$ rpki-client -vvvf rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/D2D7B762995611EFADA5D754C4F9AE02.roa File: D2D7B762995611EFADA5D754C4F9AE02.roa (raw, json) Hash identifier: X6EiEn5M65HSmmFeN5iF7WFFRfDBc3ykCiCnmX0frCI= Subject key identifier: 7B:8B:E1:49:08:71:E0:59:25:D6:FE:F0:D8:EB:10:9D:C3:2A:DC:C6 Certificate issuer: /CN=A91972DF/serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Certificate serial: 0185 Authority key identifier: 47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/D2D7B762995611EFADA5D754C4F9AE02.roa Signing time: Tue 15 Sep 2026 14:41:14 +0000 ROA not before: Tue 15 Sep 2026 14:41:14 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 136574 IP address blocks: 160.191.154.0/23 maxlen: 23 160.191.154.0/24 maxlen: 24 160.191.155.0/24 maxlen: 24 169.155.112.0/21 maxlen: 21 169.155.112.0/24 maxlen: 24 169.155.113.0/24 maxlen: 24 169.155.114.0/24 maxlen: 24 169.155.115.0/24 maxlen: 24 169.155.116.0/24 maxlen: 24 169.155.117.0/24 maxlen: 24 169.155.118.0/24 maxlen: 24 169.155.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 Oct 2026 04:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 389 (0x185) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91972DF, serialNumber=4720A2B78C78239926FDEE7344A3680DA0D8071D Validity Not Before: Sep 15 14:41:14 2026 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6aa9590a-b14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:b9:63:4c:58:27:41:82:81:63:cd:99:d2: 36:f4:91:24:ea:ae:9b:82:be:df:27:3e:f4:fe:ca: d2:96:d0:e0:a9:e5:92:d8:c5:b0:52:ff:cc:af:bf: db:fb:b2:07:ed:f5:d1:90:88:0a:e3:a0:30:db:4f: 79:77:02:40:3f:74:67:12:61:95:f6:bc:56:e3:0d: f9:29:25:ab:db:db:2c:b1:8c:25:8a:57:c2:a2:1b: eb:f2:28:b7:59:56:ab:95:a4:0c:7f:e5:50:97:38: bc:df:45:41:10:6d:b9:3e:f7:5d:fe:0a:ac:ba:82: 7e:28:e2:54:0c:86:de:eb:2e:09:0c:ba:f0:06:46: 83:ed:bb:83:29:14:fa:7c:3e:b9:c8:f0:44:fc:bf: e5:65:8d:6b:28:53:5c:c8:10:77:3c:7d:1b:de:47: 2a:32:64:dd:f9:9d:3d:45:54:2a:39:1b:8d:da:86: cb:a0:28:da:f0:a0:3f:df:a4:92:1e:99:48:ac:83: 32:8d:54:cd:2e:ed:9d:26:ba:5f:40:cc:2a:82:57: 81:1a:e6:40:64:82:24:e2:9d:0d:d9:79:82:5d:de: f0:4b:5d:72:d0:d6:80:72:9b:39:38:ec:f0:3a:87: b8:34:7c:3d:64:66:75:19:29:b2:b3:29:23:60:8f: ac:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:8B:E1:49:08:71:E0:59:25:D6:FE:F0:D8:EB:10:9D:C3:2A:DC:C6 X509v3 Authority Key Identifier: keyid:47:20:A2:B7:8C:78:23:99:26:FD:EE:73:44:A3:68:0D:A0:D8:07:1D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/RyCit4x4I5km_e5zRKNoDaDYBx0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/RyCit4x4I5km_e5zRKNoDaDYBx0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91972DF/27E3EDA4983311EF83189A57C4F9AE02/D2D7B762995611EFADA5D754C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.191.154.0/23 169.155.112.0/21 Signature Algorithm: sha256WithRSAEncryption 53:8f:eb:d2:de:c0:3d:58:eb:5f:59:19:b2:ee:79:19:de:86: 15:fa:ec:7c:a2:c6:7a:e9:7d:e8:cd:ff:b4:35:cb:e2:ff:1e: 6e:49:0f:4f:0c:67:5f:d1:d6:3c:bb:07:ad:96:d9:a6:7e:48: 51:a0:76:93:a2:08:3d:71:30:33:2d:31:1f:f5:eb:d0:e1:27: 2c:1e:03:8e:d5:a5:06:99:20:a9:7a:89:11:90:20:25:40:b8: be:cb:3e:8f:51:e5:72:b2:68:e1:41:69:56:5f:e7:6c:c9:08: b2:09:b3:c3:92:bf:1d:81:5f:e4:7e:c3:32:7a:16:b5:9d:a4: 6f:2a:ce:41:8b:b7:81:97:ed:b8:44:38:0f:28:46:bd:80:53: b0:d6:40:58:a4:48:d7:99:bb:20:fe:8a:93:97:63:de:32:63: 2b:b8:52:d9:36:60:67:91:90:e2:d3:5f:23:ce:6f:a2:16:f7: ec:3f:45:d8:59:91:fd:a2:23:ca:6d:3b:92:6e:91:a4:05:fb: 26:32:c6:c2:b4:53:b9:af:2f:d6:47:97:1d:fe:74:12:7e:dd: 75:76:5c:da:2b:00:4c:c6:da:20:a7:30:69:a5:39:35:9a:41: 00:6d:27:ff:a5:c8:b4:d7:2e:1d:42:b8:14:ce:bf:11:42:be: 14:4d:6e:27 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcyREYxMTAvBgNVBAUTKDQ3MjBBMkI3OEM3ODIzOTkyNkZERUU3MzQ0QTM2ODBE QTBEODA3MUQwHhcNMjYwOTE1MTQ0MTE0WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWE5NTkwYS1iMTRkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsAa5Y0xYJ0GCgWPNmdI29JEk6q6bgr7fJz70/srSltDgqeWS2MWwUv/Mr7/b +7IH7fXRkIgK46Aw2095dwJAP3RnEmGV9rxW4w35KSWr29sssYwlilfCohvr8ii3 WVarlaQMf+VQlzi830VBEG25Pvdd/gqsuoJ+KOJUDIbe6y4JDLrwBkaD7buDKRT6 fD65yPBE/L/lZY1rKFNcyBB3PH0b3kcqMmTd+Z09RVQqORuN2obLoCja8KA/36SS HplIrIMyjVTNLu2dJrpfQMwqgleBGuZAZIIk4p0N2XmCXd7wS11y0NaAcps5OOzw Ooe4NHw9ZGZ1GSmysykjYI+sdwIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHuL4UkI ceBZJdb+8NjrEJ3DKtzGMB8GA1UdIwQYMBaAFEcgoreMeCOZJv3uc0SjaA2g2Acd MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzJERi8yN0UzRURBNDk4 MzMxMUVGODMxODlBNTdDNEY5QUUwMi9SeUNpdDR4NEk1a21fZTV6UktOb0RhRFlC eDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1J5Q2l0NHg0STVrbV9lNXpSS05vRGFEWUJ4MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTcyREYvMjdFM0VEQTQ5ODMzMTFFRjgzMTg5QTU3QzRGOUFFMDIvRDJEN0I3NjI5 OTU2MTFFRkFEQTVENzU0QzRGOUFFMDIucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQBoL+aAwQDqZtwMA0GCSqGSIb3DQEBCwUAA4IBAQBTj+vS3sA9WOtf WRmy7nkZ3oYV+ux8osZ66X3ozf+0Ncvi/x5uSQ9PDGdf0dY8uwetltmmfkhRoHaT ogg9cTAzLTEf9evQ4ScsHgOO1aUGmSCpeokRkCAlQLi+yz6PUeVysmjhQWlWX+ds yQiyCbPDkr8dgV/kfsMyeha1naRvKs5Bi7eBl+24RDgPKEa9gFOw1kBYpEjXmbsg /oqTl2PeMmMruFLZNmBnkZDi018jzm+iFvfsP0XYWZH9oiPKbTuSbpGkBfsmMsbC tFO5ry/WR5cd/nQSft11dlzaKwBMxtogpzBppTk1mkEAbSf/pci01y4dQrgUzr8R Qr4UTW4n -----END CERTIFICATE-----Generated at Sat Sep 26 12:18:27 2026 by rpki-client