$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AF3E2B8A768911F1B3CE809463A30FBC.roa File: AF3E2B8A768911F1B3CE809463A30FBC.roa (raw, json) Hash identifier: WVUO8le9LqVUEoXR9Qk/7fhF4iEqLLNoBjaR8W6K6PI= Subject key identifier: 4D:5A:ED:27:01:1B:BC:83:C0:0E:C5:F7:6D:F8:7B:00:5D:5E:1D:D4 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 238F Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AF3E2B8A768911F1B3CE809463A30FBC.roa Signing time: Fri 02 Oct 2026 15:17:39 +0000 ROA not before: Fri 02 Oct 2026 15:17:39 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 149147 IP address blocks: 160.25.146.0/23 maxlen: 23 160.191.250.0/23 maxlen: 23 161.248.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9103 (0x238f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:17:39 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcb13-d1ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0a:4e:38:9a:86:7a:b3:e2:08:78:74:bc:b0: e9:b7:3f:80:11:b9:1a:b2:ff:9e:54:b8:d2:a1:c9: 08:b1:a2:34:24:bc:7a:cd:7c:de:df:7d:5f:07:a8: b3:c0:ca:2f:07:6a:46:97:c1:5e:a3:4a:d0:39:3b: b8:ae:a6:79:31:69:2d:2e:59:26:b1:18:b0:93:13: 40:14:df:7b:d6:dd:4f:8c:a7:44:1a:0e:06:6f:9a: 89:45:a8:cf:e8:62:92:8a:e4:09:d3:68:f6:ed:3d: 0d:6e:d4:57:c7:30:3c:02:c4:c3:f5:c9:5f:df:4b: ec:8b:78:77:7b:66:46:21:4a:71:73:dd:42:d5:bf: 9d:b7:68:33:71:10:29:72:31:c4:fb:2f:fa:35:19: 8c:fa:38:f6:65:4a:e5:77:de:08:9f:9d:cd:3b:d3: 3b:df:d5:d8:41:d4:79:2a:bf:e7:09:9d:52:18:6c: 3d:f3:af:24:41:a6:f1:08:dd:60:a3:59:ab:7f:1b: 48:78:5a:31:f8:7e:e3:a6:a5:5c:a9:00:12:e6:1d: 01:84:54:6d:2e:fd:95:3b:eb:4c:93:16:fc:49:7a: 3f:af:71:64:c2:38:de:48:bc:be:16:f7:69:c4:b8: 4e:9a:72:e2:a5:4e:64:1e:41:99:7c:4f:64:6c:76: ec:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:5A:ED:27:01:1B:BC:83:C0:0E:C5:F7:6D:F8:7B:00:5D:5E:1D:D4 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/AF3E2B8A768911F1B3CE809463A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 160.25.146.0/23 160.191.250.0/23 161.248.32.0/23 Signature Algorithm: sha256WithRSAEncryption a0:bd:5c:63:14:86:0a:71:9d:57:79:fb:ab:f3:1a:bf:e1:31: 52:c3:c0:ba:53:55:32:9a:b5:3f:3e:ec:40:32:44:0b:2b:70: 73:03:33:a1:a3:fc:3b:24:11:95:ac:3d:be:6a:a3:3a:b8:74: 69:b6:5b:e5:d8:ce:2d:bf:fe:e7:d1:15:dd:e6:76:03:f1:1d: c2:b8:31:99:50:16:6e:71:98:b7:ae:2c:12:cb:7a:31:6d:23: e9:bf:38:3a:f3:37:36:a8:ec:5e:93:d1:a6:71:38:d1:9a:7a: 4c:79:3e:cd:0c:b4:9a:fc:57:bc:d7:34:19:4b:11:f2:9b:bc: f2:0a:b7:e6:c7:de:2b:56:c5:1b:af:42:8c:d6:3f:49:df:16: 97:00:ac:35:4a:72:15:33:69:60:a7:c6:28:f9:e4:74:55:fb: 7f:d0:a0:8b:0c:c7:e0:dc:a4:ec:ce:9c:d9:8d:bc:d1:1d:77: 29:53:df:83:55:c8:7a:6e:f1:f6:6c:7b:c4:f0:ff:5d:4f:3a: eb:fd:fa:8e:d5:a2:6c:90:44:3d:77:3f:e5:f6:f4:1f:f7:76: 7e:00:6f:e0:59:97:87:29:d0:dc:cd:5f:64:40:d3:ec:de:82: 25:f1:6f:e9:85:bc:52:a4:4c:83:f4:7a:21:2f:6c:b7:ff:b6: 5f:fb:19:1a -----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgICI48wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUxNzM5WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2IxMy1kMWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ApOOJqGerPiCHh0vLDptz+AEbkasv+eVLjSockIsaI0JLx6zXze331fB6iz wMovB2pGl8Feo0rQOTu4rqZ5MWktLlkmsRiwkxNAFN971t1PjKdEGg4Gb5qJRajP 6GKSiuQJ02j27T0NbtRXxzA8AsTD9clf30vsi3h3e2ZGIUpxc91C1b+dt2gzcRAp cjHE+y/6NRmM+jj2ZUrld94In53NO9M739XYQdR5Kr/nCZ1SGGw9868kQabxCN1g o1mrfxtIeFox+H7jpqVcqQAS5h0BhFRtLv2VO+tMkxb8SXo/r3FkwjjeSLy+Fvdp xLhOmnLipU5kHkGZfE9kbHbsfQIDAQABo4ICbDCCAmgwHQYDVR0OBBYEFE1a7ScB G7yDwA7F9234ewBdXh3UMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQUYzRTJCOEE3 Njg5MTFGMUIzQ0U4MDk0NjNBMzBGQkMucm9hMCsGCCsGAQUFBwEHAQH/BBwwGjAY BAIAATASAwQBoBmSAwQBoL/6AwQBofggMA0GCSqGSIb3DQEBCwUAA4IBAQCgvVxj FIYKcZ1Xefur8xq/4TFSw8C6U1UymrU/PuxAMkQLK3BzAzOho/w7JBGVrD2+aqM6 uHRptlvl2M4tv/7n0RXd5nYD8R3CuDGZUBZucZi3riwSy3oxbSPpvzg68zc2qOxe k9GmcTjRmnpMeT7NDLSa/Fe81zQZSxHym7zyCrfmx94rVsUbr0KM1j9J3xaXAKw1 SnIVM2lgp8Yo+eR0Vft/0KCLDMfg3KTszpzZjbzRHXcpU9+DVch6bvH2bHvE8P9d Tzrr/fqO1aJskEQ9dz/l9vQf93Z+AG/gWZeHKdDczV9kQNPs3oIl8W/phbxSpEyD 9HohL2y3/7Zf+xka -----END CERTIFICATE-----Generated at Sun Oct 25 06:49:23 2026 by rpki-client