$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/29A5EF72783B11F18CDDD63D68A30FBC.roa File: 29A5EF72783B11F18CDDD63D68A30FBC.roa (raw, json) Hash identifier: ybtdLJt/2lB1NKc0oqy7/uP14/hx1uHMXiIUakfOVVo= Subject key identifier: 08:DF:3D:D4:CB:0A:F7:E7:14:F8:35:8B:45:0F:49:B6:D2:E9:A2:0A Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: AB Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/29A5EF72783B11F18CDDD63D68A30FBC.roa Signing time: Sun 05 Jul 2026 06:31:33 +0000 ROA not before: Sun 05 Jul 2026 06:31:33 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 151660 IP address blocks: 157.85.240.0/20 maxlen: 24 160.222.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 03:55:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: Jul 5 06:31:33 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=6a49fa45-d816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:75:82:97:7c:72:6f:82:54:4a:83:49:69: 05:c5:30:7a:8c:65:d7:26:07:7e:69:1b:a7:9c:f1: be:de:6a:da:0c:58:c8:07:57:7a:e3:fe:31:bd:12: 5d:8e:d9:a9:7d:81:0b:f5:34:b0:10:3b:38:07:56: ce:a2:c5:e5:c5:c9:09:f9:fd:5e:ac:76:a3:c6:8f: 93:a6:03:8a:60:b1:a8:5b:2a:95:0d:65:a0:6a:31: 42:1e:03:a3:0e:4f:b2:f7:3c:2e:9c:40:30:9b:66: 7c:d1:57:74:b7:c6:54:06:8b:fa:5b:83:64:8a:27: 18:7e:7e:4b:07:3f:36:44:60:6b:3b:db:da:10:86: 6b:f9:49:62:ee:8e:81:9c:94:84:6b:2f:1f:e1:57: f4:da:58:58:93:2e:11:83:ec:58:29:a7:8e:98:d7: f0:d7:1e:29:91:13:9c:4b:2f:56:60:9b:b3:40:9e: ea:86:78:f3:97:9c:0c:8c:b9:38:fe:65:23:d1:08: 00:72:92:aa:fd:12:ca:0f:03:e4:a3:7b:09:c0:cb: 7d:f0:85:66:c0:cb:fb:b7:8a:4b:9c:54:21:2c:c0: 51:32:90:28:21:c6:78:fa:f0:24:e5:d6:b9:e4:45: 5e:89:a6:ce:21:ef:82:00:15:ad:43:72:f8:c1:fd: 15:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:DF:3D:D4:CB:0A:F7:E7:14:F8:35:8B:45:0F:49:B6:D2:E9:A2:0A X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/29A5EF72783B11F18CDDD63D68A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 157.85.240.0/20 160.222.152.0/21 Signature Algorithm: sha256WithRSAEncryption 84:01:49:7a:be:50:d0:0e:88:a8:e7:0b:85:71:f1:1f:70:2e: 5f:d8:39:e3:e3:47:15:fc:2e:55:bd:d9:6d:2f:8b:f2:94:88: 07:e1:80:6f:ad:ed:af:ea:4a:7e:e4:cc:3d:b3:3c:48:3e:4b: 48:65:af:c8:0a:3e:ef:0c:e1:ca:38:3e:03:b9:a1:d1:47:21: 83:3e:48:7d:59:11:81:71:2e:ff:ce:e5:c9:a6:92:29:23:4a: 1f:30:fa:af:84:df:84:8a:62:66:de:90:fd:1c:c9:ce:33:c1: b2:4b:2a:20:56:e5:b9:65:64:c0:54:bb:80:4d:a1:69:76:6f: 13:ea:37:68:8e:ea:a8:62:cd:fe:b2:6c:3e:a9:fe:42:f1:fe: 97:d4:51:80:2c:fd:9f:da:1a:5f:73:c6:f2:ff:af:5c:0e:2e: fd:a0:67:33:bc:9d:f1:7c:aa:50:41:f8:14:c3:06:9b:50:a8: 55:92:7d:ce:35:d5:48:74:dd:87:bd:78:3e:e7:be:8c:68:ce: 49:18:a0:b5:77:69:e8:e2:90:d0:d0:cf:3f:25:45:80:52:04: 77:27:78:2f:33:06:f5:e7:10:e4:73:b1:a8:7c:38:bb:54:0a: 01:2d:0a:b3:43:45:8e:d1:22:6e:a4:3e:21:9f:1e:b3:9a:8d: c0:32:f7:14 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGM0MxMTAvBgNVBAUTKDA5NzEwQjVCNjY3NDlFMzM5RDEyNENERTZENjZDRTM2 NkFDQ0FCQjAwHhcNMjYwNzA1MDYzMTMzWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ5ZmE0NS1kODE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+t1gpd8cm+CVEqDSWkFxTB6jGXXJgd+aRunnPG+3mraDFjIB1d64/4xvRJd jtmpfYEL9TSwEDs4B1bOosXlxckJ+f1erHajxo+TpgOKYLGoWyqVDWWgajFCHgOj Dk+y9zwunEAwm2Z80Vd0t8ZUBov6W4NkiicYfn5LBz82RGBrO9vaEIZr+Uli7o6B nJSEay8f4Vf02lhYky4Rg+xYKaeOmNfw1x4pkROcSy9WYJuzQJ7qhnjzl5wMjLk4 /mUj0QgAcpKq/RLKDwPko3sJwMt98IVmwMv7t4pLnFQhLMBRMpAoIcZ4+vAk5da5 5EVeiabOIe+CABWtQ3L4wf0VCQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFAjfPdTL CvfnFPg1i0UPSbbS6aIKMB8GA1UdIwQYMBaAFAlxC1tmdJ4znRJM3m1mzjZqzKuw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0YzQy9BMEQ0OUNDODlF OUUxMUYwOTBGRjBENEZDNEY5QUUwMi9DWEVMVzJaMG5qT2RFa3plYldiT05tck1x N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNGM0MvQTBENDlDQzg5RTlFMTFGMDkwRkYwRDRGQzRGOUFFMDIvMjlBNUVGNzI3 ODNCMTFGMThDRERENjNENjhBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQEnVXwAwQDoN6YMA0GCSqGSIb3DQEBCwUAA4IBAQCEAUl6vlDQDoio 5wuFcfEfcC5f2Dnj40cV/C5VvdltL4vylIgH4YBvre2v6kp+5Mw9szxIPktIZa/I Cj7vDOHKOD4DuaHRRyGDPkh9WRGBcS7/zuXJppIpI0ofMPqvhN+EimJm3pD9HMnO M8GySyogVuW5ZWTAVLuATaFpdm8T6jdojuqoYs3+smw+qf5C8f6X1FGALP2f2hpf c8by/69cDi79oGczvJ3xfKpQQfgUwwabUKhVkn3ONdVIdN2HvXg+576MaM5JGKC1 d2no4pDQ0M8/JUWAUgR3J3gvMwb15xDkc7GofDi7VAoBLQqzQ0WO0SJupD4hnx6z mo3AMvcU -----END CERTIFICATE-----Generated at Sat Jul 18 04:29:07 2026 by rpki-client