$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/CF6E968E8B2811F18D2B202C3D11F970.roa File: CF6E968E8B2811F18D2B202C3D11F970.roa (raw, json) Hash identifier: nKbDtnjj8624VgFqL+Q3DAFfPVFpI7iStLeG1RhUWGA= Subject key identifier: 62:AB:6B:5F:E7:D3:1C:6C:B6:58:05:5E:D5:CA:16:85:0D:3A:6C:8D Certificate issuer: /CN=A91B1F08/serialNumber=97AF121877892C8007FE4E716B88E33BEEF800DF Certificate serial: 02 Authority key identifier: 97:AF:12:18:77:89:2C:80:07:FE:4E:71:6B:88:E3:3B:EE:F8:00:DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/CF6E968E8B2811F18D2B202C3D11F970.roa Signing time: Wed 29 Jul 2026 08:38:03 +0000 ROA not before: Wed 29 Jul 2026 08:38:03 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 152907 IP address blocks: 160.22.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.crl rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 06:09:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B1F08, serialNumber=97AF121877892C8007FE4E716B88E33BEEF800DF Validity Not Before: Jul 29 08:38:03 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a69bbea-b75d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9e:40:2b:40:c3:5c:3c:8d:d5:88:3b:dc:dc: 6a:d1:94:a2:bb:2c:3b:62:fc:6b:bd:0c:7d:89:c6: 54:a1:50:31:a1:18:ff:bc:c8:8c:4f:85:f2:31:53: 13:46:74:3a:9c:16:20:c2:d4:5e:88:6e:e2:b0:27: 3e:ec:0a:fb:aa:d1:fe:f6:9a:41:b1:ac:59:71:a1: 53:be:78:83:10:86:2b:ee:e8:f3:55:cc:96:a9:15: a5:c6:c7:01:5d:1d:86:b4:c0:e4:0c:b1:95:a8:a3: e9:b8:61:08:81:cf:13:94:f1:ac:75:bb:5a:39:98: ef:e6:b3:5f:e2:c8:74:c4:96:13:a5:63:aa:7c:50: 61:5b:f5:95:b3:35:9f:4c:df:04:e4:da:ba:02:7e: 2f:3a:df:c6:ff:79:3f:08:a8:7c:b1:ec:96:5b:c1: 30:c7:0a:e8:41:dc:d3:04:b6:6e:81:4f:0a:5e:e4: 86:0e:1f:be:dc:20:2d:ca:d9:13:3c:43:1c:a4:87: 60:77:de:50:4f:04:8e:c8:d9:e7:14:aa:f4:ea:24: dd:73:e9:c8:7f:8e:8e:70:50:66:0a:68:64:d9:0f: 2b:34:41:1c:aa:b8:d3:8a:ba:b1:b6:b8:a4:e3:bb: 06:04:40:0e:1b:2f:7b:6d:3c:71:40:88:0f:84:4d: f6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:AB:6B:5F:E7:D3:1C:6C:B6:58:05:5E:D5:CA:16:85:0D:3A:6C:8D X509v3 Authority Key Identifier: keyid:97:AF:12:18:77:89:2C:80:07:FE:4E:71:6B:88:E3:3B:EE:F8:00:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/l68SGHeJLIAH_k5xa4jjO-74AN8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l68SGHeJLIAH_k5xa4jjO-74AN8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B1F08/0A2288E08B2811F183E2C30E3D11F970/CF6E968E8B2811F18D2B202C3D11F970.roa sbgp-ipAddrBlock: critical IPv4: 160.22.130.0/24 Signature Algorithm: sha256WithRSAEncryption 89:5b:cd:32:bf:4d:f6:64:7f:b3:1a:a1:b7:2e:bb:fe:93:7b: b5:a0:a1:90:69:cb:40:2e:b1:23:6e:db:9e:51:a7:69:c5:c0: 4d:9c:9d:35:a4:66:27:f5:44:01:61:fd:28:cf:ed:51:b0:5b: 30:c0:6b:6a:46:c4:5a:b4:6d:c4:12:25:66:98:1d:f7:15:13: 24:64:78:a0:7f:48:4d:53:8f:c5:d1:0c:32:eb:6c:34:3d:b3: a8:f4:05:a7:89:5f:41:1c:d8:75:96:2f:69:b0:46:da:0f:54: 27:be:8b:3d:60:3a:4d:02:bd:4f:a6:57:c6:52:02:e6:4a:00: c1:06:0f:e8:ac:ab:6d:09:98:68:3a:d9:6f:c2:68:fc:e5:60: b7:96:65:64:3a:0d:24:ea:0d:09:f4:15:fa:3a:d7:ad:cc:cc: 43:5e:1d:97:89:18:ec:66:65:20:33:bc:0f:a9:f5:aa:c6:52: 60:eb:e0:cf:9b:83:60:9b:95:6b:94:2d:b1:55:0b:2c:72:89: ce:a2:8a:7e:ef:49:c6:8e:5e:86:8f:bb:71:a0:89:ea:a1:8b: 2a:9b:84:e9:9b:bc:53:33:2f:1d:8f:cb:ca:cf:eb:c6:d6:69: fd:fb:b9:0b:10:a8:96:1b:c1:3a:06:84:4a:40:c2:f5:bc:a9: 96:66:e0:4a -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MUYwODExMC8GA1UEBRMoOTdBRjEyMTg3Nzg5MkM4MDA3RkU0RTcxNkI4OEUzM0JF RUY4MDBERjAeFw0yNjA3MjkwODM4MDNaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNjliYmVhLWI3NWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7nkArQMNcPI3ViDvc3GrRlKK7LDti/Gu9DH2JxlShUDGhGP+8yIxPhfIxUxNG dDqcFiDC1F6IbuKwJz7sCvuq0f72mkGxrFlxoVO+eIMQhivu6PNVzJapFaXGxwFd HYa0wOQMsZWoo+m4YQiBzxOU8ax1u1o5mO/ms1/iyHTElhOlY6p8UGFb9ZWzNZ9M 3wTk2roCfi8638b/eT8IqHyx7JZbwTDHCuhB3NMEtm6BTwpe5IYOH77cIC3K2RM8 Qxykh2B33lBPBI7I2ecUqvTqJN1z6ch/jo5wUGYKaGTZDys0QRyquNOKurG2uKTj uwYEQA4bL3ttPHFAiA+ETfadAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUYqtrX+fT HGy2WAVe1coWhQ06bI0wHwYDVR0jBBgwFoAUl68SGHeJLIAH/k5xa4jjO+74AN8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxRjA4LzBBMjI4OEUwOEIy ODExRjE4M0UyQzMwRTNEMTFGOTcwL2w2OFNHSGVKTElBSF9rNXhhNGpqTy03NEFO OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbDY4U0dIZUpMSUFIX2s1eGE0ampPLTc0QU44LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MUYwOC8wQTIyODhFMDhCMjgxMUYxODNFMkMzMEUzRDExRjk3MC9DRjZFOTY4RThC MjgxMUYxOEQyQjIwMkMzRDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACgFoIwDQYJKoZIhvcNAQELBQADggEBAIlbzTK/TfZkf7Maobcuu/6T e7WgoZBpy0AusSNu255Rp2nFwE2cnTWkZif1RAFh/SjP7VGwWzDAa2pGxFq0bcQS JWaYHfcVEyRkeKB/SE1Tj8XRDDLrbDQ9s6j0BaeJX0Ec2HWWL2mwRtoPVCe+iz1g Ok0CvU+mV8ZSAuZKAMEGD+isq20JmGg62W/CaPzlYLeWZWQ6DSTqDQn0Ffo6163M zENeHZeJGOxmZSAzvA+p9arGUmDr4M+bg2CblWuULbFVCyxyic6iin7vScaOXoaP u3GgieqhiyqbhOmbvFMzLx2Py8rP68bWaf37uQsQqJYbwToGhEpAwvW8qZZm4Eo= -----END CERTIFICATE-----Generated at Thu Aug 27 12:05:52 2026 by rpki-client