$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/97A6188EFEAC11F0AB4A61AF656F56BC.roa File: 97A6188EFEAC11F0AB4A61AF656F56BC.roa (raw, json) Hash identifier: yCEj6qPX9EqfGe8wQyMh/zdjEFh0bs/DoKx+c7+TATU= Subject key identifier: 5B:B8:70:8D:C3:04:C3:32:5E:0D:5C:9F:C9:AE:CD:37:7A:1B:2C:68 Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: 0118 Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/97A6188EFEAC11F0AB4A61AF656F56BC.roa Signing time: Sun 01 Mar 2026 15:22:53 +0000 ROA not before: Sat 31 Jan 2026 13:56:08 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 135353 IP address blocks: 160.191.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Jan 31 13:56:08 2026 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a459cd-1d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:36:f5:f3:f8:a0:b2:87:2f:5d:6a:ea:97:81: e0:f3:d4:67:fe:4e:3c:0c:e7:da:c9:fe:7e:02:16: 72:8a:d4:7a:08:2d:b5:ff:71:15:a9:9f:7d:59:05: 1c:8a:ab:f4:2f:ce:1e:f8:d5:22:c7:e7:70:77:93: 37:4b:b8:f7:f2:7e:a3:71:7b:82:6e:a0:e5:2d:a5: f0:ef:a7:29:a3:e7:0c:95:cd:f3:3d:d7:af:6d:bb: 93:f3:97:d5:b4:10:b9:c3:d5:54:4c:af:19:21:5a: 9f:e3:00:c1:ec:f2:57:a7:23:5a:25:7c:17:66:a4: 87:4a:09:ec:03:92:3b:58:d3:ea:64:5f:7c:b4:a8: cf:6a:bb:c9:f7:6e:43:07:84:33:af:da:91:b6:e5: c0:fa:43:b9:23:6d:ea:5e:ab:3b:62:0b:db:93:10: 32:1b:ff:c4:07:23:73:ba:f5:7a:47:0a:b3:4c:8c: 06:f2:dc:f9:aa:42:71:6f:96:7c:4f:02:23:a8:ff: 8c:9b:0f:b0:7e:a9:d8:b6:cf:3e:fc:1a:00:f2:74: d8:0f:dd:1b:c4:39:1a:ed:24:ee:b5:21:f2:c1:f6: 1a:33:5d:ac:24:2c:14:13:71:32:b1:6b:bf:a3:cb: e0:b8:a4:30:37:2f:f4:7e:14:9d:ee:ff:9a:22:43: aa:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:B8:70:8D:C3:04:C3:32:5E:0D:5C:9F:C9:AE:CD:37:7A:1B:2C:68 X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/97A6188EFEAC11F0AB4A61AF656F56BC.roa sbgp-ipAddrBlock: critical IPv4: 160.191.21.0/24 Signature Algorithm: sha256WithRSAEncryption 25:1c:bf:65:da:88:fd:69:ca:3a:87:08:b8:73:3a:d7:5f:f4: 55:a4:2f:01:f8:61:1d:51:1a:cf:7d:f7:64:72:47:5f:00:41: a9:ae:e8:8b:72:90:90:0c:d3:4a:a2:2d:71:1a:79:47:bf:34: ce:34:a0:85:01:f8:63:6e:29:79:58:91:33:a9:10:b3:c8:d3: 27:95:47:b0:e9:f3:09:bb:48:10:a4:15:bd:17:1e:df:34:8b: 5d:37:32:a2:e0:94:65:0c:d7:07:d9:2e:f4:27:29:d5:56:99: d1:c6:a6:a4:d8:ca:d9:1c:eb:cd:90:59:19:f0:6e:8a:91:5a: e6:25:a8:e7:d0:e9:61:ee:5d:72:de:01:45:b5:50:ee:b4:0e: 47:57:3b:8e:14:6a:c8:7b:61:db:70:68:0e:ee:19:61:23:f4: 1f:90:16:be:b9:51:c3:cc:6f:ce:3b:d9:5f:6a:5c:c3:37:e6: be:4a:5b:16:64:22:a1:db:c9:fe:74:4c:a8:5d:1d:2a:81:0f: e3:4a:16:93:2c:e7:84:a5:1a:ee:2b:36:2d:94:07:2e:41:d3: 58:6b:07:8a:b8:53:78:9b:7c:e7:c2:18:15:1b:80:71:35:24: 70:1d:d5:48:06:bc:df:4f:b9:66:51:1f:2e:f5:11:79:4c:7c: d1:3d:f2:7d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKEZEOUQ3RjY2MEYzQTEzMENBNDhCRUJCQTY2RTE2MkJE MzAzNEUzOEQwHhcNMjYwMTMxMTM1NjA4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0NTljZC0xZDE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtDb18/igsocvXWrql4Hg89Rn/k48DOfayf5+AhZyitR6CC21/3EVqZ99WQUc iqv0L84e+NUix+dwd5M3S7j38n6jcXuCbqDlLaXw76cpo+cMlc3zPdevbbuT85fV tBC5w9VUTK8ZIVqf4wDB7PJXpyNaJXwXZqSHSgnsA5I7WNPqZF98tKjParvJ925D B4Qzr9qRtuXA+kO5I23qXqs7YgvbkxAyG//EByNzuvV6RwqzTIwG8tz5qkJxb5Z8 TwIjqP+Mmw+wfqnYts8+/BoA8nTYD90bxDka7STutSHywfYaM12sJCwUE3EysWu/ o8vguKQwNy/0fhSd7v+aIkOqFwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFFu4cI3D BMMyXg1cn8muzTd6GyxoMB8GA1UdIwQYMBaAFP2df2YPOhMMpIvrumbhYr0wNOON MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS80RUZEMTVCNjhC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3eWtpLXU2WnVGaXZUQTA0 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjBDOUUvNEVGRDE1QjY4QkNBMTFFRkFCRkMxQTM5QzRGOUFFMDIvOTdBNjE4OEVG RUFDMTFGMEFCNEE2MUFGNjU2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoL8VMA0GCSqGSIb3DQEBCwUAA4IBAQAlHL9l2oj9aco6hwi4czrX X/RVpC8B+GEdURrPffdkckdfAEGpruiLcpCQDNNKoi1xGnlHvzTONKCFAfhjbil5 WJEzqRCzyNMnlUew6fMJu0gQpBW9Fx7fNItdNzKi4JRlDNcH2S70JynVVpnRxqak 2MrZHOvNkFkZ8G6KkVrmJajn0Olh7l1y3gFFtVDutA5HVzuOFGrIe2HbcGgO7hlh I/QfkBa+uVHDzG/OO9lfalzDN+a+SlsWZCKh28n+dEyoXR0qgQ/jShaTLOeEpRru KzYtlAcuQdNYaweKuFN4m3znwhgVG4BxNSRwHdVIBrzfT7lmUR8u9RF5THzRPfJ9 -----END CERTIFICATE-----Generated at Mon Mar 2 13:42:17 2026 by rpki-client