$ rpki-client -vvvf rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/1CCC1F3C97F911F1A1B8040E6F11F970.roa File: 1CCC1F3C97F911F1A1B8040E6F11F970.roa (raw, json) Hash identifier: nnpgZb8pphmld77O5HH0vZJrbo5b7MyF20Uu/zQGu1E= Subject key identifier: 17:DB:28:89:3D:D0:0A:DD:E0:F4:22:92:CE:94:18:C7:4D:02:36:49 Certificate issuer: /CN=A91729D4/serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733 Certificate serial: 22 Authority key identifier: AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/1CCC1F3C97F911F1A1B8040E6F11F970.roa Signing time: Sun 16 Aug 2026 16:15:49 +0000 ROA not before: Sun 16 Aug 2026 16:15:49 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 51082 IP address blocks: 160.236.24.0/24 maxlen: 24 160.236.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Sep 2026 09:15:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91729D4, serialNumber=AAF21B706B55F1334DCF6B617E9E0F311D5BF733 Validity Not Before: Aug 16 16:15:49 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a81e235-66d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d8:0a:43:3b:12:82:bc:d6:3c:f7:e1:c1:53: 68:b7:2e:5b:44:8f:48:f7:be:41:7b:ee:0a:1e:ca: 6d:06:3b:e0:fc:88:d9:fd:b8:ef:2b:51:53:48:1c: 18:d8:83:64:cb:91:84:33:6e:c4:b8:75:61:fd:a4: 07:f7:86:16:31:c3:73:89:45:4d:73:74:f8:bf:05: 72:1b:da:10:99:b1:34:67:01:8f:2c:14:f6:7f:fb: 21:55:fa:cd:64:55:b1:54:b1:a4:ee:c7:84:fd:a9: 8d:d1:85:db:2e:d2:1c:5b:b4:e0:3d:b0:f8:41:92: 9e:90:21:5c:71:7d:15:70:05:e3:d6:ca:fb:0e:2e: 66:5f:33:41:9a:fa:2d:15:e5:ec:44:7e:b3:06:66: 20:e3:23:78:24:b7:3c:07:dc:7a:e4:1b:27:3a:d2: 93:62:7b:c9:53:59:d7:1e:bc:6c:df:0a:ea:63:ab: 3d:1b:5d:7a:bd:0f:f6:85:0f:5c:ff:dd:5b:0a:10: 26:c9:96:c0:e0:83:51:2c:b2:5b:5c:e6:40:4f:7c: e4:09:43:2a:17:58:aa:82:21:b6:30:7b:52:9e:46: 4e:73:ca:57:b1:11:71:de:f3:ec:76:65:ba:34:78: 5f:6e:30:34:27:d5:da:d5:e2:db:c7:1e:a6:b3:5e: 08:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DB:28:89:3D:D0:0A:DD:E0:F4:22:92:CE:94:18:C7:4D:02:36:49 X509v3 Authority Key Identifier: keyid:AA:F2:1B:70:6B:55:F1:33:4D:CF:6B:61:7E:9E:0F:31:1D:5B:F7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/qvIbcGtV8TNNz2thfp4PMR1b9zM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qvIbcGtV8TNNz2thfp4PMR1b9zM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91729D4/293A5888725111F1A5B3D6038DA30FBC/1CCC1F3C97F911F1A1B8040E6F11F970.roa sbgp-ipAddrBlock: critical IPv4: 160.236.24.0/23 Signature Algorithm: sha256WithRSAEncryption 5b:64:1f:1b:bb:28:57:7b:09:d1:35:dc:86:59:da:e3:4c:f3: 04:8f:05:d9:a1:de:98:24:c6:34:15:8c:bc:a8:3a:bd:75:f8: 6b:20:ef:d0:6f:24:21:a0:f7:7a:0c:e0:d6:75:f5:e5:5a:40: bd:01:ac:9d:0a:18:04:58:05:9f:71:5b:8c:75:3d:02:dc:06: cc:f5:98:d9:a4:72:1e:8c:5e:cc:c7:f0:e6:2a:46:dd:05:29: 5c:5e:63:21:0e:b1:d3:5d:5c:03:e6:53:81:cc:1c:d3:59:24: 98:50:c9:5b:87:1d:71:3d:9c:82:d3:8b:a1:14:27:18:db:32: 88:55:c3:7d:7e:a9:ba:28:5c:5a:bc:71:b6:24:16:c8:ab:ef: a1:01:0f:1c:d4:d8:a2:4b:17:d4:da:35:65:af:64:f8:ee:79: 92:58:a6:39:5a:e3:da:5d:ea:95:37:ac:c7:cc:df:12:48:59: af:cf:9b:35:b6:10:a3:ea:2b:9c:68:7d:4f:e7:e0:12:a6:35: 59:4a:f5:42:f4:3d:b7:2c:98:39:d7:a4:0a:0e:fc:b7:67:fd: 63:15:07:b7:c6:ad:5a:7f:d2:d8:a2:1c:c1:a7:8f:1d:69:cb: 52:bd:c0:e7:3f:bd:f3:14:d4:35:44:95:ab:e0:81:c8:7e:1b: cf:a2:12:99 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MjlENDExMC8GA1UEBRMoQUFGMjFCNzA2QjU1RjEzMzREQ0Y2QjYxN0U5RTBGMzEx RDVCRjczMzAeFw0yNjA4MTYxNjE1NDlaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhODFlMjM1LTY2ZDkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDX2ApDOxKCvNY89+HBU2i3LltEj0j3vkF77goeym0GO+D8iNn9uO8rUVNIHBjY g2TLkYQzbsS4dWH9pAf3hhYxw3OJRU1zdPi/BXIb2hCZsTRnAY8sFPZ/+yFV+s1k VbFUsaTux4T9qY3Rhdsu0hxbtOA9sPhBkp6QIVxxfRVwBePWyvsOLmZfM0Ga+i0V 5exEfrMGZiDjI3gktzwH3HrkGyc60pNie8lTWdcevGzfCupjqz0bXXq9D/aFD1z/ 3VsKECbJlsDgg1Essltc5kBPfOQJQyoXWKqCIbYwe1KeRk5zylexEXHe8+x2Zbo0 eF9uMDQn1drV4tvHHqazXggtAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUF9soiT3Q Ct3g9CKSzpQYx00CNkkwHwYDVR0jBBgwFoAUqvIbcGtV8TNNz2thfp4PMR1b9zMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcyOUQ0LzI5M0E1ODg4NzI1 MTExRjFBNUIzRDYwMzhEQTMwRkJDL3F2SWJjR3RWOFROTnoydGhmcDRQTVIxYjl6 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXZJYmNHdFY4VE5OejJ0aGZwNFBNUjFiOXpNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MjlENC8yOTNBNTg4ODcyNTExMUYxQTVCM0Q2MDM4REEzMEZCQy8xQ0NDMUYzQzk3 RjkxMUYxQTFCODA0MEU2RjExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGg7BgwDQYJKoZIhvcNAQELBQADggEBAFtkHxu7KFd7CdE13IZZ2uNM 8wSPBdmh3pgkxjQVjLyoOr11+Gsg79BvJCGg93oM4NZ19eVaQL0BrJ0KGARYBZ9x W4x1PQLcBsz1mNmkch6MXszH8OYqRt0FKVxeYyEOsdNdXAPmU4HMHNNZJJhQyVuH HXE9nILTi6EUJxjbMohVw31+qbooXFq8cbYkFsir76EBDxzU2KJLF9TaNWWvZPju eZJYpjla49pd6pU3rMfM3xJIWa/PmzW2EKPqK5xofU/n4BKmNVlK9UL0PbcsmDnX pAoO/Ldn/WMVB7fGrVp/0tiiHMGnjx1py1K9wOc/vfMU1DVElavggch+G8+iEpk= -----END CERTIFICATE-----Generated at Tue Sep 1 04:32:38 2026 by rpki-client