$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/108D43003D6711F1A841243BAE833773.roa File: 108D43003D6711F1A841243BAE833773.roa (raw, json) Hash identifier: btKjfZREAFrZkrEbDSeiMP7/fFZJpPJvEK0Tw2XepTc= Subject key identifier: C2:42:A6:A3:04:8B:62:B2:FC:33:7C:9E:D0:85:2B:4A:57:C0:A8:A5 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2395 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/108D43003D6711F1A841243BAE833773.roa Signing time: Fri 02 Oct 2026 15:17:53 +0000 ROA not before: Fri 02 Oct 2026 15:17:53 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 150859 IP address blocks: 157.66.12.0/24 maxlen: 24 157.66.98.0/23 maxlen: 24 157.66.220.0/24 maxlen: 24 157.66.221.0/24 maxlen: 24 160.22.118.0/24 maxlen: 24 160.22.119.0/24 maxlen: 24 160.30.22.0/24 maxlen: 24 160.30.23.0/24 maxlen: 24 160.187.74.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9109 (0x2395) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:17:53 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcb21-5cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:19:34:01:b9:be:6d:5d:98:a4:19:09:58:75: 9d:d4:9d:d9:2f:f3:c8:bc:01:9c:06:41:53:93:b1: 01:4d:fd:d7:4e:66:7a:81:90:5d:cb:47:27:e6:c9: 4f:21:8d:a4:f1:3b:a8:ec:4b:de:17:b7:a2:21:04: 93:fd:df:ed:01:36:10:a2:f6:7b:4f:e9:14:7d:ee: 93:55:88:db:3f:43:27:38:d4:b5:87:a4:99:64:76: 24:e7:48:c0:a6:7f:eb:86:70:c3:18:36:ac:60:88: 27:8f:5b:c5:7c:55:ff:d3:db:86:19:d5:30:ed:4e: da:50:9b:52:2b:e8:b3:d9:68:0d:bc:f2:95:4b:7f: e8:c8:57:5a:c3:f7:97:83:9f:e5:5d:b7:be:dc:7c: eb:19:36:78:af:3d:56:16:99:e2:1a:12:13:79:7f: 4a:d4:e7:34:e7:b8:01:71:b5:8b:ac:65:35:9e:ff: 55:47:df:40:14:4b:7b:0d:b2:35:27:67:cc:f0:06: 67:e5:60:7c:be:b3:f1:0f:c6:14:46:11:0c:01:b4: b3:7d:b1:f3:72:b5:0b:cd:f4:ca:ef:79:61:5b:3d: 17:ec:df:17:1a:ac:13:b1:0c:e8:43:e7:ad:2e:9f: 4a:90:e9:35:74:ad:e6:6a:4e:04:0c:58:c4:f8:9d: 91:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:42:A6:A3:04:8B:62:B2:FC:33:7C:9E:D0:85:2B:4A:57:C0:A8:A5 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/108D43003D6711F1A841243BAE833773.roa sbgp-ipAddrBlock: critical IPv4: 157.66.12.0/24 157.66.98.0/23 157.66.220.0/23 160.22.118.0/23 160.30.22.0/23 160.187.74.0/23 Signature Algorithm: sha256WithRSAEncryption b5:38:c5:e8:66:72:42:50:1c:c8:f3:6b:16:6f:ba:16:c2:ea: e0:55:06:48:5b:b5:c4:b5:e5:8a:6f:0e:93:51:88:23:f2:70: 3e:8f:4d:ed:fa:dc:d5:4b:aa:50:17:55:a2:9c:2b:c5:c8:74: 10:12:5b:dc:e2:91:94:30:01:00:5a:59:30:df:26:a5:3c:70: 8f:74:cd:3d:a2:0a:6a:82:d7:4d:ea:82:7f:16:0c:36:86:9c: fb:e4:2d:5c:3f:8f:b4:4f:77:a1:ab:ce:97:52:03:2b:35:36: b5:b9:d0:99:44:1a:9d:3d:56:e5:55:52:af:c9:cc:90:e1:70: c4:b9:1d:47:b3:4c:70:23:6e:d7:69:eb:45:ff:c5:2c:fc:12: 5f:c6:b0:c3:09:96:c1:5d:c3:d4:8b:d8:03:48:43:81:cd:c3: 38:65:85:28:6e:26:59:b9:ce:3b:76:56:bf:2d:26:db:a1:23: c3:f2:11:ff:e2:b7:ae:60:d4:fe:74:16:df:f0:d6:93:f5:4d: eb:dc:33:ed:96:34:21:22:14:63:3b:61:62:40:84:c0:6a:4e: f2:cf:b2:0d:e7:c7:15:a8:3c:4e:13:a3:f3:ea:5c:e8:cd:38: 6d:1a:82:29:69:05:5b:59:23:70:2b:70:af:b6:88:19:48:54: 0b:4d:b7:19 -----BEGIN CERTIFICATE----- MIIFWjCCBEKgAwIBAgICI5UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUxNzUzWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2IyMS01Y2M0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAthk0Abm+bV2YpBkJWHWd1J3ZL/PIvAGcBkFTk7EBTf3XTmZ6gZBdy0cn5slP IY2k8Tuo7EveF7eiIQST/d/tATYQovZ7T+kUfe6TVYjbP0MnONS1h6SZZHYk50jA pn/rhnDDGDasYIgnj1vFfFX/09uGGdUw7U7aUJtSK+iz2WgNvPKVS3/oyFdaw/eX g5/lXbe+3HzrGTZ4rz1WFpniGhITeX9K1Oc057gBcbWLrGU1nv9VR99AFEt7DbI1 J2fM8AZn5WB8vrPxD8YURhEMAbSzfbHzcrULzfTK73lhWz0X7N8XGqwTsQzoQ+et Lp9KkOk1dK3mak4EDFjE+J2RUwIDAQABo4ICfjCCAnowHQYDVR0OBBYEFMJCpqME i2Ky/DN8ntCFK0pXwKilMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMTA4RDQzMDAz RDY3MTFGMUE4NDEyNDNCQUU4MzM3NzMucm9hMD0GCCsGAQUFBwEHAQH/BC4wLDAq BAIAATAkAwQAnUIMAwQBnUJiAwQBnULcAwQBoBZ2AwQBoB4WAwQBoLtKMA0GCSqG SIb3DQEBCwUAA4IBAQC1OMXoZnJCUBzI82sWb7oWwurgVQZIW7XEteWKbw6TUYgj 8nA+j03t+tzVS6pQF1WinCvFyHQQElvc4pGUMAEAWlkw3yalPHCPdM09ogpqgtdN 6oJ/Fgw2hpz75C1cP4+0T3ehq86XUgMrNTa1udCZRBqdPVblVVKvycyQ4XDEuR1H s0xwI27XaetF/8Us/BJfxrDDCZbBXcPUi9gDSEOBzcM4ZYUobiZZuc47dla/LSbb oSPD8hH/4reuYNT+dBbf8NaT9U3r3DPtljQhIhRjO2FiQITAak7yz7IN58cVqDxO E6Pz6lzozThtGoIpaQVbWSNwK3CvtogZSFQLTbcZ -----END CERTIFICATE-----Generated at Sun Oct 25 14:35:22 2026 by rpki-client