$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa File: BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa (raw, json) Hash identifier: EF4oE/lxCN23IMjmuuP02cCqUrL7uq26SoDsV63e3dw= Subject key identifier: 75:E0:7D:A2:51:21:9C:D4:4D:F3:BC:BE:A4:05:D7:C1:75:3E:B2:5F Certificate issuer: /CN=A9144391/serialNumber=96A635027B64A654D808945DB835A9E28C794B01 Certificate serial: A0 Authority key identifier: 96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa Signing time: Wed 09 Jul 2025 07:13:47 +0000 ROA not before: Wed 09 Jul 2025 07:13:47 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 153053 IP address blocks: 160.25.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 06:29:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9144391, serialNumber=96A635027B64A654D808945DB835A9E28C794B01 Validity Not Before: Jul 9 07:13:47 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686e16aa-2eaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:9a:2b:18:2c:14:75:94:2d:af:bc:aa:ea: 0c:9a:67:76:f9:a4:3e:92:1c:a6:df:a6:a6:e5:f6: 32:b1:c0:a7:60:0f:21:43:43:70:e9:31:a1:a7:d7: 04:4c:75:d1:ad:b6:36:00:f7:02:ba:02:d3:47:3c: 75:05:a6:8b:96:8b:46:1e:5c:df:d1:33:8e:4f:20: 10:6a:b6:45:28:24:d8:fd:b6:4f:91:69:28:50:05: 41:70:60:b7:75:d8:75:b8:60:96:ef:cb:9c:71:49: 2d:f9:83:f8:5b:5d:d7:bd:40:39:0f:56:82:a8:8a: 63:82:4e:ee:7d:bc:25:85:9c:a6:a5:fb:6a:a5:8b: ec:25:7e:0f:7b:a1:19:78:6f:3a:af:27:c3:ce:12: 5e:94:77:54:c9:c9:e7:c8:9a:25:0c:3e:cd:b6:a6: ad:36:38:29:9f:b2:5d:60:a3:6b:a1:80:4d:d4:c5: db:14:c1:c8:40:bc:94:4a:df:5d:bf:2f:7a:46:4a: 8a:a1:f7:58:c9:97:17:14:7d:2d:ed:4e:aa:97:44: b0:b4:de:8c:d3:bc:e0:55:eb:1d:d1:cc:96:01:56: b8:16:3d:e4:95:41:53:76:a3:e3:b9:c2:cd:96:8b: 9e:80:ea:b0:ec:a5:dc:fb:17:2c:a0:1d:ea:d7:a6: 3d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E0:7D:A2:51:21:9C:D4:4D:F3:BC:BE:A4:05:D7:C1:75:3E:B2:5F X509v3 Authority Key Identifier: keyid:96:A6:35:02:7B:64:A6:54:D8:08:94:5D:B8:35:A9:E2:8C:79:4B:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/lqY1AntkplTYCJRduDWp4ox5SwE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lqY1AntkplTYCJRduDWp4ox5SwE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/F7209C3270AD11EFA848B068C4F9AE02/BBA8F97C70AF11EF9C9B2C0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.96.0/23 Signature Algorithm: sha256WithRSAEncryption 59:9f:1d:94:a9:77:3e:e7:fd:ad:fb:09:47:31:87:d6:7e:2c: 35:e0:1b:da:33:92:7d:61:8b:b4:0b:3f:67:97:b8:a2:ab:e5: bb:8c:21:5f:43:45:79:e7:4c:9e:72:dc:88:c2:7f:f9:1d:43: 47:c6:c4:ff:6e:8a:3c:ae:0f:cd:03:03:10:c6:45:49:f4:d3: 26:23:bc:4b:92:18:ae:96:46:77:7e:a4:02:29:33:65:86:ff: 92:c8:25:1b:b6:51:26:62:c8:05:70:b5:a1:c5:53:70:69:01: 68:cb:ab:95:0e:df:aa:8a:24:c4:50:52:93:96:9e:22:46:19: 81:e9:b4:85:af:c6:7b:6f:ab:09:6b:78:0f:9f:2e:16:c0:ac: cb:83:af:c3:0b:2d:dd:33:80:ad:db:5f:bc:76:16:0a:19:18: d3:76:48:1e:7d:b0:7e:ef:fd:10:b9:84:dc:e4:70:be:b5:35: a5:8b:b3:af:dd:75:6a:01:a1:af:7b:ea:63:78:44:0a:6b:fb: 4d:b2:0c:38:0e:df:cc:02:0b:8c:21:7b:3c:9b:4c:7b:07:a0: b4:33:7b:70:48:4c:2a:11:8e:f6:fe:b6:fb:59:a3:b8:a7:a6: 77:83:d3:36:08:2e:0d:fb:b1:6d:63:32:ea:ae:24:d7:93:91: a3:6d:c8:98 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDQzOTExMTAvBgNVBAUTKDk2QTYzNTAyN0I2NEE2NTREODA4OTQ1REI4MzVBOUUy OEM3OTRCMDEwHhcNMjUwNzA5MDcxMzQ3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZlMTZhYS0yZWFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApIaaKxgsFHWULa+8quoMmmd2+aQ+khym36am5fYyscCnYA8hQ0Nw6TGhp9cE THXRrbY2APcCugLTRzx1BaaLlotGHlzf0TOOTyAQarZFKCTY/bZPkWkoUAVBcGC3 ddh1uGCW78uccUkt+YP4W13XvUA5D1aCqIpjgk7ufbwlhZympftqpYvsJX4Pe6EZ eG86ryfDzhJelHdUycnnyJolDD7NtqatNjgpn7JdYKNroYBN1MXbFMHIQLyUSt9d vy96RkqKofdYyZcXFH0t7U6ql0SwtN6M07zgVesd0cyWAVa4Fj3klUFTdqPjucLN louegOqw7KXc+xcsoB3q16Y94QIDAQABo4IClTCCApEwHQYDVR0OBBYEFHXgfaJR IZzUTfO8vqQF18F1PrJfMB8GA1UdIwQYMBaAFJamNQJ7ZKZU2AiUXbg1qeKMeUsB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM5MS9GNzIwOUMzMjcw QUQxMUVGQTg0OEIwNjhDNEY5QUUwMi9scVkxQW50a3BsVFlDSlJkdURXcDRveDVT d0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xxWTFBbnRrcGxUWUNKUmR1RFdwNG94NVN3RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDQzOTEvRjcyMDlDMzI3MEFEMTFFRkE4NDhCMDY4QzRGOUFFMDIvQkJBOEY5N0M3 MEFGMTFFRjlDOUIyQzBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGWAwDQYJKoZIhvcNAQELBQADggEBAFmfHZSpdz7n/a37 CUcxh9Z+LDXgG9ozkn1hi7QLP2eXuKKr5buMIV9DRXnnTJ5y3IjCf/kdQ0fGxP9u ijyuD80DAxDGRUn00yYjvEuSGK6WRnd+pAIpM2WG/5LIJRu2USZiyAVwtaHFU3Bp AWjLq5UO36qKJMRQUpOWniJGGYHptIWvxntvqwlreA+fLhbArMuDr8MLLd0zgK3b X7x2FgoZGNN2SB59sH7v/RC5hNzkcL61NaWLs6/ddWoBoa976mN4RApr+02yDDgO 38wCC4whezybTHsHoLQze3BITCoRjvb+tvtZo7inpneD0zYILg37sW1jMuquJNeT kaNtyJg= -----END CERTIFICATE-----Generated at Sun Jul 20 02:47:50 2025 by rpki-client