$ rpki-client -vvf rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/85B52606F44311F089BA68A95F6F56BC.roa File: 85B52606F44311F089BA68A95F6F56BC.roa (raw, json) Hash identifier: Ex29dRzH8LkzDGimmK0Vm7ywjUej+dvGo6cnaEEBQnY= Subject key identifier: 83:FE:04:71:93:10:2D:30:98:C2:54:F7:95:45:3A:49:50:CE:16:75 Certificate issuer: /CN=A91430D6/serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Certificate serial: 80 Authority key identifier: AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/85B52606F44311F089BA68A95F6F56BC.roa Signing time: Mon 02 Mar 2026 13:23:21 +0000 ROA not before: Sun 18 Jan 2026 07:58:49 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154037 IP address blocks: 165.101.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 06:51:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 128 (0x80) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91430D6, serialNumber=AAC39FD963DE1731D0DA3D4141E4A1E469E98523 Validity Not Before: Jan 18 07:58:49 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a58f49-0971 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:47:10:c5:41:8b:1f:34:f4:8d:66:86:2c:33: f1:4d:40:50:9d:cb:34:3e:b7:53:8c:bd:ec:f1:13: 52:13:73:d7:53:07:dc:f7:5e:86:ad:53:4a:a2:35: 54:b9:76:87:7a:43:64:17:66:82:e7:c1:ee:9e:b5: d1:64:c4:e2:a8:e3:47:48:8b:ab:cd:58:17:55:c5: 15:c9:91:39:cb:09:06:49:d8:5d:30:b2:fb:4d:7f: 72:a5:02:6b:eb:18:0a:31:16:59:1b:74:c4:e0:1a: 59:8e:9f:45:a3:4b:d5:c6:5c:2f:69:e5:25:be:b5: 12:bb:3f:33:58:bb:92:a4:f3:ee:50:dc:57:f6:ef: c4:71:ea:b5:39:61:c8:b2:5b:7c:f9:08:b7:5f:58: ba:00:ed:e7:32:b2:e7:54:d3:a8:d7:80:73:7c:33: a6:ab:53:45:27:23:e7:d1:c9:c8:20:0c:82:78:d4: 26:a4:96:e8:e6:6b:3c:20:97:58:a6:a2:59:25:77: fb:9e:63:75:33:c2:9b:7e:f3:0f:f8:da:2b:3c:94: 6e:1d:9b:bd:00:8d:34:76:5e:6d:be:2b:e2:e6:c0: a3:8e:e2:bc:c3:6d:cd:d7:ab:54:ed:20:9c:08:25: 00:f5:dd:41:7e:03:4e:98:d9:54:ea:24:5f:a0:28: 5e:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:FE:04:71:93:10:2D:30:98:C2:54:F7:95:45:3A:49:50:CE:16:75 X509v3 Authority Key Identifier: keyid:AA:C3:9F:D9:63:DE:17:31:D0:DA:3D:41:41:E4:A1:E4:69:E9:85:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/qsOf2WPeFzHQ2j1BQeSh5GnphSM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qsOf2WPeFzHQ2j1BQeSh5GnphSM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91430D6/17F06A245FE011F0B2FD8F57C4F9AE02/85B52606F44311F089BA68A95F6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 165.101.168.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:1e:e1:0e:ad:9f:b7:18:95:8d:84:9c:50:9c:52:ce:7f:d6: 36:69:40:a0:cc:6c:28:a5:fc:48:00:81:0b:37:18:1b:82:0e: fa:7b:f8:0f:95:32:56:49:a7:a4:b6:a3:29:13:6b:72:ff:22: bf:e9:db:f8:08:ed:b0:80:c4:a3:a3:15:ad:34:db:c7:65:88: 56:90:f4:af:84:78:c7:f2:8e:3c:f3:e9:06:76:39:71:7a:01: d2:a6:41:9c:ba:c6:2e:c3:a7:bc:a8:94:ca:3e:36:e4:55:17: 69:3a:49:9d:aa:02:2f:b2:ba:b1:2a:80:a8:30:65:cf:de:d8: 5d:09:35:77:63:5d:b8:98:1b:80:aa:f3:16:c0:ce:64:87:1b: db:37:28:f8:7f:19:84:6a:9a:c3:a8:c2:ea:94:b1:22:a2:f9: 7c:93:5f:1e:09:7e:63:86:3f:5a:62:c8:58:5b:39:f8:61:2a: 0e:bc:8c:6c:d3:37:33:8f:5d:cf:2e:35:12:5b:98:86:2e:68: ae:d6:12:d7:55:db:41:6f:47:46:2f:04:c8:af:7b:4e:5e:f7: 77:28:aa:8a:2a:22:f5:6f:31:6b:15:1c:7c:99:cb:ff:c9:83: e5:a3:a3:c6:01:8f:4f:16:27:61:8e:61:e5:22:0c:32:b6:1e: ef:ba:ce:86 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAIAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDMwRDYxMTAvBgNVBAUTKEFBQzM5RkQ5NjNERTE3MzFEMERBM0Q0MTQxRTRBMUU0 NjlFOTg1MjMwHhcNMjYwMTE4MDc1ODQ5WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGY0OS0wOTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2EcQxUGLHzT0jWaGLDPxTUBQncs0PrdTjL3s8RNSE3PXUwfc916GrVNKojVU uXaHekNkF2aC58HunrXRZMTiqONHSIurzVgXVcUVyZE5ywkGSdhdMLL7TX9ypQJr 6xgKMRZZG3TE4BpZjp9Fo0vVxlwvaeUlvrUSuz8zWLuSpPPuUNxX9u/Eceq1OWHI slt8+Qi3X1i6AO3nMrLnVNOo14BzfDOmq1NFJyPn0cnIIAyCeNQmpJbo5ms8IJdY pqJZJXf7nmN1M8KbfvMP+NorPJRuHZu9AI00dl5tvivi5sCjjuK8w23N16tU7SCc CCUA9d1BfgNOmNlU6iRfoCheTQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIP+BHGT EC0wmMJU95VFOklQzhZ1MB8GA1UdIwQYMBaAFKrDn9lj3hcx0No9QUHkoeRp6YUj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MzBENi8xN0YwNkEyNDVG RTAxMUYwQjJGRDhGNTdDNEY5QUUwMi9xc09mMldQZUZ6SFEyajFCUWVTaDVHbnBo U00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FzT2YyV1BlRnpIUTJqMUJRZVNoNUducGhTTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDMwRDYvMTdGMDZBMjQ1RkUwMTFGMEIyRkQ4RjU3QzRGOUFFMDIvODVCNTI2MDZG NDQzMTFGMDg5QkE2OEE5NUY2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQApWWoMA0GCSqGSIb3DQEBCwUAA4IBAQBuHuEOrZ+3GJWNhJxQnFLO f9Y2aUCgzGwopfxIAIELNxgbgg76e/gPlTJWSaektqMpE2ty/yK/6dv4CO2wgMSj oxWtNNvHZYhWkPSvhHjH8o488+kGdjlxegHSpkGcusYuw6e8qJTKPjbkVRdpOkmd qgIvsrqxKoCoMGXP3thdCTV3Y124mBuAqvMWwM5khxvbNyj4fxmEaprDqMLqlLEi ovl8k18eCX5jhj9aYshYWzn4YSoOvIxs0zczj13PLjUSW5iGLmiu1hLXVdtBb0dG LwTIr3tOXvd3KKqKKiL1bzFrFRx8mcv/yYPlo6PGAY9PFidhjmHlIgwyth7vus6G -----END CERTIFICATE-----Generated at Thu Mar 26 15:40:55 2026 by rpki-client