$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/2488172673AF11F1A114703E7BA30FBC.roa File: 2488172673AF11F1A114703E7BA30FBC.roa (raw, json) Hash identifier: 19yy3TT6Ip3JsO4sFrTFEkAM4n8pIPoPdPe28xr/XwQ= Subject key identifier: 05:BC:E7:69:44:ED:F0:CD:88:6D:F9:81:D9:21:BD:58:03:FD:A0:28 Certificate issuer: /CN=A91BB8EA/serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Certificate serial: 03 Authority key identifier: 9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/2488172673AF11F1A114703E7BA30FBC.roa Signing time: Mon 29 Jun 2026 11:39:09 +0000 ROA not before: Mon 29 Jun 2026 11:39:09 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 153694 IP address blocks: 163.223.98.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB8EA, serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Validity Not Before: Jun 29 11:39:09 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a42595d-d371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:94:6b:e2:74:e7:46:c9:dd:ad:66:3a:43:5f: 10:7d:79:84:f8:84:57:11:51:8a:6c:2e:42:90:c7: 9a:12:19:d2:38:a2:ef:5f:db:d9:af:6b:24:85:8e: 7b:3a:fc:8a:27:45:59:cc:b3:b4:0f:37:2f:96:36: 03:e4:e9:30:19:41:e7:53:a7:bf:f4:4a:f0:79:ce: 5f:8a:9e:55:6f:ff:b8:cc:ee:7d:36:95:7e:15:48: dc:56:e8:29:83:da:c2:27:72:0d:6e:93:56:e6:49: 9f:4f:ab:c0:12:e0:d9:9b:34:55:6f:f9:8a:32:ff: 0a:21:10:d5:4a:b2:17:38:6d:e5:03:0c:c6:70:98: b9:61:ee:90:70:22:3e:fc:86:47:b7:a1:2a:21:d1: 5e:7b:e0:aa:76:47:e5:b4:08:0a:56:c8:a8:15:b0: b6:1d:54:a7:25:aa:3b:7a:c9:b9:3c:69:b5:27:13: 11:d5:f0:3b:57:71:e5:bc:6a:7f:91:22:44:b8:8f: 4c:30:39:cf:c9:fd:4b:74:13:82:c6:f9:06:d6:a5: ef:71:49:56:ac:79:a7:39:63:e6:91:3f:cc:79:b2: 13:c8:ef:26:2a:fb:0e:f1:06:09:dc:22:39:86:82: d8:b1:06:c0:e3:3a:b2:dd:61:63:d1:09:66:19:59: 7a:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BC:E7:69:44:ED:F0:CD:88:6D:F9:81:D9:21:BD:58:03:FD:A0:28 X509v3 Authority Key Identifier: keyid:9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/2488172673AF11F1A114703E7BA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 163.223.98.0/23 Signature Algorithm: sha256WithRSAEncryption 97:22:ce:d4:ac:70:ab:7c:15:27:0e:fc:b8:a4:80:15:c0:7c: 13:c3:10:91:6d:90:e0:66:16:69:60:06:f0:e8:f4:20:88:72: 47:32:0b:29:23:e6:99:ca:18:71:6e:1a:1a:6e:93:af:7d:08: a8:7d:d5:cc:4b:ea:96:28:13:96:b5:71:8a:cf:fa:af:92:22: f7:38:44:79:20:d2:f9:52:25:ca:02:13:a8:bc:78:f1:62:dd: a4:85:af:ea:b2:f6:17:08:70:73:a7:3a:6f:50:51:85:76:5a: b8:e1:d3:f4:e0:e4:03:9f:ab:7c:cb:a2:d5:5e:d8:a5:76:e1: 20:bc:4d:15:0b:76:de:d7:77:e9:bc:b2:0f:c0:04:0d:b6:e2: ea:6c:49:3b:94:d8:a0:20:00:04:20:c8:98:ce:b4:dc:40:9f: 3b:40:c0:57:b6:51:4b:b3:36:7c:80:4b:f0:42:00:60:74:77: 79:8d:b2:4f:ce:a2:ee:70:69:e5:3c:75:bf:7e:ee:5b:5e:9e: 45:16:42:bc:4f:aa:93:a1:58:f2:a9:2d:42:bf:f8:73:c8:f7: 9e:c7:7d:69:d9:b8:bc:ef:e5:9c:e1:49:b4:f6:74:c9:f3:10: 40:0d:9b:6c:3a:b6:57:f0:b1:35:7e:09:80:0f:da:a9:45:2f: 80:87:2a:53 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjhFQTExMC8GA1UEBRMoOUVENjQ0M0JDMTdEMUU4MjU2QjVDMUMyMzQ2MEM3OENE Q0Q5NUQxQTAeFw0yNjA2MjkxMTM5MDlaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNDI1OTVkLWQzNzEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC/lGvidOdGyd2tZjpDXxB9eYT4hFcRUYpsLkKQx5oSGdI4ou9f29mvaySFjns6 /IonRVnMs7QPNy+WNgPk6TAZQedTp7/0SvB5zl+KnlVv/7jM7n02lX4VSNxW6CmD 2sIncg1uk1bmSZ9Pq8AS4NmbNFVv+Yoy/wohENVKshc4beUDDMZwmLlh7pBwIj78 hke3oSoh0V574Kp2R+W0CApWyKgVsLYdVKclqjt6ybk8abUnExHV8DtXceW8an+R IkS4j0wwOc/J/Ut0E4LG+QbWpe9xSVaseac5Y+aRP8x5shPI7yYq+w7xBgncIjmG gtixBsDjOrLdYWPRCWYZWXrnAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUBbznaUTt 8M2IbfmB2SG9WAP9oCgwHwYDVR0jBBgwFoAUntZEO8F9HoJWtcHCNGDHjNzZXRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOEVBLzQwQThGMjhDNzNB RTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9KV3RjSENOR0RIak56WlhS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRaRU84RjlIb0pXdGNIQ05HREhqTnpaWFJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjhFQS80MEE4RjI4QzczQUUxMUYxOTlFNDhCMTY3QkEzMEZCQy8yNDg4MTcyNjcz QUYxMUYxQTExNDcwM0U3QkEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGj32IwDQYJKoZIhvcNAQELBQADggEBAJciztSscKt8FScO/LikgBXA fBPDEJFtkOBmFmlgBvDo9CCIckcyCykj5pnKGHFuGhpuk699CKh91cxL6pYoE5a1 cYrP+q+SIvc4RHkg0vlSJcoCE6i8ePFi3aSFr+qy9hcIcHOnOm9QUYV2Wrjh0/Tg 5AOfq3zLotVe2KV24SC8TRULdt7Xd+m8sg/ABA224upsSTuU2KAgAAQgyJjOtNxA nztAwFe2UUuzNnyAS/BCAGB0d3mNsk/Oou5waeU8db9+7ltenkUWQrxPqpOhWPKp LUK/+HPI957HfWnZuLzv5ZzhSbT2dMnzEEANm2w6tlfwsTV+CYAP2qlFL4CHKlM= -----END CERTIFICATE-----Generated at Sat Jul 18 09:09:37 2026 by rpki-client