$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CD86771A42A811F196221069B9833773.roa File: CD86771A42A811F196221069B9833773.roa (raw, json) Hash identifier: +3K/qTar3nuCwigl3zR+xmRL3wJmkjJCRSrNRml/Il0= Subject key identifier: 81:6E:6E:B3:2F:AF:BF:A8:C8:D9:A7:4D:00:7F:62:6C:CD:A6:97:B1 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 237D Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CD86771A42A811F196221069B9833773.roa Signing time: Fri 02 Oct 2026 15:17:01 +0000 ROA not before: Fri 02 Oct 2026 15:17:01 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 135918 IP address blocks: 157.10.198.0/23 maxlen: 23 157.66.80.0/24 maxlen: 24 157.66.81.0/24 maxlen: 24 157.66.100.0/23 maxlen: 23 157.66.218.0/23 maxlen: 23 160.22.122.0/23 maxlen: 23 160.25.232.0/23 maxlen: 23 160.30.44.0/23 maxlen: 23 160.30.112.0/23 maxlen: 23 160.191.48.0/23 maxlen: 23 160.191.50.0/23 maxlen: 23 160.191.236.0/23 maxlen: 23 160.250.130.0/23 maxlen: 23 160.250.134.0/23 maxlen: 23 160.250.136.0/23 maxlen: 23 160.250.246.0/23 maxlen: 23 161.248.146.0/23 maxlen: 23 165.101.92.0/23 maxlen: 23 165.101.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9085 (0x237d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:17:01 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcaed-1809 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b2:e8:b9:41:2b:21:67:24:e5:51:55:d1:06: 6e:21:4f:11:fa:10:83:bb:b5:f8:2d:06:a7:d3:af: b8:6b:ea:08:93:d4:ae:8b:e3:42:82:95:ed:18:8f: 5c:73:cc:c9:a6:49:7a:0a:15:e7:f3:86:99:f8:82: e7:1c:1a:76:7f:73:63:43:91:85:e8:03:b7:04:c0: 5e:57:d4:29:ee:6f:96:9f:83:ef:63:c7:e8:d3:eb: 09:6a:37:5e:52:e4:e2:28:bf:86:9f:4a:e7:49:7b: d1:08:c3:f9:58:47:b4:1b:f0:fb:2b:ce:83:5a:63: d6:8b:6f:36:3c:ee:67:5c:1c:f6:d5:2b:68:65:06: ef:db:e1:e3:91:cb:1d:03:de:23:ec:12:b1:ac:03: c0:94:f6:0c:e6:5c:77:3e:83:5c:bd:0c:12:0b:14: 31:ab:b6:4d:b4:09:1e:88:b7:91:eb:59:f2:c2:a8: fa:11:fc:de:a7:8f:f6:6c:14:ab:4d:18:40:22:65: b3:b9:47:89:22:1d:47:eb:73:c7:30:ed:56:18:b2: 07:c1:c5:39:03:4d:15:a0:f5:80:f9:83:2d:b0:6a: fc:ac:c5:c7:46:a7:60:76:ab:81:c5:8c:7f:cf:d2: 3d:fe:16:8b:19:db:9c:50:18:93:8e:26:bb:2d:a7: 7f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:6E:6E:B3:2F:AF:BF:A8:C8:D9:A7:4D:00:7F:62:6C:CD:A6:97:B1 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CD86771A42A811F196221069B9833773.roa sbgp-ipAddrBlock: critical IPv4: 157.10.198.0/23 157.66.80.0/23 157.66.100.0/23 157.66.218.0/23 160.22.122.0/23 160.25.232.0/23 160.30.44.0/23 160.30.112.0/23 160.191.48.0/22 160.191.236.0/23 160.250.130.0/23 160.250.134.0-160.250.137.255 160.250.246.0/23 161.248.146.0/23 165.101.92.0/23 165.101.252.0/23 Signature Algorithm: sha256WithRSAEncryption 3f:6b:07:20:0c:6d:96:61:39:e6:01:ba:ec:ec:bb:55:18:3d: d4:1e:a0:bd:59:13:39:36:29:5c:78:21:bc:b5:9b:05:b7:53: d6:40:cf:b4:9a:a9:61:09:1a:86:e0:7b:a0:f6:ae:82:51:8f: a6:e0:c6:ad:50:3c:db:da:58:7d:26:96:6e:82:9b:e4:5d:61: 0d:72:2b:9e:09:f0:16:78:31:07:6e:a6:05:44:af:f9:52:db: 76:4c:5f:e3:47:dc:fb:2b:56:f0:05:26:e1:11:fd:1a:55:29: 96:bd:8d:62:a9:fb:62:a8:0f:f1:16:ca:32:ed:92:95:56:da: 6d:52:92:ac:ad:4d:19:d0:7d:1d:45:d3:c9:d1:c2:81:1d:71: b5:97:0f:9a:66:54:8a:60:0f:d0:0b:6c:b1:d9:07:33:54:c2: 21:ad:ee:50:70:9b:78:be:ea:8f:d9:00:92:ff:ce:14:15:e8: 47:55:cb:18:db:27:c4:49:2f:67:e5:9a:24:34:f4:dc:aa:6a: db:9d:36:31:89:85:6f:d3:95:bb:5f:1f:ea:9e:a3:19:bc:d5: 21:07:30:05:f5:7e:80:78:a4:29:02:c7:d3:ad:bc:dc:87:21: 25:31:14:82:6d:2c:f6:19:d3:f5:9a:f6:cc:99:03:17:ea:e8: 22:3a:3b:de -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICI30wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUxNzAxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2FlZC0xODA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxrLouUErIWck5VFV0QZuIU8R+hCDu7X4LQan06+4a+oIk9Sui+NCgpXtGI9c c8zJpkl6ChXn84aZ+ILnHBp2f3NjQ5GF6AO3BMBeV9Qp7m+Wn4PvY8fo0+sJajde UuTiKL+Gn0rnSXvRCMP5WEe0G/D7K86DWmPWi282PO5nXBz21StoZQbv2+Hjkcsd A94j7BKxrAPAlPYM5lx3PoNcvQwSCxQxq7ZNtAkeiLeR61nywqj6Efzep4/2bBSr TRhAImWzuUeJIh1H63PHMO1WGLIHwcU5A00VoPWA+YMtsGr8rMXHRqdgdquBxYx/ z9I9/haLGducUBiTjia7Lad/4QIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFIFubrMv r7+oyNmnTQB/YmzNppexMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQ0Q4Njc3MUE0 MkE4MTFGMTk2MjIxMDY5Qjk4MzM3NzMucm9hMIGBBggrBgEFBQcBBwEB/wRyMHAw bgQCAAEwaAMEAZ0KxgMEAZ1CUAMEAZ1CZAMEAZ1C2gMEAaAWegMEAaAZ6AMEAaAe LAMEAaAecAMEAqC/MAMEAaC/7AMEAaD6gjAMAwQBoPqGAwQBoPqIAwQBoPr2AwQB ofiSAwQBpWVcAwQBpWX8MA0GCSqGSIb3DQEBCwUAA4IBAQA/awcgDG2WYTnmAbrs 7LtVGD3UHqC9WRM5NilceCG8tZsFt1PWQM+0mqlhCRqG4Hug9q6CUY+m4MatUDzb 2lh9JpZugpvkXWENciueCfAWeDEHbqYFRK/5Utt2TF/jR9z7K1bwBSbhEf0aVSmW vY1iqftiqA/xFsoy7ZKVVtptUpKsrU0Z0H0dRdPJ0cKBHXG1lw+aZlSKYA/QC2yx 2QczVMIhre5QcJt4vuqP2QCS/84UFehHVcsY2yfESS9n5ZokNPTcqmrbnTYxiYVv 05W7Xx/qnqMZvNUhBzAF9X6AeKQpAsfTrbzchyElMRSCbSz2GdP1mvbMmQMX6ugi Ojve -----END CERTIFICATE-----Generated at Sun Oct 25 04:54:46 2026 by rpki-client