$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/526AF16A3C7B11F1B0CB2EC97EEE528E.roa File: 526AF16A3C7B11F1B0CB2EC97EEE528E.roa (raw, json) Hash identifier: /a4QOETR5wBQx4lL0BfTBrG9hDYCg/Ec1yCZX3YiOH4= Subject key identifier: CE:ED:B8:93:1C:11:A9:B7:25:EC:75:BA:78:9C:C7:AE:46:90:14:34 Certificate issuer: /CN=A91D09BC/serialNumber=72924CBFE3637303F7B1376C8CF71ADB61FB6C39 Certificate serial: 02 Authority key identifier: 72:92:4C:BF:E3:63:73:03:F7:B1:37:6C:8C:F7:1A:DB:61:FB:6C:39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/526AF16A3C7B11F1B0CB2EC97EEE528E.roa Signing time: Mon 20 Apr 2026 05:39:39 +0000 ROA not before: Mon 20 Apr 2026 05:39:39 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 138026 IP address blocks: 160.250.36.0/23 maxlen: 23 160.250.36.0/24 maxlen: 24 160.250.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.crl rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D09BC, serialNumber=72924CBFE3637303F7B1376C8CF71ADB61FB6C39 Validity Not Before: Apr 20 05:39:39 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69e5bc1a-55c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:81:ae:f4:05:c4:ff:9b:ce:ce:c8:a8:7b:a3: f1:83:46:9d:78:01:61:c6:1e:28:55:e4:da:7e:34: cc:9a:ad:30:b9:d0:50:5f:8f:a3:fe:8a:62:64:cd: 70:95:0a:9e:c1:1b:b6:f9:c2:b5:f1:42:70:da:c5: 4f:e8:1c:6e:68:d0:12:03:13:28:d1:01:d1:51:ac: 1b:76:7e:fc:a9:07:7a:1f:01:62:11:db:a2:c6:5c: 68:bd:26:0b:12:f9:27:06:6b:d6:27:23:97:ea:fd: 27:b3:4e:91:08:c7:df:20:cd:bd:58:15:29:26:83: 78:63:e9:c3:33:78:61:03:44:40:81:bd:f1:a9:49: 8b:8f:3c:67:3b:66:eb:9c:67:3b:0c:03:99:ef:cc: 78:9d:09:5f:9c:82:c2:6a:a8:e6:d6:ed:56:90:1a: 74:31:e2:5f:f8:0e:2e:26:bd:35:12:89:f5:70:cc: 34:f8:2b:6f:f5:2a:ac:2a:7f:13:0e:bb:33:d0:c0: 6b:10:3c:ef:5f:4d:9c:c2:c4:14:b7:24:5c:18:6a: 41:ed:80:8e:2a:2d:59:bb:dc:8e:f1:15:c2:1f:9f: 90:46:9d:10:0c:e2:2f:5b:d8:93:53:97:d1:64:98: 60:8b:a8:06:30:2d:87:65:7d:b1:a8:26:29:c9:94: bb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:ED:B8:93:1C:11:A9:B7:25:EC:75:BA:78:9C:C7:AE:46:90:14:34 X509v3 Authority Key Identifier: keyid:72:92:4C:BF:E3:63:73:03:F7:B1:37:6C:8C:F7:1A:DB:61:FB:6C:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/cpJMv-NjcwP3sTdsjPca22H7bDk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/cpJMv-NjcwP3sTdsjPca22H7bDk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/526AF16A3C7B11F1B0CB2EC97EEE528E.roa sbgp-ipAddrBlock: critical IPv4: 160.250.36.0/23 Signature Algorithm: sha256WithRSAEncryption 32:cc:d6:4d:05:24:c7:7e:df:85:59:0d:39:d7:2e:0a:c6:03: c1:e1:d5:5f:af:a3:3e:fa:75:ee:1a:44:90:f2:85:04:46:61: 76:86:b6:15:e2:85:78:d8:96:54:f5:48:2b:ab:5d:2b:7e:39: 5d:9d:21:3b:e9:14:2f:87:21:98:71:8d:8a:94:77:cb:67:ab: 12:17:5a:6d:9d:3c:c1:d6:26:eb:32:51:3a:05:c9:dc:21:1b: 0e:04:30:5c:71:a2:99:d4:0c:b6:e2:db:77:00:c8:28:20:0a: ca:57:76:9b:ca:5c:94:01:6f:3d:2e:bd:56:3b:54:5a:eb:8c: 09:7c:48:53:6b:7f:d7:dd:54:46:d3:f2:d9:2e:68:3f:bb:2c: 98:46:9b:26:b9:27:56:2e:f0:ed:65:89:f4:af:7a:c5:39:27: 5f:0a:92:4b:f7:5f:70:2a:1c:fa:35:a6:bc:23:5b:32:6f:43: d8:df:91:3e:18:81:10:21:fb:37:00:14:3a:8c:c6:57:a3:13: 89:ed:da:f4:3b:3a:52:ae:b5:87:c8:d8:39:02:9c:a5:4c:c1: 31:84:79:c7:0b:46:43:97:cb:3b:e8:44:44:0b:79:e0:61:ac: b7:9f:3e:2b:52:c3:cd:04:18:99:e3:1d:6a:9a:8a:ca:77:8e: 48:4e:19:08 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE MDlCQzExMC8GA1UEBRMoNzI5MjRDQkZFMzYzNzMwM0Y3QjEzNzZDOENGNzFBREI2 MUZCNkMzOTAeFw0yNjA0MjAwNTM5MzlaFw0yNzAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY5ZTViYzFhLTU1YzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDoga70BcT/m87OyKh7o/GDRp14AWHGHihV5Np+NMyarTC50FBfj6P+imJkzXCV Cp7BG7b5wrXxQnDaxU/oHG5o0BIDEyjRAdFRrBt2fvypB3ofAWIR26LGXGi9JgsS +ScGa9YnI5fq/SezTpEIx98gzb1YFSkmg3hj6cMzeGEDRECBvfGpSYuPPGc7Zuuc ZzsMA5nvzHidCV+cgsJqqObW7VaQGnQx4l/4Di4mvTUSifVwzDT4K2/1KqwqfxMO uzPQwGsQPO9fTZzCxBS3JFwYakHtgI4qLVm73I7xFcIfn5BGnRAM4i9b2JNTl9Fk mGCLqAYwLYdlfbGoJinJlLv3AgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUzu24kxwR qbcl7HW6eJzHrkaQFDQwHwYDVR0jBBgwFoAUcpJMv+NjcwP3sTdsjPca22H7bDkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQwOUJDL0NCODgyRTdFQTcw NzExRUY5OUE1Nzc0MUM0RjlBRTAyL2NwSk12LU5qY3dQM3NUZHNqUGNhMjJIN2JE ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvY3BKTXYtTmpjd1Azc1Rkc2pQY2EyMkg3YkRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE MDlCQy9DQjg4MkU3RUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi81MjZBRjE2QTND N0IxMUYxQjBDQjJFQzk3RUVFNTI4RS5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGg+iQwDQYJKoZIhvcNAQELBQADggEBADLM1k0FJMd+34VZDTnXLgrG A8Hh1V+voz76de4aRJDyhQRGYXaGthXihXjYllT1SCurXSt+OV2dITvpFC+HIZhx jYqUd8tnqxIXWm2dPMHWJusyUToFydwhGw4EMFxxopnUDLbi23cAyCggCspXdpvK XJQBbz0uvVY7VFrrjAl8SFNrf9fdVEbT8tkuaD+7LJhGmya5J1Yu8O1lifSvesU5 J18Kkkv3X3AqHPo1prwjWzJvQ9jfkT4YgRAh+zcAFDqMxlejE4nt2vQ7OlKutYfI 2DkCnKVMwTGEeccLRkOXyzvoREQLeeBhrLefPitSw80EGJnjHWqaisp3jkhOGQg= -----END CERTIFICATE-----Generated at Wed May 13 02:34:14 2026 by rpki-client