$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa File: 742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa (raw, json) Hash identifier: 4AwIN9643JzRi8teXc+5E/cHaunjjVM50o76ALP0bXE= Subject key identifier: 0A:20:C3:23:5D:D1:5D:69:09:89:88:86:13:D6:33:DA:6E:3F:D1:68 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2397 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa Signing time: Fri 02 Oct 2026 15:17:58 +0000 ROA not before: Fri 02 Oct 2026 15:17:57 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 150895 IP address blocks: 157.66.48.0/23 maxlen: 23 157.66.222.0/23 maxlen: 23 157.66.224.0/23 maxlen: 23 160.22.80.0/23 maxlen: 24 160.22.120.0/23 maxlen: 23 160.25.72.0/23 maxlen: 23 160.30.50.0/23 maxlen: 23 160.30.136.0/23 maxlen: 23 160.191.86.0/23 maxlen: 24 160.191.160.0/24 maxlen: 24 160.191.214.0/23 maxlen: 23 160.250.4.0/23 maxlen: 23 160.250.128.0/23 maxlen: 23 160.250.132.0/23 maxlen: 23 160.250.180.0/23 maxlen: 24 160.250.186.0/23 maxlen: 24 161.248.4.0/23 maxlen: 23 161.248.178.0/23 maxlen: 23 161.248.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9111 (0x2397) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:17:57 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcb25-bec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6b:e1:fe:b1:d8:a5:07:3e:cd:91:6c:81:b2: 87:6d:9c:ef:f6:ca:b6:75:31:95:86:54:44:66:8e: 92:9d:1e:d2:7c:be:06:59:30:2d:b2:f8:d6:a9:49: 49:41:4a:ca:4b:b0:90:c8:de:b9:7f:93:0e:bc:5b: 6d:49:3e:0a:92:fb:83:93:46:47:6b:81:58:c2:96: 7f:87:89:02:42:1c:56:06:72:e8:d7:11:b5:4e:2a: 87:2a:2b:3e:d9:f8:e2:7f:e8:30:2e:66:de:c2:3a: 37:76:93:e5:31:d9:84:fe:83:74:19:ac:e4:56:fc: 9d:e9:ee:48:4a:5c:ed:30:cb:8d:0e:a9:10:47:78: ed:0a:6a:e4:ad:0a:e5:53:b2:ec:b1:30:5b:ee:92: 61:07:7a:6a:60:14:60:75:a0:ba:0a:e8:99:21:55: a0:6b:87:cf:79:9a:d5:d7:71:ef:ee:03:d6:ff:8d: 3e:72:1e:6a:56:77:53:db:c1:94:da:26:d4:dc:3d: 7a:e0:58:7c:fe:46:a2:d4:ee:ba:b7:20:73:94:b2: ec:18:97:05:38:f7:eb:8e:fe:ae:78:39:bf:18:08: 63:43:87:79:97:b3:1f:0d:2f:67:87:b0:b5:bb:3d: 89:ba:0e:f1:20:9c:db:2f:9d:11:14:20:50:1c:23: d8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:20:C3:23:5D:D1:5D:69:09:89:88:86:13:D6:33:DA:6E:3F:D1:68 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.66.48.0/23 157.66.222.0-157.66.225.255 160.22.80.0/23 160.22.120.0/23 160.25.72.0/23 160.30.50.0/23 160.30.136.0/23 160.191.86.0/23 160.191.160.0/24 160.191.214.0/23 160.250.4.0/23 160.250.128.0/23 160.250.132.0/23 160.250.180.0/23 160.250.186.0/23 161.248.4.0/23 161.248.178.0/23 161.248.238.0/23 Signature Algorithm: sha256WithRSAEncryption 52:42:32:6c:e1:74:df:5f:ce:59:99:d9:dd:b7:2b:a7:eb:78: 2d:0d:dc:bf:5f:d2:d1:6d:88:18:7f:7d:a8:d6:f0:09:15:05: ec:80:74:c2:03:36:a2:a3:ef:7d:a6:f7:78:19:d2:f3:9e:bb: d7:e2:ce:de:1e:a4:7d:06:19:49:d3:33:9e:3f:0f:44:8d:ed: 7b:0e:03:fa:a3:22:04:4a:d9:6b:99:3e:4a:3e:6e:e7:f3:e2: 18:fe:fc:de:dd:5e:57:d6:5a:c1:c4:7f:84:5c:9d:db:74:4b: fe:b6:f8:0d:cc:a8:68:77:a1:57:40:96:55:67:45:fc:08:2c: 47:2e:9a:05:9e:c1:40:50:16:28:b6:8a:96:74:d6:2d:61:19: 15:d2:c1:e8:c0:bd:49:bb:a0:ab:a4:9d:28:2b:f1:b5:e3:2c: b8:c7:25:5c:4b:3b:06:64:7d:db:ed:7e:ab:9c:9d:83:e8:39: 94:38:42:3c:66:b0:3a:4f:e8:e4:1b:bf:43:17:cd:f3:82:fc: ba:da:d8:88:84:84:19:40:fb:21:5f:d2:53:40:f1:bf:53:15: df:d2:96:fa:83:a1:98:85:b7:c7:bc:00:9e:d3:21:04:23:88: 56:61:1e:b7:59:35:58:58:f0:7b:ef:9c:fa:29:0e:d6:55:cf: 7d:4b:1e:ce -----BEGIN CERTIFICATE----- MIIFqzCCBJOgAwIBAgICI5cwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUxNzU3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2IyNS1iZWMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4Gvh/rHYpQc+zZFsgbKHbZzv9sq2dTGVhlREZo6SnR7SfL4GWTAtsvjWqUlJ QUrKS7CQyN65f5MOvFttST4KkvuDk0ZHa4FYwpZ/h4kCQhxWBnLo1xG1TiqHKis+ 2fjif+gwLmbewjo3dpPlMdmE/oN0GazkVvyd6e5ISlztMMuNDqkQR3jtCmrkrQrl U7LssTBb7pJhB3pqYBRgdaC6CuiZIVWga4fPeZrV13Hv7gPW/40+ch5qVndT28GU 2ibU3D164Fh8/kai1O66tyBzlLLsGJcFOPfrjv6ueDm/GAhjQ4d5l7MfDS9nh7C1 uz2Jug7xIJzbL50RFCBQHCPYBwIDAQABo4ICzzCCAsswHQYDVR0OBBYEFAogwyNd 0V1pCYmIhhPWM9puP9FoMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNzQyQzQwQzBB RTBBMTFFRjlCMUE5QjNGQzRGOUFFMDIucm9hMIGNBggrBgEFBQcBBwEB/wR+MHww egQCAAEwdAMEAZ1CMDAMAwQBnULeAwQBnULgAwQBoBZQAwQBoBZ4AwQBoBlIAwQB oB4yAwQBoB6IAwQBoL9WAwQAoL+gAwQBoL/WAwQBoPoEAwQBoPqAAwQBoPqEAwQB oPq0AwQBoPq6AwQBofgEAwQBofiyAwQBofjuMA0GCSqGSIb3DQEBCwUAA4IBAQBS QjJs4XTfX85Zmdndtyun63gtDdy/X9LRbYgYf32o1vAJFQXsgHTCAzaio+99pvd4 GdLznrvX4s7eHqR9BhlJ0zOePw9Eje17DgP6oyIEStlrmT5KPm7n8+IY/vze3V5X 1lrBxH+EXJ3bdEv+tvgNzKhod6FXQJZVZ0X8CCxHLpoFnsFAUBYotoqWdNYtYRkV 0sHowL1Ju6CrpJ0oK/G14yy4xyVcSzsGZH3b7X6rnJ2D6DmUOEI8ZrA6T+jkG79D F83zgvy62tiIhIQZQPshX9JTQPG/UxXf0pb6g6GYhbfHvACe0yEEI4hWYR63WTVY WPB775z6KQ7WVc99Sx7O -----END CERTIFICATE-----Generated at Sun Oct 25 11:03:22 2026 by rpki-client