$ rpki-client -vvvf rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/12E8FD5CBECC11F098CFE015C4F9AE02.roa File: 12E8FD5CBECC11F098CFE015C4F9AE02.roa (raw, json) Hash identifier: N+AjEat6kkgxUWydiRZM9AqAylRYPPRcAECxuvM7gb8= Subject key identifier: 12:69:5C:3E:C0:9D:DE:5C:10:61:DE:E5:76:56:61:F5:31:67:B9:51 Certificate issuer: /CN=A91DCAE8/serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Certificate serial: A7 Authority key identifier: 68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/12E8FD5CBECC11F098CFE015C4F9AE02.roa Signing time: Tue 08 Sep 2026 15:17:49 +0000 ROA not before: Tue 08 Sep 2026 15:17:49 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 38235 IP address blocks: 157.85.64.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:44:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DCAE8, serialNumber=684597E998A3A0C6987361B7C572043A816C1C52 Validity Not Before: Sep 8 15:17:49 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aa0271d-b2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:b7:09:bc:45:95:a7:16:64:29:3f:ca:6e:a1: 14:cc:61:3f:a3:bf:50:7e:13:14:96:bd:c8:16:d2: c8:e5:d0:d6:be:a9:81:78:c7:c0:21:43:fc:1a:a6: ab:8f:19:b4:96:88:c0:38:a4:ad:c8:2a:45:57:b8: fa:19:97:a8:c9:9a:59:54:20:63:67:1c:9b:75:f8: 2c:1d:95:ef:c3:40:82:ab:21:a3:6f:7c:20:7f:77: 7d:83:e2:cf:98:c7:0d:ef:2f:36:d5:08:77:06:72: c7:89:d1:5a:44:00:a0:ec:82:39:6a:12:72:68:f5: 20:c3:78:96:eb:be:aa:f2:cf:4a:e1:00:64:43:5c: f1:40:30:b7:2e:e5:32:af:b4:93:33:c4:93:4d:24: 29:00:25:82:f0:ea:cd:b3:bc:ff:7f:79:8d:61:6f: 29:d9:ab:d1:1a:fa:95:dd:7c:81:9b:aa:58:d3:17: df:f7:ff:8b:b2:5c:fc:55:bb:45:1f:2d:4e:8d:d4: 53:cf:e4:72:fa:1c:63:94:c3:63:38:74:e8:fe:74: 5f:e4:4b:7b:29:c7:27:8a:97:c3:fa:f6:06:7e:64: 16:4e:0c:97:78:62:90:fc:78:8e:27:5f:ac:77:2e: 18:0e:dd:9f:26:0c:ce:26:16:2d:64:a5:c8:f8:64: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:69:5C:3E:C0:9D:DE:5C:10:61:DE:E5:76:56:61:F5:31:67:B9:51 X509v3 Authority Key Identifier: keyid:68:45:97:E9:98:A3:A0:C6:98:73:61:B7:C5:72:04:3A:81:6C:1C:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/aEWX6ZijoMaYc2G3xXIEOoFsHFI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aEWX6ZijoMaYc2G3xXIEOoFsHFI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCAE8/3F7E2574BE0711F09FF04469C4F9AE02/12E8FD5CBECC11F098CFE015C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 157.85.64.0/21 Signature Algorithm: sha256WithRSAEncryption 71:14:03:9b:f1:99:ff:b3:93:96:47:3b:1b:30:dc:f5:46:f2: 77:61:88:4b:95:85:b2:97:7f:8a:3c:97:56:81:de:36:10:66: e8:45:d4:3a:6e:b0:e2:e9:55:12:e8:16:58:71:59:41:b5:95: 0e:7a:95:ca:fd:6c:81:dd:0b:be:af:9c:58:70:5f:76:4e:a6: 39:2b:75:63:70:c3:e4:c1:7b:08:c9:ba:3b:fa:ba:8e:00:fa: 4d:7f:9e:d1:02:af:4b:ec:d2:52:03:ad:59:a0:a1:1d:eb:6d: 0b:3c:a8:6d:c6:52:e5:11:ac:43:81:12:48:f0:b0:97:05:b2: fa:b5:3f:4a:e6:c6:c1:3d:37:7c:f5:15:74:5a:e9:9a:43:5f: 5e:e0:3d:75:1e:2b:3f:cc:27:86:9d:64:75:cd:e2:a1:7d:7f: 12:18:bf:32:78:d2:f9:4c:2e:03:63:27:e5:b0:86:24:b3:e9: 74:5e:e9:c6:97:23:6b:d1:e6:9b:cc:93:ac:e1:08:ae:e3:53: 08:cf:c6:c5:74:06:bf:5c:5e:8e:1a:e7:4d:23:09:74:4f:b3: 47:72:fe:9e:43:bc:de:df:f4:0d:53:20:35:8c:45:e2:b7:7b: 0a:d5:29:39:4b:a0:73:d6:fe:26:29:4b:b6:a1:52:47:b1:5f: 3f:3a:ad:82 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RENBRTgxMTAvBgNVBAUTKDY4NDU5N0U5OThBM0EwQzY5ODczNjFCN0M1NzIwNDNB ODE2QzFDNTIwHhcNMjYwOTA4MTUxNzQ5WhcNMjcxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02YWEwMjcxZC1iMmExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyLcJvEWVpxZkKT/KbqEUzGE/o79QfhMUlr3IFtLI5dDWvqmBeMfAIUP8Gqar jxm0lojAOKStyCpFV7j6GZeoyZpZVCBjZxybdfgsHZXvw0CCqyGjb3wgf3d9g+LP mMcN7y821Qh3BnLHidFaRACg7II5ahJyaPUgw3iW676q8s9K4QBkQ1zxQDC3LuUy r7STM8STTSQpACWC8OrNs7z/f3mNYW8p2avRGvqV3XyBm6pY0xff9/+Lslz8VbtF Hy1OjdRTz+Ry+hxjlMNjOHTo/nRf5Et7KccnipfD+vYGfmQWTgyXeGKQ/HiOJ1+s dy4YDt2fJgzOJhYtZKXI+GRphwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFBJpXD7A nd5cEGHe5XZWYfUxZ7lRMB8GA1UdIwQYMBaAFGhFl+mYo6DGmHNht8VyBDqBbBxS MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQ0FFOC8zRjdFMjU3NEJF MDcxMUYwOUZGMDQ0NjlDNEY5QUUwMi9hRVdYNlppam9NYVljMkczeFhJRU9vRnNI RkkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FFV1g2Wmlqb01hWWMyRzN4WElFT29Gc0hGSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RENBRTgvM0Y3RTI1NzRCRTA3MTFGMDlGRjA0NDY5QzRGOUFFMDIvMTJFOEZENUNC RUNDMTFGMDk4Q0ZFMDE1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQDnVVAMA0GCSqGSIb3DQEBCwUAA4IBAQBxFAOb8Zn/s5OWRzsbMNz1 RvJ3YYhLlYWyl3+KPJdWgd42EGboRdQ6brDi6VUS6BZYcVlBtZUOepXK/WyB3Qu+ r5xYcF92TqY5K3VjcMPkwXsIybo7+rqOAPpNf57RAq9L7NJSA61ZoKEd620LPKht xlLlEaxDgRJI8LCXBbL6tT9K5sbBPTd89RV0WumaQ19e4D11His/zCeGnWR1zeKh fX8SGL8yeNL5TC4DYyflsIYks+l0XunGlyNr0eabzJOs4Qiu41MIz8bFdAa/XF6O GudNIwl0T7NHcv6eQ7ze3/QNUyA1jEXit3sK1Sk5S6Bz1v4mKUu2oVJHsV8/Oq2C -----END CERTIFICATE-----Generated at Tue Sep 22 23:41:17 2026 by rpki-client