$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/25170F0873AF11F1A114703E7BA30FBC.roa File: 25170F0873AF11F1A114703E7BA30FBC.roa (raw, json) Hash identifier: rHhYjIfJ1Uff3ehA9HhL+/gkS6dmDJsJgGHAaP2R35k= Subject key identifier: 4B:8E:D8:29:49:93:C9:D0:32:4F:7C:61:8B:62:7C:62:FB:34:5C:F8 Certificate issuer: /CN=A91BB8EA/serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Certificate serial: 04 Authority key identifier: 9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/25170F0873AF11F1A114703E7BA30FBC.roa Signing time: Mon 29 Jun 2026 11:39:10 +0000 ROA not before: Mon 29 Jun 2026 11:39:10 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 17501 IP address blocks: 163.223.98.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 10:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB8EA, serialNumber=9ED6443BC17D1E8256B5C1C23460C78CDCD95D1A Validity Not Before: Jun 29 11:39:10 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6a42595e-eb32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2c:88:d3:6c:5b:d2:85:81:8b:5e:23:b0:98: 71:39:9b:49:a9:4e:f1:1b:b8:08:8b:c9:f3:8e:f2: 0a:b6:17:e9:ad:75:e6:59:36:09:c8:77:f0:81:b0: 93:9e:13:73:33:fc:e0:d1:39:a3:f5:75:c3:cc:ff: 0f:35:c5:b5:db:74:7f:5b:d5:5e:36:ed:5c:55:af: a5:c2:c3:72:35:ff:c8:9e:38:12:1a:c3:41:c2:67: de:85:ed:52:21:6e:23:06:88:85:09:d8:b8:f1:f2: 97:ad:46:95:2f:56:ee:75:51:4e:9c:e8:c9:3a:5e: 79:53:a4:42:66:85:af:64:34:65:2a:14:a2:c6:ff: 9d:95:c9:b2:52:da:90:20:7c:f1:c2:81:94:cd:ca: 15:52:c9:9a:ba:61:3b:bf:7d:ee:1e:d9:49:fd:91: d7:6c:6c:1c:a2:09:2e:aa:dc:aa:a9:ec:40:f9:ea: 81:87:bd:d8:ec:11:4e:d1:82:35:e0:5e:ec:71:9e: fa:f1:eb:05:30:5c:a9:29:1c:1f:a7:ac:dd:0f:31: 82:2a:85:29:9d:de:70:90:17:87:65:15:cd:bd:05: 77:86:ac:c2:e5:7f:9d:79:36:0d:d0:6e:bb:e0:b7: 3f:ad:9f:19:4d:d6:ba:05:5d:1d:6c:7b:c3:53:b3: 8c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:8E:D8:29:49:93:C9:D0:32:4F:7C:61:8B:62:7C:62:FB:34:5C:F8 X509v3 Authority Key Identifier: keyid:9E:D6:44:3B:C1:7D:1E:82:56:B5:C1:C2:34:60:C7:8C:DC:D9:5D:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/ntZEO8F9HoJWtcHCNGDHjNzZXRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ntZEO8F9HoJWtcHCNGDHjNzZXRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB8EA/40A8F28C73AE11F199E48B167BA30FBC/25170F0873AF11F1A114703E7BA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 163.223.98.0/23 Signature Algorithm: sha256WithRSAEncryption 40:6a:68:a6:92:5c:b0:a9:6b:01:84:d6:56:2d:a4:d3:77:01: 4f:83:34:76:92:d9:1d:8b:e3:69:10:cb:72:76:d1:c7:21:2a: 8f:d2:c1:a8:0c:68:cc:1c:81:c0:2a:ec:6b:29:57:bc:b9:0a: 87:c6:06:2c:89:32:5a:39:18:4a:4e:df:7f:94:b0:4e:39:5b: ec:91:cd:58:16:ac:8a:89:09:d2:5d:3e:bb:27:85:20:67:19: b5:56:01:2e:23:df:96:b9:2c:a1:23:0a:5a:11:60:be:37:19: 1e:f0:4c:b6:8f:0a:45:ce:4d:9c:92:19:ab:f8:ec:8e:81:89: 7f:27:e4:78:a3:eb:44:50:56:fc:37:11:40:fb:65:e0:5d:07: 18:da:2d:87:48:6b:e1:40:a7:7c:47:57:c0:15:2a:14:83:69: 52:7d:39:e5:7a:0c:f6:6c:d9:48:e4:94:21:59:72:ef:80:8b: e0:7f:c1:86:90:aa:5c:5a:e7:d8:0f:a0:07:c4:2c:9b:55:e1: 88:86:cd:65:39:62:d3:90:fb:4c:1d:32:f9:6e:7c:9a:48:3d: 45:e0:45:32:3b:74:77:23:80:24:63:0e:c8:a0:52:1e:e8:2b: bd:59:9b:d5:d6:2a:c8:8a:3d:e1:18:e6:0e:a1:2a:06:19:7e: c0:a8:e0:22 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QjhFQTExMC8GA1UEBRMoOUVENjQ0M0JDMTdEMUU4MjU2QjVDMUMyMzQ2MEM3OENE Q0Q5NUQxQTAeFw0yNjA2MjkxMTM5MTBaFw0yNzA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNDI1OTVlLWViMzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCGLIjTbFvShYGLXiOwmHE5m0mpTvEbuAiLyfOO8gq2F+mtdeZZNgnId/CBsJOe E3Mz/ODROaP1dcPM/w81xbXbdH9b1V427VxVr6XCw3I1/8ieOBIaw0HCZ96F7VIh biMGiIUJ2Ljx8petRpUvVu51UU6c6Mk6XnlTpEJmha9kNGUqFKLG/52VybJS2pAg fPHCgZTNyhVSyZq6YTu/fe4e2Un9kddsbByiCS6q3Kqp7ED56oGHvdjsEU7RgjXg Xuxxnvrx6wUwXKkpHB+nrN0PMYIqhSmd3nCQF4dlFc29BXeGrMLlf515Ng3Qbrvg tz+tnxlN1roFXR1se8NTs4wbAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUS47YKUmT ydAyT3xhi2J8Yvs0XPgwHwYDVR0jBBgwFoAUntZEO8F9HoJWtcHCNGDHjNzZXRow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJCOEVBLzQwQThGMjhDNzNB RTExRjE5OUU0OEIxNjdCQTMwRkJDL250WkVPOEY5SG9KV3RjSENOR0RIak56WlhS by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvbnRaRU84RjlIb0pXdGNIQ05HREhqTnpaWFJvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QjhFQS80MEE4RjI4QzczQUUxMUYxOTlFNDhCMTY3QkEzMEZCQy8yNTE3MEYwODcz QUYxMUYxQTExNDcwM0U3QkEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGj32IwDQYJKoZIhvcNAQELBQADggEBAEBqaKaSXLCpawGE1lYtpNN3 AU+DNHaS2R2L42kQy3J20cchKo/SwagMaMwcgcAq7GspV7y5CofGBiyJMlo5GEpO 33+UsE45W+yRzVgWrIqJCdJdPrsnhSBnGbVWAS4j35a5LKEjCloRYL43GR7wTLaP CkXOTZySGav47I6BiX8n5Hij60RQVvw3EUD7ZeBdBxjaLYdIa+FAp3xHV8AVKhSD aVJ9OeV6DPZs2UjklCFZcu+Ai+B/wYaQqlxa59gPoAfELJtV4YiGzWU5YtOQ+0wd MvlufJpIPUXgRTI7dHcjgCRjDsigUh7oK71Zm9XWKsiKPeEY5g6hKgYZfsCo4CI= -----END CERTIFICATE-----Generated at Sat Jul 18 07:09:15 2026 by rpki-client