$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9B898A2A768A11F18379E3C263A30FBC.roa File: 9B898A2A768A11F18379E3C263A30FBC.roa (raw, json) Hash identifier: oviEL1GLcnWZT/DA0ouFW/YFfHb9o+XbcB4i1Zij7b8= Subject key identifier: A3:EC:31:38:91:57:D5:07:F3:7D:01:F4:70:46:C9:7F:E0:A6:3C:25 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 2398 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9B898A2A768A11F18379E3C263A30FBC.roa Signing time: Fri 02 Oct 2026 15:17:59 +0000 ROA not before: Fri 02 Oct 2026 15:17:59 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151858 IP address blocks: 157.10.52.0/23 maxlen: 23 157.20.82.0/23 maxlen: 23 160.25.166.0/23 maxlen: 23 160.187.146.0/23 maxlen: 23 160.191.86.0/23 maxlen: 23 160.191.88.0/23 maxlen: 23 160.250.180.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9112 (0x2398) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:17:59 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcb27-2b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0f:5a:79:dc:07:6a:98:54:8e:8f:1f:0d:f3: 33:77:a2:50:f9:50:f2:d8:cb:73:4c:7f:03:8d:51: 29:58:6f:39:f4:02:cc:42:c7:92:e1:ab:69:6d:bb: ff:0c:93:17:15:90:c0:2e:4a:94:db:1c:62:b7:75: 2f:42:a0:ce:8c:1f:bc:ea:0f:96:65:66:43:9c:fb: 21:67:28:05:17:cc:02:9f:4b:81:da:a9:c7:0f:07: b9:14:1d:bc:60:65:ae:58:5d:36:e2:81:f3:8e:89: ba:a3:06:7b:b0:55:e3:33:96:ed:17:fc:28:d4:85: 1b:b2:76:81:54:94:19:52:aa:b6:03:25:55:bd:8d: 97:52:e7:12:2f:fe:71:45:2d:b2:10:fc:ac:8d:02: c1:e5:6c:dd:8b:d4:6e:45:68:d9:c9:f8:ea:f6:59: 47:4c:41:2f:81:a4:cc:1f:8f:bb:ee:bb:cf:ae:c5: 2c:c7:31:5f:cb:66:45:17:00:5f:53:75:1b:1a:2e: 76:79:62:4b:3b:2f:71:89:ce:4f:ae:68:9d:e1:fb: 01:8d:6c:2b:f8:19:65:f9:e8:96:be:2f:1f:54:e8: b8:99:6a:7b:91:0f:a4:a3:f5:d3:d4:1e:59:f7:16: 03:5c:74:9c:63:b1:27:82:a5:67:a9:36:51:fc:9a: d9:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EC:31:38:91:57:D5:07:F3:7D:01:F4:70:46:C9:7F:E0:A6:3C:25 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9B898A2A768A11F18379E3C263A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 157.10.52.0/23 157.20.82.0/23 160.25.166.0/23 160.187.146.0/23 160.191.86.0-160.191.89.255 160.250.180.0/23 Signature Algorithm: sha256WithRSAEncryption 36:72:da:68:30:18:f1:cf:82:19:f4:48:de:f9:b7:e6:56:38: c9:8a:f2:c3:99:a5:36:e1:64:d9:39:c2:88:ab:cc:eb:82:4c: d3:6a:b8:b8:1a:fd:be:2c:f3:0e:cb:dd:6e:c3:c2:b1:92:a6: c5:f1:0e:46:d4:a6:74:ae:ab:6b:51:b0:0a:ec:81:ce:10:33: fa:f6:5b:80:38:db:31:c7:56:54:1a:ae:19:ea:02:ff:3d:30: 5d:bf:7a:5d:9d:63:4c:ab:33:e7:d9:f7:8d:9d:5b:13:b3:de: 15:32:be:94:f6:ce:74:53:5b:4d:f3:74:cb:2e:46:69:17:99: a2:ac:8a:11:b6:dc:7e:e4:f2:12:19:40:ca:d8:89:1e:89:69: da:9e:08:b3:cb:50:a1:ee:db:96:f9:a0:5d:91:c5:a9:08:b2: b9:ec:64:f8:7c:0e:64:f7:1a:59:fc:3d:b4:89:92:ba:72:d7: c6:b4:37:e2:4c:6c:97:a2:62:40:7d:b6:6e:a0:68:34:9d:be: ee:fc:a3:34:1d:42:b7:29:57:6f:1c:e9:b4:90:0d:48:52:0c: 66:ce:22:a6:2b:7b:0c:6e:a2:ad:85:f8:32:50:91:6b:a0:81: c6:3a:8e:f9:01:7a:f0:be:97:aa:e8:41:55:8b:6e:7a:35:23: e9:3b:74:c7 -----BEGIN CERTIFICATE----- MIIFYjCCBEqgAwIBAgICI5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUxNzU5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2IyNy0yYjZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1Q9aedwHaphUjo8fDfMzd6JQ+VDy2MtzTH8DjVEpWG859ALMQseS4atpbbv/ DJMXFZDALkqU2xxit3UvQqDOjB+86g+WZWZDnPshZygFF8wCn0uB2qnHDwe5FB28 YGWuWF024oHzjom6owZ7sFXjM5btF/wo1IUbsnaBVJQZUqq2AyVVvY2XUucSL/5x RS2yEPysjQLB5Wzdi9RuRWjZyfjq9llHTEEvgaTMH4+77rvPrsUsxzFfy2ZFFwBf U3UbGi52eWJLOy9xic5Prmid4fsBjWwr+Bll+eiWvi8fVOi4mWp7kQ+ko/XT1B5Z 9xYDXHScY7EngqVnqTZR/JrZPwIDAQABo4IChjCCAoIwHQYDVR0OBBYEFKPsMTiR V9UH830B9HBGyX/gpjwlMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvOUI4OThBMkE3 NjhBMTFGMTgzNzlFM0MyNjNBMzBGQkMucm9hMEUGCCsGAQUFBwEHAQH/BDYwNDAy BAIAATAsAwQBnQo0AwQBnRRSAwQBoBmmAwQBoLuSMAwDBAGgv1YDBAGgv1gDBAGg +rQwDQYJKoZIhvcNAQELBQADggEBADZy2mgwGPHPghn0SN75t+ZWOMmK8sOZpTbh ZNk5woirzOuCTNNquLga/b4s8w7L3W7DwrGSpsXxDkbUpnSuq2tRsArsgc4QM/r2 W4A42zHHVlQarhnqAv89MF2/el2dY0yrM+fZ942dWxOz3hUyvpT2znRTW03zdMsu RmkXmaKsihG23H7k8hIZQMrYiR6JadqeCLPLUKHu25b5oF2RxakIsrnsZPh8DmT3 Gln8PbSJkrpy18a0N+JMbJeiYkB9tm6gaDSdvu78ozQdQrcpV28c6bSQDUhSDGbO IqYrewxuoq2F+DJQkWuggcY6jvkBevC+l6roQVWLbno1I+k7dMc= -----END CERTIFICATE-----Generated at Sun Oct 25 20:07:08 2026 by rpki-client