$ rpki-client -vvvf rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/CD1FB5C2643611EFA2C41948C4F9AE02.roa File: CD1FB5C2643611EFA2C41948C4F9AE02.roa (raw, json) Hash identifier: sMWGchxra7/DWgw1YIgXD0LPRRRgNyFgeG8FrV0UKbM= Subject key identifier: 1D:98:76:3E:10:42:BB:B3:52:F4:2F:79:2F:9E:E0:F9:49:EF:3D:78 Certificate issuer: /CN=A91850AD/serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E Certificate serial: 01AC Authority key identifier: 0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/CD1FB5C2643611EFA2C41948C4F9AE02.roa Signing time: Tue 03 Nov 2026 05:51:38 +0000 ROA not before: Tue 03 Nov 2026 05:51:38 +0000 ROA not after: Mon 01 Mar 2027 00:00:00 +0000 asID: 139058 IP address blocks: 160.30.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Nov 2026 04:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 428 (0x1ac) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD, serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E Validity Not Before: Nov 3 05:51:38 2026 GMT Not After : Mar 1 00:00:00 2027 GMT Subject: CN=6ae9766a-a29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:7f:01:f5:39:fb:27:bb:86:29:a0:ab:2b: c5:40:31:7a:3e:b3:14:43:cc:99:1b:91:ab:a3:02: 54:27:f3:64:db:16:68:8d:f7:1c:78:ae:d8:dd:b3: 10:95:98:15:35:1e:6d:8f:c5:63:39:1b:2c:83:58: 94:2b:d8:c0:b4:f2:03:13:db:c4:f5:7a:20:40:ce: 75:b8:fd:1a:a7:39:41:51:f2:01:b9:62:bc:e4:41: ee:00:df:46:9f:e3:fe:0f:79:50:24:25:de:ce:b7: 34:b6:af:bf:84:4b:0f:47:f5:bc:41:ec:fc:2f:03: a9:5f:01:aa:ff:8b:ff:9a:5c:d9:8c:6f:42:dd:fa: 79:36:6c:86:b5:fc:49:a9:e4:89:54:44:1b:cf:45: 55:91:70:dd:6c:6e:87:e8:93:5d:b3:1f:20:02:c7: 34:c9:94:ab:16:64:51:2c:8f:00:22:08:ed:0f:e7: 61:61:03:81:8a:e7:63:6a:68:fe:4d:3d:c8:48:7b: 7f:4c:e7:b4:10:3f:02:ee:f6:2f:46:6e:a0:68:d0: f4:78:77:9c:44:9c:37:7a:ed:33:d1:2e:ef:07:34: a0:8b:d2:9a:cb:4b:c4:84:31:63:5b:33:eb:80:2a: 4e:62:bb:92:41:70:47:3e:0b:e8:a7:9e:7b:26:65: 91:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:98:76:3E:10:42:BB:B3:52:F4:2F:79:2F:9E:E0:F9:49:EF:3D:78 X509v3 Authority Key Identifier: keyid:0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/CD1FB5C2643611EFA2C41948C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.30.186.0/23 Signature Algorithm: sha256WithRSAEncryption 7a:3d:e4:aa:dd:b9:51:cf:6d:69:b9:cb:d2:1d:d0:9c:ab:da: f2:f1:f7:d8:34:71:4c:91:e1:ee:07:cd:a2:63:f7:57:b8:03: 2c:2d:71:14:55:d7:1e:6e:28:74:73:c0:ec:18:0c:c9:d3:66: 71:fc:41:84:0f:82:7e:b8:f1:36:f1:0b:95:b0:36:7c:6e:cd: 91:16:13:43:9d:90:98:55:93:39:53:00:30:43:cf:c0:77:06: 72:6b:3a:b0:7b:ff:fc:44:53:72:da:4d:f8:4b:1e:19:85:54: 37:e7:a1:33:27:37:fc:5f:c9:b9:43:84:4a:c5:ad:e0:27:dd: 95:4c:72:16:b9:07:cd:af:67:b1:f4:fb:4d:77:46:f8:aa:a4: 22:88:78:8c:35:df:d8:5e:92:24:39:db:e4:07:f5:ef:00:b2: 52:cc:8b:4f:af:c4:86:4d:d1:68:38:79:d1:1a:6b:5e:c0:d3: 32:16:9e:a8:62:49:0a:06:ac:64:32:a2:88:79:e0:8f:22:8d: f5:d7:f9:ef:ec:39:ca:48:d5:10:f2:3b:ba:9a:18:f7:9b:5d: 12:6b:fe:94:28:59:c8:bd:df:6e:e7:5c:e0:db:cf:b5:9a:35: 43:b9:89:86:5b:2c:ea:13:d5:7e:ee:52:70:24:7f:9b:98:67: 7d:d0:c0:4a -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAawwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwQUQxMTAvBgNVBAUTKDBGNkI0NzIwQjBBMzU3MjJEODVGMzQ0NkVGRDQ3NDBC RDM0MTgzNEUwHhcNMjYxMTAzMDU1MTM4WhcNMjcwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWU5NzY2YS1hMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu6V/AfU5+ye7himgqyvFQDF6PrMUQ8yZG5GrowJUJ/Nk2xZojfcceK7Y3bMQ lZgVNR5tj8VjORssg1iUK9jAtPIDE9vE9XogQM51uP0apzlBUfIBuWK85EHuAN9G n+P+D3lQJCXezrc0tq+/hEsPR/W8Qez8LwOpXwGq/4v/mlzZjG9C3fp5NmyGtfxJ qeSJVEQbz0VVkXDdbG6H6JNdsx8gAsc0yZSrFmRRLI8AIgjtD+dhYQOBiudjamj+ TT3ISHt/TOe0ED8C7vYvRm6gaND0eHecRJw3eu0z0S7vBzSgi9Kay0vEhDFjWzPr gCpOYruSQXBHPgvop557JmWR6wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFB2Ydj4Q QruzUvQveS+e4PlJ7z14MB8GA1UdIwQYMBaAFA9rRyCwo1ci2F80Ru/UdAvTQYNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82MEVCRTFBQzY0 MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9EMnRISUxDalZ5TFlYelJHNzlSMEM5TkJn MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0QydEhJTENqVnlMWVh6Ukc3OVIwQzlOQmcwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUwQUQvNjBFQkUxQUM2NDM0MTFFRjg0MkZDNjIwQzRGOUFFMDIvQ0QxRkI1QzI2 NDM2MTFFRkEyQzQxOTQ4QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoB66MA0GCSqGSIb3DQEBCwUAA4IBAQB6PeSq3blRz21pucvSHdCc q9ry8ffYNHFMkeHuB82iY/dXuAMsLXEUVdcebih0c8DsGAzJ02Zx/EGED4J+uPE2 8QuVsDZ8bs2RFhNDnZCYVZM5UwAwQ8/AdwZyazqwe//8RFNy2k34Sx4ZhVQ356Ez Jzf8X8m5Q4RKxa3gJ92VTHIWuQfNr2ex9PtNd0b4qqQiiHiMNd/YXpIkOdvkB/Xv ALJSzItPr8SGTdFoOHnRGmtewNMyFp6oYkkKBqxkMqKIeeCPIo311/nv7DnKSNUQ 8ju6mhj3m10Sa/6UKFnIvd9u51zg28+1mjVDuYmGWyzqE9V+7lJwJH+bmGd90MBK -----END CERTIFICATE-----Generated at Sun Nov 15 21:51:22 2026 by rpki-client