$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/AAFB89C25B8E11EF8774691FC4F9AE02.roa File: AAFB89C25B8E11EF8774691FC4F9AE02.roa (raw, json) Hash identifier: fAxM5G+ScVpjJdtCIIaFpI9PrYK9q5m6gCsbTrq9s7E= Subject key identifier: DC:8E:B3:8C:32:62:97:CD:E3:FF:63:5E:38:35:07:AC:BD:2F:3A:BB Certificate issuer: /CN=A91D84F7/serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC Certificate serial: 019A Authority key identifier: 2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/AAFB89C25B8E11EF8774691FC4F9AE02.roa Signing time: Thu 01 Oct 2026 05:53:46 +0000 ROA not before: Thu 01 Oct 2026 05:53:46 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136557 IP address blocks: 160.30.138.0/24 maxlen: 24 160.30.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 Oct 2026 05:02:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 410 (0x19a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D84F7, serialNumber=2CD1082EB47771D21DA900582F3EC87C69DD5CCC Validity Not Before: Oct 1 05:53:46 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6abdf569-c439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d7:cb:7f:61:c1:ab:a4:92:11:2e:d3:94:5a: b1:f1:bd:c5:15:e0:b8:ae:6d:2a:00:39:e2:d5:c6: b5:57:f4:e8:83:d9:08:75:49:41:2d:04:69:1f:98: 24:79:6a:39:4e:6b:6d:29:17:6a:c1:fd:4f:53:c9: 13:2b:89:49:58:f3:09:9b:d4:ab:7d:6b:da:eb:77: d0:a3:95:d5:6f:20:c4:58:87:73:50:57:13:f2:f3: 0f:c1:13:14:60:ea:ae:90:1d:a9:0f:4f:a5:2a:b6: 5d:38:5c:09:0f:46:bb:ec:2f:bc:ed:1d:61:46:92: 18:ba:49:20:1a:c7:32:d6:1c:48:58:8d:c3:eb:3a: 6b:d9:5f:f5:87:b3:8d:24:f6:3d:c7:bc:d4:68:ac: ee:e9:48:35:33:61:8d:04:69:38:66:16:2a:ce:32: df:d2:64:ca:fc:04:94:8c:36:21:6c:f3:11:90:fc: 09:f8:ff:f6:73:d6:ab:91:f1:f2:90:6d:d2:d2:62: e8:4b:58:40:b9:5d:91:1b:34:1e:ec:f7:80:ec:23: dc:93:77:41:a3:6d:77:cb:09:d2:a1:32:ad:9a:5a: c2:eb:b3:e3:3c:b6:ac:98:df:45:9b:3f:88:81:db: e8:ae:e8:09:d1:06:b7:42:6e:38:d8:42:c7:18:1a: a1:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:8E:B3:8C:32:62:97:CD:E3:FF:63:5E:38:35:07:AC:BD:2F:3A:BB X509v3 Authority Key Identifier: keyid:2C:D1:08:2E:B4:77:71:D2:1D:A9:00:58:2F:3E:C8:7C:69:DD:5C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/LNEILrR3cdIdqQBYLz7IfGndXMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LNEILrR3cdIdqQBYLz7IfGndXMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D84F7/79CAFB265B8E11EF9177E91EC4F9AE02/AAFB89C25B8E11EF8774691FC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.30.138.0/23 Signature Algorithm: sha256WithRSAEncryption 87:87:ec:89:52:17:25:5c:96:c0:85:96:83:e9:0b:48:ef:57: 70:34:7f:81:0f:41:58:c2:4d:aa:f7:a4:41:1b:ca:45:29:91: 23:c5:d5:cf:48:08:2c:9a:ee:52:7a:58:ac:26:99:e8:6e:3d: 68:94:3f:1d:1b:92:8e:59:af:8d:b7:42:1c:94:cd:a4:a5:13: f6:9b:87:9e:20:4b:36:15:34:77:1a:9e:74:10:80:31:c1:38: b2:f8:a7:12:23:5f:50:0c:4c:65:5d:3d:ef:8d:33:b7:49:95: a0:3b:2f:89:1a:8e:c5:7d:41:57:e5:e1:ef:fe:12:06:eb:c1: b6:1a:48:ad:d3:48:a9:23:f1:f1:db:c0:a6:46:39:e6:2b:b4: 72:42:0e:4e:8a:24:65:27:df:58:73:39:3e:4f:83:bb:d3:a0: 3d:1c:df:94:b3:a9:f2:73:6c:4f:0f:1f:e9:7a:dc:c0:a4:4f: 46:49:82:8f:f0:23:84:71:d8:c1:89:19:1e:0c:f4:d4:f6:58: 81:dc:a8:b6:d4:43:63:5b:5d:83:8a:12:0c:4c:04:6c:0c:27: 84:15:b1:7a:75:e0:37:7f:4c:58:9f:c0:19:b8:3d:b0:3b:ca: 6c:a7:7b:b6:8a:d4:50:7d:a5:c5:9b:c5:d5:5e:22:bd:53:43: e4:94:2b:15 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDg0RjcxMTAvBgNVBAUTKDJDRDEwODJFQjQ3NzcxRDIxREE5MDA1ODJGM0VDODdD NjlERDVDQ0MwHhcNMjYxMDAxMDU1MzQ2WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWJkZjU2OS1jNDM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNfLf2HBq6SSES7TlFqx8b3FFeC4rm0qADni1ca1V/Tog9kIdUlBLQRpH5gk eWo5TmttKRdqwf1PU8kTK4lJWPMJm9SrfWva63fQo5XVbyDEWIdzUFcT8vMPwRMU YOqukB2pD0+lKrZdOFwJD0a77C+87R1hRpIYukkgGscy1hxIWI3D6zpr2V/1h7ON JPY9x7zUaKzu6Ug1M2GNBGk4ZhYqzjLf0mTK/ASUjDYhbPMRkPwJ+P/2c9arkfHy kG3S0mLoS1hAuV2RGzQe7PeA7CPck3dBo213ywnSoTKtmlrC67PjPLasmN9Fmz+I gdvorugJ0Qa3Qm442ELHGBqhhQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFNyOs4wy YpfN4/9jXjg1B6y9Lzq7MB8GA1UdIwQYMBaAFCzRCC60d3HSHakAWC8+yHxp3VzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEODRGNy83OUNBRkIyNjVC OEUxMUVGOTE3N0U5MUVDNEY5QUUwMi9MTkVJTHJSM2NkSWRxUUJZTHo3SWZHbmRY TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xORUlMclIzY2RJZHFRQllMejdJZkduZFhNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDg0RjcvNzlDQUZCMjY1QjhFMTFFRjkxNzdFOTFFQzRGOUFFMDIvQUFGQjg5QzI1 QjhFMTFFRjg3NzQ2OTFGQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoB6KMA0GCSqGSIb3DQEBCwUAA4IBAQCHh+yJUhclXJbAhZaD6QtI 71dwNH+BD0FYwk2q96RBG8pFKZEjxdXPSAgsmu5SelisJpnobj1olD8dG5KOWa+N t0IclM2kpRP2m4eeIEs2FTR3Gp50EIAxwTiy+KcSI19QDExlXT3vjTO3SZWgOy+J Go7FfUFX5eHv/hIG68G2Gkit00ipI/Hx28CmRjnmK7RyQg5OiiRlJ99Yczk+T4O7 06A9HN+Us6nyc2xPDx/petzApE9GSYKP8COEcdjBiRkeDPTU9liB3Ki21ENjW12D ihIMTARsDCeEFbF6deA3f0xYn8AZuD2wO8psp3u2itRQfaXFm8XVXiK9U0PklCsV -----END CERTIFICATE-----Generated at Mon Oct 5 05:20:21 2026 by rpki-client