$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/39032028BB8211F0ACBBE862C4F9AE02.roa File: 39032028BB8211F0ACBBE862C4F9AE02.roa (raw, json) Hash identifier: kQWyaKQnBQog9T8jUd45EWcqgEXzXFVdsVXBEraC0lU= Subject key identifier: 65:70:24:97:AA:E7:CA:46:25:13:D3:BB:CA:64:D8:78:F1:A2:76:4E Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Certificate serial: 0159 Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/39032028BB8211F0ACBBE862C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:39:46 +0000 ROA not before: Fri 07 Nov 2025 02:34:03 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 154309 IP address blocks: 160.25.20.0/23 maxlen: 23 160.25.20.0/24 maxlen: 24 160.25.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 04:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 345 (0x159) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Validity Not Before: Nov 7 02:34:03 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a59322-f398 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:79:d0:5e:c0:53:bb:a2:40:ec:d5:f8:aa:5b: 44:14:9f:27:9d:f2:f7:6e:e6:e3:0d:60:2a:cf:fc: 7e:52:62:45:e5:d3:23:a1:44:b1:5d:13:e5:ae:73: b6:b0:56:d4:dc:bb:2e:4d:0e:16:ef:86:69:de:95: 18:8e:d6:1d:be:35:e7:7b:71:4a:20:5d:4c:32:01: 2a:b0:7b:1f:62:a3:a9:1e:6e:72:84:38:63:f3:33: 40:90:11:c3:fe:1d:9e:b8:50:5d:cb:a7:c9:24:cf: ed:e8:a8:a6:0d:95:a1:e8:1c:fa:33:01:71:6f:62: 9e:b2:10:bd:72:4d:d1:a9:36:b5:d7:38:3c:fc:c2: cd:05:22:4a:fc:f3:9a:54:f8:d3:21:ba:89:32:1b: 36:c9:f3:65:5c:35:a9:a1:06:f7:a8:a8:24:4c:b8: 25:aa:95:a6:fd:95:e9:6f:fe:01:78:18:a7:7b:aa: ee:33:b8:93:3f:52:2a:21:31:bd:da:fd:7a:72:9d: fa:6a:a2:2f:63:95:e1:d2:b7:b8:d2:07:57:a3:8f: e1:68:40:d3:92:6c:72:44:23:5a:47:63:98:0b:0b: 94:59:46:b4:4e:22:20:95:40:29:b4:75:c9:34:e4: 69:4b:b0:aa:b1:a1:19:93:57:af:56:f7:df:23:a3: a3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:70:24:97:AA:E7:CA:46:25:13:D3:BB:CA:64:D8:78:F1:A2:76:4E X509v3 Authority Key Identifier: keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/39032028BB8211F0ACBBE862C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.25.20.0/23 Signature Algorithm: sha256WithRSAEncryption 80:38:e6:d4:6a:fc:4e:c5:3c:81:c1:8e:5a:65:9a:03:4b:00: bd:7d:3c:f5:e0:ef:c9:cb:de:3a:4e:93:54:48:6e:6d:b1:98: 0a:2a:e8:45:cd:fe:20:02:4c:c4:80:dc:8e:8c:69:23:ea:5b: d7:7f:87:3b:c3:41:3b:03:24:6d:8a:89:56:27:9e:61:90:fd: 9c:68:8a:aa:73:ea:a6:21:9f:da:97:c2:e5:76:c7:52:a2:1a: 28:06:7d:18:bd:40:e8:d3:a2:89:ad:d9:70:a4:c0:84:7e:2e: 81:f4:4b:17:3c:ee:14:07:1c:12:6d:fb:16:56:e6:d3:16:ae: f3:08:52:27:47:b8:e0:56:54:37:9d:a3:3e:7b:fb:7e:47:5d: ce:c3:8c:f1:f1:ee:6b:e7:eb:f7:80:a6:43:1b:e4:34:34:38: 96:9b:ff:09:de:14:cf:b0:98:df:a4:05:45:70:98:1f:ad:ea: fd:b7:1a:40:69:0f:83:d6:f3:81:a8:6b:c5:3e:f0:82:28:f3: 1b:bc:fb:b1:19:d3:0b:33:1e:33:44:e5:6a:f2:38:82:54:b5: 6a:0a:9b:ea:62:8f:2c:84:d5:cb:bc:1a:ee:28:2a:51:43:76: 6d:aa:81:08:60:9d:bc:3f:69:f7:da:6f:95:5c:24:23:5f:25: 71:71:1d:46 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAVkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdDRTMxMTAvBgNVBAUTKEMyNkY0NkZEOTk1MkIzQUYzQTdENzE1REUxQkYzQTYx RTI1Qzc5OEEwHhcNMjUxMTA3MDIzNDAzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTMyMi1mMzk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA83nQXsBTu6JA7NX4qltEFJ8nnfL3bubjDWAqz/x+UmJF5dMjoUSxXRPlrnO2 sFbU3LsuTQ4W74Zp3pUYjtYdvjXne3FKIF1MMgEqsHsfYqOpHm5yhDhj8zNAkBHD /h2euFBdy6fJJM/t6KimDZWh6Bz6MwFxb2KeshC9ck3RqTa11zg8/MLNBSJK/POa VPjTIbqJMhs2yfNlXDWpoQb3qKgkTLglqpWm/ZXpb/4BeBine6ruM7iTP1IqITG9 2v16cp36aqIvY5Xh0re40gdXo4/haEDTkmxyRCNaR2OYCwuUWUa0TiIglUAptHXJ NORpS7CqsaEZk1evVvffI6OjkQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFGVwJJeq 58pGJRPTu8pk2HjxonZOMB8GA1UdIwQYMBaAFMJvRv2ZUrOvOn1xXeG/OmHiXHmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NFMy9BOTBDQUZDNDM0 NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2ODZmWEZkNGI4NlllSmNl WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dtOUdfWmxTczY4NmZYRmQ0Yjg2WWVKY2VZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTdDRTMvQTkwQ0FGQzQzNDY1MTFFRkI5QzA3NjRGQzRGOUFFMDIvMzkwMzIwMjhC QjgyMTFGMEFDQkJFODYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBkUMA0GCSqGSIb3DQEBCwUAA4IBAQCAOObUavxOxTyBwY5aZZoD SwC9fTz14O/Jy946TpNUSG5tsZgKKuhFzf4gAkzEgNyOjGkj6lvXf4c7w0E7AyRt iolWJ55hkP2caIqqc+qmIZ/al8LldsdSohooBn0YvUDo06KJrdlwpMCEfi6B9EsX PO4UBxwSbfsWVubTFq7zCFInR7jgVlQ3naM+e/t+R13Ow4zx8e5r5+v3gKZDG+Q0 NDiWm/8J3hTPsJjfpAVFcJgfrer9txpAaQ+D1vOBqGvFPvCCKPMbvPuxGdMLMx4z ROVq8jiCVLVqCpvqYo8shNXLvBruKCpRQ3ZtqoEIYJ28P2n32m+VXCQjXyVxcR1G -----END CERTIFICATE-----Generated at Wed Mar 4 10:09:07 2026 by rpki-client