$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/07C63A20768711F189D127AE62A30FBC.roa File: 07C63A20768711F189D127AE62A30FBC.roa (raw, json) Hash identifier: EAm3Wj5OJ9C3TRRRVq02cCeCDT3/7BrLw2+7bFBtmAw= Subject key identifier: BA:E9:5A:6B:D8:82:28:A7:8C:3D:A3:68:CE:57:CD:F9:44:9A:F2:23 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 239B Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/07C63A20768711F189D127AE62A30FBC.roa Signing time: Fri 02 Oct 2026 15:18:06 +0000 ROA not before: Fri 02 Oct 2026 15:18:06 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151872 IP address blocks: 157.66.220.0/24 maxlen: 24 157.66.221.0/24 maxlen: 24 160.22.80.0/24 maxlen: 24 160.22.81.0/24 maxlen: 24 160.22.118.0/24 maxlen: 24 160.22.119.0/24 maxlen: 24 160.30.10.0/24 maxlen: 24 160.30.11.0/24 maxlen: 24 160.30.22.0/24 maxlen: 24 160.30.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9115 (0x239b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:18:06 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcb2d-452f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3c:a9:79:f6:3e:a4:5f:d3:52:89:3b:2a:e8: 5b:f8:ef:48:be:95:2a:47:2e:7f:44:ee:b6:d8:5a: 17:79:0c:35:1b:e4:32:b3:cb:55:1a:84:06:72:b8: ad:4f:96:6b:6b:38:43:ed:01:9a:cd:75:b6:94:d5: d2:e3:9d:5d:66:63:0e:a9:66:fe:91:30:1c:28:23: 17:16:c8:2b:26:97:c6:14:37:e9:44:52:6c:d0:6a: bb:01:53:33:cc:7a:f1:50:21:fd:d1:4e:d0:01:a3: d7:a5:db:c6:3b:c9:20:36:20:5e:7d:66:08:a8:8e: 33:e5:51:f9:fc:fb:be:35:28:53:72:6f:4c:7f:7c: 10:2c:f7:cd:f8:60:20:ab:73:8e:b7:77:76:3b:1d: 82:0f:4e:84:37:d1:b7:79:7a:f2:e4:5f:9b:bd:2a: d5:16:3c:88:05:b0:44:a6:3b:c3:de:00:f3:39:35: 43:81:a5:8b:5e:21:ca:9e:1b:60:1d:c7:65:9d:93: 61:51:5b:92:f0:28:7d:c9:f3:69:c0:e1:76:a3:4f: cf:ab:b8:c5:6a:4d:f9:af:a9:a8:d4:3a:63:ea:7f: 8b:dc:bf:9d:1a:36:fc:f0:ea:7f:5e:74:50:ec:08: eb:03:b3:92:35:ed:53:29:44:d2:ae:f0:e4:58:09: 3e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E9:5A:6B:D8:82:28:A7:8C:3D:A3:68:CE:57:CD:F9:44:9A:F2:23 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/07C63A20768711F189D127AE62A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 157.66.220.0/23 160.22.80.0/23 160.22.118.0/23 160.30.10.0/23 160.30.22.0/23 Signature Algorithm: sha256WithRSAEncryption 23:d4:f2:70:37:95:60:92:32:57:ca:d3:ef:e9:bc:83:da:c0: 75:9a:e7:02:2a:46:09:5a:71:10:4a:10:12:92:52:e4:c5:4e: b2:3a:5b:bb:a9:20:dd:58:ea:b5:c3:4a:23:4f:3b:0d:a7:f3: 04:6a:95:e9:e6:33:43:47:97:40:40:cc:53:ac:2c:ea:44:4c: 63:59:d1:31:94:f4:f8:2e:38:e2:fe:b3:8c:2c:f4:e2:42:5b: 90:19:01:f4:56:49:21:bd:ea:d9:6a:e7:34:b1:df:82:53:17: 8e:b5:dc:77:68:f7:91:a9:a9:06:1a:a9:a6:0f:e9:94:23:31: 8b:2b:26:2d:45:5f:2f:38:ec:90:34:5c:fb:30:6b:84:cc:27: 6c:e2:a9:b3:c2:dd:a8:2c:bf:6d:fc:49:c5:3a:96:a4:ab:f8: 0e:a0:b9:87:c1:31:f2:bd:9d:0d:28:ae:68:3a:f1:7a:31:74: 51:62:99:67:a1:45:60:01:06:44:fa:1a:2f:a4:45:4c:b5:c6: 07:df:f4:93:0c:d5:b6:32:41:bd:b8:b8:40:b7:b8:ad:bc:6a: a9:3f:a0:4e:01:83:5a:15:ec:08:bb:98:50:60:41:8e:6f:9e: 31:eb:7f:00:8e:de:a7:be:58:28:af:b5:03:30:75:ed:39:b8: b5:04:8c:43 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICI5swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUxODA2WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2IyZC00NTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlzypefY+pF/TUok7Kuhb+O9IvpUqRy5/RO622FoXeQw1G+Qys8tVGoQGcrit T5ZrazhD7QGazXW2lNXS451dZmMOqWb+kTAcKCMXFsgrJpfGFDfpRFJs0Gq7AVMz zHrxUCH90U7QAaPXpdvGO8kgNiBefWYIqI4z5VH5/Pu+NShTcm9Mf3wQLPfN+GAg q3OOt3d2Ox2CD06EN9G3eXry5F+bvSrVFjyIBbBEpjvD3gDzOTVDgaWLXiHKnhtg HcdlnZNhUVuS8Ch9yfNpwOF2o0/Pq7jFak35r6mo1Dpj6n+L3L+dGjb88Op/XnRQ 7AjrA7OSNe1TKUTSrvDkWAk+ywIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFLrpWmvY giinjD2jaM5XzflEmvIjMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMDdDNjNBMjA3 Njg3MTFGMTg5RDEyN0FFNjJBMzBGQkMucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQBnULcAwQBoBZQAwQBoBZ2AwQBoB4KAwQBoB4WMA0GCSqGSIb3DQEB CwUAA4IBAQAj1PJwN5VgkjJXytPv6byD2sB1mucCKkYJWnEQShASklLkxU6yOlu7 qSDdWOq1w0ojTzsNp/MEapXp5jNDR5dAQMxTrCzqRExjWdExlPT4Ljji/rOMLPTi QluQGQH0VkkhverZauc0sd+CUxeOtdx3aPeRqakGGqmmD+mUIzGLKyYtRV8vOOyQ NFz7MGuEzCds4qmzwt2oLL9t/EnFOpakq/gOoLmHwTHyvZ0NKK5oOvF6MXRRYpln oUVgAQZE+hovpEVMtcYH3/STDNW2MkG9uLhAt7itvGqpP6BOAYNaFewIu5hQYEGO b54x638Ajt6nvlgor7UDMHXtObi1BIxD -----END CERTIFICATE-----Generated at Sun Oct 25 03:52:41 2026 by rpki-client