$ rpki-client -vvvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/689157BCB80F11F1899B58503511F970.roa File: 689157BCB80F11F1899B58503511F970.roa (raw, json) Hash identifier: t3F0ZjJaM76ZY6YPbYlkuHwjDD2JlScmB8f65QNKuy4= Subject key identifier: 0D:6B:04:2D:29:55:11:07:82:EC:C3:F8:3E:05:7B:DF:1C:F1:F8:4D Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 32F4 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/689157BCB80F11F1899B58503511F970.roa Signing time: Thu 24 Sep 2026 11:59:34 +0000 ROA not before: Thu 24 Sep 2026 11:59:34 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 6453 IP address blocks: 160.191.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 08:23:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13044 (0x32f4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Sep 24 11:59:34 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=6ab510a6-03fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:58:2c:4f:81:7c:91:2f:d3:49:36:08:00:93: 0d:c1:a7:9a:56:e2:1f:44:cb:2e:26:5f:51:a2:fa: 1c:65:49:16:7b:03:3e:79:1b:ad:9f:bd:c3:cb:b9: 35:97:85:6d:ff:6b:f3:77:4e:00:9d:75:50:fe:eb: 02:b2:9b:fe:3a:8c:fd:fb:e5:e9:b6:c3:82:f2:46: ca:7d:31:d6:b3:ee:01:48:c7:c6:76:7e:b9:80:19: 09:59:4f:8c:cb:af:58:28:00:b5:52:1a:22:6d:08: 66:6b:5f:2e:4c:dc:eb:bb:86:7a:57:39:22:db:fb: 1f:bd:39:9b:93:f0:6d:07:a1:a7:84:e9:63:92:1f: 89:a7:bb:b4:d4:8b:5d:e1:e0:f4:00:c4:19:78:94: 61:07:42:ce:45:cc:dc:ae:1c:23:e7:73:1f:b1:f1: fe:d4:54:f9:b8:09:81:cb:88:4e:6a:b9:aa:5e:9b: cf:4a:1f:51:80:a2:33:77:cd:6f:d9:a7:92:b2:5e: 8c:3c:9d:07:df:6a:68:21:84:a4:5f:6e:4a:78:ef: 98:49:69:0a:f5:88:e6:8f:99:66:ef:de:75:5b:12: 9e:6f:73:70:c2:61:8d:d0:ff:32:47:96:24:eb:4b: da:61:fa:16:64:12:13:dd:52:37:09:89:e2:fb:48: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:6B:04:2D:29:55:11:07:82:EC:C3:F8:3E:05:7B:DF:1C:F1:F8:4D X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/689157BCB80F11F1899B58503511F970.roa sbgp-ipAddrBlock: critical IPv4: 160.191.144.0/24 Signature Algorithm: sha256WithRSAEncryption 43:aa:a3:3e:26:7a:75:36:02:78:07:ba:92:63:76:51:e1:0e: cb:35:70:c4:d9:7c:1f:5a:4a:90:b9:ed:2c:67:7b:1f:08:cb: fc:f6:99:5b:e2:db:03:ba:f4:fb:74:96:b8:27:86:ee:a4:44: e6:d9:96:b8:f4:2c:a5:78:da:71:4a:8e:99:5e:c1:c7:b0:2b: 79:a4:b1:b2:75:b1:f6:db:9c:82:18:3d:de:a8:31:cb:be:8d: 6e:c8:af:bd:e6:10:54:b8:3a:b9:83:c2:28:66:bd:0c:93:11: 48:bf:b2:56:5e:2b:07:4d:13:14:8f:7f:d1:39:e2:50:27:b8: 89:db:91:80:1f:00:e1:7a:e6:93:36:10:fa:68:6b:6b:c3:45: 28:d9:82:2c:a1:94:60:88:45:cc:24:ef:42:8f:41:fe:83:07: 6c:f1:0e:5a:98:fd:53:bf:8e:b9:16:a6:d1:07:83:9e:06:fd: 54:69:c7:70:68:12:e1:8e:a2:b4:20:c4:46:e3:43:46:88:81: 50:d9:e4:97:6c:fb:78:f5:01:95:c1:40:8e:0a:3e:b6:c0:33: 99:e6:05:2c:3f:d9:4f:5a:dd:a0:2a:15:6d:a7:f8:9b:e6:e0: 59:f9:57:50:ef:7f:9c:9c:4b:d1:3e:13:8b:56:9c:eb:c4:b8: 55:38:93:1b -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICMvQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjYwOTI0MTE1OTM0WhcNMjcwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWI1MTBhNi0wM2ZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0VgsT4F8kS/TSTYIAJMNwaeaVuIfRMsuJl9RovocZUkWewM+eRutn73Dy7k1 l4Vt/2vzd04AnXVQ/usCspv+Ooz9++XptsOC8kbKfTHWs+4BSMfGdn65gBkJWU+M y69YKAC1UhoibQhma18uTNzru4Z6Vzki2/sfvTmbk/BtB6GnhOljkh+Jp7u01Itd 4eD0AMQZeJRhB0LORczcrhwj53MfsfH+1FT5uAmBy4hOarmqXpvPSh9RgKIzd81v 2aeSsl6MPJ0H32poIYSkX25KeO+YSWkK9Yjmj5lm7951WxKeb3NwwmGN0P8yR5Yk 60vaYfoWZBIT3VI3CYni+0hNOwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFA1rBC0p VREHguzD+D4Fe98c8fhNMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvNjg5MTU3QkNC ODBGMTFGMTg5OUI1ODUwMzUxMUY5NzAucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoL+QMA0GCSqGSIb3DQEBCwUAA4IBAQBDqqM+Jnp1NgJ4B7qSY3ZR 4Q7LNXDE2XwfWkqQue0sZ3sfCMv89plb4tsDuvT7dJa4J4bupETm2Za49CyleNpx So6ZXsHHsCt5pLGydbH225yCGD3eqDHLvo1uyK+95hBUuDq5g8IoZr0MkxFIv7JW XisHTRMUj3/ROeJQJ7iJ25GAHwDheuaTNhD6aGtrw0Uo2YIsoZRgiEXMJO9Cj0H+ gwds8Q5amP1Tv465FqbRB4OeBv1UacdwaBLhjqK0IMRG40NGiIFQ2eSXbPt49QGV wUCOCj62wDOZ5gUsP9lPWt2gKhVtp/ib5uBZ+VdQ73+cnEvRPhOLVpzrxLhVOJMb -----END CERTIFICATE-----Generated at Fri Oct 9 20:12:36 2026 by rpki-client