$ rpki-client -vvf rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/08F83F5486B011F190BA97A774A30FBC.roa File: 08F83F5486B011F190BA97A774A30FBC.roa (raw, json) Hash identifier: 5ZwP0uuzMGdPfnCK53ANk2dVgUQ0cGc0yUoY7rusTi0= Subject key identifier: 6B:63:43:4B:4D:65:A4:CA:1D:CA:F5:1A:64:E0:97:37:0D:5B:38:78 Certificate issuer: /CN=A914C9DC/serialNumber=225429B673BD55F9A1F96335258225AE283614FE Certificate serial: 02 Authority key identifier: 22:54:29:B6:73:BD:55:F9:A1:F9:63:35:25:82:25:AE:28:36:14:FE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/08F83F5486B011F190BA97A774A30FBC.roa Signing time: Thu 23 Jul 2026 16:03:25 +0000 ROA not before: Thu 23 Jul 2026 16:03:25 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 397468 IP address blocks: 160.191.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.crl rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 16:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914C9DC, serialNumber=225429B673BD55F9A1F96335258225AE283614FE Validity Not Before: Jul 23 16:03:25 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6a623b4d-8ad3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:08:f5:ac:9f:27:a9:07:83:cb:5e:b6:27:16: 7d:a4:d7:e4:07:b0:3e:a4:a7:d5:23:78:4f:62:0b: 83:db:46:f8:f7:d0:01:c1:36:dc:f3:3a:69:f8:db: 69:46:57:b2:08:a5:bd:b9:a0:0c:35:22:d7:29:ae: f2:57:9e:cc:c4:16:7d:80:3e:fe:da:7e:7c:90:0b: 2a:40:23:da:cb:38:1c:f0:4e:a3:27:88:ac:13:09: b9:b0:d1:6b:bd:7e:24:bf:04:23:bb:91:87:1d:c5: d6:c2:bb:6c:02:d6:d0:1d:62:c9:ee:57:cc:0d:d8: 4e:de:01:78:57:ed:76:da:a3:74:83:9f:10:fd:e7: 07:c2:4d:64:b7:fb:91:cc:c4:eb:fb:d7:7e:5c:15: f2:01:e6:64:98:32:f6:24:21:d6:9e:cf:34:49:ec: 9d:6f:5e:fb:d2:40:4d:e0:04:05:81:d0:76:4c:92: 74:d5:b3:d7:f3:0d:d2:dd:0e:65:8e:71:3b:33:53: 95:ca:c4:64:b0:e4:45:98:7c:b3:d7:f0:d7:46:a3: 4e:9f:55:88:a3:e5:94:fc:12:b5:67:3e:41:29:6a: 01:a8:2a:c2:02:95:82:21:a4:9e:ac:77:a6:16:58: c6:4a:d3:30:a5:e6:07:9f:2a:c0:d1:10:2b:68:b4: 52:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:63:43:4B:4D:65:A4:CA:1D:CA:F5:1A:64:E0:97:37:0D:5B:38:78 X509v3 Authority Key Identifier: keyid:22:54:29:B6:73:BD:55:F9:A1:F9:63:35:25:82:25:AE:28:36:14:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/IlQptnO9Vfmh-WM1JYIlrig2FP4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IlQptnO9Vfmh-WM1JYIlrig2FP4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C9DC/BDE4B1D286AF11F19B27C42B74A30FBC/08F83F5486B011F190BA97A774A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 160.191.42.0/24 Signature Algorithm: sha256WithRSAEncryption 1c:28:85:82:da:67:a1:22:46:e0:3e:97:88:20:08:aa:ed:11: e2:20:df:21:f0:bc:45:c0:9c:dc:7a:f7:4b:ec:ee:fc:40:93: 1f:cd:ac:8d:3f:fb:4c:3a:f3:76:1f:80:99:bc:da:30:7f:b6: d9:d4:15:bc:4a:5c:62:94:d8:e1:cc:28:33:d6:db:cd:8b:fd: c8:7f:ca:da:cc:1d:7f:74:7a:5e:b5:9c:de:6e:81:ef:ef:1c: 63:7c:b4:96:28:15:e7:d5:a8:fb:04:74:26:9b:1b:cc:72:66: e0:fd:f6:aa:a3:97:bf:1d:f5:41:97:d0:4c:83:30:f6:83:fe: a3:5e:01:58:b3:bf:0c:9e:7c:31:4a:6f:4a:70:e2:3d:e2:9d: 4e:f0:92:54:54:3a:78:13:70:4f:03:8e:52:b3:27:a0:ac:3b: 5a:5c:8f:83:fb:ec:5f:8c:0d:18:5b:7a:37:fc:d3:79:c8:ba: 96:e5:5b:8a:ee:5c:18:b4:46:08:c6:e3:22:56:e0:42:13:be: 50:62:b3:0e:70:2a:5a:ba:39:c6:75:7a:76:01:37:9d:ce:b2: af:a1:8b:ad:d6:11:fe:e1:30:dc:2e:54:68:a6:07:44:83:83: e2:8e:c5:8b:60:e6:3c:2d:50:f1:f3:91:fc:8d:b8:45:f4:96: 62:fe:d5:39 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 QzlEQzExMC8GA1UEBRMoMjI1NDI5QjY3M0JENTVGOUExRjk2MzM1MjU4MjI1QUUy ODM2MTRGRTAeFw0yNjA3MjMxNjAzMjVaFw0yNzAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNjIzYjRkLThhZDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrCPWsnyepB4PLXrYnFn2k1+QHsD6kp9UjeE9iC4PbRvj30AHBNtzzOmn422lG V7IIpb25oAw1ItcprvJXnszEFn2APv7afnyQCypAI9rLOBzwTqMniKwTCbmw0Wu9 fiS/BCO7kYcdxdbCu2wC1tAdYsnuV8wN2E7eAXhX7Xbao3SDnxD95wfCTWS3+5HM xOv7135cFfIB5mSYMvYkIdaezzRJ7J1vXvvSQE3gBAWB0HZMknTVs9fzDdLdDmWO cTszU5XKxGSw5EWYfLPX8NdGo06fVYij5ZT8ErVnPkEpagGoKsIClYIhpJ6sd6YW WMZK0zCl5gefKsDRECtotFIDAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUa2NDS01l pModyvUaZOCXNw1bOHgwHwYDVR0jBBgwFoAUIlQptnO9Vfmh+WM1JYIlrig2FP4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRDOURDL0JERTRCMUQyODZB RjExRjE5QjI3QzQyQjc0QTMwRkJDL0lsUXB0bk85VmZtaC1XTTFKWUlscmlnMkZQ NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvSWxRcHRuTzlWZm1oLVdNMUpZSWxyaWcyRlA0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 QzlEQy9CREU0QjFEMjg2QUYxMUYxOUIyN0M0MkI3NEEzMEZCQy8wOEY4M0Y1NDg2 QjAxMUYxOTBCQTk3QTc3NEEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACgvyowDQYJKoZIhvcNAQELBQADggEBABwohYLaZ6EiRuA+l4ggCKrt EeIg3yHwvEXAnNx690vs7vxAkx/NrI0/+0w683YfgJm82jB/ttnUFbxKXGKU2OHM KDPW282L/ch/ytrMHX90el61nN5uge/vHGN8tJYoFefVqPsEdCabG8xyZuD99qqj l78d9UGX0EyDMPaD/qNeAVizvwyefDFKb0pw4j3inU7wklRUOngTcE8DjlKzJ6Cs O1pcj4P77F+MDRhbejf803nIupblW4ruXBi0RgjG4yJW4EITvlBisw5wKlq6OcZ1 enYBN53Osq+hi63WEf7hMNwuVGimB0SDg+KOxYtg5jwtUPHzkfyNuEX0lmL+1Tk= -----END CERTIFICATE-----Generated at Fri Jul 24 07:30:08 2026 by rpki-client