$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/3117605AFF2E11F099836B6D89EE528E.roa File: 3117605AFF2E11F099836B6D89EE528E.roa (raw, json) Hash identifier: GShmLLZyIO7t2gH3mgsqYTIagHhCJ4qJGdBs3grosz0= Subject key identifier: BC:1A:E5:06:EC:43:78:CD:A7:14:78:9B:2B:46:87:C2:5D:9F:3F:3D Certificate issuer: /CN=A91EBA46/serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Certificate serial: 012D Authority key identifier: FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/3117605AFF2E11F099836B6D89EE528E.roa Signing time: Sun 03 May 2026 06:38:31 +0000 ROA not before: Sun 03 May 2026 06:38:31 +0000 ROA not after: Wed 02 Sep 2026 00:00:00 +0000 asID: 153394 IP address blocks: 160.191.190.0/23 maxlen: 23 160.191.190.0/24 maxlen: 24 160.191.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 May 2026 05:53:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 301 (0x12d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EBA46, serialNumber=FD8C5F487742CB2051B2869729B466124CDF5E6B Validity Not Before: May 3 06:38:31 2026 GMT Not After : Sep 2 00:00:00 2026 GMT Subject: CN=69f6ed67-f8b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:2e:f7:11:ce:5a:e4:31:20:12:4b:96:62:81: c3:f9:8d:f4:97:69:f1:b9:c9:75:49:e9:04:3d:7d: 8c:f7:27:55:59:25:e2:ec:6f:f6:6a:19:f2:f4:b5: 1c:f3:53:bf:44:88:f2:46:24:53:6c:70:7e:e0:3a: 9e:cf:1e:52:c5:cb:85:df:2f:21:58:1d:db:42:1f: 3f:d4:a8:c9:43:38:c7:ef:fa:5b:29:0c:fb:e6:a1: 44:d1:7c:66:ae:4f:3d:2c:17:e4:35:b1:fa:a2:48: 6b:56:e1:ae:e1:0b:9c:28:de:40:a1:26:9a:d2:11: 90:ee:cb:f9:ee:ad:6d:a8:35:d8:af:db:8a:c2:31: 84:fe:6d:08:fe:d1:b2:20:e3:ae:bc:5b:e6:c1:e0: 2c:2c:af:06:5b:59:2b:29:97:77:f4:31:da:37:c5: 5b:dd:04:87:de:ec:58:53:0b:86:56:4a:f0:48:3e: dd:9e:40:49:25:9e:05:64:0a:63:5e:4d:7c:e1:fd: 57:92:02:3b:de:63:77:49:8b:31:2a:a4:34:28:23: f2:72:5e:e5:71:b2:81:05:a8:d6:1a:32:ac:a4:fb: 25:59:d5:6a:93:b3:e5:df:00:58:90:92:43:23:94: 4f:a4:54:67:1f:16:f6:91:ed:6d:4f:e5:73:21:c8: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:1A:E5:06:EC:43:78:CD:A7:14:78:9B:2B:46:87:C2:5D:9F:3F:3D X509v3 Authority Key Identifier: keyid:FD:8C:5F:48:77:42:CB:20:51:B2:86:97:29:B4:66:12:4C:DF:5E:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/_YxfSHdCyyBRsoaXKbRmEkzfXms.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_YxfSHdCyyBRsoaXKbRmEkzfXms.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA46/FF8AA24A9CF511EF8A6C8581C4F9AE02/3117605AFF2E11F099836B6D89EE528E.roa sbgp-ipAddrBlock: critical IPv4: 160.191.190.0/23 Signature Algorithm: sha256WithRSAEncryption 28:6f:59:89:50:c8:0a:4f:12:38:e3:cc:03:72:15:69:e9:cc: 00:08:c9:e3:78:46:b7:51:1c:38:8c:25:04:6b:ef:19:22:ae: f0:ad:8f:20:f5:eb:79:8d:fb:b5:16:ed:99:20:b6:f0:f9:70: fc:e6:ea:12:57:e9:71:60:70:b6:a0:83:1c:be:c4:1c:d1:12: 65:50:13:9e:73:bd:c1:32:60:1c:3f:69:21:e3:ab:2e:45:84: f8:8f:cc:62:7e:34:73:3b:85:a2:f5:2a:db:ce:14:2d:9d:f3: f4:e6:c3:0a:84:79:2b:cd:1f:1e:47:62:85:23:94:74:8c:14: 04:2e:ff:c8:1d:c0:2f:61:1e:29:a0:a8:1f:ee:93:63:a5:f7: ec:c2:a8:22:d9:62:5b:ad:46:b8:78:13:59:78:83:1e:89:d9: c6:7f:b1:26:cd:f9:63:28:02:b6:7d:aa:ea:be:aa:cb:67:a5: c1:67:8e:6c:1a:f3:69:55:92:18:bf:77:6b:a8:86:57:b6:e9: 43:56:93:4e:cd:55:15:ba:04:2d:5d:37:05:de:29:45:5e:42: 9c:d7:89:3f:9e:32:03:04:53:b8:8a:b3:a8:c3:10:1f:25:bb: 1e:db:95:69:b3:a6:c7:c4:c4:ff:86:15:dc:ca:18:47:62:6d: d3:6c:dd:eb -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAS0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUJBNDYxMTAvBgNVBAUTKEZEOEM1RjQ4Nzc0MkNCMjA1MUIyODY5NzI5QjQ2NjEy NENERjVFNkIwHhcNMjYwNTAzMDYzODMxWhcNMjYwOTAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWY2ZWQ2Ny1mOGIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtC73Ec5a5DEgEkuWYoHD+Y30l2nxucl1SekEPX2M9ydVWSXi7G/2ahny9LUc 81O/RIjyRiRTbHB+4Dqezx5SxcuF3y8hWB3bQh8/1KjJQzjH7/pbKQz75qFE0Xxm rk89LBfkNbH6okhrVuGu4QucKN5AoSaa0hGQ7sv57q1tqDXYr9uKwjGE/m0I/tGy IOOuvFvmweAsLK8GW1krKZd39DHaN8Vb3QSH3uxYUwuGVkrwSD7dnkBJJZ4FZApj Xk184f1XkgI73mN3SYsxKqQ0KCPycl7lcbKBBajWGjKspPslWdVqk7Pl3wBYkJJD I5RPpFRnHxb2ke1tT+VzIcgJEQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLwa5Qbs Q3jNpxR4mytGh8Jdnz89MB8GA1UdIwQYMBaAFP2MX0h3QssgUbKGlym0ZhJM315r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE0Ni9GRjhBQTI0QTlD RjUxMUVGOEE2Qzg1ODFDNEY5QUUwMi9fWXhmU0hkQ3l5QlJzb2FYS2JSbUVremZY bXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19ZeGZTSGRDeXlCUnNvYVhLYlJtRWt6Zlhtcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUJBNDYvRkY4QUEyNEE5Q0Y1MTFFRjhBNkM4NTgxQzRGOUFFMDIvMzExNzYwNUFG RjJFMTFGMDk5ODM2QjZEODlFRTUyOEUucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoL++MA0GCSqGSIb3DQEBCwUAA4IBAQAob1mJUMgKTxI448wDchVp 6cwACMnjeEa3URw4jCUEa+8ZIq7wrY8g9et5jfu1Fu2ZILbw+XD85uoSV+lxYHC2 oIMcvsQc0RJlUBOec73BMmAcP2kh46suRYT4j8xifjRzO4Wi9SrbzhQtnfP05sMK hHkrzR8eR2KFI5R0jBQELv/IHcAvYR4poKgf7pNjpffswqgi2WJbrUa4eBNZeIMe idnGf7EmzfljKAK2farqvqrLZ6XBZ45sGvNpVZIYv3drqIZXtulDVpNOzVUVugQt XTcF3ilFXkKc14k/njIDBFO4irOowxAfJbse25Vps6bHxMT/hhXcyhhHYm3TbN3r -----END CERTIFICATE-----Generated at Wed May 13 06:28:19 2026 by rpki-client