$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2171B7C0B7A111EF88C1E184C4F9AE02.roa File: 2171B7C0B7A111EF88C1E184C4F9AE02.roa (raw, json) Hash identifier: wjOLNmnzYc0psjglsiwdumrIVIY7tT+EI+5ob18CH2A= Subject key identifier: A3:23:45:BB:7F:EA:95:04:BC:24:5F:7B:70:D7:63:A5:60:06:9B:80 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 23D6 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2171B7C0B7A111EF88C1E184C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:20:09 +0000 ROA not before: Fri 02 Oct 2026 15:20:09 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 153435 IP address blocks: 160.250.124.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9174 (0x23d6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:20:09 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcba9-461a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:44:51:bc:3e:24:c0:6b:01:01:aa:ed:ed:13: 86:05:47:06:32:d8:1a:c1:72:ad:22:57:c3:d4:6d: 27:66:52:45:e2:50:db:29:6d:ad:f5:4d:8a:51:f3: 65:42:36:1e:b9:20:7b:92:04:75:a0:19:87:ea:d2: fe:dd:52:c4:a1:6e:ef:29:f2:a1:0e:ba:73:f2:10: d3:30:85:6d:de:9d:d1:ec:24:fc:46:6f:18:2d:55: 86:10:83:8b:7d:65:58:1a:a8:1b:0d:78:56:67:c9: 08:76:92:4a:91:fe:1e:2e:d7:5c:56:f7:cd:ff:36: b8:5d:d0:bb:a8:1c:c0:89:1c:b3:14:e8:3b:39:c7: b2:9a:25:ee:94:1e:45:7b:d5:17:f8:fe:94:e5:8a: 74:af:a5:b6:2b:77:13:e4:9b:e9:6a:e5:b7:5b:5a: ad:90:36:c7:de:9f:4b:bc:d0:46:2d:69:b9:c4:4b: 38:70:c4:22:7d:87:73:9e:84:c0:59:c4:2a:44:ec: ce:fa:8a:ae:a4:92:94:96:5e:ce:4c:64:4c:85:f8: 57:b3:a1:d3:ed:83:cb:2f:bc:80:b7:ca:3c:e5:f5: c3:1b:a9:5c:81:32:04:ac:68:1a:20:60:19:9c:60: 77:8c:b9:54:91:79:6c:e9:d0:7f:4b:83:4f:19:5c: d2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:23:45:BB:7F:EA:95:04:BC:24:5F:7B:70:D7:63:A5:60:06:9B:80 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/2171B7C0B7A111EF88C1E184C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.250.124.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:82:ce:bc:29:60:a3:20:b3:24:b3:ac:18:d7:3b:92:9d:e6: bb:a8:1c:01:7c:29:04:6b:97:ec:99:a3:07:f6:0f:0c:7b:29: 21:10:63:29:49:29:92:6f:d4:a0:6e:9b:53:0d:73:a4:aa:33: 3a:2b:d2:1c:70:34:b6:92:14:81:32:c2:25:96:43:87:fd:3b: e7:ac:b3:9d:4a:55:9f:10:a0:f6:af:a6:2f:07:5d:a0:5e:fb: a9:2c:19:a4:65:b5:21:a1:87:12:38:32:cc:20:45:62:95:40: 0c:52:19:fe:74:e7:4e:82:3c:bb:c2:bd:c1:af:d5:e6:f3:99: e1:4d:57:93:67:72:5c:c2:51:a1:47:97:42:90:6d:d0:62:57: de:54:8c:c5:c9:81:e0:36:d8:73:ba:7e:3c:b6:d3:94:63:a1: cb:4d:82:6a:0b:01:e8:d8:8f:44:a1:4f:42:4b:1d:6d:26:31: fc:0f:8a:22:70:71:07:3e:f2:c1:cb:bc:2b:63:8d:39:50:8e: 70:e9:b0:b5:91:4a:9a:91:19:9a:4f:68:d3:cc:34:69:96:12: 9b:92:03:1e:e3:be:da:83:eb:6a:9e:4a:b0:bd:0a:aa:08:53: c8:e2:b4:65:61:fe:d3:b3:03:76:60:99:ec:f1:3a:6b:88:8e: 05:43:e0:9b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICI9YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUyMDA5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2JhOS00NjFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsERRvD4kwGsBAart7ROGBUcGMtgawXKtIlfD1G0nZlJF4lDbKW2t9U2KUfNl QjYeuSB7kgR1oBmH6tL+3VLEoW7vKfKhDrpz8hDTMIVt3p3R7CT8Rm8YLVWGEIOL fWVYGqgbDXhWZ8kIdpJKkf4eLtdcVvfN/za4XdC7qBzAiRyzFOg7OceymiXulB5F e9UX+P6U5Yp0r6W2K3cT5JvpauW3W1qtkDbH3p9LvNBGLWm5xEs4cMQifYdznoTA WcQqROzO+oqupJKUll7OTGRMhfhXs6HT7YPLL7yAt8o85fXDG6lcgTIErGgaIGAZ nGB3jLlUkXls6dB/S4NPGVzSJQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKMjRbt/ 6pUEvCRfe3DXY6VgBpuAMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMjE3MUI3QzBC N0ExMTFFRjg4QzFFMTg0QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoPp8MA0GCSqGSIb3DQEBCwUAA4IBAQAKgs68KWCjILMks6wY1zuS nea7qBwBfCkEa5fsmaMH9g8MeykhEGMpSSmSb9SgbptTDXOkqjM6K9IccDS2khSB MsIllkOH/TvnrLOdSlWfEKD2r6YvB12gXvupLBmkZbUhoYcSODLMIEVilUAMUhn+ dOdOgjy7wr3Br9Xm85nhTVeTZ3JcwlGhR5dCkG3QYlfeVIzFyYHgNthzun48ttOU Y6HLTYJqCwHo2I9EoU9CSx1tJjH8D4oicHEHPvLBy7wrY405UI5w6bC1kUqakRma T2jTzDRplhKbkgMe477ag+tqnkqwvQqqCFPI4rRlYf7TswN2YJns8TpriI4FQ+Cb -----END CERTIFICATE-----Generated at Sun Oct 25 04:57:11 2026 by rpki-client