$ rpki-client -vvf rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/8560F10A4D5611F1B0F28AF4CD833773.roa File: 8560F10A4D5611F1B0F28AF4CD833773.roa (raw, json) Hash identifier: WV4Htfmu0puGLpvi9qz2+zaFt4QQUqaj7qB/i9J9dNQ= Subject key identifier: 86:A5:9F:11:42:04:CE:90:23:8B:78:B1:3F:CD:7C:7E:1B:4D:A3:0D Certificate issuer: /CN=A91D17F2/serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Certificate serial: 0E0F Authority key identifier: 54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/8560F10A4D5611F1B0F28AF4CD833773.roa Signing time: Mon 11 May 2026 16:29:03 +0000 ROA not before: Mon 11 May 2026 16:29:03 +0000 ROA not after: Wed 31 Mar 2027 00:00:00 +0000 asID: 43260 IP address blocks: 59.152.62.0/24 maxlen: 24 59.152.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 18:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3599 (0xe0f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D17F2, serialNumber=5486376B05B8A2552329E361BD725C77E1F8D0C9 Validity Not Before: May 11 16:29:03 2026 GMT Not After : Mar 31 00:00:00 2027 GMT Subject: CN=6a0203ce-ffbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:54:35:af:4c:82:cd:e6:89:54:48:55:fb:ff: 59:e6:7c:8c:02:f2:ff:a8:5b:fa:36:5b:d7:e7:7a: 79:77:73:13:26:c6:b4:c3:f4:61:9f:cd:ad:82:57: c0:d6:0c:dc:5c:ca:f9:df:85:75:72:7d:e9:6f:6c: dd:93:78:1d:61:5a:c6:cc:2f:9b:00:e6:f2:d6:56: 9f:32:0f:05:91:d0:2b:a9:dc:d9:5b:33:e4:d7:bb: b4:97:4a:f0:df:54:26:8b:aa:89:50:f1:a3:82:0a: 4b:d8:c6:c9:37:bf:e6:e2:98:05:a1:48:6b:c7:87: 12:4d:bb:b9:2e:e6:29:f5:5d:9c:f1:e2:77:29:9f: 9d:1c:1d:b3:bd:08:df:cb:69:de:b7:17:7b:92:03: dc:6c:c1:50:82:e6:a8:aa:b8:7b:68:9b:f7:0f:4b: f6:a9:97:44:fd:b4:25:f5:ce:89:24:bc:26:e3:97: 1a:3f:68:47:b0:c4:f8:bc:30:60:e3:fb:9e:7a:b2: c4:9a:44:08:e7:ea:dc:2e:8e:64:d7:6e:e3:7e:72: c9:75:98:95:bd:8c:5d:4d:2a:6e:fb:ba:52:8f:a8: 77:7a:93:79:b7:ed:9c:9b:61:39:c5:78:8f:44:9e: 9f:d6:af:e1:eb:f1:24:42:78:10:2d:9f:84:d9:0b: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A5:9F:11:42:04:CE:90:23:8B:78:B1:3F:CD:7C:7E:1B:4D:A3:0D X509v3 Authority Key Identifier: keyid:54:86:37:6B:05:B8:A2:55:23:29:E3:61:BD:72:5C:77:E1:F8:D0:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/VIY3awW4olUjKeNhvXJcd-H40Mk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIY3awW4olUjKeNhvXJcd-H40Mk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D17F2/4C88A7A0FDFE11E9BD667D1FC4F9AE02/8560F10A4D5611F1B0F28AF4CD833773.roa sbgp-ipAddrBlock: critical IPv4: 59.152.62.0/23 Signature Algorithm: sha256WithRSAEncryption ab:8b:11:62:6e:be:5b:f8:a6:b4:9e:42:46:8a:57:10:3b:45: fd:c5:43:ff:d1:b1:b6:bd:4d:f7:b0:94:3e:36:f2:d7:78:83: 5c:74:7b:1e:db:61:65:1c:2d:f3:12:5b:4d:f7:44:eb:7d:12: c6:57:db:03:5c:45:72:ad:5a:2a:01:cb:a6:d2:23:80:88:23: 8d:ec:5e:db:94:d5:bb:ff:aa:c0:24:ec:84:80:14:53:e3:ee: 4b:b0:ae:58:57:fa:b9:97:1a:a9:f0:86:c0:bc:77:71:fa:50: 9a:fd:5c:e8:3b:f0:90:16:2e:8d:6c:0b:8b:1d:83:7a:37:82: e1:94:92:72:c0:f0:24:83:65:e7:39:94:bf:32:15:79:b9:f8: d0:ec:9f:1f:f7:d3:96:4c:da:d4:27:42:ba:a3:9a:ad:59:ea: 85:13:21:1b:6a:3a:86:2c:a0:65:a4:7f:f8:a3:50:37:43:3e: b0:98:da:a5:5e:57:0d:7e:c3:27:d5:83:ee:db:21:22:ee:ec: b0:87:51:b3:59:e1:80:9a:76:17:5e:7d:b8:c4:0c:53:fc:bf: f8:de:bb:60:f1:8b:3a:49:a5:b6:56:06:28:41:38:73:ad:dc: 57:ff:f4:72:6b:8c:04:6a:69:16:4c:54:cd:04:a5:17:b6:61: bb:7b:02:5d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICDg8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE3RjIxMTAvBgNVBAUTKDU0ODYzNzZCMDVCOEEyNTUyMzI5RTM2MUJENzI1Qzc3 RTFGOEQwQzkwHhcNMjYwNTExMTYyOTAzWhcNMjcwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTAyMDNjZS1mZmJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq1Q1r0yCzeaJVEhV+/9Z5nyMAvL/qFv6NlvX53p5d3MTJsa0w/Rhn82tglfA 1gzcXMr534V1cn3pb2zdk3gdYVrGzC+bAOby1lafMg8FkdArqdzZWzPk17u0l0rw 31Qmi6qJUPGjggpL2MbJN7/m4pgFoUhrx4cSTbu5LuYp9V2c8eJ3KZ+dHB2zvQjf y2netxd7kgPcbMFQguaoqrh7aJv3D0v2qZdE/bQl9c6JJLwm45caP2hHsMT4vDBg 4/ueerLEmkQI5+rcLo5k127jfnLJdZiVvYxdTSpu+7pSj6h3epN5t+2cm2E5xXiP RJ6f1q/h6/EkQngQLZ+E2QvbawIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIalnxFC BM6QI4t4sT/NfH4bTaMNMB8GA1UdIwQYMBaAFFSGN2sFuKJVIynjYb1yXHfh+NDJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTdGMi80Qzg4QTdBMEZE RkUxMUU5QkQ2NjdEMUZDNEY5QUUwMi9WSVkzYXdXNG9sVWpLZU5odlhKY2QtSDQw TWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJWTNhd1c0b2xVaktlTmh2WEpjZC1INDBNay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE3RjIvNEM4OEE3QTBGREZFMTFFOUJENjY3RDFGQzRGOUFFMDIvODU2MEYxMEE0 RDU2MTFGMUIwRjI4QUY0Q0Q4MzM3NzMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBO5g+MA0GCSqGSIb3DQEBCwUAA4IBAQCrixFibr5b+Ka0nkJGilcQ O0X9xUP/0bG2vU33sJQ+NvLXeINcdHse22FlHC3zEltN90TrfRLGV9sDXEVyrVoq Acum0iOAiCON7F7blNW7/6rAJOyEgBRT4+5LsK5YV/q5lxqp8IbAvHdx+lCa/Vzo O/CQFi6NbAuLHYN6N4LhlJJywPAkg2XnOZS/MhV5ufjQ7J8f99OWTNrUJ0K6o5qt WeqFEyEbajqGLKBlpH/4o1A3Qz6wmNqlXlcNfsMn1YPu2yEi7uywh1GzWeGAmnYX Xn24xAxT/L/43rtg8Ys6SaW2VgYoQThzrdxX//Rya4wEamkWTFTNBKUXtmG7ewJd -----END CERTIFICATE-----Generated at Wed May 13 02:38:22 2026 by rpki-client