$ rpki-client -vvvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/890F7E749FB911F1AB1F7E9A5011F970.roa File: 890F7E749FB911F1AB1F7E9A5011F970.roa (raw, json) Hash identifier: eYQw0SPhDmrk7SgtMJpBz4p1kI4NPWbyGxMaPtZFiZo= Subject key identifier: B3:C1:82:6C:DD:1F:82:04:CC:3B:23:44:B0:D6:5A:78:10:A3:F2:AA Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 01E3 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/890F7E749FB911F1AB1F7E9A5011F970.roa Signing time: Mon 24 Aug 2026 12:44:24 +0000 ROA not before: Mon 24 Aug 2026 12:44:24 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 152726 IP address blocks: 160.20.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 03:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 483 (0x1e3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Aug 24 12:44:24 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a8c3ca8-d2d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:b4:26:1b:e8:11:9b:24:f4:76:27:01:d7: 8c:f2:e8:00:e3:5a:89:8a:ee:c4:77:e8:2c:eb:7d: 87:ec:d0:f6:2e:c8:74:e3:11:b5:f1:1a:77:6c:f0: f0:ab:1b:86:e1:0f:3f:97:07:0b:78:53:9b:4e:1c: 81:6f:83:08:4a:3a:7c:45:1d:4b:14:ed:80:78:75: 13:62:00:46:8f:b1:72:08:ee:fa:e7:f1:e5:4a:85: fd:9b:1d:e0:27:a0:0e:09:b9:ab:69:dd:92:02:92: 8a:d5:9e:33:ed:fb:34:78:01:b6:73:44:ce:9c:eb: db:e6:42:2a:b5:37:3f:92:1f:5e:a7:b1:4b:bd:60: 20:71:09:f4:cf:c0:7a:86:ad:cd:fc:8a:50:99:ae: f5:6b:d2:fa:a6:f4:7b:20:b7:eb:2c:f3:49:e9:4c: 49:16:db:37:dd:d5:c9:95:24:5e:ae:7a:e2:7b:ea: ec:3e:92:3f:73:3b:90:42:9a:30:9d:5a:9b:64:e6: c7:eb:df:45:2d:d5:4f:08:e6:e5:31:c7:9b:1d:50: d1:e7:5d:bf:bf:2d:57:59:39:7f:91:ca:e5:79:79: d6:ce:e3:f2:a1:0b:ce:e7:5c:1f:bc:1b:f5:6d:27: 56:7a:e0:eb:d5:b8:be:b2:c6:70:95:ea:02:0c:1d: 23:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:C1:82:6C:DD:1F:82:04:CC:3B:23:44:B0:D6:5A:78:10:A3:F2:AA X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/890F7E749FB911F1AB1F7E9A5011F970.roa sbgp-ipAddrBlock: critical IPv4: 160.20.121.0/24 Signature Algorithm: sha256WithRSAEncryption c9:9c:13:ac:52:7a:14:e3:12:0d:73:43:1a:68:e6:be:b6:66: 4c:7a:21:af:09:03:dd:f6:8c:c5:d9:b5:11:aa:a0:92:52:27: f6:83:6b:d0:ba:63:f9:9c:3f:99:b6:a6:15:1a:05:7e:7c:df: 30:43:22:c8:70:ae:38:80:57:2e:d5:4f:bd:51:05:47:c8:cf: b8:74:43:81:77:c3:73:13:6d:be:1e:e7:1b:98:f9:87:ea:0c: ca:e6:de:28:ff:08:4a:57:a5:f8:bc:51:1a:40:b7:ce:ce:5a: be:be:8c:2e:31:bc:78:11:38:eb:3c:43:20:7e:fa:9e:bd:5c: 25:8b:14:08:47:3b:e5:e8:61:95:40:90:53:be:f2:8d:0b:23: 8c:11:46:e6:4c:24:a8:4b:1d:43:26:79:89:2a:f3:8f:6c:cd: 9e:3b:a5:6d:d9:6f:2a:08:15:f4:7e:46:01:bb:a8:fa:0f:a0: 9b:85:cc:3a:7b:4a:cd:15:e8:f3:b3:c4:29:39:33:a9:b5:87: 56:34:f0:86:56:07:5a:84:94:a1:f3:c3:5d:a8:c4:cc:c0:c9: 1a:21:4f:22:da:b4:52:3b:84:6e:7b:56:35:f1:44:91:fb:6d: 82:3e:c2:d9:77:76:85:8e:62:50:42:f3:d0:9c:2c:f5:23:5e: a1:81:67:f2 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjYwODI0MTI0NDI0WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YThjM2NhOC1kMmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr3q0JhvoEZsk9HYnAdeM8ugA41qJiu7Ed+gs632H7ND2Lsh04xG18Rp3bPDw qxuG4Q8/lwcLeFObThyBb4MISjp8RR1LFO2AeHUTYgBGj7FyCO765/HlSoX9mx3g J6AOCbmrad2SApKK1Z4z7fs0eAG2c0TOnOvb5kIqtTc/kh9ep7FLvWAgcQn0z8B6 hq3N/IpQma71a9L6pvR7ILfrLPNJ6UxJFts33dXJlSRernrie+rsPpI/czuQQpow nVqbZObH699FLdVPCOblMcebHVDR512/vy1XWTl/kcrleXnWzuPyoQvO51wfvBv1 bSdWeuDr1bi+ssZwleoCDB0jQwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLPBgmzd H4IEzDsjRLDWWngQo/KqMB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgwQzIvOTgzRTYxNTAxNzFBMTFFRjg2NTc3NTRGQzRGOUFFMDIvODkwRjdFNzQ5 RkI5MTFGMUFCMUY3RTlBNTAxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoBR5MA0GCSqGSIb3DQEBCwUAA4IBAQDJnBOsUnoU4xINc0MaaOa+ tmZMeiGvCQPd9ozF2bURqqCSUif2g2vQumP5nD+ZtqYVGgV+fN8wQyLIcK44gFcu 1U+9UQVHyM+4dEOBd8NzE22+HucbmPmH6gzK5t4o/whKV6X4vFEaQLfOzlq+vowu Mbx4ETjrPEMgfvqevVwlixQIRzvl6GGVQJBTvvKNCyOMEUbmTCSoSx1DJnmJKvOP bM2eO6Vt2W8qCBX0fkYBu6j6D6Cbhcw6e0rNFejzs8QpOTOptYdWNPCGVgdahJSh 88NdqMTMwMkaIU8i2rRSO4Rue1Y18USR+22CPsLZd3aFjmJQQvPQnCz1I16hgWfy -----END CERTIFICATE-----Generated at Thu Aug 27 04:50:26 2026 by rpki-client