$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/1BBB25FC49CA11F1A95850E4A4833773.roa File: 1BBB25FC49CA11F1A95850E4A4833773.roa (raw, json) Hash identifier: Vek/532qK9nsnWVHXuKx/eDjZdW+7NvUZaOyvOfg5S4= Subject key identifier: 78:DB:DE:80:DD:18:9A:B7:A3:E9:A8:61:B1:A7:95:2E:D6:71:79:47 Certificate issuer: /CN=A91E3F3C/serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Certificate serial: 8C Authority key identifier: 09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/1BBB25FC49CA11F1A95850E4A4833773.roa Signing time: Thu 07 May 2026 04:06:22 +0000 ROA not before: Thu 07 May 2026 04:06:22 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 151660 IP address blocks: 157.85.240.0/20 maxlen: 24 160.222.152.0/21 maxlen: 22 160.222.154.0/23 maxlen: 23 160.222.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 20 May 2026 02:50:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 140 (0x8c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3F3C, serialNumber=09710B5B66749E339D124CDE6D66CE366ACCABB0 Validity Not Before: May 7 04:06:22 2026 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=69fc0fbe-9d5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:da:25:71:a7:10:6a:e3:36:4e:a9:97:1d:1d: 87:2f:f0:34:1d:bd:ee:a5:e7:e7:da:e5:ba:2e:2e: 3d:a8:35:4a:dd:83:a1:4c:54:a1:93:1d:11:87:69: fb:a9:df:ba:43:c0:a6:df:26:4f:5b:62:a9:81:11: 56:a3:e8:e1:32:fe:e2:62:30:ef:3c:a1:41:89:c8: a0:dd:23:97:cb:39:48:28:9f:6d:8f:b6:e4:74:b3: 33:b1:39:20:72:9f:06:83:02:2c:20:cf:f1:c4:11: 96:d4:a9:40:17:c1:02:58:0c:63:80:9e:ce:3e:38: 5d:a3:be:c0:32:e8:57:1c:fb:55:42:ec:e0:d2:af: 92:57:87:28:0d:6c:c3:28:84:1e:85:8e:44:b9:59: ee:4b:5a:84:c4:11:ea:a9:77:12:e1:54:bc:c1:77: 9d:4a:61:e5:bd:9f:b8:b3:13:c0:aa:01:16:6b:16: b0:26:7c:4c:2a:ea:b3:ee:1b:16:bb:ee:7b:03:ed: bb:ad:12:d0:82:56:6c:df:d3:36:01:3d:87:ea:7d: 26:cb:b6:03:a8:63:a8:a6:24:55:e9:73:f9:04:87: 3a:5e:77:bc:28:95:40:0c:e6:f0:f6:c0:83:0e:e8: 96:38:fa:a1:75:8b:ed:ab:fd:7f:4a:c0:d0:ab:cb: 39:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DB:DE:80:DD:18:9A:B7:A3:E9:A8:61:B1:A7:95:2E:D6:71:79:47 X509v3 Authority Key Identifier: keyid:09:71:0B:5B:66:74:9E:33:9D:12:4C:DE:6D:66:CE:36:6A:CC:AB:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/CXELW2Z0njOdEkzebWbONmrMq7A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CXELW2Z0njOdEkzebWbONmrMq7A.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3F3C/A0D49CC89E9E11F090FF0D4FC4F9AE02/1BBB25FC49CA11F1A95850E4A4833773.roa sbgp-ipAddrBlock: critical IPv4: 157.85.240.0/20 160.222.152.0/21 Signature Algorithm: sha256WithRSAEncryption 0b:2d:e8:17:21:65:a0:ec:a2:a6:45:ac:f4:ed:53:3d:05:88: 0e:12:14:0c:f1:67:a1:5e:18:a3:c8:c5:6e:f5:d5:27:eb:21: f4:9d:51:82:9f:f0:21:6b:3a:75:cc:d2:26:10:e7:6b:53:43: 33:04:f6:39:13:9f:48:82:2e:17:fd:0e:e9:a1:6f:b8:cc:30: d3:12:40:60:c3:d7:ca:62:0a:cd:a3:05:90:35:6a:c6:2a:9f: 11:6c:04:e3:d2:75:db:fd:d7:ee:66:ec:70:c8:39:a3:2c:59: f6:12:68:09:bd:88:4a:95:b8:80:b8:b8:3e:76:3f:d3:f7:e1: 50:10:62:a7:de:9e:99:4f:6e:1b:ed:24:81:3d:8e:a0:e4:0a: 7c:3a:c7:f1:19:0a:f2:1e:1c:f4:ab:70:a6:bf:b1:1e:a4:75: df:9b:82:b0:e4:be:ea:05:aa:e3:36:80:08:ba:5c:a1:94:29: 4d:6e:af:34:ff:ce:19:f8:d3:2a:85:06:35:1b:ca:c3:94:a1: 05:c1:0f:60:83:29:1d:92:22:9c:d5:72:1b:ae:47:25:0c:b8: 53:61:29:6d:c3:ff:6e:c3:e7:47:9b:0f:73:69:97:4a:20:2b: f0:05:2e:a9:40:0b:f9:c9:0c:80:67:13:ed:7a:24:aa:40:69: 87:88:f9:39 -----BEGIN CERTIFICATE----- MIIFQjCCBCqgAwIBAgICAIwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTNGM0MxMTAvBgNVBAUTKDA5NzEwQjVCNjY3NDlFMzM5RDEyNENERTZENjZDRTM2 NkFDQ0FCQjAwHhcNMjYwNTA3MDQwNjIyWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWZjMGZiZS05ZDVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAjtolcacQauM2TqmXHR2HL/A0Hb3upefn2uW6Li49qDVK3YOhTFShkx0Rh2n7 qd+6Q8Cm3yZPW2KpgRFWo+jhMv7iYjDvPKFBicig3SOXyzlIKJ9tj7bkdLMzsTkg cp8GgwIsIM/xxBGW1KlAF8ECWAxjgJ7OPjhdo77AMuhXHPtVQuzg0q+SV4coDWzD KIQehY5EuVnuS1qExBHqqXcS4VS8wXedSmHlvZ+4sxPAqgEWaxawJnxMKuqz7hsW u+57A+27rRLQglZs39M2AT2H6n0my7YDqGOopiRV6XP5BIc6Xne8KJVADObw9sCD DuiWOPqhdYvtq/1/SsDQq8s5/QIDAQABo4ICZjCCAmIwHQYDVR0OBBYEFHjb3oDd GJq3o+moYbGnlS7WcXlHMB8GA1UdIwQYMBaAFAlxC1tmdJ4znRJM3m1mzjZqzKuw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFM0YzQy9BMEQ0OUNDODlF OUUxMUYwOTBGRjBENEZDNEY5QUUwMi9DWEVMVzJaMG5qT2RFa3plYldiT05tck1x N0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0NYRUxXMlowbmpPZEVremViV2JPTm1yTXE3QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTNGM0MvQTBENDlDQzg5RTlFMTFGMDkwRkYwRDRGQzRGOUFFMDIvMUJCQjI1RkM0 OUNBMTFGMUE5NTg1MEU0QTQ4MzM3NzMucm9hMCUGCCsGAQUFBwEHAQH/BBYwFDAS BAIAATAMAwQEnVXwAwQDoN6YMA0GCSqGSIb3DQEBCwUAA4IBAQALLegXIWWg7KKm Raz07VM9BYgOEhQM8WehXhijyMVu9dUn6yH0nVGCn/Ahazp1zNImEOdrU0MzBPY5 E59Igi4X/Q7poW+4zDDTEkBgw9fKYgrNowWQNWrGKp8RbATj0nXb/dfuZuxwyDmj LFn2EmgJvYhKlbiAuLg+dj/T9+FQEGKn3p6ZT24b7SSBPY6g5Ap8OsfxGQryHhz0 q3Cmv7EepHXfm4Kw5L7qBarjNoAIulyhlClNbq80/84Z+NMqhQY1G8rDlKEFwQ9g gykdkiKc1XIbrkclDLhTYSltw/9uw+dHmw9zaZdKICvwBS6pQAv5yQyAZxPteiSq QGmHiPk5 -----END CERTIFICATE-----Generated at Wed May 13 06:56:21 2026 by rpki-client