$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/333E8C3E6DE511F19EDFEF3F5BA30FBC.roa File: 333E8C3E6DE511F19EDFEF3F5BA30FBC.roa (raw, json) Hash identifier: Ue3cv5Sg9mqnsZPT5Yk4nejtqsmOyqU5EUN+qBTBPzo= Subject key identifier: D3:66:4C:74:F4:4E:86:7E:1D:F8:D0:E8:41:FB:C3:24:79:69:32:29 Certificate issuer: /CN=A91E1EC0/serialNumber=6E67C092CE88FFCFFEADC1DCA626DB672CA075E5 Certificate serial: 02 Authority key identifier: 6E:67:C0:92:CE:88:FF:CF:FE:AD:C1:DC:A6:26:DB:67:2C:A0:75:E5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bmfAks6I_8_-rcHcpibbZyygdeU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/333E8C3E6DE511F19EDFEF3F5BA30FBC.roa Signing time: Mon 22 Jun 2026 02:51:00 +0000 ROA not before: Mon 22 Jun 2026 02:51:00 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 136396 IP address blocks: 160.236.14.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.crl rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bmfAks6I_8_-rcHcpibbZyygdeU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 10:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E1EC0, serialNumber=6E67C092CE88FFCFFEADC1DCA626DB672CA075E5 Validity Not Before: Jun 22 02:51:00 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a38a314-ce3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:69:f0:5d:82:31:07:6a:0e:b9:d8:48:bb:f4: f6:01:51:39:85:51:eb:45:8c:ca:41:5d:24:89:8b: 36:77:e3:15:16:bc:81:05:6a:c8:2f:e5:01:2c:d0: 9b:af:a8:f6:fb:e0:53:02:e5:72:5a:b0:3d:cf:56: ba:75:fd:72:2b:bd:b3:88:b6:be:43:35:f8:39:3a: f1:e6:1b:b4:65:3a:ad:47:45:45:5d:b0:83:92:80: 33:8f:82:22:65:24:03:f3:13:b9:db:9f:f3:1a:55: de:95:18:08:4d:86:e6:f9:b6:6b:62:80:ad:bd:59: 18:81:3b:0a:ce:ab:b3:ba:0e:ed:ff:4f:ac:9d:47: e1:e9:5d:40:ca:ea:50:98:02:33:cc:80:92:30:f4: 71:8f:9a:92:99:64:e1:02:78:7b:16:0b:29:9b:b9: 02:c2:50:84:c0:b4:b6:c9:eb:34:39:23:de:e0:b0: ae:ee:29:41:05:89:f4:c7:5d:c1:12:b8:b1:eb:53: 57:87:03:97:fd:3a:4b:48:73:d8:ea:23:ed:d5:61: 36:be:3a:77:cd:c3:95:58:6e:9c:c2:e6:df:3d:0e: 3d:7f:a5:03:28:95:63:fb:a4:5e:2a:0e:27:fc:ff: fb:8d:e9:e2:b6:5f:f0:8a:77:28:de:41:bb:6c:97: 38:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:66:4C:74:F4:4E:86:7E:1D:F8:D0:E8:41:FB:C3:24:79:69:32:29 X509v3 Authority Key Identifier: keyid:6E:67:C0:92:CE:88:FF:CF:FE:AD:C1:DC:A6:26:DB:67:2C:A0:75:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/bmfAks6I_8_-rcHcpibbZyygdeU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bmfAks6I_8_-rcHcpibbZyygdeU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1EC0/E902CDC46DE411F1A62A903C5BA30FBC/333E8C3E6DE511F19EDFEF3F5BA30FBC.roa sbgp-ipAddrBlock: critical IPv4: 160.236.14.0/23 Signature Algorithm: sha256WithRSAEncryption a1:8d:96:58:b2:24:95:33:33:2f:c1:f3:c1:c7:1d:c0:50:f3: 59:fa:b7:4b:7a:0a:a7:fb:f5:9a:70:fa:55:1b:df:4a:6c:3a: e8:5f:76:4e:a7:33:71:8f:ee:93:19:a2:04:29:a2:22:64:ae: 1d:d9:f7:36:c1:dc:27:46:5b:c4:b8:ed:a0:d6:fc:fe:96:45: 3a:06:c8:f1:72:1d:3b:65:09:ab:90:92:8d:ad:54:ce:9e:24: 11:6d:bd:55:5b:c7:2f:c7:0f:94:97:ec:53:71:ee:3f:26:d7: d2:eb:94:ac:f6:0d:3c:0f:d9:13:23:54:c5:76:ed:b2:b8:5d: eb:08:48:53:64:3a:9a:fe:ef:28:8f:f4:a9:54:13:ca:c6:a4: 90:f2:a7:1b:a3:df:a0:4c:43:37:b5:69:e6:c1:5b:78:9c:a1: 97:9f:43:81:50:d7:07:16:9d:46:a7:ef:09:de:b4:ee:8e:0f: f6:bb:bb:62:8b:7a:10:fd:7b:ae:77:fb:f5:72:13:96:30:9a: 26:f0:8d:1e:02:94:0b:bb:73:fa:8a:b5:4c:d3:a6:ba:6d:d4: 5f:0b:73:8d:c5:2e:33:c8:3e:85:5e:58:b3:2a:5b:3b:e0:db: b7:f4:6d:78:0e:ce:b1:06:76:57:5a:cb:79:c6:7a:44:ad:de: f4:94:a1:34 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF MUVDMDExMC8GA1UEBRMoNkU2N0MwOTJDRTg4RkZDRkZFQURDMURDQTYyNkRCNjcy Q0EwNzVFNTAeFw0yNjA2MjIwMjUxMDBaFw0yNzA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTZhMzhhMzE0LWNlM2UwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwafBdgjEHag652Ei79PYBUTmFUetFjMpBXSSJizZ34xUWvIEFasgv5QEs0Juv qPb74FMC5XJasD3PVrp1/XIrvbOItr5DNfg5OvHmG7RlOq1HRUVdsIOSgDOPgiJl JAPzE7nbn/MaVd6VGAhNhub5tmtigK29WRiBOwrOq7O6Du3/T6ydR+HpXUDK6lCY AjPMgJIw9HGPmpKZZOECeHsWCymbuQLCUITAtLbJ6zQ5I97gsK7uKUEFifTHXcES uLHrU1eHA5f9OktIc9jqI+3VYTa+OnfNw5VYbpzC5t89Dj1/pQMolWP7pF4qDif8 //uN6eK2X/CKdyjeQbtslzjjAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQU02ZMdPRO hn4d+NDoQfvDJHlpMikwHwYDVR0jBBgwFoAUbmfAks6I/8/+rcHcpibbZyygdeUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUxRUMwL0U5MDJDREM0NkRF NDExRjFBNjJBOTAzQzVCQTMwRkJDL2JtZkFrczZJXzhfLXJjSGNwaWJiWnl5Z2Rl VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvYm1mQWtzNklfOF8tcmNIY3BpYmJaeXlnZGVVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF MUVDMC9FOTAyQ0RDNDZERTQxMUYxQTYyQTkwM0M1QkEzMEZCQy8zMzNFOEMzRTZE RTUxMUYxOUVERkVGM0Y1QkEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGg7A4wDQYJKoZIhvcNAQELBQADggEBAKGNlliyJJUzMy/B88HHHcBQ 81n6t0t6Cqf79Zpw+lUb30psOuhfdk6nM3GP7pMZogQpoiJkrh3Z9zbB3CdGW8S4 7aDW/P6WRToGyPFyHTtlCauQko2tVM6eJBFtvVVbxy/HD5SX7FNx7j8m19LrlKz2 DTwP2RMjVMV27bK4XesISFNkOpr+7yiP9KlUE8rGpJDypxuj36BMQze1aebBW3ic oZefQ4FQ1wcWnUan7wnetO6OD/a7u2KLehD9e653+/VyE5YwmibwjR4ClAu7c/qK tUzTprpt1F8Lc43FLjPIPoVeWLMqWzvg27f0bXgOzrEGdlday3nGekSt3vSUoTQ= -----END CERTIFICATE-----Generated at Fri Jul 10 23:38:26 2026 by rpki-client