d8:22:c7: 27:ed:fd:dd:be:08:8a:93:cc:8b:f3:42:98:f3:5c: d0:02:4d:87:1e:be:9c:3c:30:c3:d4:2f:27:b3:39: c9:8b:ee:b9:23:dd:57:4f:3d:0b:b5:69:17:04:3c: b8:13:6b:4b:ad:fe:5e:c1:e7:0a:f6:b0:7a:8a:81: 4d:ce:a2:3f:b1:9f:6f:19:eb:3f:6f:de:4b:f1:f3: 49:bc:1b:a1:b3:49:4e:9c:5f:83:a3:1e:58:5a:53: b8:45:e9:b0:e3:76:b7:5d:58:07:66:c5:23:10:e8: c9:b1:40:0c:c9:05:a5:71:80:00:7c:9b:c2:6e:c7: 50:e0:2f:0e:1f:3e:40:97:f9:6b:00:11:20:ae:3e: ca:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:BB:4C:6E:DC:4F:AA:7B:33:7E:CF:43:B7:C5:D0:F2:99:9D:8B:62 X509v3 Authority Key Identifier: keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/408104A8C3E011F0A31AE55EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.191.128.0/23 Signature Algorithm: sha256WithRSAEncryption 61:39:95:7d:16:04:3f:7a:ff:e4:b1:c6:5b:46:ea:e6:a8:9e: 3b:30:5c:eb:fc:cd:93:b3:41:19:ba:40:d2:9c:08:94:07:7b: f1:a0:d4:95:29:ae:b5:6f:ba:6d:76:f3:ec:1a:b6:63:d7:9b: 42:61:19:4a:72:d4:a0:ba:9e:b4:45:ac:2f:13:8b:6b:37:45: 80:de:4a:68:6b:af:03:6e:33:40:a4:93:08:48:e0:23:92:9a: de:a7:03:ea:70:40:9d:0f:a0:85:94:bc:2e:5c:65:b9:8a:d7: c7:5f:63:46:95:d0:4f:21:44:6d:7d:e3:a3:0e:30:6e:6d:cc: dd:00:c4:62:36:84:25:aa:44:d4:49:1c:a8:2e:96:8d:4f:2e: c5:9f:3b:de:02:37:31:43:14:3d:45:d4:0c:c8:82:29:c5:31: 8b:33:f8:8c:60:63:09:8c:97:5f:68:b1:71:6b:f7:9f:3c:6e: a8:b5:37:f5:2f:42:ff:33:83:8c:6c:de:0b:11:e6:53:d0:ac: 8e:96:7f:cb:39:17:43:55:e1:a7:67:52:c3:1e:e8:5e:6d:2c: 65:8f:92:b0:6c:8f:e6:6d:c9:7f:08:9d:93:6a:2c:ff:c7:b3: f3:7c:ce:5b:78:6a:9f:bb:21:dd:cc:a6:dd:d3:4e:62:26:36: 20:ff:fe:b7 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICARIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKDA0Qzc5QTRERDI0RkZBMDNGQThGOTI5Njc2NkY4MkEw Mzg1Q0UyOTMwHhcNMjUxMTI3MDQyMTU3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OWE4ZC0yN2E0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArK7HviIqZoIo5wP5inkENoD8KE287ErTcvYnHfqaXWKk27xzcF/xZkoTF9eV BnHnXDJsCDFHgOqU82xCFXXaLf7V45EIGZTq+QsCv22Kd4LX1sUsTBsNuneeKJ89 rZXU6Szy+8ZP/dBYA+mivFsN+KX00ibYIscn7f3dvgiKk8yL80KY81zQAk2HHr6c PDDD1C8nsznJi+65I91XTz0LtWkXBDy4E2tLrf5ewecK9rB6ioFNzqI/sZ9vGes/ b95L8fNJvBuhs0lOnF+Dox5YWlO4Remw43a3XVgHZsUjEOjJsUAMyQWlcYAAfJvC bsdQ4C8OHz5Al/lrABEgrj7KMQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFPe7TG7c T6p7M37PQ7fF0PKZnYtiMB8GA1UdIwQYMBaAFATHmk3ST/oD+o+SlnZvgqA4XOKT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS83QzZFREE4Q0Ex Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi9CTWVhVGRKUC1nUDZqNUtXZG0tQ29EaGM0 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JNZWFUZEpQLWdQNmo1S1dkbS1Db0RoYzRwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU4N0UvN0M2RURBOENBMUNGMTFFRjg3OEU2MDYxQzRGOUFFMDIvNDA4MTA0QThD M0UwMTFGMEEzMUFFNTVFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoL+AMA0GCSqGSIb3DQEBCwUAA4IBAQBhOZV9FgQ/ev/kscZbRurm qJ47MFzr/M2Ts0EZukDSnAiUB3vxoNSVKa61b7ptdvPsGrZj15tCYRlKctSgup60 RawvE4trN0WA3kpoa68DbjNApJMISOAjkprepwPqcECdD6CFlLwuXGW5itfHX2NG ldBPIURtfeOjDjBubczdAMRiNoQlqkTUSRyoLpaNTy7FnzveAjcxQxQ9RdQMyIIp xTGLM/iMYGMJjJdfaLFxa/efPG6otTf1L0L/M4OMbN4LEeZT0KyOln/LORdDVeGn Z1LDHuhebSxlj5KwbI/mbcl/CJ2Taiz/x7PzfM5beGqfuyHdzKbd005iJjYg//63 -----END CERTIFICATE-----Generated at Thu Mar 26 23:37:32 2026 by rpki-client