$ rpki-client -vvvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/60EB8700B30E11F0B1F91F33C4F9AE02.roa File: 60EB8700B30E11F0B1F91F33C4F9AE02.roa (raw, json) Hash identifier: CStJk0Y0DVZu1AqVEYcv2XzujJMOIb+X5q/qKx4TOWw= Subject key identifier: 96:04:63:8E:29:30:68:92:18:7E:F7:FE:12:24:51:BF:AE:31:59:91 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 6EB8 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/60EB8700B30E11F0B1F91F33C4F9AE02.roa Signing time: Fri 02 Oct 2026 15:32:51 +0000 ROA not before: Fri 02 Oct 2026 15:32:51 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 153410 IP address blocks: 163.227.158.0/23 maxlen: 24 2001:df4:97c0::/48 maxlen: 48 2001:df5:7340::/48 maxlen: 48 2001:df5:c2c0::/48 maxlen: 48 2001:df5:c340::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 31 Oct 2026 14:33:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28344 (0x6eb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Oct 2 15:32:51 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6abfcea3-259e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e7:1a:89:a2:b2:70:da:43:b4:d6:6a:fa:72: 36:ac:d6:17:54:17:b9:a9:0d:0e:d1:d2:be:b0:4a: 36:45:75:ce:07:4f:8c:6a:54:95:ee:2a:cc:ee:08: ec:fc:3e:87:0f:18:a6:58:2f:17:b4:4e:c2:88:a3: 93:93:4d:f9:86:d7:3f:b6:c8:1a:9a:91:0e:29:a1: ca:79:86:ea:4c:b3:f2:37:0f:8d:89:b3:76:74:d8: 72:eb:ed:5e:d3:59:16:f9:aa:50:6c:31:85:b2:9e: 8f:ed:e3:8d:d8:92:53:4b:88:73:61:fe:f5:a4:6a: 2d:e1:d1:08:66:18:1d:9e:e7:03:1b:37:b1:9c:8e: a2:08:13:ea:09:34:5f:20:13:3e:58:19:a7:19:ce: f7:66:f9:7d:24:19:92:40:37:63:73:d2:d3:f4:c0: c6:9c:68:3b:2b:28:9c:a5:cb:21:f3:d5:8d:5b:b5: d4:df:43:21:8d:2a:a1:0b:db:b4:03:8b:37:a0:3b: 10:5c:ce:15:b9:2a:91:92:9c:e4:63:6e:ed:a0:10: c3:23:d0:de:ff:47:66:92:4e:e0:66:0a:29:4a:09: 23:7e:52:7c:e0:2d:00:16:92:46:41:a7:52:51:d1: 27:80:4d:22:46:19:3c:a1:48:9f:ad:53:52:84:a4: 04:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:63:8E:29:30:68:92:18:7E:F7:FE:12:24:51:BF:AE:31:59:91 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/60EB8700B30E11F0B1F91F33C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 163.227.158.0/23 IPv6: 2001:df4:97c0::/48 2001:df5:7340::/48 2001:df5:c2c0::/48 2001:df5:c340::/48 Signature Algorithm: sha256WithRSAEncryption b4:41:7b:6d:3a:40:6c:e0:0a:1f:08:25:74:6d:a2:78:06:5e: 5b:c5:77:96:80:96:cc:12:0e:d3:42:13:11:05:11:e5:97:8e: c7:f9:8e:20:9f:cf:47:d8:69:3f:9d:12:80:c5:f9:87:02:b9: 55:fd:36:5a:02:0f:c0:9b:88:2d:07:5a:b6:3d:df:f4:91:64: 1c:96:90:bb:a1:99:9b:60:73:d2:75:d1:85:52:0d:c4:b1:d4: ed:bc:fb:95:92:4b:ed:0f:7f:b4:59:3f:f6:9a:c5:d0:70:70: ac:ff:67:06:58:48:87:ad:a3:88:24:bd:25:13:0c:05:c7:10: 18:da:ae:ba:1d:df:e4:c2:e3:a2:36:26:e9:e3:81:a9:d0:69: a3:f5:4c:c0:8c:f7:5f:c9:c0:b6:06:f1:01:76:84:2c:33:57: d4:8a:a8:1e:9d:96:2e:51:81:21:2f:e5:cf:fa:3e:ce:9d:de: 2d:88:18:3c:0c:d9:9e:0a:f2:02:56:36:7d:7f:0d:d5:26:f1: c8:98:05:b1:9f:0a:89:a8:35:ae:c1:a8:40:bc:1d:e1:7b:7d: c1:23:5e:05:8a:82:55:ea:23:56:62:5b:bd:52:22:14:20:57: 12:32:b0:1e:83:7d:e8:3e:76:b6:fc:36:58:68:43:3e:b5:74: d7:3b:ef:b1 -----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgICbrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjYxMDAyMTUzMjUxWhcNMjcxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJmY2VhMy0yNTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnOcaiaKycNpDtNZq+nI2rNYXVBe5qQ0O0dK+sEo2RXXOB0+MalSV7irM7gjs /D6HDximWC8XtE7CiKOTk035htc/tsgampEOKaHKeYbqTLPyNw+NibN2dNhy6+1e 01kW+apQbDGFsp6P7eON2JJTS4hzYf71pGot4dEIZhgdnucDGzexnI6iCBPqCTRf IBM+WBmnGc73Zvl9JBmSQDdjc9LT9MDGnGg7Kyicpcsh89WNW7XU30MhjSqhC9u0 A4s3oDsQXM4VuSqRkpzkY27toBDDI9De/0dmkk7gZgopSgkjflJ84C0AFpJGQadS UdEngE0iRhk8oUifrVNShKQEWQIDAQABo4ICjDCCAogwHQYDVR0OBBYEFJYEY44p MGiSGH73/hIkUb+uMVmRMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNjBFQjg3MDBC MzBFMTFGMEIxRjkxRjMzQzRGOUFFMDIucm9hMEsGCCsGAQUFBwEHAQH/BDwwOjAM BAIAATAGAwQBo+OeMCoEAgACMCQDBwAgAQ30l8ADBwAgAQ31c0ADBwAgAQ31wsAD BwAgAQ31w0AwDQYJKoZIhvcNAQELBQADggEBALRBe206QGzgCh8IJXRtongGXlvF d5aAlswSDtNCExEFEeWXjsf5jiCfz0fYaT+dEoDF+YcCuVX9NloCD8CbiC0HWrY9 3/SRZByWkLuhmZtgc9J10YVSDcSx1O28+5WSS+0Pf7RZP/aaxdBwcKz/ZwZYSIet o4gkvSUTDAXHEBjarrod3+TC46I2JunjganQaaP1TMCM91/JwLYG8QF2hCwzV9SK qB6dli5RgSEv5c/6Ps6d3i2IGDwM2Z4K8gJWNn1/DdUm8ciYBbGfComoNa7BqEC8 HeF7fcEjXgWKglXqI1ZiW71SIhQgVxIysB6Dfeg+drb8NlhoQz61dNc777E= -----END CERTIFICATE-----Generated at Sat Oct 24 20:44:55 2026 by rpki-client