$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/014DA14E596F11ED9DE99A66C4F9AE02.roa File: 014DA14E596F11ED9DE99A66C4F9AE02.roa (raw, json) Hash identifier: 9ZUKLl/lkYKMx9K797F4rGfYHPAqqo67yeOpoxXdq4E= Subject key identifier: D4:B5:B5:D0:8D:40:2F:02:D7:04:A8:63:DE:53:D1:63:4A:EA:3F:8C Certificate issuer: /CN=A91F2B47/serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Certificate serial: 02F4 Authority key identifier: 17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/014DA14E596F11ED9DE99A66C4F9AE02.roa Signing time: Tue 17 Mar 2026 01:34:47 +0000 ROA not before: Tue 17 Mar 2026 01:34:47 +0000 ROA not after: Sat 01 May 2027 00:00:00 +0000 asID: 9426 IP address blocks: 166.120.0.0/22 maxlen: 24 166.120.4.0/22 maxlen: 24 166.120.8.0/24 maxlen: 24 166.120.64.0/19 maxlen: 19 166.120.64.0/22 maxlen: 24 166.120.68.0/23 maxlen: 24 166.120.70.0/23 maxlen: 24 166.120.72.0/22 maxlen: 23 166.120.74.0/23 maxlen: 24 166.120.76.0/22 maxlen: 22 166.120.76.0/23 maxlen: 24 166.120.80.0/20 maxlen: 22 166.120.164.0/22 maxlen: 24 166.120.202.0/23 maxlen: 24 166.120.212.0/23 maxlen: 23 166.120.212.0/24 maxlen: 24 166.120.216.0/23 maxlen: 23 166.120.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 01:05:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 756 (0x2f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2B47, serialNumber=17D5FE323EBFD9A8D344E77B73799A8E75624352 Validity Not Before: Mar 17 01:34:47 2026 GMT Not After : May 1 00:00:00 2027 GMT Subject: CN=69b8afb7-affa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:94:5e:ea:37:cb:9b:e2:04:2a:ce:8e:64:4e: 02:20:15:7f:26:66:1e:77:bc:88:90:88:fb:17:24: 13:f4:d6:ca:17:8e:a7:62:eb:17:66:c9:66:49:49: 05:4d:10:e9:3d:73:55:b1:4c:f2:16:7e:de:a8:4c: bf:a6:06:c8:25:17:46:32:f1:f8:e1:6a:6a:0e:f8: 0a:d9:2d:15:75:b2:3e:40:74:b5:28:29:7a:ea:fb: 5e:57:d3:03:a1:90:8f:8b:39:eb:e3:44:90:22:55: 13:63:13:e2:97:11:c5:ec:e1:b8:de:c6:32:ba:a3: 49:84:27:b6:80:57:82:53:c4:54:88:0c:fb:e3:fa: 47:a4:e0:78:be:dd:90:c3:3f:34:c9:61:86:69:3a: c4:bd:ef:34:73:34:a7:41:c4:e7:7a:36:5c:98:26: 49:77:e2:28:80:19:ed:59:06:58:f6:05:75:a2:4d: 9c:e9:47:22:1e:d8:30:95:a4:e8:ea:c1:51:37:47: ba:9c:3b:f3:58:02:49:ca:9b:77:77:13:46:0e:04: 1d:df:61:17:97:e7:22:be:fe:27:b4:30:74:e2:6a: c5:cb:05:eb:df:1c:2f:33:1c:dd:7b:a2:84:eb:54: 65:a3:7f:d3:39:74:a8:15:cc:13:41:d6:d3:0b:c1: d8:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:B5:B5:D0:8D:40:2F:02:D7:04:A8:63:DE:53:D1:63:4A:EA:3F:8C X509v3 Authority Key Identifier: keyid:17:D5:FE:32:3E:BF:D9:A8:D3:44:E7:7B:73:79:9A:8E:75:62:43:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/F9X-Mj6_2ajTROd7c3majnViQ1I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F9X-Mj6_2ajTROd7c3majnViQ1I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/E88E9C7E33AF11EDB6107434C4F9AE02/014DA14E596F11ED9DE99A66C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 166.120.0.0-166.120.8.255 166.120.64.0/19 166.120.164.0/22 166.120.202.0/23 166.120.212.0/23 166.120.216.0/23 Signature Algorithm: sha256WithRSAEncryption 78:1c:bf:46:33:e8:80:c0:31:2e:5f:20:da:f1:ae:43:51:c3: bf:30:6f:ab:15:dd:f2:0e:d6:69:1d:57:e1:3d:95:c7:49:09: 41:18:e9:72:5e:84:61:cc:f9:ff:87:ec:32:8d:9e:33:e8:5b: a2:da:3a:e2:ac:ee:6d:bc:6a:f3:a2:4c:ae:ba:84:34:9e:9d: 28:4f:77:d3:82:2c:ec:d6:eb:0d:42:b8:5a:cd:b5:3e:0d:a6: 99:f0:91:5b:5d:cb:6e:c1:bf:c0:d3:36:8f:ff:7b:05:91:4e: fa:b5:81:60:86:d2:7f:02:a6:f9:46:e5:e4:d4:c0:95:11:a4: c2:e2:9a:93:18:41:25:f3:a8:47:56:87:2c:99:57:27:66:a2: af:0e:46:00:f4:33:b3:9c:1f:7c:bc:d7:79:68:52:2a:6c:00: 89:d9:cc:a2:9f:53:c3:58:b5:a4:46:9c:d8:58:cc:7a:74:90: 40:98:93:33:9a:ff:c8:6a:3a:d4:e9:f6:8f:16:19:23:b4:15: 00:ce:da:f8:4c:45:44:93:81:c9:02:df:f0:83:61:20:78:ec: db:41:03:d7:fd:24:12:78:e7:c0:e5:d4:a0:60:34:5f:b4:6a: 8d:4a:42:38:f6:44:6d:69:ef:14:6d:95:7a:4c:3b:be:20:44: f5:58:1c:55 -----BEGIN CERTIFICATE----- MIIFYTCCBEmgAwIBAgICAvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjJCNDcxMTAvBgNVBAUTKDE3RDVGRTMyM0VCRkQ5QThEMzQ0RTc3QjczNzk5QThF NzU2MjQzNTIwHhcNMjYwMzE3MDEzNDQ3WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWI4YWZiNy1hZmZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuJRe6jfLm+IEKs6OZE4CIBV/JmYed7yIkIj7FyQT9NbKF46nYusXZslmSUkF TRDpPXNVsUzyFn7eqEy/pgbIJRdGMvH44WpqDvgK2S0VdbI+QHS1KCl66vteV9MD oZCPiznr40SQIlUTYxPilxHF7OG43sYyuqNJhCe2gFeCU8RUiAz74/pHpOB4vt2Q wz80yWGGaTrEve80czSnQcTnejZcmCZJd+IogBntWQZY9gV1ok2c6UciHtgwlaTo 6sFRN0e6nDvzWAJJypt3dxNGDgQd32EXl+civv4ntDB04mrFywXr3xwvMxzde6KE 61Rlo3/TOXSoFcwTQdbTC8HYlQIDAQABo4IChTCCAoEwHQYDVR0OBBYEFNS1tdCN QC8C1wSoY95T0WNK6j+MMB8GA1UdIwQYMBaAFBfV/jI+v9mo00Tne3N5mo51YkNS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkI0Ny9FODhFOUM3RTMz QUYxMUVEQjYxMDc0MzRDNEY5QUUwMi9GOVgtTWo2XzJhalRST2Q3YzNtYWpuVmlR MUkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0Y5WC1NajZfMmFqVFJPZDdjM21ham5WaVExSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjJCNDcvRTg4RTlDN0UzM0FGMTFFREI2MTA3NDM0QzRGOUFFMDIvMDE0REExNEU1 OTZGMTFFRDlERTk5QTY2QzRGOUFFMDIucm9hMEQGCCsGAQUFBwEHAQH/BDUwMzAx BAIAATArMAsDAwOmeAMEAKZ4CAMEBaZ4QAMEAqZ4pAMEAaZ4ygMEAaZ41AMEAaZ4 2DANBgkqhkiG9w0BAQsFAAOCAQEAeBy/RjPogMAxLl8g2vGuQ1HDvzBvqxXd8g7W aR1X4T2Vx0kJQRjpcl6EYcz5/4fsMo2eM+hboto64qzubbxq86JMrrqENJ6dKE93 04Is7NbrDUK4Ws21Pg2mmfCRW13LbsG/wNM2j/97BZFO+rWBYIbSfwKm+Ubl5NTA lRGkwuKakxhBJfOoR1aHLJlXJ2airw5GAPQzs5wffLzXeWhSKmwAidnMop9Tw1i1 pEac2FjMenSQQJiTM5r/yGo61On2jxYZI7QVAM7a+ExFRJOByQLf8INhIHjs20ED 1/0kEnjnwOXUoGA0X7RqjUpCOPZEbWnvFG2Vekw7viBE9VgcVQ== -----END CERTIFICATE-----Generated at Thu Mar 26 16:02:41 2026 by rpki-client