$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CC5A2760062711F0B26BB948C4F9AE02.roa File: CC5A2760062711F0B26BB948C4F9AE02.roa (raw, json) Hash identifier: t50HuwON3X8PFsSEjDuiEW97BH854KlNMrVrZkiGBMA= Subject key identifier: 49:6A:19:9D:8E:11:5B:EF:71:C9:45:6C:4D:06:69:C0:1A:8C:AB:83 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0802 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CC5A2760062711F0B26BB948C4F9AE02.roa Signing time: Sun 01 Mar 2026 21:14:41 +0000 ROA not before: Thu 28 Aug 2025 14:51:02 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150862 IP address blocks: 157.10.42.0/23 maxlen: 23 157.10.44.0/23 maxlen: 23 157.15.108.0/23 maxlen: 23 157.15.110.0/23 maxlen: 23 160.22.106.0/23 maxlen: 23 160.30.20.0/23 maxlen: 23 160.30.156.0/23 maxlen: 23 160.30.192.0/23 maxlen: 23 160.30.200.0/23 maxlen: 23 160.187.122.0/23 maxlen: 23 160.187.226.0/23 maxlen: 23 160.187.228.0/23 maxlen: 23 160.187.246.0/23 maxlen: 23 160.191.54.0/23 maxlen: 23 160.191.138.0/23 maxlen: 23 160.191.174.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2050 (0x802) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:02 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a4ac41-fb06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:2f:57:ad:6d:4e:88:6f:30:4d:24:cd:01:88: eb:1d:13:77:ac:75:d5:8e:d6:c4:c0:5a:ce:2f:ab: 68:29:c7:7d:78:62:34:97:a1:dc:aa:75:d4:69:42: 5d:e1:64:a5:48:49:f2:9e:56:7e:eb:af:79:2b:ab: 06:ce:5e:2f:8e:a5:e6:43:4b:df:77:e3:4a:83:c9: d2:f8:4b:73:d3:69:5c:d2:9c:58:a6:70:1a:e8:72: 5a:e4:80:6a:05:4e:8b:d3:82:0b:14:dd:08:46:06: 8e:24:1d:33:ee:67:87:fc:48:77:4e:21:61:a8:80: 09:51:58:a6:97:56:15:3c:82:23:29:8a:ca:3e:d5: 1a:1f:9b:42:a8:f4:55:ca:27:e9:b1:bc:de:f0:1c: 1a:b2:ff:51:45:2e:75:e5:18:02:33:e7:1f:17:0b: 8e:1c:d5:a5:12:d0:36:62:77:bb:73:af:19:4f:48: c4:0e:39:ca:4b:5b:39:54:88:50:37:6f:3c:19:6b: 80:07:96:8c:85:52:72:20:3e:42:fe:ea:83:80:62: fc:63:09:ce:e5:14:93:2a:2b:74:c1:89:14:44:e3: 0b:93:77:55:b1:cb:d8:a8:f5:8f:4e:18:e7:b1:79: bd:a7:90:b9:58:47:e9:f1:43:c1:82:6d:20:69:1a: ca:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:6A:19:9D:8E:11:5B:EF:71:C9:45:6C:4D:06:69:C0:1A:8C:AB:83 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CC5A2760062711F0B26BB948C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.10.42.0-157.10.45.255 157.15.108.0/22 160.22.106.0/23 160.30.20.0/23 160.30.156.0/23 160.30.192.0/23 160.30.200.0/23 160.187.122.0/23 160.187.226.0-160.187.229.255 160.187.246.0/23 160.191.54.0/23 160.191.138.0/23 160.191.174.0/23 Signature Algorithm: sha256WithRSAEncryption b5:c9:93:1a:86:6a:9b:fe:5e:b9:de:86:6b:1b:19:d3:0c:ea: 40:77:c9:2c:d1:bb:e6:76:76:ad:44:50:06:54:46:76:68:46: 40:21:dd:db:f4:db:47:ab:79:77:49:3a:79:5d:d9:26:b7:40: b2:5d:9b:2a:06:dc:54:13:91:60:f2:38:9e:8f:63:88:11:28: f4:73:19:ee:ac:b7:91:3f:2a:94:07:6f:4d:d9:2f:92:26:bc: 2c:58:f6:44:c6:cc:81:f7:ec:eb:53:2b:aa:b3:4b:1d:61:10: e6:c3:56:dd:25:dc:87:22:4a:b5:3f:b7:0d:1c:7a:94:c6:3e: 4e:c5:c9:46:9b:94:0f:94:ab:54:31:dc:3b:ed:94:cb:1e:37: 7f:03:09:bb:66:8d:6d:5e:f9:4c:04:b0:67:15:d6:d5:06:8d: 89:e7:b3:7f:42:c6:fc:44:4f:8c:d5:e9:04:de:0e:fd:18:f2: 25:ae:8e:05:3b:d1:9e:dd:7c:3b:cd:fb:6c:d2:dd:c5:89:64: 9b:27:d5:59:14:e7:94:97:6c:f2:b4:44:20:85:cb:2e:6d:ef: 02:49:70:6f:42:ad:d6:bd:5b:d0:4b:e3:63:c6:c6:72:8d:b7: 7d:26:0e:a4:8e:c6:6d:3e:15:96:2f:9b:1f:da:15:0c:5e:5c: 4a:24:44:a7 -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICCAIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTAyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YWM0MS1mYjA2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4i9XrW1OiG8wTSTNAYjrHRN3rHXVjtbEwFrOL6toKcd9eGI0l6HcqnXUaUJd 4WSlSEnynlZ+6695K6sGzl4vjqXmQ0vfd+NKg8nS+Etz02lc0pxYpnAa6HJa5IBq BU6L04ILFN0IRgaOJB0z7meH/Eh3TiFhqIAJUViml1YVPIIjKYrKPtUaH5tCqPRV yifpsbze8Bwasv9RRS515RgCM+cfFwuOHNWlEtA2Yne7c68ZT0jEDjnKS1s5VIhQ N288GWuAB5aMhVJyID5C/uqDgGL8YwnO5RSTKit0wYkUROMLk3dVscvYqPWPThjn sXm9p5C5WEfp8UPBgm0gaRrKUQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFElqGZ2O EVvvcclFbE0GacAajKuDMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQ0M1QTI3NjAw NjI3MTFGMEIyNkJCOTQ4QzRGOUFFMDIucm9hMHcGCCsGAQUFBwEHAQH/BGgwZjBk BAIAATBeMAwDBAGdCioDBAGdCiwDBAKdD2wDBAGgFmoDBAGgHhQDBAGgHpwDBAGg HsADBAGgHsgDBAGgu3owDAMEAaC74gMEAaC75AMEAaC79gMEAaC/NgMEAaC/igME AaC/rjANBgkqhkiG9w0BAQsFAAOCAQEAtcmTGoZqm/5eud6GaxsZ0wzqQHfJLNG7 5nZ2rURQBlRGdmhGQCHd2/TbR6t5d0k6eV3ZJrdAsl2bKgbcVBORYPI4no9jiBEo 9HMZ7qy3kT8qlAdvTdkvkia8LFj2RMbMgffs61MrqrNLHWEQ5sNW3SXchyJKtT+3 DRx6lMY+TsXJRpuUD5SrVDHcO+2Uyx43fwMJu2aNbV75TASwZxXW1QaNieezf0LG /ERPjNXpBN4O/RjyJa6OBTvRnt18O837bNLdxYlkmyfVWRTnlJds8rREIIXLLm3v Aklwb0Kt1r1b0EvjY8bGco23fSYOpI7GbT4Vli+bH9oVDF5cSiREpw== -----END CERTIFICATE-----Generated at Mon Mar 2 04:38:01 2026 by rpki-client