$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/AFF169A0F34111F0B7AB4BD35C6F56BC.roa File: AFF169A0F34111F0B7AB4BD35C6F56BC.roa (raw, json) Hash identifier: grqcDNhPLZ19+sVArgIFaTXjwPldcbbRWwq0KUxCAaI= Subject key identifier: 82:CF:42:95:18:2C:79:6B:BB:7E:99:39:B4:06:3C:31:11:74:48:86 Certificate issuer: /CN=A91D0C8E/serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Certificate serial: 04D5 Authority key identifier: 95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/AFF169A0F34111F0B7AB4BD35C6F56BC.roa Signing time: Mon 09 Mar 2026 10:34:03 +0000 ROA not before: Mon 09 Mar 2026 10:34:03 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134134 IP address blocks: 116.204.242.0/24 maxlen: 24 116.204.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 23:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1237 (0x4d5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D0C8E, serialNumber=9535D76110B3C029C5855B4C174505AF6119F30C Validity Not Before: Mar 9 10:34:03 2026 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69aea21b-5f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:11:59:d7:ec:46:76:6f:7c:27:5a:bd:35:ea: 5a:97:e7:17:9c:2d:c3:18:30:aa:5c:08:62:bd:54: ff:a0:75:56:1c:e4:fe:6a:04:80:9f:a2:61:47:83: 4b:6b:3a:1d:01:fc:c5:9a:d6:3d:86:ec:06:0d:91: 8f:e7:0b:18:97:bd:13:b9:18:71:32:30:8b:94:e4: c1:e8:ee:7e:64:ee:b9:75:4e:70:9c:64:56:76:2f: d4:a8:2c:64:d0:45:08:e5:2a:fb:36:e1:77:fb:6e: ab:f3:19:49:9f:c8:e8:ba:9a:d5:82:50:b6:99:8a: 6f:e2:b3:e7:cc:be:e0:cc:3c:79:cd:21:a7:2e:0c: 2d:18:be:cb:5b:9c:73:90:cb:51:88:42:74:d2:af: 6a:37:4a:c2:e3:5c:92:ee:69:81:1e:cf:81:b5:93: 2c:5b:12:07:45:06:ca:e9:eb:c6:8e:37:a5:94:58: 2e:80:1a:94:41:18:a6:db:a7:41:65:f0:e9:b1:d3: f3:5c:ed:da:c5:0e:25:a5:d1:28:79:e8:87:49:86: d0:53:36:47:21:99:cb:ba:78:c9:3f:20:c7:25:b0: b3:76:78:7f:31:8a:69:1f:ed:a7:49:0e:3a:46:46: da:79:c1:1e:e7:24:9f:31:5c:ad:7f:fc:2b:c3:e3: e6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:CF:42:95:18:2C:79:6B:BB:7E:99:39:B4:06:3C:31:11:74:48:86 X509v3 Authority Key Identifier: keyid:95:35:D7:61:10:B3:C0:29:C5:85:5B:4C:17:45:05:AF:61:19:F3:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lTXXYRCzwCnFhVtMF0UFr2EZ8ww.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0C8E/032E57B8743911ECB557236FC4F9AE02/AFF169A0F34111F0B7AB4BD35C6F56BC.roa sbgp-ipAddrBlock: critical IPv4: 116.204.242.0/23 Signature Algorithm: sha256WithRSAEncryption 14:90:1f:35:0f:27:92:f5:3c:37:81:f4:93:05:64:1e:a2:2e: d5:c8:c8:a2:8e:ff:85:0a:37:11:e8:82:c1:0b:18:fa:43:40: 0d:89:52:50:b0:41:fd:6b:6c:91:5a:18:52:54:b2:a8:98:5d: a9:dd:df:0e:7a:ed:f2:db:2f:cb:ca:a4:2b:0d:e8:67:8c:13: 9c:ce:e0:bd:d8:86:a9:2b:bb:63:d1:0c:41:f5:6c:01:55:10: 3d:d8:31:8b:29:48:22:e0:f1:4c:8a:6b:5d:b0:75:f9:a5:d1: 80:30:83:b4:45:4a:52:74:f8:f8:36:74:4e:26:13:65:1e:a0: 95:24:f6:ac:c2:7b:a1:d5:2b:be:c7:13:8d:1b:25:5e:b4:3c: 53:ab:7b:85:97:21:80:bd:cf:79:0f:28:3a:b9:34:34:b5:a9: 75:85:cf:c4:c5:5f:12:0f:12:69:69:73:dc:10:61:ae:df:09: f0:c3:13:18:21:bb:00:3a:15:fb:78:83:4c:b3:c2:86:f0:9a: fe:37:b4:57:10:b8:56:c8:eb:10:d1:40:f8:52:26:18:41:91: 9b:ca:91:f4:76:64:ef:b1:c1:0b:19:93:ab:ce:5d:9a:a9:dd: 9e:3a:f9:59:d2:43:76:91:24:ae:bb:0c:11:ca:97:81:c2:9b: 8a:b3:a2:08 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICBNUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDBDOEUxMTAvBgNVBAUTKDk1MzVENzYxMTBCM0MwMjlDNTg1NUI0QzE3NDUwNUFG NjExOUYzMEMwHhcNMjYwMzA5MTAzNDAzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFlYTIxYi01ZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6xFZ1+xGdm98J1q9Nepal+cXnC3DGDCqXAhivVT/oHVWHOT+agSAn6JhR4NL azodAfzFmtY9huwGDZGP5wsYl70TuRhxMjCLlOTB6O5+ZO65dU5wnGRWdi/UqCxk 0EUI5Sr7NuF3+26r8xlJn8jouprVglC2mYpv4rPnzL7gzDx5zSGnLgwtGL7LW5xz kMtRiEJ00q9qN0rC41yS7mmBHs+BtZMsWxIHRQbK6evGjjellFgugBqUQRim26dB ZfDpsdPzXO3axQ4lpdEoeeiHSYbQUzZHIZnLunjJPyDHJbCzdnh/MYppH+2nSQ46 RkbaecEe5ySfMVytf/wrw+PmlwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFILPQpUY LHlru36ZObQGPDERdEiGMB8GA1UdIwQYMBaAFJU112EQs8ApxYVbTBdFBa9hGfMM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMEM4RS8wMzJFNTdCODc0 MzkxMUVDQjU1NzIzNkZDNEY5QUUwMi9sVFhYWVJDendDbkZoVnRNRjBVRnIyRVo4 d3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xUWFhZUkN6d0NuRmhWdE1GMFVGcjJFWjh3dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDBDOEUvMDMyRTU3Qjg3NDM5MTFFQ0I1NTcyMzZGQzRGOUFFMDIvQUZGMTY5QTBG MzQxMTFGMEI3QUI0QkQzNUM2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBdMzyMA0GCSqGSIb3DQEBCwUAA4IBAQAUkB81DyeS9Tw3gfSTBWQe oi7VyMiijv+FCjcR6ILBCxj6Q0ANiVJQsEH9a2yRWhhSVLKomF2p3d8Oeu3y2y/L yqQrDehnjBOczuC92IapK7tj0QxB9WwBVRA92DGLKUgi4PFMimtdsHX5pdGAMIO0 RUpSdPj4NnROJhNlHqCVJPaswnuh1Su+xxONGyVetDxTq3uFlyGAvc95Dyg6uTQ0 tal1hc/ExV8SDxJpaXPcEGGu3wnwwxMYIbsAOhX7eINMs8KG8Jr+N7RXELhWyOsQ 0UD4UiYYQZGbypH0dmTvscELGZOrzl2aqd2eOvlZ0kN2kSSuuwwRypeBwpuKs6II -----END CERTIFICATE-----Generated at Thu Mar 26 19:04:34 2026 by rpki-client