$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/1DF1E5F8173A11F1A94BC0C1113D8C67.roa File: 1DF1E5F8173A11F1A94BC0C1113D8C67.roa (raw, json) Hash identifier: mTNYBWei7Yb19mWs93Y+owXIoG93MTxCeJaydHBQQxw= Subject key identifier: 03:9E:2B:F9:5A:BB:17:18:A2:B7:37:11:64:A5:E7:64:64:E9:A0:7A Certificate issuer: /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Certificate serial: 0187 Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/1DF1E5F8173A11F1A94BC0C1113D8C67.roa Signing time: Mon 09 Mar 2026 04:39:06 +0000 ROA not before: Mon 09 Mar 2026 04:39:06 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 136396 IP address blocks: 160.20.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD Validity Not Before: Mar 9 04:39:06 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=69ae4eea-f786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:20:43:c2:09:e4:f0:06:52:79:06:75:21:64: fd:89:50:4d:64:43:a5:ab:66:04:14:06:72:1d:ac: 7f:1f:d1:c8:70:69:1b:ac:13:94:09:ee:09:da:36: 02:d8:09:9f:aa:13:d6:fb:15:23:9c:d3:2a:e0:a1: 5e:0e:5d:6b:3f:94:d4:c1:43:a2:b0:36:6c:99:90: 5a:53:9f:fb:82:c4:53:e6:bf:ec:13:fd:3b:ba:60: 85:da:5b:98:3b:a0:86:9e:93:3b:ef:ae:af:ed:d0: 6f:1a:a3:14:a2:03:c6:bc:81:44:d8:b4:f8:0d:af: 12:97:96:45:f0:86:85:a1:57:9d:ab:c2:1e:ec:52: c7:71:58:45:63:19:bf:a8:c5:60:ec:64:40:2b:86: 8b:37:2f:3a:26:fe:0e:6e:a0:bb:42:0f:b2:91:aa: 60:eb:62:4a:6b:b9:3b:a7:34:a4:b3:20:cb:9d:e1: 04:35:80:e0:c4:6b:69:60:2d:fd:90:db:c4:3b:e2: f4:5e:b9:58:71:0e:0e:b1:49:d5:dc:7f:47:75:f0: 98:f6:62:c5:f2:38:fd:9b:dc:a1:f1:71:b9:26:88: 2b:ad:08:ea:b0:75:16:e5:36:3b:fb:65:28:a8:43: d6:f3:be:95:b3:76:bd:be:0f:55:e7:c7:ea:40:d9: 10:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:9E:2B:F9:5A:BB:17:18:A2:B7:37:11:64:A5:E7:64:64:E9:A0:7A X509v3 Authority Key Identifier: keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/1DF1E5F8173A11F1A94BC0C1113D8C67.roa sbgp-ipAddrBlock: critical IPv4: 160.20.121.0/24 Signature Algorithm: sha256WithRSAEncryption 61:24:1b:31:dc:ba:4e:f8:98:01:90:91:76:b4:12:08:f9:04: b8:cd:9c:5c:5e:b2:b5:73:4f:0f:fa:b0:b8:b2:45:e5:a8:80: 70:28:cc:18:65:64:3f:b9:b6:5d:0a:5c:05:ca:26:21:e4:96: 3b:e4:dd:ec:41:f8:90:d8:5f:bd:55:73:56:b1:9e:ef:e8:d0: 67:6e:a7:e8:7d:e1:c4:dd:86:16:ed:39:5b:b7:af:57:63:2b: 5f:3e:17:8d:51:af:81:66:73:89:e5:9d:db:8d:a4:ad:6b:4c: a5:ab:58:0f:cd:10:23:14:6f:1b:3d:07:d8:e1:a3:ed:e8:6b: d0:1b:ba:b8:a3:f2:1d:8e:08:a6:6b:37:a7:73:1b:29:1e:fa: 6d:ec:30:df:ca:21:59:b7:86:a9:b9:20:69:39:1e:d0:65:98: d2:80:c3:89:64:d3:30:54:93:3c:3c:96:19:87:9e:70:a0:b9: e2:f2:17:65:6a:96:a6:c3:06:09:16:a0:64:23:3c:51:4d:10: df:a8:fe:8a:bb:07:3a:98:f6:0e:af:6b:1b:9d:f4:cf:91:7c: e7:d1:71:89:3c:88:03:10:d8:60:25:a0:fa:82:de:6c:53:ce: 68:92:e1:f6:b7:fb:76:06:80:b5:8a:1a:20:3d:b6:b1:47:28: 4e:b9:f9:54 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjgwQzIxMTAvBgNVBAUTKDJBQkEyQUEzQ0IzRjk0NTgxQzVEM0Q5MUJBMzZCOEE5 RDhFOERFQUQwHhcNMjYwMzA5MDQzOTA2WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWFlNGVlYS1mNzg2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzCBDwgnk8AZSeQZ1IWT9iVBNZEOlq2YEFAZyHax/H9HIcGkbrBOUCe4J2jYC 2AmfqhPW+xUjnNMq4KFeDl1rP5TUwUOisDZsmZBaU5/7gsRT5r/sE/07umCF2luY O6CGnpM7766v7dBvGqMUogPGvIFE2LT4Da8Sl5ZF8IaFoVedq8Ie7FLHcVhFYxm/ qMVg7GRAK4aLNy86Jv4ObqC7Qg+ykapg62JKa7k7pzSksyDLneEENYDgxGtpYC39 kNvEO+L0XrlYcQ4OsUnV3H9HdfCY9mLF8jj9m9yh8XG5JogrrQjqsHUW5TY7+2Uo qEPW876Vs3a9vg9V58fqQNkQdQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAOeK/la uxcYorc3EWSl52Rk6aB6MB8GA1UdIwQYMBaAFCq6KqPLP5RYHF09kbo2uKnY6N6t MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCODBDMi85ODNFNjE1MDE3 MUExMUVGODY1Nzc1NEZDNEY5QUUwMi9Lcm9xbzhzX2xGZ2NYVDJSdWphNHFkam8z cTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tyb3FvOHNfbEZnY1hUMlJ1amE0cWRqbzNxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjgwQzIvOTgzRTYxNTAxNzFBMTFFRjg2NTc3NTRGQzRGOUFFMDIvMURGMUU1Rjgx NzNBMTFGMUE5NEJDMEMxMTEzRDhDNjcucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoBR5MA0GCSqGSIb3DQEBCwUAA4IBAQBhJBsx3LpO+JgBkJF2tBII +QS4zZxcXrK1c08P+rC4skXlqIBwKMwYZWQ/ubZdClwFyiYh5JY75N3sQfiQ2F+9 VXNWsZ7v6NBnbqfofeHE3YYW7Tlbt69XYytfPheNUa+BZnOJ5Z3bjaSta0ylq1gP zRAjFG8bPQfY4aPt6GvQG7q4o/IdjgimazencxspHvpt7DDfyiFZt4apuSBpOR7Q ZZjSgMOJZNMwVJM8PJYZh55woLni8hdlapamwwYJFqBkIzxRTRDfqP6Kuwc6mPYO r2sbnfTPkXzn0XGJPIgDENhgJaD6gt5sU85okuH2t/t2BoC1ihogPbaxRyhOuflU -----END CERTIFICATE-----Generated at Thu Mar 26 11:27:12 2026 by rpki-client