$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/1FC3B0DE1E6F11EFB392D937C4F9AE02.roa File: 1FC3B0DE1E6F11EFB392D937C4F9AE02.roa (raw, json) Hash identifier: bs1Xgw6z8UHVdG8cs/XzlMBqu7GicIxeKJC8ZxwnNXc= Subject key identifier: 58:78:47:09:A2:18:EF:E0:85:33:B4:47:88:B0:3A:0D:BA:56:3F:1E Certificate issuer: /CN=A91C31B7/serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Certificate serial: 019B Authority key identifier: 4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/1FC3B0DE1E6F11EFB392D937C4F9AE02.roa Signing time: Thu 09 Jul 2026 06:33:06 +0000 ROA not before: Thu 09 Jul 2026 06:33:06 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 152886 IP address blocks: 160.22.18.0/23 maxlen: 23 160.22.18.0/24 maxlen: 24 160.22.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:45:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 411 (0x19b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31B7, serialNumber=4C339CABFC80A5F419DF33DFB06885C1C3488B2D Validity Not Before: Jul 9 06:33:06 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4f40a2-068e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:dd:9d:d9:d8:5a:bb:a8:de:35:48:d0:77:79: 5a:a6:03:c4:dc:21:7b:a9:75:38:c1:92:e0:da:6d: 67:92:c8:9b:83:8a:90:9d:73:96:e1:fd:40:ac:64: 9e:bb:e4:ac:b3:51:2b:c3:72:44:ec:8a:4e:d1:c0: a7:6d:e8:bb:af:bd:65:96:b9:cc:df:95:82:d2:a0: 86:ec:67:1a:13:f2:c9:0d:28:d8:0e:37:85:e1:bc: 3b:52:c5:f9:d7:d0:a4:37:ec:f8:fc:6c:2d:73:de: 67:01:2d:e5:46:05:38:b5:74:78:48:5e:8f:0e:d4: b6:45:cd:65:f5:19:da:db:04:d3:7d:d4:61:13:b0: b3:cb:49:a2:14:69:2b:e0:fc:d5:56:73:9b:1d:33: 03:ff:fa:0d:71:ac:9f:d1:60:91:cb:c1:eb:ed:6f: 79:2b:2f:bf:ab:5f:15:66:04:a3:c4:c4:98:fd:d0: 90:ea:a2:11:0a:75:cc:81:d4:54:10:7a:8c:db:3b: a0:a1:65:4b:2e:7b:d0:98:ec:0f:a7:ab:86:40:d1: bf:52:63:d1:10:04:12:83:f8:bc:3e:59:6c:36:5c: 5f:d6:8e:bb:ab:63:05:28:de:3f:00:17:f4:7e:2c: 44:e2:bd:27:f1:35:83:52:52:7d:38:35:f9:7b:da: 74:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:78:47:09:A2:18:EF:E0:85:33:B4:47:88:B0:3A:0D:BA:56:3F:1E X509v3 Authority Key Identifier: keyid:4C:33:9C:AB:FC:80:A5:F4:19:DF:33:DF:B0:68:85:C1:C3:48:8B:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/TDOcq_yApfQZ3zPfsGiFwcNIiy0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TDOcq_yApfQZ3zPfsGiFwcNIiy0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31B7/F2A5732E1E6B11EFAC0E914EC4F9AE02/1FC3B0DE1E6F11EFB392D937C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.22.18.0/23 Signature Algorithm: sha256WithRSAEncryption 04:a1:6a:ef:a4:43:97:70:14:42:7b:2c:1a:69:03:b7:d5:e1: c9:c0:51:53:e1:1b:00:e4:04:9d:42:6a:89:80:fa:27:c8:8b: 63:ce:16:ef:d8:b0:f5:89:9e:79:a0:61:24:4a:9c:2e:27:04: c2:ec:27:9e:0a:d2:fa:f0:10:23:04:df:b7:de:dc:fc:78:90: 5c:6a:c9:5a:bd:3a:ed:35:cc:cf:4b:8e:36:22:25:70:c3:d9: 97:22:b4:e8:86:d3:b3:f5:9d:6f:c1:45:48:3e:2c:47:bc:8d: 5f:07:dd:9a:c4:a5:87:c9:e2:e4:73:21:26:e1:ff:1e:2f:1e: 8f:7f:d7:f8:b1:dd:bc:d2:d0:f8:52:5e:80:a6:ae:6f:7e:a3: 8a:9c:3d:1d:d3:0b:07:d6:65:e2:c5:8a:7f:64:cc:5c:31:89: 2f:80:23:a6:8e:fc:0b:6e:8f:70:30:92:d6:5a:55:dd:a7:ec: 94:f3:1a:af:4c:40:64:a2:1c:4d:4e:11:5c:33:33:7b:f9:9e: cb:32:fe:7a:f1:cb:22:fb:ec:23:c7:cf:63:8c:77:12:99:da: f5:eb:3f:d0:fb:63:a9:90:2f:d4:d6:1f:1a:44:01:f0:25:bd: 13:a8:7c:ea:57:c7:c8:4a:0e:68:07:96:a5:1a:9b:13:e2:76: f3:b8:7f:03 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQjcxMTAvBgNVBAUTKDRDMzM5Q0FCRkM4MEE1RjQxOURGMzNERkIwNjg4NUMx QzM0ODhCMkQwHhcNMjYwNzA5MDYzMzA2WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRmNDBhMi0wNjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArt2d2dhau6jeNUjQd3lapgPE3CF7qXU4wZLg2m1nksibg4qQnXOW4f1ArGSe u+Sss1Erw3JE7IpO0cCnbei7r71llrnM35WC0qCG7GcaE/LJDSjYDjeF4bw7UsX5 19CkN+z4/Gwtc95nAS3lRgU4tXR4SF6PDtS2Rc1l9Rna2wTTfdRhE7Czy0miFGkr 4PzVVnObHTMD//oNcayf0WCRy8Hr7W95Ky+/q18VZgSjxMSY/dCQ6qIRCnXMgdRU EHqM2zugoWVLLnvQmOwPp6uGQNG/UmPREAQSg/i8PllsNlxf1o67q2MFKN4/ABf0 fixE4r0n8TWDUlJ9ODX5e9p0ywIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFh4Rwmi GO/ghTO0R4iwOg26Vj8eMB8GA1UdIwQYMBaAFEwznKv8gKX0Gd8z37BohcHDSIst MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFCNy9GMkE1NzMyRTFF NkIxMUVGQUMwRTkxNEVDNEY5QUUwMi9URE9jcV95QXBmUVozelBmc0dpRndjTklp eTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1RET2NxX3lBcGZRWjN6UGZzR2lGd2NOSWl5MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMxQjcvRjJBNTczMkUxRTZCMTFFRkFDMEU5MTRFQzRGOUFFMDIvMUZDM0IwREUx RTZGMTFFRkIzOTJEOTM3QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBYSMA0GCSqGSIb3DQEBCwUAA4IBAQAEoWrvpEOXcBRCeywaaQO3 1eHJwFFT4RsA5ASdQmqJgPonyItjzhbv2LD1iZ55oGEkSpwuJwTC7CeeCtL68BAj BN+33tz8eJBcaslavTrtNczPS442IiVww9mXIrTohtOz9Z1vwUVIPixHvI1fB92a xKWHyeLkcyEm4f8eLx6Pf9f4sd280tD4Ul6Apq5vfqOKnD0d0wsH1mXixYp/ZMxc MYkvgCOmjvwLbo9wMJLWWlXdp+yU8xqvTEBkohxNThFcMzN7+Z7LMv568csi++wj x89jjHcSmdr16z/Q+2OpkC/U1h8aRAHwJb0TqHzqV8fISg5oB5alGpsT4nbzuH8D -----END CERTIFICATE-----Generated at Thu Jul 23 23:05:26 2026 by rpki-client