$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/122F982CB92311EE8A5A4670C4F9AE02.roa File: 122F982CB92311EE8A5A4670C4F9AE02.roa (raw, json) Hash identifier: Blr5hc2E4QvWojV5L4PKMT+mApctuXcH5KDYQMDeCtQ= Subject key identifier: 2A:F3:0F:32:8E:81:A4:86:90:1F:C4:51:C2:61:EB:E2:E1:1F:2F:90 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2382 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/122F982CB92311EE8A5A4670C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:17:12 +0000 ROA not before: Fri 02 Oct 2026 15:17:12 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 140766 IP address blocks: 64.239.24.0/22 maxlen: 24 157.10.186.0/23 maxlen: 24 157.10.188.0/23 maxlen: 24 157.66.96.0/23 maxlen: 24 167.254.64.0/20 maxlen: 24 192.223.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 04:44:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9090 (0x2382) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:17:12 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcaf8-eb03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:02:78:db:87:8f:c6:0a:ce:b9:83:12:b3:39: aa:2e:8b:e2:22:c3:61:c3:d4:8a:45:89:98:75:8e: 98:b8:50:e9:58:3d:e1:32:c2:ed:cf:f0:20:2e:93: 62:96:26:93:d0:d7:7c:b2:98:58:de:4a:6c:30:ca: cf:7a:5e:de:cb:8e:da:29:cb:36:b0:d1:d9:0a:6e: 7d:0a:8d:84:9b:46:6e:a8:d5:05:19:5b:b2:e6:97: 40:a4:55:5c:e7:63:a3:9c:4f:ba:9e:cb:c3:a1:ee: b7:1d:24:72:8c:14:ae:5b:7e:e2:e0:ca:5d:71:98: 14:05:7d:c0:38:d5:96:b0:0d:57:73:af:d2:29:3c: 17:71:1d:c3:25:59:a9:86:4b:26:20:8a:04:5c:d5: 6f:30:d9:a7:68:f4:45:f1:b6:ad:81:25:8a:e3:9f: 68:da:6b:fc:00:92:b9:88:d9:96:03:56:1f:09:4c: f0:79:e8:c0:84:87:a4:30:e3:1b:2e:fc:00:a7:16: f3:ce:37:cb:af:fd:dc:70:03:49:a0:9c:db:83:4a: 11:05:83:c6:bd:61:b3:54:18:e0:cd:b5:e9:d1:6d: c4:0b:91:9c:75:ce:92:97:53:05:a3:18:ac:f8:db: 69:8a:4e:15:b6:aa:7d:83:9e:54:1f:99:4a:ed:5e: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:F3:0F:32:8E:81:A4:86:90:1F:C4:51:C2:61:EB:E2:E1:1F:2F:90 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/122F982CB92311EE8A5A4670C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 64.239.24.0/22 157.10.186.0-157.10.189.255 157.66.96.0/23 167.254.64.0/20 192.223.12.0/22 Signature Algorithm: sha256WithRSAEncryption 7e:bf:39:df:8a:10:cb:e0:84:6b:9c:89:bc:47:3f:3c:e3:38: 36:3a:4f:2f:e9:6c:40:4b:c3:84:8d:a5:2c:61:e7:86:5e:25: da:41:3f:7f:f4:04:ce:5f:c2:8c:77:55:cc:5d:1a:c0:8a:71: 51:a7:7d:7c:40:33:82:d5:6a:cf:de:db:da:a0:94:41:f1:9b: 2e:c8:7f:e8:a9:ad:9d:25:38:bd:14:eb:ed:76:df:d6:05:2b: 44:63:16:e6:00:fa:17:ef:db:9e:5c:f8:64:9a:1d:1d:fd:89: ea:94:a4:0c:4a:39:97:8b:5f:76:43:a0:aa:eb:18:f6:f8:78: 79:90:68:76:e5:69:fd:93:f5:e7:39:6a:c4:cb:b3:dc:88:06: 64:c5:61:ac:a5:ce:55:ea:da:c9:aa:c7:96:06:06:bb:64:da: a4:34:23:ac:88:31:bc:5c:86:f8:02:4a:c7:3b:a2:a0:87:1f: f7:f0:88:fe:a0:70:62:19:3d:62:eb:b4:66:4c:4c:c2:72:d8: f6:fb:11:1b:00:6c:b3:9d:17:34:2f:69:e1:c9:e1:d6:66:fd: c9:a8:a2:19:cf:aa:4b:ca:73:28:3b:eb:1c:14:fa:ac:8b:70: 74:4a:67:39:9d:12:8f:56:35:c8:cd:ff:9b:9a:c4:84:47:a1: 67:30:eb:f6 -----BEGIN CERTIFICATE----- MIIFXDCCBESgAwIBAgICI4IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUxNzEyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2FmOC1lYjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAswJ424ePxgrOuYMSszmqLoviIsNhw9SKRYmYdY6YuFDpWD3hMsLtz/AgLpNi liaT0Nd8sphY3kpsMMrPel7ey47aKcs2sNHZCm59Co2Em0ZuqNUFGVuy5pdApFVc 52OjnE+6nsvDoe63HSRyjBSuW37i4MpdcZgUBX3AONWWsA1Xc6/SKTwXcR3DJVmp hksmIIoEXNVvMNmnaPRF8batgSWK459o2mv8AJK5iNmWA1YfCUzweejAhIekMOMb LvwApxbzzjfLr/3ccANJoJzbg0oRBYPGvWGzVBjgzbXp0W3EC5Gcdc6Sl1MFoxis +Ntpik4Vtqp9g55UH5lK7V6tmwIDAQABo4ICgDCCAnwwHQYDVR0OBBYEFCrzDzKO gaSGkB/EUcJh6+LhHy+QMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMTIyRjk4MkNC OTIzMTFFRThBNUE0NjcwQzRGOUFFMDIucm9hMD8GCCsGAQUFBwEHAQH/BDAwLjAs BAIAATAmAwQCQO8YMAwDBAGdCroDBAGdCrwDBAGdQmADBASn/kADBALA3wwwDQYJ KoZIhvcNAQELBQADggEBAH6/Od+KEMvghGucibxHPzzjODY6Ty/pbEBLw4SNpSxh 54ZeJdpBP3/0BM5fwox3VcxdGsCKcVGnfXxAM4LVas/e29qglEHxmy7If+iprZ0l OL0U6+1239YFK0RjFuYA+hfv255c+GSaHR39ieqUpAxKOZeLX3ZDoKrrGPb4eHmQ aHblaf2T9ec5asTLs9yIBmTFYaylzlXq2smqx5YGBrtk2qQ0I6yIMbxchvgCSsc7 oqCHH/fwiP6gcGIZPWLrtGZMTMJy2Pb7ERsAbLOdFzQvaeHJ4dZm/cmoohnPqkvK cyg76xwU+qyLcHRKZzmdEo9WNcjN/5uaxIRHoWcw6/Y= -----END CERTIFICATE-----Generated at Thu Oct 22 22:02:32 2026 by rpki-client