$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/DB8B5E7AAB0A11EFA1D4470FC4F9AE02.roa File: DB8B5E7AAB0A11EFA1D4470FC4F9AE02.roa (raw, json) Hash identifier: pn/IAWLj3bbaE2rtfwXjC85XxAiGkbZ4DD2mmlSSq+I= Subject key identifier: 53:D3:2B:D4:5F:B3:AC:F0:B4:2B:78:17:A1:63:FE:44:E4:A5:81:FE Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 213E Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/DB8B5E7AAB0A11EFA1D4470FC4F9AE02.roa Signing time: Mon 02 Mar 2026 23:22:07 +0000 ROA not before: Thu 28 Aug 2025 14:51:46 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153407 IP address blocks: 160.191.220.0/23 maxlen: 23 160.191.220.0/24 maxlen: 24 160.191.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 14 Mar 2026 14:12:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8510 (0x213e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:46 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a61b9f-c4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d3:af:0b:d7:6e:de:e6:fe:21:38:59:24:e5: 02:1a:5b:9e:4c:a7:ab:b2:97:a2:df:0d:9f:2a:99: d0:a4:e4:99:4d:6e:10:ed:61:fc:83:1c:9e:55:2b: 0e:28:bf:91:6a:ed:20:1a:f5:fc:6e:3e:e4:85:a1: 4a:de:79:73:ba:f0:22:89:d3:db:4d:f9:66:3f:aa: ff:7c:34:44:7b:80:fb:9e:c4:c4:89:57:29:c9:87: 53:bf:2d:51:65:bb:c9:a8:d4:56:5b:d1:04:8c:79: b7:b7:d5:f7:aa:e5:16:9d:5f:61:43:10:70:21:49: 0c:6e:c2:47:fb:91:6f:d7:2d:1e:07:45:c6:ee:cf: 27:fb:ca:f3:e8:08:f6:d3:a3:bd:08:72:7b:89:96: 91:19:8a:e0:76:dd:96:72:29:8c:50:b6:78:3a:4c: 94:e7:55:12:84:ad:a6:9b:21:a7:f3:42:68:27:0e: 7a:86:a0:bc:c9:e9:ae:d4:6d:9b:9b:9a:80:98:8e: d1:9d:98:3b:ed:a6:f6:43:5d:14:d5:a7:5a:54:98: 52:2d:0c:ff:ed:99:21:51:22:1a:c9:31:4b:8a:2b: c0:a2:69:5d:28:79:1c:a3:45:19:2b:12:61:26:62: 6a:a2:e2:d1:dc:c0:bb:be:b3:14:0e:49:26:a8:bf: f6:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:D3:2B:D4:5F:B3:AC:F0:B4:2B:78:17:A1:63:FE:44:E4:A5:81:FE X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/DB8B5E7AAB0A11EFA1D4470FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.191.220.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:cf:66:dd:c5:69:a4:26:ae:bd:42:8e:39:49:76:17:0b:a6: d2:9c:9d:28:1a:06:ca:42:6a:ee:94:bf:47:8d:d5:9c:58:9b: 26:b3:05:10:d8:eb:f3:71:5c:df:b7:bd:58:16:0a:9c:e0:9a: 79:64:7b:37:43:29:16:cb:62:bd:27:4c:38:ab:ba:6b:ba:41: 9d:fb:60:d4:65:e1:cd:8d:62:4c:af:5d:a7:4e:d5:06:01:4b: f7:22:d9:66:78:c0:74:00:86:e9:f4:a4:c9:8a:a2:ce:c5:ab: 3c:29:3f:84:9c:f4:50:a6:f7:f9:e9:1b:45:d1:a9:ce:5a:b9: 9d:70:56:3b:24:74:e0:19:1b:1b:4b:e9:41:f6:11:3a:03:f5: fd:89:8c:4f:97:ce:16:2e:ac:22:5f:0f:fb:07:7b:25:7a:c3: d7:66:82:17:bd:ae:dc:39:08:33:d9:38:35:25:49:44:69:47: 50:08:b3:f2:b9:ea:59:99:aa:c6:d5:df:ca:d9:4c:05:8d:7f: af:c4:73:7d:fb:09:d4:a4:03:a2:6a:99:b5:40:db:1c:cc:37: f7:e6:aa:85:48:f7:06:42:7b:dd:27:07:33:9f:01:cd:2f:77: e7:e4:a0:ef:0e:e3:7d:44:1b:9e:df:fb:77:a2:01:17:be:a8: 8b:0c:7b:df -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICIT4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTQ2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE2MWI5Zi1jNGExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1tOvC9du3ub+IThZJOUCGlueTKerspei3w2fKpnQpOSZTW4Q7WH8gxyeVSsO KL+Rau0gGvX8bj7khaFK3nlzuvAiidPbTflmP6r/fDREe4D7nsTEiVcpyYdTvy1R ZbvJqNRWW9EEjHm3t9X3quUWnV9hQxBwIUkMbsJH+5Fv1y0eB0XG7s8n+8rz6Aj2 06O9CHJ7iZaRGYrgdt2WcimMULZ4OkyU51UShK2mmyGn80JoJw56hqC8yemu1G2b m5qAmI7RnZg77ab2Q10U1adaVJhSLQz/7ZkhUSIayTFLiivAomldKHkco0UZKxJh JmJqouLR3MC7vrMUDkkmqL/2mwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFPTK9Rf s6zwtCt4F6Fj/kTkpYH+MB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvREI4QjVFN0FB QjBBMTFFRkExRDQ0NzBGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoL/cMA0GCSqGSIb3DQEBCwUAA4IBAQCLz2bdxWmkJq69Qo45SXYX C6bSnJ0oGgbKQmrulL9HjdWcWJsmswUQ2OvzcVzft71YFgqc4Jp5ZHs3QykWy2K9 J0w4q7prukGd+2DUZeHNjWJMr12nTtUGAUv3ItlmeMB0AIbp9KTJiqLOxas8KT+E nPRQpvf56RtF0anOWrmdcFY7JHTgGRsbS+lB9hE6A/X9iYxPl84WLqwiXw/7B3sl esPXZoIXva7cOQgz2Tg1JUlEaUdQCLPyuepZmarG1d/K2UwFjX+vxHN9+wnUpAOi apm1QNsczDf35qqFSPcGQnvdJwcznwHNL3fn5KDvDuN9RBue3/t3ogEXvqiLDHvf -----END CERTIFICATE-----Generated at Sat Mar 7 22:52:34 2026 by rpki-client