$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/4AE33318C91C11EFB0DEB92DC4F9AE02.roa File: 4AE33318C91C11EFB0DEB92DC4F9AE02.roa (raw, json) Hash identifier: YWJ03eczjPT20FOiBzL6QwaUBYD1U8rRundkIkTarnY= Subject key identifier: E2:A4:39:03:F3:02:41:94:55:42:1C:22:E2:41:CE:4E:BE:48:FA:A1 Certificate issuer: /CN=A91F08A5/serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Certificate serial: F2 Authority key identifier: 85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/4AE33318C91C11EFB0DEB92DC4F9AE02.roa Signing time: Mon 02 Mar 2026 13:54:34 +0000 ROA not before: Thu 27 Mar 2025 07:13:32 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 17557 IP address blocks: 119.160.214.0/24 maxlen: 24 119.160.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:38:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 242 (0xf2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F08A5, serialNumber=85E8EE9A8D30528599062D08CB9CB9D513DF6BD7 Validity Not Before: Mar 27 07:13:32 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a5969a-024f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:9a:57:9b:5a:d3:8b:28:18:a8:06:46:2b:1d: 44:12:47:04:56:5e:05:17:60:f8:81:72:7e:00:20: 8a:b2:f8:51:fc:54:75:cd:44:da:e0:c2:ea:8c:22: af:33:c6:92:fc:82:2f:03:9c:2a:a3:39:65:ae:f9: cd:0d:45:f9:ea:9e:49:9e:0d:6d:b4:54:b8:9e:dc: 5f:47:ba:52:36:44:7c:60:8f:fa:cb:cc:09:85:ea: 6e:1e:ba:5d:aa:27:91:21:17:89:ca:5e:7d:a4:90: 13:d0:d8:a5:cc:54:1a:2b:66:92:c9:11:cc:25:9e: 3c:88:df:b1:fb:78:60:fc:60:23:bd:96:2d:b4:1f: 3b:97:22:c4:d4:26:8d:ad:d0:9c:01:39:d7:77:1b: 48:63:39:f5:69:b0:10:c3:7a:df:cd:8d:1e:d7:0d: b5:45:b7:1c:28:ec:44:c2:46:27:46:72:30:d2:06: e7:9a:70:bb:18:bb:49:32:56:5f:99:3c:f2:ed:5e: 6c:06:ff:59:9e:74:44:c0:c4:f8:7e:cb:4f:69:de: 64:dc:57:3c:d8:1d:ed:58:22:90:fb:55:bd:88:89: aa:c1:c6:37:e0:5b:c4:30:59:b6:63:dd:9a:0e:f7: 2f:95:b0:11:87:f5:45:1b:6d:40:21:cb:9b:cb:0e: 17:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:A4:39:03:F3:02:41:94:55:42:1C:22:E2:41:CE:4E:BE:48:FA:A1 X509v3 Authority Key Identifier: keyid:85:E8:EE:9A:8D:30:52:85:99:06:2D:08:CB:9C:B9:D5:13:DF:6B:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/hejumo0wUoWZBi0Iy5y51RPfa9c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hejumo0wUoWZBi0Iy5y51RPfa9c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08A5/D1503136C91B11EF887D6F2CC4F9AE02/4AE33318C91C11EFB0DEB92DC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 119.160.214.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:21:3e:26:6e:13:de:37:eb:48:4e:a4:d6:e0:5a:3f:60:85: cc:62:ca:8c:ee:c6:85:e0:fb:b4:39:e8:15:c7:96:d0:5b:d4: 3b:91:73:65:3e:16:00:2d:85:c7:43:53:98:95:c9:6a:18:7f: 6a:ec:22:8f:b2:22:66:e5:a6:eb:b9:d0:78:98:a9:cf:a3:de: 4a:68:91:bd:29:96:aa:03:09:2b:59:ec:73:f3:1a:7d:5f:d2: 63:18:28:2a:57:e4:11:fd:2b:16:da:b4:73:da:3e:d9:5c:48: dd:a9:91:f5:4c:08:76:46:c9:e1:82:30:c7:02:46:37:be:c9: fb:d9:08:7c:ff:fc:98:18:fb:1b:97:02:c8:a6:89:7b:17:b6: c0:e4:7e:61:eb:f8:58:9e:29:9a:dd:5a:6b:15:fc:fa:c1:41: 2b:04:55:53:ca:3c:e7:80:20:a5:c0:99:0a:f6:8d:79:17:e0: 07:f5:ff:14:42:cf:ab:26:7e:eb:27:13:03:0f:4f:0e:f6:b1: ee:89:f3:bc:26:a7:7b:24:03:5e:79:d8:29:c2:a8:7e:0a:61: 32:8d:1e:0c:e4:1d:c5:3c:5d:c0:a8:c1:db:50:0b:dc:91:df: 7d:36:ca:a0:0f:3b:90:0c:4c:8c:66:8d:b9:c1:d8:30:35:d7: 5b:28:36:86 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjA4QTUxMTAvBgNVBAUTKDg1RThFRTlBOEQzMDUyODU5OTA2MkQwOENCOUNCOUQ1 MTNERjZCRDcwHhcNMjUwMzI3MDcxMzMyWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTY5YS0wMjRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv5pXm1rTiygYqAZGKx1EEkcEVl4FF2D4gXJ+ACCKsvhR/FR1zUTa4MLqjCKv M8aS/IIvA5wqozllrvnNDUX56p5Jng1ttFS4ntxfR7pSNkR8YI/6y8wJhepuHrpd qieRIReJyl59pJAT0NilzFQaK2aSyRHMJZ48iN+x+3hg/GAjvZYttB87lyLE1CaN rdCcATnXdxtIYzn1abAQw3rfzY0e1w21RbccKOxEwkYnRnIw0gbnmnC7GLtJMlZf mTzy7V5sBv9ZnnREwMT4fstPad5k3Fc82B3tWCKQ+1W9iImqwcY34FvEMFm2Y92a DvcvlbARh/VFG21AIcubyw4XDwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOKkOQPz AkGUVUIcIuJBzk6+SPqhMB8GA1UdIwQYMBaAFIXo7pqNMFKFmQYtCMucudUT32vX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMDhBNS9EMTUwMzEzNkM5 MUIxMUVGODg3RDZGMkNDNEY5QUUwMi9oZWp1bW8wd1VvV1pCaTBJeTV5NTFSUGZh OWMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hlanVtbzB3VW9XWkJpMEl5NXk1MVJQZmE5Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjA4QTUvRDE1MDMxMzZDOTFCMTFFRjg4N0Q2RjJDQzRGOUFFMDIvNEFFMzMzMThD OTFDMTFFRkIwREVCOTJEQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBd6DWMA0GCSqGSIb3DQEBCwUAA4IBAQBKIT4mbhPeN+tITqTW4Fo/ YIXMYsqM7saF4Pu0OegVx5bQW9Q7kXNlPhYALYXHQ1OYlclqGH9q7CKPsiJm5abr udB4mKnPo95KaJG9KZaqAwkrWexz8xp9X9JjGCgqV+QR/SsW2rRz2j7ZXEjdqZH1 TAh2RsnhgjDHAkY3vsn72Qh8//yYGPsblwLIpol7F7bA5H5h6/hYnima3VprFfz6 wUErBFVTyjzngCClwJkK9o15F+AH9f8UQs+rJn7rJxMDD08O9rHuifO8Jqd7JANe edgpwqh+CmEyjR4M5B3FPF3AqMHbUAvckd99NsqgDzuQDEyMZo25wdgwNddbKDaG -----END CERTIFICATE-----Generated at Thu Mar 26 15:27:24 2026 by rpki-client