$ rpki-client -vvf rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/197A8B3CD23611EF9EA7495DC4F9AE02.roa File: 197A8B3CD23611EF9EA7495DC4F9AE02.roa (raw, json) Hash identifier: LydSAbFEgXunoPXmnpZMts641lpnMB3u48Fdl0a+zxc= Subject key identifier: E2:6C:E8:8B:65:E0:C0:84:EC:EA:D7:6C:78:F4:5E:89:50:F4:31:12 Certificate issuer: /CN=A91A04B9/serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Certificate serial: DD Authority key identifier: 27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/197A8B3CD23611EF9EA7495DC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:38:43 +0000 ROA not before: Fri 05 Dec 2025 04:14:45 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 7604 IP address blocks: 160.250.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:44:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A04B9, serialNumber=276DCF3F2341ADC7D0BC46F36344F715600D9A58 Validity Not Before: Dec 5 04:14:45 2025 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a5a0f2-2329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:d1:27:40:27:35:21:e8:b1:5b:05:39:b2:ea: 4e:d7:f6:5f:59:19:ec:f3:bc:04:4c:8c:ad:a2:ff: c6:c3:75:d1:70:fb:89:20:69:9e:4c:6d:92:70:93: 7b:a0:a0:0d:ff:b2:f9:c1:2a:ff:1a:9c:df:11:bb: 46:f8:47:8d:66:0f:85:d1:99:72:6e:24:15:60:47: 63:03:20:d0:53:d0:a1:90:b2:f6:81:ec:0f:af:d2: 52:cc:39:07:b3:a8:20:16:23:05:a7:e5:d8:d5:f6: 12:6e:9c:c1:fb:8e:10:a1:35:53:ea:fc:52:ef:0d: 1c:da:df:5f:85:05:52:1a:3a:75:12:0c:20:6c:fa: a6:0c:93:1c:6f:1b:50:fb:ac:93:21:3a:b1:c4:2a: 13:5e:a3:0a:74:0d:cf:c8:5f:72:b8:79:51:2a:1f: ea:05:01:d9:75:87:11:0e:83:0f:e7:c5:78:4b:cd: 80:88:0d:82:7d:52:ee:4a:07:2f:14:0f:1c:3a:f6: 1a:f0:cd:b5:fa:39:cc:6b:ba:63:f5:93:43:db:e7: 6f:64:f5:8c:6d:d2:0a:f2:27:38:a0:65:34:b5:fa: 96:29:04:32:1a:ae:21:9a:dc:04:2c:66:9e:ec:96: ca:28:11:7b:61:34:e6:48:45:c7:5a:8e:95:a2:8c: ae:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:6C:E8:8B:65:E0:C0:84:EC:EA:D7:6C:78:F4:5E:89:50:F4:31:12 X509v3 Authority Key Identifier: keyid:27:6D:CF:3F:23:41:AD:C7:D0:BC:46:F3:63:44:F7:15:60:0D:9A:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/J23PPyNBrcfQvEbzY0T3FWANmlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/J23PPyNBrcfQvEbzY0T3FWANmlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A04B9/CE840568D23511EF8FE29C5CC4F9AE02/197A8B3CD23611EF9EA7495DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.250.34.0/24 Signature Algorithm: sha256WithRSAEncryption ca:98:cf:9e:f2:47:46:7a:44:1f:06:8a:d7:87:29:87:46:15: 3e:1f:6e:d4:25:cc:48:e0:5b:75:4a:d9:83:8a:f3:4e:ec:34: 13:97:ee:c8:f7:7b:95:2d:25:c2:fe:8a:33:5f:aa:cc:84:30: 62:77:c0:ff:6d:84:0c:5a:b8:ba:36:30:e1:a8:6a:5b:64:94: b4:d5:1e:82:ca:c4:8a:59:48:3d:71:c0:36:5a:71:2e:73:82: 24:81:5d:d4:98:10:c6:43:3e:a3:ec:2e:08:b8:9e:16:eb:f8: 4c:86:b2:db:d6:db:70:91:4a:27:c0:0c:e8:41:7e:0c:2e:5b: df:59:81:c3:0b:b9:ef:97:59:21:a9:b0:0a:dd:c9:82:cb:63: 3d:97:56:78:37:c0:29:39:d3:bf:0b:f3:bb:4e:da:8a:e2:f7: 18:bb:77:86:51:33:95:b9:c7:c3:f8:09:22:6b:ab:13:e2:a9: 81:2c:2d:b3:7b:96:10:3f:7f:d2:df:9a:66:40:e5:cf:4d:31: a8:cb:56:59:b5:08:db:8e:a1:d0:3b:42:da:4f:e9:93:e5:34: 09:74:92:8f:49:b6:33:f9:81:e7:b7:1e:ba:d4:4d:8d:92:6c: b1:dd:30:d3:d9:a5:1e:46:10:db:ef:d2:5b:a6:d6:c2:1f:06: bb:66:e4:bd -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTA0QjkxMTAvBgNVBAUTKDI3NkRDRjNGMjM0MUFEQzdEMEJDNDZGMzYzNDRGNzE1 NjAwRDlBNTgwHhcNMjUxMjA1MDQxNDQ1WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTBmMi0yMzI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAn9EnQCc1IeixWwU5supO1/ZfWRns87wETIytov/Gw3XRcPuJIGmeTG2ScJN7 oKAN/7L5wSr/GpzfEbtG+EeNZg+F0ZlybiQVYEdjAyDQU9ChkLL2gewPr9JSzDkH s6ggFiMFp+XY1fYSbpzB+44QoTVT6vxS7w0c2t9fhQVSGjp1EgwgbPqmDJMcbxtQ +6yTITqxxCoTXqMKdA3PyF9yuHlRKh/qBQHZdYcRDoMP58V4S82AiA2CfVLuSgcv FA8cOvYa8M21+jnMa7pj9ZND2+dvZPWMbdIK8ic4oGU0tfqWKQQyGq4hmtwELGae 7JbKKBF7YTTmSEXHWo6Vooyu8wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOJs6Itl 4MCE7OrXbHj0XolQ9DESMB8GA1UdIwQYMBaAFCdtzz8jQa3H0LxG82NE9xVgDZpY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMDRCOS9DRTg0MDU2OEQy MzUxMUVGOEZFMjlDNUNDNEY5QUUwMi9KMjNQUHlOQnJjZlF2RWJ6WTBUM0ZXQU5t bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0oyM1BQeU5CcmNmUXZFYnpZMFQzRldBTm1sZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTA0QjkvQ0U4NDA1NjhEMjM1MTFFRjhGRTI5QzVDQzRGOUFFMDIvMTk3QThCM0NE MjM2MTFFRjlFQTc0OTVEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoPoiMA0GCSqGSIb3DQEBCwUAA4IBAQDKmM+e8kdGekQfBorXhymH RhU+H27UJcxI4Ft1StmDivNO7DQTl+7I93uVLSXC/oozX6rMhDBid8D/bYQMWri6 NjDhqGpbZJS01R6CysSKWUg9ccA2WnEuc4IkgV3UmBDGQz6j7C4IuJ4W6/hMhrLb 1ttwkUonwAzoQX4MLlvfWYHDC7nvl1khqbAK3cmCy2M9l1Z4N8ApOdO/C/O7TtqK 4vcYu3eGUTOVucfD+Akia6sT4qmBLC2ze5YQP3/S35pmQOXPTTGoy1ZZtQjbjqHQ O0LaT+mT5TQJdJKPSbYz+YHntx661E2Nkmyx3TDT2aUeRhDb79JbptbCHwa7ZuS9 -----END CERTIFICATE-----Generated at Thu Mar 26 12:57:32 2026 by rpki-client