$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/235E43DAA4EC11F0A43BAF7EC4F9AE02.roa File: 235E43DAA4EC11F0A43BAF7EC4F9AE02.roa (raw, json) Hash identifier: keFl2Ul98gVeXqamSR7oCSQ20iNNxMU7BbNYfSBCcZo= Subject key identifier: D6:44:7F:4C:69:F6:76:71:14:58:EC:A3:C1:69:A2:18:77:7E:88:18 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 23A3 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/235E43DAA4EC11F0A43BAF7EC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:18:22 +0000 ROA not before: Fri 02 Oct 2026 15:18:22 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151914 IP address blocks: 157.66.13.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9123 (0x23a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:18:22 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcb3e-929f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:9e:48:b1:d2:bf:b8:78:96:ad:19:b4:03:12: 1f:e7:03:6f:ba:26:24:fe:b4:ae:ac:8e:1f:d5:7a: 0e:20:50:9d:f9:ec:b3:9c:8c:49:1b:57:7e:a5:58: 48:b9:0e:94:c7:57:75:77:05:f0:fc:63:57:a9:21: 78:f1:7f:22:06:68:c0:4b:2f:29:41:9b:18:89:7a: 12:d9:fc:f0:20:4e:e8:01:f1:19:01:4e:98:63:13: 2e:89:e3:0f:d1:ba:99:28:17:14:af:1d:ed:82:31: 88:e0:07:30:ec:d0:76:f6:85:06:e8:5d:0a:da:c6: fd:c9:f8:29:41:b9:98:dc:35:5c:4a:35:9c:76:1d: 31:85:0a:9e:f2:30:77:2a:43:1e:68:ca:f5:5e:bb: 98:ff:eb:0f:e7:e8:69:8a:4e:4d:6b:77:46:fe:4d: b5:0d:4c:85:e8:0c:db:60:c9:a6:6f:28:61:bf:d4: 52:9b:79:b1:7f:2a:02:8e:72:28:6b:55:ab:3f:4c: 3d:ef:74:86:ca:c7:ab:6d:8d:76:a7:17:2d:13:7d: b8:a1:1d:7d:86:b4:c1:03:90:a5:ae:7c:50:30:6d: 7a:a9:97:00:a9:5d:79:84:64:01:dc:bd:6e:dd:9b: 94:b9:fe:30:b6:62:aa:af:69:1a:a0:0f:53:b8:ce: 7a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:44:7F:4C:69:F6:76:71:14:58:EC:A3:C1:69:A2:18:77:7E:88:18 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/235E43DAA4EC11F0A43BAF7EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.66.13.0/24 Signature Algorithm: sha256WithRSAEncryption 4a:71:63:9d:43:05:04:31:2e:ff:fa:e2:14:d2:54:58:19:a3: c4:da:c3:75:7b:53:21:78:a9:f8:ce:4b:d4:fe:70:97:8c:14: b3:6e:66:64:36:15:02:6a:30:41:0f:a8:90:c3:07:69:7f:ca: 78:cc:c1:38:15:85:3b:46:97:0f:47:70:4e:e1:7e:36:7a:d7: c6:1d:a2:6c:e3:be:91:e0:54:7d:fa:76:8d:d3:5c:87:d2:97: c6:c0:8d:3b:0e:3e:b3:04:04:7d:d9:2c:2c:02:40:1c:f4:8b: 85:2e:7f:4d:0b:40:03:b7:a8:f9:af:12:b3:30:b1:b3:12:e2: c1:1e:a5:f8:5f:da:ef:19:f6:5d:ea:3f:b1:ac:aa:ce:e7:57: 94:7a:b5:ee:84:bd:e8:c1:8a:d5:7d:eb:15:68:04:ab:13:45: 9e:ad:bc:bb:6b:e2:3f:24:22:12:5c:d0:56:af:e0:91:f6:3e: 3d:4c:77:a9:2c:f5:f7:c3:b9:6d:db:0d:d1:a9:2a:f6:17:ac: af:77:a1:89:42:96:66:6e:1e:7f:72:a0:e5:c9:f8:56:0f:f8: 7a:76:2c:42:b5:8f:51:c5:f0:98:a9:53:3d:d5:0e:61:fb:97: f1:ba:a8:60:0e:93:3f:8b:22:fe:92:ec:e4:d2:f1:f5:0e:20: b9:42:2d:44 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICI6MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUxODIyWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2IzZS05MjlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2J5IsdK/uHiWrRm0AxIf5wNvuiYk/rSurI4f1XoOIFCd+eyznIxJG1d+pVhI uQ6Ux1d1dwXw/GNXqSF48X8iBmjASy8pQZsYiXoS2fzwIE7oAfEZAU6YYxMuieMP 0bqZKBcUrx3tgjGI4Acw7NB29oUG6F0K2sb9yfgpQbmY3DVcSjWcdh0xhQqe8jB3 KkMeaMr1XruY/+sP5+hpik5Na3dG/k21DUyF6AzbYMmmbyhhv9RSm3mxfyoCjnIo a1WrP0w973SGyserbY12pxctE324oR19hrTBA5ClrnxQMG16qZcAqV15hGQB3L1u 3ZuUuf4wtmKqr2kaoA9TuM56FwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNZEf0xp 9nZxFFjso8Fpohh3fogYMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvMjM1RTQzREFB NEVDMTFGMEE0M0JBRjdFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAnUINMA0GCSqGSIb3DQEBCwUAA4IBAQBKcWOdQwUEMS7/+uIU0lRY GaPE2sN1e1MheKn4zkvU/nCXjBSzbmZkNhUCajBBD6iQwwdpf8p4zME4FYU7RpcP R3BO4X42etfGHaJs476R4FR9+naN01yH0pfGwI07Dj6zBAR92SwsAkAc9IuFLn9N C0ADt6j5rxKzMLGzEuLBHqX4X9rvGfZd6j+xrKrO51eUerXuhL3owYrVfesVaASr E0Werby7a+I/JCISXNBWr+CR9j49THepLPX3w7lt2w3RqSr2F6yvd6GJQpZmbh5/ cqDlyfhWD/h6dixCtY9RxfCYqVM91Q5h+5fxuqhgDpM/iyL+kuzk0vH1DiC5Qi1E -----END CERTIFICATE-----Generated at Sun Oct 25 19:46:01 2026 by rpki-client