$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/2C58A8288A3C11F18F5718FE3111F970.roa File: 2C58A8288A3C11F18F5718FE3111F970.roa (raw, json) Hash identifier: SONSYy4tIc7OLfGgQbiSXlMj9cIg5ZBgBiRgNLwC7Qs= Subject key identifier: 9F:BF:82:E8:C6:8F:67:BB:12:96:7A:E3:1C:F5:62:40:6D:2D:A3:39 Certificate issuer: /CN=A91BA3E7/serialNumber=16497C20862DB32C1F7BAD1C110CC6B280524575 Certificate serial: 03 Authority key identifier: 16:49:7C:20:86:2D:B3:2C:1F:7B:AD:1C:11:0C:C6:B2:80:52:45:75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/2C58A8288A3C11F18F5718FE3111F970.roa Signing time: Tue 28 Jul 2026 04:24:07 +0000 ROA not before: Tue 28 Jul 2026 04:24:07 +0000 ROA not after: Sun 31 Oct 2027 00:00:00 +0000 asID: 154740 IP address blocks: 160.236.56.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.crl rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 04 Aug 2026 04:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3 (0x3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BA3E7, serialNumber=16497C20862DB32C1F7BAD1C110CC6B280524575 Validity Not Before: Jul 28 04:24:07 2026 GMT Not After : Oct 31 00:00:00 2027 GMT Subject: CN=6a682ee7-156f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a0:a6:27:61:46:cb:4e:bd:0c:c6:e0:16:1c: 23:24:81:20:77:d7:a2:fd:98:fc:e1:ad:48:79:b9: 10:e5:fa:8d:c6:83:93:d3:d4:bb:6f:d0:c4:fb:24: 70:04:f0:1a:2b:d2:f5:32:f4:83:3c:25:76:d6:91: ab:bd:be:3b:41:b8:10:70:ed:b3:66:15:34:b4:ca: 81:e2:02:ff:84:ac:d0:9a:af:28:90:a5:a6:c4:54: f1:b9:1c:d5:f1:e8:6c:79:15:d9:7d:09:2e:c2:b7: 9d:bc:9b:5f:67:35:c9:69:1a:22:e6:9f:d3:65:2a: e1:6f:90:f6:7a:80:09:ad:11:c7:40:48:ce:2f:0b: 8c:4d:31:df:5d:4f:80:6d:f8:2b:4f:e7:28:de:6f: a6:67:cb:e0:86:a9:dd:53:fe:62:f2:a7:32:7a:f1: 24:16:d2:5b:a5:19:5b:10:af:ce:78:6b:55:cc:45: b8:3d:b2:e5:cf:54:f0:82:5b:f3:b9:35:c0:39:1c: d3:dc:ec:d4:82:8a:21:8f:29:d0:b3:7a:ee:94:de: 34:d6:3f:1f:f5:b0:da:40:24:ef:1e:1f:6a:55:48: b5:ba:9f:d0:b6:97:c0:6a:47:67:6a:0d:85:5f:75: 07:f3:c5:d1:a1:e6:af:ce:b1:82:e7:27:40:40:2d: 0a:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:BF:82:E8:C6:8F:67:BB:12:96:7A:E3:1C:F5:62:40:6D:2D:A3:39 X509v3 Authority Key Identifier: keyid:16:49:7C:20:86:2D:B3:2C:1F:7B:AD:1C:11:0C:C6:B2:80:52:45:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/Fkl8IIYtsywfe60cEQzGsoBSRXU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Fkl8IIYtsywfe60cEQzGsoBSRXU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA3E7/64776BEE8A1F11F19E4EC7A16811F970/2C58A8288A3C11F18F5718FE3111F970.roa sbgp-ipAddrBlock: critical IPv4: 160.236.56.0/23 Signature Algorithm: sha256WithRSAEncryption 67:80:5a:70:f7:9f:3c:3d:d8:b3:f4:2b:18:a0:fd:cd:55:c2: bb:4e:9d:d5:9c:6c:e9:b5:ad:bd:7a:63:81:c3:d1:cf:f1:a9: 61:cc:91:a2:89:43:12:7e:21:8a:7b:65:53:50:6d:41:f4:39: d6:0b:ae:b2:42:23:32:7c:42:c2:12:bd:06:12:82:43:ea:32: 69:e2:56:22:57:e5:80:33:37:2c:26:d6:97:25:8d:21:71:c1: b8:7a:26:5c:9d:61:33:7b:7c:cb:0a:25:d7:dc:a0:2b:c6:9d: 56:90:37:a5:12:05:50:85:1d:53:f8:6a:89:bc:02:57:08:d6: 41:fa:ae:ba:01:1d:f6:b1:d9:98:8e:58:ce:0e:d4:0c:61:06: 44:15:e5:27:67:26:a9:4c:87:60:35:67:2a:a2:75:7e:09:06: 0a:03:90:23:c0:4f:e7:d1:37:d5:dd:d6:8b:04:25:51:4b:11: 65:89:1d:e2:3c:01:73:9d:50:fa:50:00:67:75:0d:f2:8a:ff: 1e:75:ef:6e:01:76:82:f7:be:7d:d4:48:2b:e6:bf:8c:0b:71: 36:f3:e9:d6:b8:b2:a1:19:91:7f:73:1a:1a:41:ec:70:76:ad: fe:af:77:19:6d:c4:ea:1b:c8:fd:a5:4e:50:7b:13:b3:fc:f7: 4d:cb:9b:c0 -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBAzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QTNFNzExMC8GA1UEBRMoMTY0OTdDMjA4NjJEQjMyQzFGN0JBRDFDMTEwQ0M2QjI4 MDUyNDU3NTAeFw0yNjA3MjgwNDI0MDdaFw0yNzEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhNjgyZWU3LTE1NmYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCooKYnYUbLTr0MxuAWHCMkgSB316L9mPzhrUh5uRDl+o3Gg5PT1Ltv0MT7JHAE 8Bor0vUy9IM8JXbWkau9vjtBuBBw7bNmFTS0yoHiAv+ErNCaryiQpabEVPG5HNXx 6Gx5Fdl9CS7Ct528m19nNclpGiLmn9NlKuFvkPZ6gAmtEcdASM4vC4xNMd9dT4Bt +CtP5yjeb6Zny+CGqd1T/mLypzJ68SQW0lulGVsQr854a1XMRbg9suXPVPCCW/O5 NcA5HNPc7NSCiiGPKdCzeu6U3jTWPx/1sNpAJO8eH2pVSLW6n9C2l8BqR2dqDYVf dQfzxdGh5q/OsYLnJ0BALQqrAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUn7+C6MaP Z7sSlnrjHPViQG0tozkwHwYDVR0jBBgwFoAUFkl8IIYtsywfe60cEQzGsoBSRXUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJBM0U3LzY0Nzc2QkVFOEEx RjExRjE5RTRFQzdBMTY4MTFGOTcwL0ZrbDhJSVl0c3l3ZmU2MGNFUXpHc29CU1JY VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRmtsOElJWXRzeXdmZTYwY0VRekdzb0JTUlhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QTNFNy82NDc3NkJFRThBMUYxMUYxOUU0RUM3QTE2ODExRjk3MC8yQzU4QTgyODhB M0MxMUYxOEY1NzE4RkUzMTExRjk3MC5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBAGg7DgwDQYJKoZIhvcNAQELBQADggEBAGeAWnD3nzw92LP0Kxig/c1V wrtOndWcbOm1rb16Y4HD0c/xqWHMkaKJQxJ+IYp7ZVNQbUH0OdYLrrJCIzJ8QsIS vQYSgkPqMmniViJX5YAzNywm1pcljSFxwbh6JlydYTN7fMsKJdfcoCvGnVaQN6US BVCFHVP4aom8AlcI1kH6rroBHfax2ZiOWM4O1AxhBkQV5SdnJqlMh2A1ZyqidX4J BgoDkCPAT+fRN9Xd1osEJVFLEWWJHeI8AXOdUPpQAGd1DfKK/x51724BdoL3vn3U SCvmv4wLcTbz6da4sqEZkX9zGhpB7HB2rf6vdxltxOobyP2lTlB7E7P8903Lm8A= -----END CERTIFICATE-----Generated at Tue Jul 28 16:41:20 2026 by rpki-client