$ rpki-client -vvf rpki.apnic.net/member_repository/A91C873A/3104898C8F1411F1AAFCC9463411F970/B4B84D408F1411F1B4F762993411F970.roa File: B4B84D408F1411F1B4F762993411F970.roa (raw, json) Hash identifier: zRvjyZ8iy37Fk/InHuyY5E9zGhUus1M51ds8i1HbbCc= Subject key identifier: 9A:69:3C:C6:93:BB:9F:CB:99:0D:9F:1F:C9:16:D5:FA:FB:18:5A:5F Certificate issuer: /CN=A91C873A/serialNumber=4563A70FE0139B1911AAF69739EE03C8D5303A8C Certificate serial: 02 Authority key identifier: 45:63:A7:0F:E0:13:9B:19:11:AA:F6:97:39:EE:03:C8:D5:30:3A:8C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RWOnD-ATmxkRqvaXOe4DyNUwOow.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C873A/3104898C8F1411F1AAFCC9463411F970/B4B84D408F1411F1B4F762993411F970.roa Signing time: Mon 03 Aug 2026 08:24:12 +0000 ROA not before: Mon 03 Aug 2026 08:24:12 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 154786 IP address blocks: 160.236.220.0/23 maxlen: 23 160.236.220.0/24 maxlen: 24 160.236.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C873A/3104898C8F1411F1AAFCC9463411F970/RWOnD-ATmxkRqvaXOe4DyNUwOow.crl rsync://rpki.apnic.net/member_repository/A91C873A/3104898C8F1411F1AAFCC9463411F970/RWOnD-ATmxkRqvaXOe4DyNUwOow.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RWOnD-ATmxkRqvaXOe4DyNUwOow.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 26 Aug 2026 09:53:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C873A, serialNumber=4563A70FE0139B1911AAF69739EE03C8D5303A8C Validity Not Before: Aug 3 08:24:12 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a70502c-191b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:26:76:4b:50:ab:b2:72:5c:74:b1:b0:0d:d5: 18:d7:ea:1a:b2:0d:a7:0d:22:42:0d:3f:52:ed:5e: 58:f9:af:42:8c:bf:3e:e3:ae:cb:f7:4f:d8:62:95: b6:b1:53:3b:c1:b3:f6:36:1e:28:fb:9c:a3:a8:d6: 93:56:4f:27:8e:2e:5a:80:ac:6d:80:aa:19:6c:d3: ac:f9:75:45:c6:b8:50:c4:bd:2f:89:f2:3d:e3:7c: 06:35:1d:09:d0:ea:17:a2:0c:69:80:50:44:31:96: df:e2:c3:18:cb:fd:a5:d0:f4:b2:3e:fc:17:c1:21: 9b:a5:28:02:9c:16:66:c5:dc:70:f5:a3:eb:2e:46: 56:d2:ab:ab:8a:50:4e:87:93:5c:11:11:e8:58:9b: 6b:e7:50:53:fa:8c:23:c1:c4:ec:cc:f0:67:73:b7: 70:15:86:7a:0f:ec:35:62:e7:82:44:ac:72:0a:f5: c4:c9:27:c1:75:e3:8e:51:f7:33:b4:9e:da:2d:a6: f4:48:9a:19:13:68:89:b0:10:d3:2b:c0:92:0d:70: 2b:fe:27:3b:06:b4:bc:25:07:45:39:68:83:6c:6d: 0d:6d:d9:ee:2a:d3:bf:16:b3:2c:00:c0:c5:4f:42: 82:69:46:16:e6:4f:dd:17:35:9f:fc:05:f4:af:28: 7a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:69:3C:C6:93:BB:9F:CB:99:0D:9F:1F:C9:16:D5:FA:FB:18:5A:5F X509v3 Authority Key Identifier: keyid:45:63:A7:0F:E0:13:9B:19:11:AA:F6:97:39:EE:03:C8:D5:30:3A:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C873A/3104898C8F1411F1AAFCC9463411F970/RWOnD-ATmxkRqvaXOe4DyNUwOow.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RWOnD-ATmxkRqvaXOe4DyNUwOow.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C873A/3104898C8F1411F1AAFCC9463411F970/B4B84D408F1411F1B4F762993411F970.roa sbgp-ipAddrBlock: critical IPv4: 160.236.220.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:72:ae:1a:80:38:4b:ae:d2:aa:59:86:c1:21:48:3c:9c:0f: 87:df:a8:be:93:2e:f6:f9:17:3e:62:27:ec:a6:61:df:14:ce: 5a:9d:27:1e:01:e4:33:97:ac:f0:b3:bb:67:0b:69:7d:01:21: 3c:41:ab:b9:61:41:02:94:6c:10:f4:d9:4d:f2:eb:fd:b7:eb: 99:5e:06:c9:a4:3a:e4:f9:fc:b2:7c:97:cb:5b:83:d3:e7:45: ec:a6:5f:e5:2a:c4:26:8c:03:f7:2b:a7:5e:f0:c4:5d:c5:1e: 61:50:68:18:e7:bd:1b:22:15:5e:fb:d7:2c:9a:0a:a0:ff:5a: f5:2a:80:6c:bc:ad:34:63:a9:d5:9d:1c:24:bf:74:1e:db:e7: 45:c0:1a:e3:73:09:bc:41:e1:2e:77:92:68:e2:f3:32:43:23: 28:a7:ed:5b:43:0c:e0:1f:46:f6:3a:38:cd:46:b0:67:c0:8e: 98:01:43:a2:85:7c:21:ed:f1:0a:3b:42:e3:0e:fe:93:44:46: ec:2c:39:e3:58:77:4b:cb:74:76:57:c2:84:26:ff:91:26:74: 50:1e:ce:be:ef:e9:a3:1e:88:d9:17:fb:5e:7e:18:21:76:6d: bc:35:c1:43:5d:f4:11:ba:39:af:20:d0:ed:1b:9d:5d:0d:84: 21:b4:e7:34 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD ODczQTExMC8GA1UEBRMoNDU2M0E3MEZFMDEzOUIxOTExQUFGNjk3MzlFRTAzQzhE NTMwM0E4QzAeFw0yNjA4MDMwODI0MTJaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNzA1MDJjLTE5MWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpJnZLUKuyclx0sbAN1RjX6hqyDacNIkINP1LtXlj5r0KMvz7jrsv3T9hilbax UzvBs/Y2Hij7nKOo1pNWTyeOLlqArG2Aqhls06z5dUXGuFDEvS+J8j3jfAY1HQnQ 6heiDGmAUEQxlt/iwxjL/aXQ9LI+/BfBIZulKAKcFmbF3HD1o+suRlbSq6uKUE6H k1wREehYm2vnUFP6jCPBxOzM8Gdzt3AVhnoP7DVi54JErHIK9cTJJ8F1445R9zO0 ntotpvRImhkTaImwENMrwJINcCv+JzsGtLwlB0U5aINsbQ1t2e4q078WsywAwMVP QoJpRhbmT90XNZ/8BfSvKHo7AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUmmk8xpO7 n8uZDZ8fyRbV+vsYWl8wHwYDVR0jBBgwFoAURWOnD+ATmxkRqvaXOe4DyNUwOoww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM4NzNBLzMxMDQ4OThDOEYx NDExRjFBQUZDQzk0NjM0MTFGOTcwL1JXT25ELUFUbXhrUnF2YVhPZTREeU5Vd09v dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUldPbkQtQVRteGtScXZhWE9lNER5TlV3T293LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD ODczQS8zMTA0ODk4QzhGMTQxMUYxQUFGQ0M5NDYzNDExRjk3MC9CNEI4NEQ0MDhG MTQxMUYxQjRGNzYyOTkzNDExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGg7NwwDQYJKoZIhvcNAQELBQADggEBAExyrhqAOEuu0qpZhsEhSDyc D4ffqL6TLvb5Fz5iJ+ymYd8UzlqdJx4B5DOXrPCzu2cLaX0BITxBq7lhQQKUbBD0 2U3y6/2365leBsmkOuT5/LJ8l8tbg9PnReymX+UqxCaMA/crp17wxF3FHmFQaBjn vRsiFV771yyaCqD/WvUqgGy8rTRjqdWdHCS/dB7b50XAGuNzCbxB4S53kmji8zJD Iyin7VtDDOAfRvY6OM1GsGfAjpgBQ6KFfCHt8Qo7QuMO/pNERuwsOeNYd0vLdHZX woQm/5EmdFAezr7v6aMeiNkX+15+GCF2bbw1wUNd9BG6Oa8g0O0bnV0NhCG05zQ= -----END CERTIFICATE-----Generated at Wed Aug 19 16:44:44 2026 by rpki-client