$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9DAC4BF8879E11EF8944AB12C4F9AE02.roa File: 9DAC4BF8879E11EF8944AB12C4F9AE02.roa (raw, json) Hash identifier: fYcsjds/TPiVdqw4rq8RZj/lBLKCFArhS30EUr+/WSM= Subject key identifier: A4:2B:60:C8:D7:A9:C1:69:AC:C4:BA:3F:98:AC:4F:58:43:8D:3D:F8 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 23B5 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9DAC4BF8879E11EF8944AB12C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:19:01 +0000 ROA not before: Fri 02 Oct 2026 15:19:01 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 152955 IP address blocks: 160.25.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9141 (0x23b5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:19:01 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcb64-cc53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:35:13:30:db:90:aa:f1:fb:1f:ab:ca:8c:e9: 4b:b2:b1:e1:1f:09:d3:3d:cf:d1:f5:cf:e4:06:6d: 83:fb:1f:ff:ac:1f:aa:fa:89:59:eb:52:80:cd:29: 9a:63:bd:be:99:9b:cf:31:99:16:19:ae:35:05:95: a1:f3:70:cd:a9:9e:2f:cf:fa:05:56:00:02:2f:a4: df:cb:6e:17:7e:03:c7:97:c7:f6:dc:02:8c:18:44: 23:66:b6:22:d2:37:ee:e4:3a:d1:92:de:9a:18:80: 80:22:33:51:2b:ee:15:dd:b1:b2:01:46:c2:99:92: 5f:91:aa:75:0a:16:56:e3:cc:a6:41:74:69:b7:b7: 92:a8:85:7b:14:5f:3f:ef:e2:2e:41:b6:f9:a6:90: 26:ea:64:18:e9:c7:24:4f:ee:14:48:6a:33:09:29: aa:5f:fc:35:f6:10:66:66:da:99:b0:8c:1e:f2:5f: 5a:1f:96:3f:71:50:44:55:60:e7:3b:44:c5:63:d4: 7f:57:ef:fb:54:5e:61:24:97:4d:2a:00:8d:98:aa: 2c:e4:8a:da:6e:fe:c5:4a:7d:28:33:91:e2:bb:6a: ab:6a:5e:24:3b:a8:7d:e4:49:a7:65:26:13:92:ea: 84:e2:b4:00:66:c5:d0:d3:58:09:22:5e:73:d9:97: 49:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2B:60:C8:D7:A9:C1:69:AC:C4:BA:3F:98:AC:4F:58:43:8D:3D:F8 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9DAC4BF8879E11EF8944AB12C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.25.208.0/23 Signature Algorithm: sha256WithRSAEncryption 67:99:da:65:ae:13:e8:7f:4b:51:05:ca:e8:53:ae:98:20:fe: 5e:05:51:54:ef:6a:ab:a9:67:d5:b0:f4:c1:05:f9:41:eb:18: bb:01:d7:05:f1:f4:85:3e:27:94:61:1a:54:36:a2:87:67:57: 92:cf:a4:c1:93:2b:91:01:73:14:76:c8:c2:d0:fd:5f:22:3f: 6e:f5:3a:6a:f7:ad:aa:f0:63:ca:b8:21:9e:97:1f:47:c0:98: 87:44:be:fc:f2:8d:ab:5d:ea:12:e1:da:d8:fb:f4:92:f5:ae: a3:dd:d2:49:fe:11:7e:e0:c2:88:80:f0:10:f7:9c:7a:30:89: f0:13:d2:38:7c:a2:23:45:e1:3e:51:a4:e7:d9:7c:aa:c6:a9: 3e:65:ae:e2:2a:6e:1f:b1:d5:2c:97:40:d4:d8:f5:bf:f3:2e: 76:7a:b5:58:b2:d3:e8:12:54:f0:82:ab:6a:66:5c:43:d2:43: 69:cc:58:19:63:8b:2b:a1:de:8c:41:78:e7:87:e7:65:fa:bb: 0b:ea:55:1c:7c:16:7b:bd:1b:19:7b:10:64:67:11:7a:ae:b3: e6:76:37:92:48:79:4c:06:0e:18:29:ed:f0:7d:be:9d:cd:0f: 7d:83:29:1e:3d:1f:63:4a:7d:ce:ef:dc:e7:b4:f3:1c:48:b4: 06:a8:3c:34 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICI7UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUxOTAxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2I2NC1jYzUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnDUTMNuQqvH7H6vKjOlLsrHhHwnTPc/R9c/kBm2D+x//rB+q+olZ61KAzSma Y72+mZvPMZkWGa41BZWh83DNqZ4vz/oFVgACL6Tfy24XfgPHl8f23AKMGEQjZrYi 0jfu5DrRkt6aGICAIjNRK+4V3bGyAUbCmZJfkap1ChZW48ymQXRpt7eSqIV7FF8/ 7+IuQbb5ppAm6mQY6cckT+4USGozCSmqX/w19hBmZtqZsIwe8l9aH5Y/cVBEVWDn O0TFY9R/V+/7VF5hJJdNKgCNmKos5Irabv7FSn0oM5Hiu2qral4kO6h95EmnZSYT kuqE4rQAZsXQ01gJIl5z2ZdJzwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKQrYMjX qcFprMS6P5isT1hDjT34MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvOURBQzRCRjg4 NzlFMTFFRjg5NDRBQjEyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBnQMA0GCSqGSIb3DQEBCwUAA4IBAQBnmdplrhPof0tRBcroU66Y IP5eBVFU72qrqWfVsPTBBflB6xi7AdcF8fSFPieUYRpUNqKHZ1eSz6TBkyuRAXMU dsjC0P1fIj9u9Tpq962q8GPKuCGelx9HwJiHRL788o2rXeoS4drY+/SS9a6j3dJJ /hF+4MKIgPAQ95x6MInwE9I4fKIjReE+UaTn2Xyqxqk+Za7iKm4fsdUsl0DU2PW/ 8y52erVYstPoElTwgqtqZlxD0kNpzFgZY4srod6MQXjnh+dl+rsL6lUcfBZ7vRsZ exBkZxF6rrPmdjeSSHlMBg4YKe3wfb6dzQ99gykePR9jSn3O79zntPMcSLQGqDw0 -----END CERTIFICATE-----Generated at Sun Oct 25 12:39:35 2026 by rpki-client