$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/AC8695B8A60611EE8FEB2160C4F9AE02.roa File: AC8695B8A60611EE8FEB2160C4F9AE02.roa (raw, json) Hash identifier: vtr7yAZ74kddk2JEZlUucC+/G3kf3cROk0g8PEEHH8Q= Subject key identifier: 0A:38:D8:CB:91:4F:9F:4E:78:E1:0A:77:60:6C:44:4F:8E:AF:88:D3 Certificate issuer: /CN=A91E1155/serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Certificate serial: 0F96 Authority key identifier: 0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/AC8695B8A60611EE8FEB2160C4F9AE02.roa Signing time: Sun 01 Mar 2026 15:32:58 +0000 ROA not before: Tue 04 Nov 2025 18:06:36 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 146994 IP address blocks: 43.241.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 17:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3990 (0xf96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1155, serialNumber=0B2561C4B57DA81D70F39724B0DE2C7101749F5D Validity Not Before: Nov 4 18:06:36 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a45c2a-3bc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:94:83:02:64:c1:df:75:89:af:c9:3a:b7:4a: a0:47:bf:6e:b2:05:c0:28:80:da:12:55:44:94:81: a0:56:85:cb:7c:b9:26:90:d4:81:fd:b0:35:41:2b: f7:68:97:7e:93:9b:00:c4:68:57:fc:6c:f5:34:7b: 55:07:b9:fc:80:c0:c3:6d:65:07:4a:5f:7a:68:93: ce:e4:ac:93:48:0e:af:db:9e:fa:a7:33:b8:56:8e: 53:68:e1:63:d2:e9:ac:5e:54:c2:a8:0d:51:c8:cf: 6f:79:7b:d2:37:28:10:4a:4c:16:12:1a:36:85:f9: 72:98:f3:4d:09:c7:0f:a9:81:04:96:c3:70:b8:59: b5:f5:a3:59:4c:7b:05:d9:09:8f:05:6d:b8:de:17: 77:43:f6:eb:df:a8:a2:c6:a1:55:fb:79:50:07:72: 36:ef:7d:40:f1:ea:6f:54:56:2a:fe:a0:e6:5c:4e: b2:44:11:95:83:ae:84:df:28:b7:2f:6d:97:8a:8a: 93:65:77:fc:38:8f:76:f6:ba:42:62:4a:16:82:61: fb:1e:5a:ba:ba:7c:57:1f:46:f8:94:fe:fa:11:a2: 5d:dc:7e:5c:fe:d9:ee:69:58:b7:cb:fb:b0:c1:4a: e9:52:f7:10:47:80:9e:5a:99:77:83:02:16:22:9c: 58:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:38:D8:CB:91:4F:9F:4E:78:E1:0A:77:60:6C:44:4F:8E:AF:88:D3 X509v3 Authority Key Identifier: keyid:0B:25:61:C4:B5:7D:A8:1D:70:F3:97:24:B0:DE:2C:71:01:74:9F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/CyVhxLV9qB1w85cksN4scQF0n10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CyVhxLV9qB1w85cksN4scQF0n10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1155/53998A347EB311E9AB9C7B24C4F9AE02/AC8695B8A60611EE8FEB2160C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 43.241.245.0/24 Signature Algorithm: sha256WithRSAEncryption 20:84:38:ee:d7:1e:da:dc:9d:81:6a:77:36:8f:50:79:99:ec: ad:c6:99:93:e8:7d:86:01:dc:40:23:0b:5a:5b:c1:4f:e3:eb: fe:5a:02:40:72:6b:58:a9:9b:2e:94:0c:bb:35:4a:11:24:11: 6b:29:31:db:80:64:d9:20:06:2b:d1:13:ad:e3:d7:8d:59:48: 71:db:59:e3:28:83:e0:db:a9:00:cb:00:44:c3:3c:28:3f:46: 14:66:3a:e4:4b:05:bd:ea:a7:88:fa:c9:b0:b4:00:44:13:cd: 6f:d0:37:e5:02:57:e2:1b:63:42:ca:f8:e7:41:27:6a:09:56: 22:0f:48:b3:66:41:e0:a0:a6:99:e1:5c:84:bc:48:7a:94:26: ec:dc:93:8b:36:4d:a5:18:08:e0:0e:dd:6e:5c:47:53:22:47: 6a:55:77:3e:d3:f6:ea:bb:d0:f5:87:a9:f7:60:a5:f3:e3:09: da:9b:08:f0:da:1b:4c:15:82:e7:a8:b9:b6:e0:0c:7d:20:76: d0:aa:bf:c2:16:fe:9f:d2:54:29:4a:84:50:ad:f2:a3:6c:4a: 17:bb:35:7c:ef:52:66:7a:ac:18:bb:5e:52:d5:fe:27:6f:19: ea:fe:76:c6:89:ca:87:74:24:18:69:54:38:ee:b7:64:90:e8: 91:ce:75:43 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICD5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTExNTUxMTAvBgNVBAUTKDBCMjU2MUM0QjU3REE4MUQ3MEYzOTcyNEIwREUyQzcx MDE3NDlGNUQwHhcNMjUxMTA0MTgwNjM2WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NWMyYS0zYmM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtpSDAmTB33WJr8k6t0qgR79usgXAKIDaElVElIGgVoXLfLkmkNSB/bA1QSv3 aJd+k5sAxGhX/Gz1NHtVB7n8gMDDbWUHSl96aJPO5KyTSA6v2576pzO4Vo5TaOFj 0umsXlTCqA1RyM9veXvSNygQSkwWEho2hflymPNNCccPqYEElsNwuFm19aNZTHsF 2QmPBW243hd3Q/br36iixqFV+3lQB3I2731A8epvVFYq/qDmXE6yRBGVg66E3yi3 L22XioqTZXf8OI929rpCYkoWgmH7Hlq6unxXH0b4lP76EaJd3H5c/tnuaVi3y/uw wUrpUvcQR4CeWpl3gwIWIpxYNwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAo42MuR T59OeOEKd2BsRE+Or4jTMB8GA1UdIwQYMBaAFAslYcS1fagdcPOXJLDeLHEBdJ9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTE1NS81Mzk5OEEzNDdF QjMxMUU5QUI5QzdCMjRDNEY5QUUwMi9DeVZoeExWOXFCMXc4NWNrc040c2NRRjBu MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0N5Vmh4TFY5cUIxdzg1Y2tzTjRzY1FGMG4xMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTExNTUvNTM5OThBMzQ3RUIzMTFFOUFCOUM3QjI0QzRGOUFFMDIvQUM4Njk1QjhB NjA2MTFFRThGRUIyMTYwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAK/H1MA0GCSqGSIb3DQEBCwUAA4IBAQAghDju1x7a3J2Banc2j1B5 meytxpmT6H2GAdxAIwtaW8FP4+v+WgJAcmtYqZsulAy7NUoRJBFrKTHbgGTZIAYr 0ROt49eNWUhx21njKIPg26kAywBEwzwoP0YUZjrkSwW96qeI+smwtABEE81v0Dfl AlfiG2NCyvjnQSdqCVYiD0izZkHgoKaZ4VyEvEh6lCbs3JOLNk2lGAjgDt1uXEdT IkdqVXc+0/bqu9D1h6n3YKXz4wnamwjw2htMFYLnqLm24Ax9IHbQqr/CFv6f0lQp SoRQrfKjbEoXuzV871JmeqwYu15S1f4nbxnq/nbGicqHdCQYaVQ47rdkkOiRznVD -----END CERTIFICATE-----Generated at Thu Mar 26 14:30:59 2026 by rpki-client