$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CD86771A42A811F196221069B9833773.roa File: CD86771A42A811F196221069B9833773.roa (raw, json) Hash identifier: ILJ+UAMggR7OV1WD7B014D5WF5DqFg7JD5mgD1JjlPQ= Subject key identifier: FC:EA:9E:DC:C8:E9:9B:41:E4:6F:01:85:2D:97:9C:EB:A2:02:09:C2 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 228B Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CD86771A42A811F196221069B9833773.roa Signing time: Tue 28 Apr 2026 02:20:20 +0000 ROA not before: Tue 28 Apr 2026 02:20:20 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135918 IP address blocks: 157.10.198.0/23 maxlen: 23 157.66.80.0/24 maxlen: 24 157.66.81.0/24 maxlen: 24 157.66.100.0/23 maxlen: 23 157.66.218.0/23 maxlen: 23 160.22.122.0/23 maxlen: 23 160.25.232.0/23 maxlen: 23 160.30.44.0/23 maxlen: 23 160.30.112.0/23 maxlen: 23 160.191.48.0/23 maxlen: 23 160.191.50.0/23 maxlen: 23 160.191.236.0/23 maxlen: 23 160.250.130.0/23 maxlen: 23 160.250.134.0/23 maxlen: 23 160.250.136.0/23 maxlen: 23 160.250.246.0/23 maxlen: 23 161.248.146.0/23 maxlen: 23 165.101.92.0/23 maxlen: 23 165.101.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 May 2026 14:34:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8843 (0x228b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Apr 28 02:20:20 2026 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69f01963-2d77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3a:05:84:ac:34:b8:e1:0e:15:4a:d5:f5:25: d8:2d:bf:66:bc:e3:c4:c7:0d:45:e4:61:82:97:2e: 46:49:62:15:33:29:b7:24:b8:89:77:7c:c6:0d:61: 0c:dd:dc:9f:95:29:7e:1c:55:4f:53:0f:ca:bc:b1: a9:08:21:9e:3c:47:9b:4f:fe:cf:0a:a9:35:ba:02: 46:0e:d7:ed:08:56:fb:fb:8d:84:87:ec:a2:95:6d: ed:86:9c:13:51:a9:01:cc:1b:1b:91:bf:b0:7a:64: e4:8b:c9:66:c0:c3:65:31:26:dc:0b:a3:02:81:fa: ea:12:e2:a3:d8:7e:0a:f8:72:0c:57:eb:75:66:ba: 58:19:2e:0a:71:d1:af:9a:5d:04:cb:8f:79:41:bb: b6:92:9b:08:21:81:50:c7:75:b5:c6:cb:ff:d0:b3: 8c:90:d1:b4:3c:76:f7:eb:f5:80:d4:98:52:4d:60: ed:0a:87:03:fd:d3:cb:b5:33:a7:e9:72:32:ea:a4: db:13:d8:2c:29:ac:91:5b:a2:e0:47:c1:32:ca:67: 8f:e7:27:f7:8d:f2:ee:4d:73:71:ba:5e:1c:2d:21: 70:6c:9c:c7:57:b4:9c:da:9c:39:37:f6:2e:2c:e9: 66:9b:67:91:88:12:bc:72:46:64:b0:f3:aa:ab:40: f2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:EA:9E:DC:C8:E9:9B:41:E4:6F:01:85:2D:97:9C:EB:A2:02:09:C2 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CD86771A42A811F196221069B9833773.roa sbgp-ipAddrBlock: critical IPv4: 157.10.198.0/23 157.66.80.0/23 157.66.100.0/23 157.66.218.0/23 160.22.122.0/23 160.25.232.0/23 160.30.44.0/23 160.30.112.0/23 160.191.48.0/22 160.191.236.0/23 160.250.130.0/23 160.250.134.0-160.250.137.255 160.250.246.0/23 161.248.146.0/23 165.101.92.0/23 165.101.252.0/23 Signature Algorithm: sha256WithRSAEncryption 12:f7:33:d7:63:cb:8d:12:d1:41:ca:38:2a:3e:3b:f0:f0:89: 1b:a5:b4:97:a4:d5:7f:3d:21:9d:58:cf:83:dd:8c:43:5c:f3: ef:d5:f8:ac:0c:b5:7b:87:a5:ee:43:98:25:84:78:8a:4d:37: ca:90:40:c3:5e:f9:aa:13:7d:be:e9:89:ce:5a:00:46:57:db: 45:36:57:bd:8d:49:e9:52:4d:26:55:7a:67:62:cd:83:7d:e7: 80:20:77:f7:b2:9d:ea:0a:73:da:3b:82:22:7d:0f:91:ff:6b: 3d:19:06:1f:41:d9:23:51:88:9e:f0:3b:eb:20:c7:25:8a:81: 38:6f:6a:73:ae:22:10:58:6d:fe:90:fe:db:21:84:6b:d1:e5: 61:74:c1:bf:f4:2d:05:0b:7c:2a:3d:da:ad:ee:43:89:33:68: 03:ce:1e:df:56:10:94:45:d9:ff:c2:db:fd:e8:1c:21:4c:7a: 88:c0:dc:82:49:eb:73:c5:76:c3:2a:b6:b9:8d:b2:91:78:a4: 8f:80:20:2a:7c:43:3a:b5:fb:c1:c3:1a:a6:10:69:f6:dd:fd: 81:46:bf:25:66:87:11:3c:d8:b2:fd:3e:df:8d:c2:d6:58:ff: 4c:cb:3b:1c:6a:b9:6a:6c:fe:8d:aa:2e:1e:52:6a:28:fe:58: 12:12:84:b7 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICIoswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjYwNDI4MDIyMDIwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWYwMTk2My0yZDc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmzoFhKw0uOEOFUrV9SXYLb9mvOPExw1F5GGCly5GSWIVMym3JLiJd3zGDWEM 3dyflSl+HFVPUw/KvLGpCCGePEebT/7PCqk1ugJGDtftCFb7+42Eh+yilW3thpwT UakBzBsbkb+wemTki8lmwMNlMSbcC6MCgfrqEuKj2H4K+HIMV+t1ZrpYGS4KcdGv ml0Ey495Qbu2kpsIIYFQx3W1xsv/0LOMkNG0PHb36/WA1JhSTWDtCocD/dPLtTOn 6XIy6qTbE9gsKayRW6LgR8EyymeP5yf3jfLuTXNxul4cLSFwbJzHV7Sc2pw5N/Yu LOlmm2eRiBK8ckZksPOqq0DyJQIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFPzqntzI 6ZtB5G8BhS2XnOuiAgnCMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQ0Q4Njc3MUE0 MkE4MTFGMTk2MjIxMDY5Qjk4MzM3NzMucm9hMIGBBggrBgEFBQcBBwEB/wRyMHAw bgQCAAEwaAMEAZ0KxgMEAZ1CUAMEAZ1CZAMEAZ1C2gMEAaAWegMEAaAZ6AMEAaAe LAMEAaAecAMEAqC/MAMEAaC/7AMEAaD6gjAMAwQBoPqGAwQBoPqIAwQBoPr2AwQB ofiSAwQBpWVcAwQBpWX8MA0GCSqGSIb3DQEBCwUAA4IBAQAS9zPXY8uNEtFByjgq Pjvw8IkbpbSXpNV/PSGdWM+D3YxDXPPv1fisDLV7h6XuQ5glhHiKTTfKkEDDXvmq E32+6YnOWgBGV9tFNle9jUnpUk0mVXpnYs2DfeeAIHf3sp3qCnPaO4IifQ+R/2s9 GQYfQdkjUYie8DvrIMclioE4b2pzriIQWG3+kP7bIYRr0eVhdMG/9C0FC3wqPdqt 7kOJM2gDzh7fVhCURdn/wtv96BwhTHqIwNyCSetzxXbDKra5jbKReKSPgCAqfEM6 tfvBwxqmEGn23f2BRr8lZocRPNiy/T7fjcLWWP9MyzscarlqbP6Nqi4eUmoo/lgS EoS3 -----END CERTIFICATE-----Generated at Wed May 13 06:56:48 2026 by rpki-client