$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/5C878D268DAB11F189A852AF4511F970.roa File: 5C878D268DAB11F189A852AF4511F970.roa (raw, json) Hash identifier: I/jr3tgpLyEseQdfcMV7kCau5f4YQ1NsnEo0xyEHwzc= Subject key identifier: 99:24:B1:A5:24:C3:45:1A:B1:B6:1F:8F:25:D4:D7:5F:97:EB:78:C1 Certificate issuer: /CN=A91FF21A/serialNumber=314403D0491F0D721FD877298BEDEEBAAEBE1178 Certificate serial: 17 Authority key identifier: 31:44:03:D0:49:1F:0D:72:1F:D8:77:29:8B:ED:EE:BA:AE:BE:11:78 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/5C878D268DAB11F189A852AF4511F970.roa Signing time: Sat 01 Aug 2026 13:17:36 +0000 ROA not before: Sat 01 Aug 2026 13:17:36 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 131471 IP address blocks: 160.236.188.0/24 maxlen: 24 160.236.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 08:59:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23 (0x17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF21A, serialNumber=314403D0491F0D721FD877298BEDEEBAAEBE1178 Validity Not Before: Aug 1 13:17:36 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a6df1f0-8c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:1c:62:ac:5d:e7:1d:58:0d:26:7e:b3:58:71: 21:a1:0b:be:66:23:ec:37:4d:ed:e7:a9:ae:e4:63: 0f:6c:f6:a3:f1:41:b4:f0:b1:15:a4:e6:2f:f3:23: af:2e:87:6c:45:76:b0:b8:2d:72:3e:ed:a0:b0:ac: 68:ed:3e:33:a0:8c:3d:74:f6:04:78:60:5b:f4:7a: 48:a4:38:aa:01:23:fc:21:79:37:57:81:b6:a0:24: d5:2f:32:90:ca:c0:d3:3d:ef:03:49:b6:cc:69:9e: d2:fa:5c:c3:a2:5c:a9:07:7b:91:f3:df:c1:2b:21: 79:6b:d5:26:9e:e5:3d:1b:1f:a7:3f:87:67:7d:48: eb:f1:f3:cb:57:bf:02:7f:de:bb:92:a0:41:1b:ff: b6:0d:26:c0:3e:c8:02:26:de:a8:56:86:2f:fd:16: b7:18:31:ce:e2:03:ee:a2:2a:75:32:c9:55:30:6b: 1b:0e:04:b2:cf:b3:d2:88:cf:d3:f4:b7:fd:53:c4: d7:fb:62:a1:f4:67:97:2b:2c:7b:16:7c:0b:59:9e: af:c6:9b:17:60:38:4b:bb:9e:c0:63:40:80:dc:cc: d4:e6:88:9d:13:77:ba:30:61:32:4f:7d:3a:11:09: f1:9f:4e:28:00:f2:ef:fa:ad:a2:03:a3:91:ae:03: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:24:B1:A5:24:C3:45:1A:B1:B6:1F:8F:25:D4:D7:5F:97:EB:78:C1 X509v3 Authority Key Identifier: keyid:31:44:03:D0:49:1F:0D:72:1F:D8:77:29:8B:ED:EE:BA:AE:BE:11:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MUQD0EkfDXIf2Hcpi-3uuq6-EXg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF21A/79B9D7888BFC11F19AB15D553D11F970/5C878D268DAB11F189A852AF4511F970.roa sbgp-ipAddrBlock: critical IPv4: 160.236.188.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:0b:4e:37:f9:7a:ba:e7:17:79:2c:86:53:d9:63:3e:a5:3c: 11:e8:bf:22:05:8a:73:15:d0:ff:02:a1:07:44:90:a6:86:4b: 08:53:a3:b1:b4:7a:3c:ae:14:73:85:78:4e:3a:54:97:65:49: cd:66:81:e5:1f:e2:1d:be:46:8e:a9:ac:22:e1:e4:44:6f:67: 67:32:0e:64:a8:d7:21:a5:cf:ae:9c:b9:a7:21:2b:e6:ee:cf: ea:fb:74:c1:2a:af:8d:b3:ae:25:ce:5d:2e:69:0f:cc:40:c7: c2:23:2b:9a:34:d3:42:98:e0:bb:8b:2f:90:8b:3d:de:ef:97: 06:99:fe:fa:2a:40:b3:c9:a2:4d:27:7b:5d:bb:43:56:44:44: 15:66:da:ea:91:1c:1a:54:d7:9a:d5:27:18:a9:77:8b:ad:9e: 16:f8:f1:9f:f2:0e:77:37:32:87:be:d7:0a:03:fa:ec:37:9b: 3e:25:71:b7:07:f2:62:8b:64:58:bc:c3:b9:a2:80:9e:6f:3d: a2:a0:94:21:77:e2:8e:5c:61:7d:9d:b7:82:08:9a:ee:20:c7: 47:a1:89:09:20:64:c8:5b:2a:90:9a:7d:e3:52:e1:83:b5:65: f5:48:a8:b5:63:59:1b:db:6b:88:d3:a8:5e:ce:18:94:07:b4: ac:4d:93:c5 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBFzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RjIxQTExMC8GA1UEBRMoMzE0NDAzRDA0OTFGMEQ3MjFGRDg3NzI5OEJFREVFQkFB RUJFMTE3ODAeFw0yNjA4MDExMzE3MzZaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNmRmMWYwLThjODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDjHGKsXecdWA0mfrNYcSGhC75mI+w3Te3nqa7kYw9s9qPxQbTwsRWk5i/zI68u h2xFdrC4LXI+7aCwrGjtPjOgjD109gR4YFv0ekikOKoBI/wheTdXgbagJNUvMpDK wNM97wNJtsxpntL6XMOiXKkHe5Hz38ErIXlr1Sae5T0bH6c/h2d9SOvx88tXvwJ/ 3ruSoEEb/7YNJsA+yAIm3qhWhi/9FrcYMc7iA+6iKnUyyVUwaxsOBLLPs9KIz9P0 t/1TxNf7YqH0Z5crLHsWfAtZnq/GmxdgOEu7nsBjQIDczNTmiJ0Td7owYTJPfToR CfGfTigA8u/6raIDo5GuA8yvAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUmSSxpSTD RRqxth+PJdTXX5freMEwHwYDVR0jBBgwFoAUMUQD0EkfDXIf2Hcpi+3uuq6+EXgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZGMjFBLzc5QjlENzg4OEJG QzExRjE5QUIxNUQ1NTNEMTFGOTcwL01VUUQwRWtmRFhJZjJIY3BpLTN1dXE2LUVY Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTVVRRDBFa2ZEWElmMkhjcGktM3V1cTYtRVhnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RjIxQS83OUI5RDc4ODhCRkMxMUYxOUFCMTVENTUzRDExRjk3MC81Qzg3OEQyNjhE QUIxMUYxODlBODUyQUY0NTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGg7LwwDQYJKoZIhvcNAQELBQADggEBAEoLTjf5errnF3kshlPZYz6l PBHovyIFinMV0P8CoQdEkKaGSwhTo7G0ejyuFHOFeE46VJdlSc1mgeUf4h2+Ro6p rCLh5ERvZ2cyDmSo1yGlz66cuachK+buz+r7dMEqr42zriXOXS5pD8xAx8IjK5o0 00KY4LuLL5CLPd7vlwaZ/voqQLPJok0ne127Q1ZERBVm2uqRHBpU15rVJxipd4ut nhb48Z/yDnc3Moe+1woD+uw3mz4lcbcH8mKLZFi8w7migJ5vPaKglCF34o5cYX2d t4IImu4gx0ehiQkgZMhbKpCafeNS4YO1ZfVIqLVjWRvba4jTqF7OGJQHtKxNk8U= -----END CERTIFICATE-----Generated at Wed Aug 26 20:25:58 2026 by rpki-client