$ rpki-client -vvvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/212E0B520DFE11F0B266963AC4F9AE02.roa File: 212E0B520DFE11F0B266963AC4F9AE02.roa (raw, json) Hash identifier: xJEez0DY8AmNVE2VqhZDR/pkwfuh11Vrc1/2qRF3aqg= Subject key identifier: 8E:9E:30:10:3E:A2:87:51:53:81:D8:D7:29:F9:6D:6B:6B:AE:DA:3B Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: 0123 Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/212E0B520DFE11F0B266963AC4F9AE02.roa Signing time: Thu 17 Sep 2026 06:57:15 +0000 ROA not before: Thu 17 Sep 2026 06:57:15 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 153322 IP address blocks: 160.187.14.0/23 maxlen: 23 160.187.14.0/24 maxlen: 24 160.187.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 05:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 291 (0x123) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Sep 17 06:57:15 2026 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=6aab8f4a-3d2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a9:89:ad:39:fa:60:bc:6b:5b:8a:ca:31:ef: c4:d9:21:d4:6b:7b:1f:57:3a:34:77:6e:d3:3d:7e: 0c:6b:61:4f:5d:50:76:f4:37:93:22:7c:09:67:90: d5:28:72:54:9b:73:b3:23:4e:bb:d7:56:1f:77:3e: 2c:33:53:b1:13:d1:5f:e3:f7:bc:98:75:31:c8:dc: ae:7a:bf:6a:1a:c8:51:d2:7b:e9:8e:c7:9a:a8:a5: 13:e1:35:da:70:2a:33:7b:ec:5a:ad:1c:55:f0:48: 30:60:b8:7d:37:64:1a:cf:e4:cd:7b:9f:16:4d:e1: 8b:de:f8:36:ca:8c:be:ea:f8:82:0d:a6:ab:8e:d0: 75:d5:d6:00:55:76:73:6b:fc:5b:a3:da:4e:1e:13: 5c:52:0b:96:42:3e:24:b1:6d:cb:17:bd:0f:4e:29: 3b:20:34:ec:24:df:45:c8:64:d1:14:84:2b:f3:1e: d1:1b:85:59:18:26:b5:b0:18:a9:15:d3:d8:d1:0b: 7c:65:42:26:d2:43:e8:c9:19:14:2f:dd:21:0f:85: 4f:2f:bc:26:af:fb:7b:a5:dc:3e:f5:62:0a:60:39: d3:3c:39:3e:3d:eb:ae:95:3b:65:b8:32:72:c8:e5: 17:cb:67:c5:44:2a:54:ee:f9:26:d1:b9:2d:70:0a: d8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9E:30:10:3E:A2:87:51:53:81:D8:D7:29:F9:6D:6B:6B:AE:DA:3B X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/212E0B520DFE11F0B266963AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.187.14.0/23 Signature Algorithm: sha256WithRSAEncryption b4:f1:55:5e:58:33:7a:fa:a2:f6:f1:48:88:f3:bf:29:c1:75: c7:7f:a7:d2:25:e6:75:1f:f6:67:84:26:1d:62:44:6f:8c:6e: b4:8c:65:06:04:7a:8a:ee:5e:3d:da:f4:f4:bd:14:eb:6d:19: 77:38:11:9b:03:6e:f3:9e:3a:43:a3:d6:78:82:5e:73:95:46: a3:08:97:89:ce:62:0e:a0:8a:84:b5:de:3a:1c:7c:20:25:b9: 94:c2:6b:67:84:a4:08:fb:41:9d:2e:4f:a8:6b:81:55:81:af: a1:a4:3a:8f:5b:7e:db:f3:de:de:35:ca:0b:c8:73:25:75:4c: 74:1e:75:28:c8:63:b2:dc:cf:1b:52:bf:6c:3c:57:c6:35:38: bc:aa:e7:95:d5:17:6b:e3:53:97:43:7d:1e:21:61:14:94:9d: 08:30:d6:9c:f4:f1:41:66:7f:18:c6:60:04:b4:35:c0:f6:05: de:69:f7:42:eb:a5:0d:ab:49:9d:2a:5f:cd:a2:9e:f6:b5:8a: b1:da:6f:d9:30:8c:da:d9:93:ce:7d:47:bf:e0:e4:b0:22:55: 65:cc:90:d7:9e:fb:a6:43:25:fc:8d:91:ef:ac:08:1c:51:ed: 96:db:db:a8:3f:72:11:01:9b:4b:60:9f:7b:de:7a:d0:b6:e3: 29:23:55:aa -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICASMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTg1RjExMTAvBgNVBAUTKEU0RTRDMjQyNDc3ODVDMzQyRkYzNTkwN0Y3RTExQzRB QkIzOThCODMwHhcNMjYwOTE3MDY1NzE1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YWFiOGY0YS0zZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuqmJrTn6YLxrW4rKMe/E2SHUa3sfVzo0d27TPX4Ma2FPXVB29DeTInwJZ5DV KHJUm3OzI06711Yfdz4sM1OxE9Ff4/e8mHUxyNyuer9qGshR0nvpjseaqKUT4TXa cCoze+xarRxV8EgwYLh9N2Qaz+TNe58WTeGL3vg2yoy+6viCDaarjtB11dYAVXZz a/xbo9pOHhNcUguWQj4ksW3LF70PTik7IDTsJN9FyGTRFIQr8x7RG4VZGCa1sBip FdPY0Qt8ZUIm0kPoyRkUL90hD4VPL7wmr/t7pdw+9WIKYDnTPDk+PeuulTtluDJy yOUXy2fFRCpU7vkm0bktcArYtwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFI6eMBA+ oodRU4HY1yn5bWtrrto7MB8GA1UdIwQYMBaAFOTkwkJHeFw0L/NZB/fhHEq7OYuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFODVGMS82MjIwNjMzQzBE RkMxMUYwQTFEOTgwNTNDNEY5QUUwMi81T1RDUWtkNFhEUXY4MWtIOS1FY1NyczVp NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTg1RjEvNjIyMDYzM0MwREZDMTFGMEExRDk4MDUzQzRGOUFFMDIvMjEyRTBCNTIw REZFMTFGMEIyNjY5NjNBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoLsOMA0GCSqGSIb3DQEBCwUAA4IBAQC08VVeWDN6+qL28UiI878p wXXHf6fSJeZ1H/ZnhCYdYkRvjG60jGUGBHqK7l492vT0vRTrbRl3OBGbA27znjpD o9Z4gl5zlUajCJeJzmIOoIqEtd46HHwgJbmUwmtnhKQI+0GdLk+oa4FVga+hpDqP W37b897eNcoLyHMldUx0HnUoyGOy3M8bUr9sPFfGNTi8queV1Rdr41OXQ30eIWEU lJ0IMNac9PFBZn8YxmAEtDXA9gXeafdC66UNq0mdKl/Nop72tYqx2m/ZMIza2ZPO fUe/4OSwIlVlzJDXnvumQyX8jZHvrAgcUe2W29uoP3IRAZtLYJ973nrQtuMpI1Wq -----END CERTIFICATE-----Generated at Tue Sep 22 14:10:44 2026 by rpki-client