$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E59030F0AB2511F083A1D935C4F9AE02.roa File: E59030F0AB2511F083A1D935C4F9AE02.roa (raw, json) Hash identifier: JDeo0mQ2I1wsng504mlYHog/fX5Fj/1a2ckJAfQfOHs= Subject key identifier: E4:02:68:18:CD:36:65:80:65:3E:D0:85:EF:22:4F:96:A6:25:30:55 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 23F6 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E59030F0AB2511F083A1D935C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:21:17 +0000 ROA not before: Fri 02 Oct 2026 15:21:17 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 45899 IP address blocks: 144.79.188.0/23 maxlen: 24 160.19.78.0/23 maxlen: 23 160.22.2.0/23 maxlen: 24 160.25.74.0/23 maxlen: 24 160.30.54.0/23 maxlen: 24 160.191.52.0/23 maxlen: 24 161.248.30.0/23 maxlen: 24 165.99.58.0/24 maxlen: 24 165.99.59.0/24 maxlen: 24 165.101.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 14:33:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9206 (0x23f6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 2 15:21:17 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcbed-62a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:6a:53:22:b1:0c:79:54:2f:b4:b0:2b:32:2b: 40:95:5e:7b:a7:0b:4c:56:f0:47:d2:c4:9d:2f:e2: cb:c9:17:3d:69:b4:3a:ae:38:f5:d6:ad:b5:ba:0c: 6a:7a:5b:e8:b1:e8:88:dd:08:d5:f2:32:a1:d4:bb: bb:33:62:a8:93:b2:72:2a:9c:bc:f3:aa:72:e9:b2: ad:7a:52:0e:16:e8:d1:34:8d:20:96:0a:69:00:2f: 69:02:a0:96:54:49:02:db:da:81:1c:30:d4:dd:85: 77:c3:64:18:b1:1d:ea:8f:8e:e7:4e:a2:ca:9d:71: a0:fd:28:92:3a:cb:b7:2b:56:97:8b:d2:69:b8:5b: a0:89:53:88:22:58:c8:ed:ea:07:1a:a5:65:4b:60: c9:00:2b:b3:a2:7e:e2:61:0f:a4:98:fc:42:6f:5f: 19:90:71:95:f6:b2:70:ff:fb:33:13:e9:8e:da:2a: e9:ee:ad:f7:7c:1a:59:27:35:8f:60:a5:50:ba:8d: 63:4d:c6:dd:70:ff:13:8e:1b:2a:6a:bb:87:a3:33: c0:ed:60:40:de:73:f9:7b:a3:45:12:4f:ab:2e:5d: e4:a8:1f:04:14:64:19:25:07:ba:c4:e1:d2:79:9a: dc:69:3a:85:08:be:70:1d:ae:a9:04:a0:2c:8f:8c: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:02:68:18:CD:36:65:80:65:3E:D0:85:EF:22:4F:96:A6:25:30:55 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E59030F0AB2511F083A1D935C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 144.79.188.0/23 160.19.78.0/23 160.22.2.0/23 160.25.74.0/23 160.30.54.0/23 160.191.52.0/23 161.248.30.0/23 165.99.58.0/23 165.101.234.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:93:6d:cb:1d:c3:83:7f:8d:6c:12:ba:cc:90:53:69:92:2a: 94:53:19:66:17:3b:e8:19:51:23:eb:98:c9:ce:f6:eb:8f:8a: 55:98:45:98:c0:b5:e4:b9:7c:66:67:78:c8:5e:7a:f3:71:8d: 9a:80:e8:49:1e:f7:a0:e1:1c:9e:fe:94:2c:6f:bc:ba:0e:21: 48:0c:ab:ef:d7:56:e9:5c:9d:b8:99:c9:e0:ed:17:82:18:c0: db:e7:e2:a3:b6:1d:f9:e5:48:34:1b:38:8c:a2:84:7f:c0:62: 10:9c:d0:08:29:de:d4:ac:23:a3:ae:a1:72:b3:05:c5:94:b3: 83:a2:c3:85:b2:9a:b4:df:f9:99:35:73:ff:65:9e:8d:49:68: 1b:01:3a:6c:fc:53:c4:d4:be:33:67:c3:e4:10:ab:d4:0a:55: 68:76:82:e5:00:22:4e:fe:05:bf:af:59:6f:66:85:f5:78:02: 32:74:cb:69:37:17:cd:d7:7f:2d:19:18:47:fb:47:01:b4:83: 5d:08:0f:e6:90:b6:fa:ac:b4:e6:be:b6:0f:00:50:aa:63:a5: f3:31:85:17:7d:2d:61:fe:00:0e:6a:b4:0b:4b:58:fd:14:14: 06:08:9d:df:7e:eb:6e:4b:d4:91:b8:4b:7e:54:9c:da:7f:b0: a3:a9:05:4c -----BEGIN CERTIFICATE----- MIIFbDCCBFSgAwIBAgICI/YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYxMDAyMTUyMTE3WhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2JlZC02MmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmmpTIrEMeVQvtLArMitAlV57pwtMVvBH0sSdL+LLyRc9abQ6rjj11q21ugxq elvoseiI3QjV8jKh1Lu7M2Kok7JyKpy886py6bKtelIOFujRNI0glgppAC9pAqCW VEkC29qBHDDU3YV3w2QYsR3qj47nTqLKnXGg/SiSOsu3K1aXi9JpuFugiVOIIljI 7eoHGqVlS2DJACuzon7iYQ+kmPxCb18ZkHGV9rJw//szE+mO2irp7q33fBpZJzWP YKVQuo1jTcbdcP8TjhsqaruHozPA7WBA3nP5e6NFEk+rLl3kqB8EFGQZJQe6xOHS eZrcaTqFCL5wHa6pBKAsj4zJTQIDAQABo4ICkDCCAowwHQYDVR0OBBYEFOQCaBjN NmWAZT7Qhe8iT5amJTBVMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRTU5MDMwRjBB QjI1MTFGMDgzQTFEOTM1QzRGOUFFMDIucm9hME8GCCsGAQUFBwEHAQH/BEAwPjA8 BAIAATA2AwQBkE+8AwQBoBNOAwQBoBYCAwQBoBlKAwQBoB42AwQBoL80AwQBofge AwQBpWM6AwQBpWXqMA0GCSqGSIb3DQEBCwUAA4IBAQBOk23LHcODf41sErrMkFNp kiqUUxlmFzvoGVEj65jJzvbrj4pVmEWYwLXkuXxmZ3jIXnrzcY2agOhJHveg4Rye /pQsb7y6DiFIDKvv11bpXJ24mcng7ReCGMDb5+Kjth355Ug0GziMooR/wGIQnNAI Kd7UrCOjrqFyswXFlLODosOFspq03/mZNXP/ZZ6NSWgbATps/FPE1L4zZ8PkEKvU ClVodoLlACJO/gW/r1lvZoX1eAIydMtpNxfN138tGRhH+0cBtINdCA/mkLb6rLTm vrYPAFCqY6XzMYUXfS1h/gAOarQLS1j9FBQGCJ3ffutuS9SRuEt+VJzaf7CjqQVM -----END CERTIFICATE-----Generated at Thu Oct 22 16:42:48 2026 by rpki-client