$ rpki-client -vvvf rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/A409C5D2746611F187F6609D76A30FBC.roa File: A409C5D2746611F187F6609D76A30FBC.roa (raw, json) Hash identifier: tiKplu1qT1GoUcJ4ddjN4UtgXJrJ59ZmPU/cpNeDfZ8= Subject key identifier: A4:A1:CC:24:4B:E4:33:A6:B7:06:C4:CE:8C:AD:BC:6E:6A:41:1B:15 Certificate issuer: /CN=A91FE40B/serialNumber=4EC3AFC185D12F984E75E96A44BFB299EF09EA43 Certificate serial: 3B Authority key identifier: 4E:C3:AF:C1:85:D1:2F:98:4E:75:E9:6A:44:BF:B2:99:EF:09:EA:43 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/A409C5D2746611F187F6609D76A30FBC.roa Signing time: Sat 10 Oct 2026 18:35:38 +0000 ROA not before: Sat 10 Oct 2026 18:35:38 +0000 ROA not after: Wed 01 Dec 2027 00:00:00 +0000 asID: 136911 IP address blocks: 160.236.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.crl rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 Oct 2026 18:35:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59 (0x3b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FE40B, serialNumber=4EC3AFC185D12F984E75E96A44BFB299EF09EA43 Validity Not Before: Oct 10 18:35:38 2026 GMT Not After : Dec 1 00:00:00 2027 GMT Subject: CN=6aca857a-3ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f4:54:af:80:cb:f2:bb:ac:1a:d1:dc:57:4c: cf:d0:1c:53:a2:da:d0:02:0d:f5:96:21:26:21:dd: b1:89:7c:5b:6c:3f:44:96:e2:0d:4b:4f:91:b4:06: ee:fb:b2:cb:39:e6:25:30:be:55:c9:0f:5a:a9:46: 16:20:c0:6d:aa:bc:a0:7e:65:c5:a7:37:42:b9:99: bc:9c:1b:ef:ee:d0:48:f7:5c:07:6f:64:2c:02:a9: 2f:7e:70:1c:a1:9d:89:74:b5:86:59:5d:c6:da:43: 28:70:e1:32:e0:2c:ba:ff:dc:b9:04:dd:94:fe:82: 60:c2:2a:5b:5a:67:f6:9c:62:4e:7e:51:79:89:9a: 27:02:c9:f6:8c:47:2c:c2:63:14:1e:6d:2e:87:bd: f2:09:1b:2e:eb:32:f4:c3:8e:4b:6e:bf:e9:8a:9e: 09:13:bc:02:b6:05:2b:95:9c:0f:f7:b0:be:13:3b: 2b:30:4d:7c:39:68:04:d3:24:43:ab:ca:39:8a:b6: d0:a4:57:11:39:a2:74:52:0d:27:a4:80:cc:6b:bc: cf:1e:52:13:ea:98:29:4c:00:56:e7:73:f6:dc:d2: d5:c0:c5:04:9e:9a:8e:81:d1:99:76:6c:0d:53:f8: a2:37:42:1d:3f:23:16:a8:eb:cc:4a:4c:e1:c1:6b: 78:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:A1:CC:24:4B:E4:33:A6:B7:06:C4:CE:8C:AD:BC:6E:6A:41:1B:15 X509v3 Authority Key Identifier: keyid:4E:C3:AF:C1:85:D1:2F:98:4E:75:E9:6A:44:BF:B2:99:EF:09:EA:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/TsOvwYXRL5hOdelqRL-yme8J6kM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TsOvwYXRL5hOdelqRL-yme8J6kM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE40B/5C7E1728743811F19E6271C465A30FBC/A409C5D2746611F187F6609D76A30FBC.roa sbgp-ipAddrBlock: critical IPv4: 160.236.45.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:a5:b7:9a:f5:f4:e7:69:69:84:55:09:04:0d:35:85:bc:75: 1d:74:f1:65:62:48:5d:ff:9e:4a:19:8b:c5:92:33:d0:73:f9: 98:0a:2a:6d:c8:61:8f:83:66:d0:99:5f:f3:5b:2e:80:77:12: f5:51:66:cd:03:88:16:39:de:50:ce:e0:95:1f:86:a5:a3:4f: 06:54:d2:65:15:3f:61:96:05:ef:41:1c:52:6d:e6:59:7b:5a: 54:eb:57:22:30:a1:71:f4:b9:3f:66:7c:b1:c2:9b:71:dc:2a: ac:fd:21:dc:1f:cf:58:e7:d5:77:00:61:d2:e1:8a:41:97:90: d9:36:f6:38:56:34:5a:8e:7b:47:75:e9:5c:5f:b7:1e:cd:8f: 27:c7:43:fe:da:dd:1b:ae:ab:69:71:03:ff:53:98:fb:22:39: 8f:ab:8a:84:01:8b:7d:44:fb:63:df:14:fb:bd:ca:ee:ff:8c: 9d:50:37:9a:16:b1:4d:75:01:7c:fc:32:c5:09:f5:e7:fe:0c: a3:70:ee:55:1e:60:94:aa:8a:64:e7:06:77:12:ce:b1:a1:b9: 35:5c:9f:b3:63:14:e0:5a:d3:c8:24:ca:6f:a2:95:75:56:a2: ce:1b:50:3b:83:08:88:4a:4b:cc:42:79:c0:fc:10:a6:a0:de: 5d:16:ec:bb -----BEGIN CERTIFICATE----- MIIFOzCCBCOgAwIBAgIBOzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG RTQwQjExMC8GA1UEBRMoNEVDM0FGQzE4NUQxMkY5ODRFNzVFOTZBNDRCRkIyOTlF RjA5RUE0MzAeFw0yNjEwMTAxODM1MzhaFw0yNzEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTZhY2E4NTdhLTNhZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDr9FSvgMvyu6wa0dxXTM/QHFOi2tACDfWWISYh3bGJfFtsP0SW4g1LT5G0Bu77 sss55iUwvlXJD1qpRhYgwG2qvKB+ZcWnN0K5mbycG+/u0Ej3XAdvZCwCqS9+cByh nYl0tYZZXcbaQyhw4TLgLLr/3LkE3ZT+gmDCKltaZ/acYk5+UXmJmicCyfaMRyzC YxQebS6HvfIJGy7rMvTDjktuv+mKngkTvAK2BSuVnA/3sL4TOyswTXw5aATTJEOr yjmKttCkVxE5onRSDSekgMxrvM8eUhPqmClMAFbnc/bc0tXAxQSemo6B0Zl2bA1T +KI3Qh0/Ixao68xKTOHBa3iZAgMBAAGjggJgMIICXDAdBgNVHQ4EFgQUpKHMJEvk M6a3BsTOjK28bmpBGxUwHwYDVR0jBBgwFoAUTsOvwYXRL5hOdelqRL+yme8J6kMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZFNDBCLzVDN0UxNzI4NzQz ODExRjE5RTYyNzFDNDY1QTMwRkJDL1RzT3Z3WVhSTDVoT2RlbHFSTC15bWU4SjZr TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVHNPdndZWFJMNWhPZGVscVJMLXltZThKNmtNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgZYGCCsGAQUFBwELBIGJMIGGMIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG RTQwQi81QzdFMTcyODc0MzgxMUYxOUU2MjcxQzQ2NUEzMEZCQy9BNDA5QzVEMjc0 NjYxMUYxODdGNjYwOUQ3NkEzMEZCQy5yb2EwHwYIKwYBBQUHAQcBAf8EEDAOMAwE AgABMAYDBACg7C0wDQYJKoZIhvcNAQELBQADggEBAA6lt5r19OdpaYRVCQQNNYW8 dR108WViSF3/nkoZi8WSM9Bz+ZgKKm3IYY+DZtCZX/NbLoB3EvVRZs0DiBY53lDO 4JUfhqWjTwZU0mUVP2GWBe9BHFJt5ll7WlTrVyIwoXH0uT9mfLHCm3HcKqz9Idwf z1jn1XcAYdLhikGXkNk29jhWNFqOe0d16Vxftx7NjyfHQ/7a3Ruuq2lxA/9TmPsi OY+rioQBi31E+2PfFPu9yu7/jJ1QN5oWsU11AXz8MsUJ9ef+DKNw7lUeYJSqimTn BncSzrGhuTVcn7NjFOBa08gkym+ilXVWos4bUDuDCIhKS8xCecD8EKag3l0W7Ls= -----END CERTIFICATE-----Generated at Sun Oct 11 15:03:53 2026 by rpki-client