$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/29A5EF72783B11F18CDDD63D68A30FBC.roa File: 29A5EF72783B11F18CDDD63D68A30FBC.roa (raw, json) Hash identifier: Bz782XOyvTAwQda2ww2EV0V+MxOLZQTnXa160/ICqyY= Subject key identifier: 93:71:A3:4B:77:BC:84:9E:41:B6:31:DB:D7:D2:91:5A:AE:07:3F:57 Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: D9 Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/29A5EF72783B11F18CDDD63D68A30FBC.roa Signing time: Sun 27 Sep 2026 03:52:47 +0000 ROA not before: Sun 27 Sep 2026 03:52:47 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 151660 IP address blocks: 157.85.240.0/20 maxlen: 24 160.222.152.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 02:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 217 (0xd9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: Sep 27 03:52:47 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6ab8930f-799f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:65:b8:14:fe:91:36:0d:1b:d9:e8:ff:e6:6e: 9b:b3:34:a8:39:6f:b6:00:86:c8:49:29:dd:86:08: 3a:93:f4:30:07:f6:f1:47:b0:8d:87:b2:70:60:d2: d8:5c:5b:9f:32:e2:c1:e3:04:27:0d:4e:cb:ea:e1: 57:b6:ca:96:e3:0d:99:9e:4b:77:ac:eb:99:37:8b: 6b:7c:05:26:8f:12:51:fd:9a:14:d2:f8:30:a9:f2: 3a:c5:87:74:0b:da:84:3f:c2:f1:c7:b7:55:cc:09: 4e:b8:5a:4a:e2:b7:ec:e9:51:81:a1:35:1d:39:67: f8:e1:4c:da:9e:93:a9:ee:0d:3e:55:63:b0:77:c1: 4e:5a:9e:d8:ef:8d:34:93:e0:78:98:2b:73:46:98: aa:b4:e3:bd:a4:74:b7:d4:44:7e:ac:eb:f6:42:ca: 44:f4:b0:27:32:83:b6:5f:f2:cb:f8:a8:c9:d5:48: de:82:0f:7d:41:13:c7:6b:61:1b:78:30:5d:fe:d5: d1:84:25:36:a3:40:98:7e:62:2d:c1:5e:9f:7e:d4: 0b:29:08:b9:74:5d:f1:24:b9:3c:db:c5:b5:62:be: 90:22:b2:05:16:7e:14:e2:2d:94:14:7b:02:90:b3: e5:ab:47:c2:fc:75:f3:7a:00:a3:15:28:dc:8d:bb: f8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:71:A3:4B:77:BC:84:9E:41:B6:31:DB:D7:D2:91:5A:AE:07:3F:57 X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/29A5EF72783B11F18CDDD63D68A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 157.85.240.0/20 160.222.152.0/21 Signature Algorithm: sha256WithRSAEncryption 9b:51:d7:06:63:6d:07:28:45:97:2a:f8:c4:8b:5e:b4:0c:da: 8d:53:b6:73:06:2c:06:ef:4b:df:5a:bc:4e:60:44:a8:39:95: 01:58:a2:35:46:41:d5:e3:72:94:7c:63:8e:00:56:f9:76:55: 8f:9f:7f:e3:0e:9f:72:5e:7a:93:ed:76:05:32:ac:04:36:cf: 1c:1e:bb:bb:7e:ed:2a:f0:db:cb:df:0f:d6:16:e5:38:b4:ae: 8c:47:8d:90:db:4b:ab:c5:4a:c5:73:f1:2c:6c:07:79:d8:13: 88:f4:a8:5f:ec:23:42:4e:d0:22:e9:e6:98:56:98:1a:a4:12: 3b:21:57:6c:75:74:08:ce:84:c4:f6:38:55:6b:43:e7:7f:6f: 77:14:ca:3a:cf:9f:2b:11:75:61:79:9d:56:6a:74:c5:ae:93: 7b:d5:73:bf:16:d0:d0:61:6f:44:e3:2b:45:c0:34:aa:6e:ea: 34:ee:76:86:34:b7:3c:e3:c5:f5:92:1b:b7:e7:30:32:0a:93: 23:70:47:f1:78:15:ae:6b:4b:ea:cb:e9:fb:e9:23:61:ff:84: 33:75:b0:b4:69:af:dc:20:71:78:05:37:8a:c7:8b:55:7a:46: f3:e1:7c:8e:30:74:c2:7f:44:76:ea:09:0b:2d:ba:79:21:8c: 4b:9c:9f:d3 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICANkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGM0MxMTAvBgNVBAUTKDA5NzEwQjVCNjY3NDlFMzM5RDEyNENERTZENjZDRTM2 NkFDQ0FCQjAwHhcNMjYwOTI3MDM1MjQ3WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI4OTMwZi03OTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1WW4FP6RNg0b2ej/5m6bszSoOW+2AIbISSndhgg6k/QwB/bxR7CNh7JwYNLY XFufMuLB4wQnDU7L6uFXtsqW4w2Znkt3rOuZN4trfAUmjxJR/ZoU0vgwqfI6xYd0 C9qEP8Lxx7dVzAlOuFpK4rfs6VGBoTUdOWf44UzanpOp7g0+VWOwd8FOWp7Y7400 k+B4mCtzRpiqtOO9pHS31ER+rOv2QspE9LAnMoO2X/LL+KjJ1Ujegg99QRPHa2Eb eDBd/tXRhCU2o0CYfmItwV6fftQLKQi5dF3xJLk828W1Yr6QIrIFFn4U4i2UFHsC kLPlq0fC/HXzegCjFSjcjbv4sQIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFJNxo0t3 vISeQbYx29fSkVquBz9XMB8GA1UdIwQYMBaAFAlxC1tmdJ4znRJM3m1mzjZqzKuw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0YzQy9BMEQ0OUNDODlF OUUxMUYwOTBGRjBENEZDNEY5QUUwMi9DWEVMVzJaMG5qT2RFa3plYldiT05tck1x N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNGM0MvQTBENDlDQzg5RTlFMTFGMDkwRkYwRDRGQzRGOUFFMDIvMjlBNUVGNzI3 ODNCMTFGMThDRERENjNENjhBMzBGQkMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQEnVXwAwQDoN6YMA0GCSqGSIb3DQEBCwUAA4IBAQCbUdcGY20HKEWX KvjEi160DNqNU7ZzBiwG70vfWrxOYESoOZUBWKI1RkHV43KUfGOOAFb5dlWPn3/j Dp9yXnqT7XYFMqwENs8cHru7fu0q8NvL3w/WFuU4tK6MR42Q20urxUrFc/EsbAd5 2BOI9Khf7CNCTtAi6eaYVpgapBI7IVdsdXQIzoTE9jhVa0Pnf293FMo6z58rEXVh eZ1WanTFrpN71XO/FtDQYW9E4ytFwDSqbuo07naGNLc848X1khu35zAyCpMjcEfx eBWua0vqy+n76SNh/4QzdbC0aa/cIHF4BTeKx4tVekbz4XyOMHTCf0R26gkLLbp5 IYxLnJ/T -----END CERTIFICATE-----Generated at Tue Oct 6 19:33:28 2026 by rpki-client