$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/07C63A20768711F189D127AE62A30FBC.roa File: 07C63A20768711F189D127AE62A30FBC.roa (raw, json) Hash identifier: pnVd8jqTqPuvrA08qAIuOtulLIhRK9nOzX6wRjghHo0= Subject key identifier: A3:A2:89:EA:0C:FF:D3:79:DC:C3:81:DA:9D:05:E6:66:AA:13:5C:15 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2309 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/07C63A20768711F189D127AE62A30FBC.roa Signing time: Fri 03 Jul 2026 02:29:35 +0000 ROA not before: Fri 03 Jul 2026 02:29:35 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151872 IP address blocks: 157.66.220.0/24 maxlen: 24 157.66.221.0/24 maxlen: 24 160.22.80.0/24 maxlen: 24 160.22.81.0/24 maxlen: 24 160.22.118.0/24 maxlen: 24 160.22.119.0/24 maxlen: 24 160.30.10.0/24 maxlen: 24 160.30.11.0/24 maxlen: 24 160.30.22.0/24 maxlen: 24 160.30.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Jul 2026 14:34:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8969 (0x2309) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Jul 3 02:29:35 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6a471e8f-c861 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d5:29:68:37:9a:51:4e:64:69:f7:de:03:1b: 56:72:f7:f3:f1:fb:63:55:19:4b:05:04:67:3e:b2: 85:ce:79:7a:e3:d3:62:4b:75:f4:de:09:b0:3e:1b: 3f:6f:96:04:a3:73:a6:1f:ce:47:69:19:38:39:0c: f5:f0:e0:1b:0d:a0:af:98:03:18:d7:fd:50:98:98: 7a:5c:16:a9:c0:a2:f1:bd:7f:84:59:15:b0:ff:0e: 43:f8:71:30:93:d5:94:dd:3c:59:8d:f3:2b:ca:1d: 3e:64:b6:9f:96:21:92:cf:28:52:6c:7b:61:93:63: 31:9d:cd:5a:96:d6:7e:84:c8:40:66:45:57:60:92: 12:99:44:74:05:79:21:9d:91:91:cb:b2:f0:90:d4: 75:7a:42:23:6e:a5:d7:f7:5a:77:fb:e6:1c:7e:91: f7:98:9b:04:3c:7c:7d:99:3d:e0:d6:7c:2f:9a:73: 47:11:89:fd:a3:33:45:dc:9b:6e:34:46:69:44:f8: 1b:5c:66:07:dd:62:1b:ce:dd:20:aa:4a:90:9a:36: 4c:7e:6b:09:ff:69:c4:e4:28:33:5e:43:59:a9:99: f2:0b:1b:60:fe:6e:8a:e8:26:2e:54:c5:28:17:70: 3c:71:c7:41:7c:0e:c1:a6:35:5c:1a:bf:6a:af:f4: a5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A2:89:EA:0C:FF:D3:79:DC:C3:81:DA:9D:05:E6:66:AA:13:5C:15 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/07C63A20768711F189D127AE62A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 157.66.220.0/23 160.22.80.0/23 160.22.118.0/23 160.30.10.0/23 160.30.22.0/23 Signature Algorithm: sha256WithRSAEncryption 7c:11:94:87:7f:41:11:ca:c4:d1:39:6a:00:17:35:37:a8:04: 80:8d:ca:47:d3:53:2e:43:c4:d5:0f:9a:2e:07:36:40:cf:32: 56:53:df:5b:4f:b2:b6:b3:88:bb:a4:4c:09:f4:1d:5c:c0:fb: a4:88:71:3c:76:60:50:50:15:bb:84:ab:2f:47:ba:b6:23:2c: e9:25:8f:f5:ab:b2:73:ff:96:35:20:b9:95:70:f1:12:fd:e0: 79:4b:15:c1:1d:ac:9a:07:c3:b0:16:49:7a:4c:ba:c7:96:05: 3f:91:0e:2b:8c:a9:08:82:97:1f:db:2f:d6:4c:44:80:04:93: f1:b1:50:0b:26:21:bf:a5:2f:43:a2:7a:08:d7:39:cd:81:9a: 1c:02:a7:04:d9:c3:34:e0:c0:9f:64:e6:01:36:96:5d:f0:08: 24:76:ba:04:66:c5:37:3f:50:f6:f9:44:6b:4b:09:69:bd:08: 47:f6:2c:35:77:1a:ee:17:72:e0:9c:7e:cf:15:3f:ea:a1:08: 6f:6f:80:ad:0f:c9:4d:97:df:ef:d1:35:6c:bd:5c:ab:f8:cb: 40:35:77:87:84:4a:00:50:e9:59:8f:fe:66:c8:d9:e3:f6:f8: 5f:b2:31:c1:83:6c:5b:de:fc:0b:6b:8d:b7:d8:52:63:8c:47: d1:bc:b6:e6 -----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgICIwkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYwNzAzMDIyOTM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ3MWU4Zi1jODYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndUpaDeaUU5kaffeAxtWcvfz8ftjVRlLBQRnPrKFznl649NiS3X03gmwPhs/ b5YEo3OmH85HaRk4OQz18OAbDaCvmAMY1/1QmJh6XBapwKLxvX+EWRWw/w5D+HEw k9WU3TxZjfMryh0+ZLafliGSzyhSbHthk2Mxnc1altZ+hMhAZkVXYJISmUR0BXkh nZGRy7LwkNR1ekIjbqXX91p3++YcfpH3mJsEPHx9mT3g1nwvmnNHEYn9ozNF3Jtu NEZpRPgbXGYH3WIbzt0gqkqQmjZMfmsJ/2nE5CgzXkNZqZnyCxtg/m6K6CYuVMUo F3A8ccdBfA7BpjVcGr9qr/SlLQIDAQABo4ICeDCCAnQwHQYDVR0OBBYEFKOiieoM /9N53MOB2p0F5maqE1wVMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMDdDNjNBMjA3 Njg3MTFGMTg5RDEyN0FFNjJBMzBGQkMucm9hMDcGCCsGAQUFBwEHAQH/BCgwJjAk BAIAATAeAwQBnULcAwQBoBZQAwQBoBZ2AwQBoB4KAwQBoB4WMA0GCSqGSIb3DQEB CwUAA4IBAQB8EZSHf0ERysTROWoAFzU3qASAjcpH01MuQ8TVD5ouBzZAzzJWU99b T7K2s4i7pEwJ9B1cwPukiHE8dmBQUBW7hKsvR7q2IyzpJY/1q7Jz/5Y1ILmVcPES /eB5SxXBHayaB8OwFkl6TLrHlgU/kQ4rjKkIgpcf2y/WTESABJPxsVALJiG/pS9D onoI1znNgZocAqcE2cM04MCfZOYBNpZd8AgkdroEZsU3P1D2+URrSwlpvQhH9iw1 dxruF3LgnH7PFT/qoQhvb4CtD8lNl9/v0TVsvVyr+MtANXeHhEoAUOlZj/5myNnj 9vhfsjHBg2xb3vwLa4232FJjjEfRvLbm -----END CERTIFICATE-----Generated at Tue Jul 21 23:09:10 2026 by rpki-client