$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D3204D78E81811EEACBDBB30C4F9AE02.roa File: D3204D78E81811EEACBDBB30C4F9AE02.roa (raw, json) Hash identifier: zYMJqHZEP2mDqzzHw3yL8jil/ikLyPEipKFXpcYoECQ= Subject key identifier: 93:97:5D:5B:8C:C2:CD:CB:07:36:93:D2:B8:27:90:95:39:71:73:19 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 23A1 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D3204D78E81811EEACBDBB30C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:18:18 +0000 ROA not before: Fri 02 Oct 2026 15:18:18 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 151911 IP address blocks: 157.20.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9121 (0x23a1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:18:18 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcb3a-85cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:9a:90:17:4e:ed:f0:8a:49:47:0e:a1:d2:a2: 2b:4c:87:62:33:79:41:0f:1c:a5:8c:c4:83:90:f3: b0:22:11:ab:19:ad:cf:69:5f:39:04:be:6a:ff:3f: 42:19:aa:3a:ff:b7:f4:2e:a7:ed:e9:d1:3f:27:26: 43:d0:fc:ee:71:65:b5:d8:0b:72:45:ae:e9:59:f7: d5:6a:18:28:f1:14:69:21:92:4f:c5:3b:20:5e:bc: 14:2c:a6:72:e0:aa:d4:1e:d6:b2:b6:c8:cf:6b:95: ba:55:6a:31:51:7f:5d:ae:30:c3:54:5c:4a:a8:8e: 1b:47:a2:c1:a2:4b:b0:3e:11:93:8a:ca:c0:05:6a: 80:2f:eb:d6:af:d5:84:e1:e2:5b:52:00:e8:d5:97: 80:4d:a4:4e:b5:9b:3c:df:e1:31:04:57:6f:74:68: ce:68:a6:ad:62:21:ee:fd:a7:58:cc:6b:f1:6d:1a: 14:64:c4:ac:b0:c6:ef:68:91:5c:f8:bd:ec:2d:f7: ff:bd:4a:d4:40:89:7c:28:19:02:aa:e1:64:46:5d: b0:2d:1b:f3:7e:22:da:35:06:22:15:95:b9:81:39: 24:93:15:d6:b8:45:84:5e:b4:3d:74:0d:75:55:c9: 15:a2:2a:03:00:37:39:50:d1:de:ba:9f:93:7d:17: b5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:97:5D:5B:8C:C2:CD:CB:07:36:93:D2:B8:27:90:95:39:71:73:19 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/D3204D78E81811EEACBDBB30C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.20.200.0/23 Signature Algorithm: sha256WithRSAEncryption 47:f0:55:0c:fb:a9:4a:53:70:73:7b:4e:ed:84:31:0a:3b:51: 38:3f:3d:bd:c8:5d:98:f9:c8:84:be:d3:a9:25:06:6b:61:14: 7c:aa:e9:20:ea:f6:fe:13:3a:1c:d0:35:aa:cc:a9:c7:b9:6a: 10:25:c5:20:dd:70:d2:0b:78:26:e9:66:99:27:83:6b:08:e7: 59:1b:f1:bd:73:b3:77:74:14:ce:81:e6:1a:07:c2:59:a6:a0: c0:9a:1b:75:11:cf:d9:75:aa:f7:8b:fb:06:0b:b8:4a:92:9f: 96:14:af:eb:1b:7f:6d:56:45:b6:7c:f0:0f:5e:1d:b4:61:8d: 4c:47:3d:1f:26:b5:56:ff:d5:8a:ec:30:8e:95:9e:e9:5d:1c: fb:78:83:86:10:35:2d:46:5e:0f:d0:4d:ac:ea:5d:2b:57:ba: f2:4a:52:26:78:fb:48:08:71:eb:68:eb:ed:dd:70:5d:d1:72: fb:fe:19:99:76:46:73:34:e6:2e:bf:99:d1:82:78:c9:0c:c7: 0c:10:0d:ed:8a:e4:7f:c6:8e:93:e5:18:ba:b2:91:6d:ab:3f: 19:99:05:84:07:91:3a:62:f3:99:9a:f7:99:e6:4b:68:34:a9: ed:7f:c3:ee:ec:2e:5a:df:6e:b0:9b:13:ae:70:98:10:14:17: fb:4a:cd:c1 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICI6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUxODE4WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2IzYS04NWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZqQF07t8IpJRw6h0qIrTIdiM3lBDxyljMSDkPOwIhGrGa3PaV85BL5q/z9C Gao6/7f0Lqft6dE/JyZD0PzucWW12AtyRa7pWffVahgo8RRpIZJPxTsgXrwULKZy 4KrUHtaytsjPa5W6VWoxUX9drjDDVFxKqI4bR6LBokuwPhGTisrABWqAL+vWr9WE 4eJbUgDo1ZeATaROtZs83+ExBFdvdGjOaKatYiHu/adYzGvxbRoUZMSssMbvaJFc +L3sLff/vUrUQIl8KBkCquFkRl2wLRvzfiLaNQYiFZW5gTkkkxXWuEWEXrQ9dA11 VckVoioDADc5UNHeup+TfRe1qQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFJOXXVuM ws3LBzaT0rgnkJU5cXMZMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRDMyMDRENzhF ODE4MTFFRUFDQkRCQjMwQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBnRTIMA0GCSqGSIb3DQEBCwUAA4IBAQBH8FUM+6lKU3Bze07thDEK O1E4Pz29yF2Y+ciEvtOpJQZrYRR8qukg6vb+Ezoc0DWqzKnHuWoQJcUg3XDSC3gm 6WaZJ4NrCOdZG/G9c7N3dBTOgeYaB8JZpqDAmht1Ec/Zdar3i/sGC7hKkp+WFK/r G39tVkW2fPAPXh20YY1MRz0fJrVW/9WK7DCOlZ7pXRz7eIOGEDUtRl4P0E2s6l0r V7rySlImePtICHHraOvt3XBd0XL7/hmZdkZzNOYuv5nRgnjJDMcMEA3tiuR/xo6T 5Ri6spFtqz8ZmQWEB5E6YvOZmveZ5ktoNKntf8Pu7C5a326wmxOucJgQFBf7Ss3B -----END CERTIFICATE-----Generated at Mon Oct 26 07:32:23 2026 by rpki-client