$ rpki-client -vvf rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/0576696C889311F0B21CA526C4F9AE02.roa File: 0576696C889311F0B21CA526C4F9AE02.roa (raw, json) Hash identifier: 5eG8sDChja1gXmJsueTdz5dQwV5fJE7Ln4KJ9zejKk4= Subject key identifier: 9A:81:37:C5:B0:3D:F3:A7:CE:AC:BF:57:21:C1:6E:35:64:3E:7A:3F Certificate issuer: /CN=A912E87E/serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Certificate serial: A8 Authority key identifier: 04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/0576696C889311F0B21CA526C4F9AE02.roa Signing time: Wed 03 Sep 2025 06:55:48 +0000 ROA not before: Wed 03 Sep 2025 06:55:48 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 152698 IP address blocks: 160.191.128.0/24 maxlen: 24 160.191.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Sep 2025 06:50:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A912E87E, serialNumber=04C79A4DD24FFA03FA8F9296766F82A0385CE293 Validity Not Before: Sep 3 06:55:48 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68b7e674-6060 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:02:10:66:fb:50:52:e7:22:e2:9a:61:22:77: f1:af:ca:5c:17:68:fc:5e:9f:10:32:1a:bf:41:ee: 38:b6:e7:81:39:c6:be:da:82:f0:dd:9e:2d:d0:64: 7f:f3:60:e9:6a:ef:2d:34:da:cd:bc:c4:35:bb:c7: 66:13:c8:64:34:19:83:31:64:42:08:03:b4:9f:64: 28:32:9c:75:c6:65:1f:f9:67:8c:02:03:df:d0:b2: b5:01:00:92:22:4f:1e:f5:28:37:66:83:9d:64:7f: a2:47:7b:f6:f2:e3:4c:99:ed:60:56:95:d3:ab:51: 20:09:2c:aa:0b:37:46:cd:d0:9a:17:62:d2:35:d7: 59:b3:47:51:cd:d6:75:c4:90:b1:21:83:19:2d:25: 1a:da:ff:fc:ef:f9:8d:59:ca:4a:66:d6:90:2f:2b: d8:07:19:a5:93:94:56:1c:5f:1a:53:86:69:7d:7c: 96:e4:b3:96:48:0c:24:1d:c6:57:b3:2b:0f:03:31: f4:b3:fb:c2:08:fd:aa:3c:7a:51:2f:d5:c0:57:ad: 29:b0:7e:75:a7:00:68:1b:f5:6d:64:e4:7c:49:fb: 42:49:b9:10:4a:67:b3:29:74:5b:5f:12:c1:72:0c: 0d:c3:85:98:0d:94:ba:31:21:4e:88:3f:c7:0f:7e: 76:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:81:37:C5:B0:3D:F3:A7:CE:AC:BF:57:21:C1:6E:35:64:3E:7A:3F X509v3 Authority Key Identifier: keyid:04:C7:9A:4D:D2:4F:FA:03:FA:8F:92:96:76:6F:82:A0:38:5C:E2:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/BMeaTdJP-gP6j5KWdm-CoDhc4pM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BMeaTdJP-gP6j5KWdm-CoDhc4pM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E87E/7C6EDA8CA1CF11EF878E6061C4F9AE02/0576696C889311F0B21CA526C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.128.0/23 Signature Algorithm: sha256WithRSAEncryption 14:4e:81:e5:69:43:44:bd:d4:0a:e4:53:c9:55:80:9a:85:3b: 38:f4:a8:1b:68:a3:46:cd:d8:be:6f:89:b4:b6:50:04:4d:c8: 93:81:b4:8f:21:c0:88:23:9c:58:8e:dd:33:17:f0:be:4b:97: b7:31:fa:19:bf:36:66:e2:07:44:bd:5c:02:16:30:05:46:14: 15:39:c5:10:c3:7f:2f:83:e5:a8:5d:bf:bd:dc:8d:6e:1b:ce: 35:e8:89:c0:e8:d7:d3:97:f7:52:d7:34:89:f6:c7:59:d2:09: b2:41:f2:d6:f7:c1:9e:0b:53:48:ec:a9:16:6c:4e:62:96:09: 0c:67:7e:95:4c:76:71:b5:52:ff:7c:f0:cb:05:e0:32:c3:19: b4:31:fe:e4:bb:24:95:2e:7f:fc:78:05:5c:f7:7b:fa:2e:c3: 95:78:03:ce:84:88:b1:62:7a:2a:3b:29:6a:84:82:90:16:08: d6:6e:82:55:b8:3c:2c:f5:81:fc:ef:97:46:94:6f:5f:10:99: ef:2d:1f:2f:47:e2:33:cc:39:ed:37:ef:76:d3:24:3f:70:6f: 34:01:44:24:1c:45:ba:bd:8f:8f:be:f2:43:c3:d4:98:04:68: ae:b5:b8:81:32:96:27:27:79:1d:53:47:38:e4:4e:d3:f4:53: 2a:32:0d:fc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MkU4N0UxMTAvBgNVBAUTKDA0Qzc5QTRERDI0RkZBMDNGQThGOTI5Njc2NkY4MkEw Mzg1Q0UyOTMwHhcNMjUwOTAzMDY1NTQ4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3ZTY3NC02MDYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywIQZvtQUuci4pphInfxr8pcF2j8Xp8QMhq/Qe44tueBOca+2oLw3Z4t0GR/ 82Dpau8tNNrNvMQ1u8dmE8hkNBmDMWRCCAO0n2QoMpx1xmUf+WeMAgPf0LK1AQCS Ik8e9Sg3ZoOdZH+iR3v28uNMme1gVpXTq1EgCSyqCzdGzdCaF2LSNddZs0dRzdZ1 xJCxIYMZLSUa2v/87/mNWcpKZtaQLyvYBxmlk5RWHF8aU4ZpfXyW5LOWSAwkHcZX sysPAzH0s/vCCP2qPHpRL9XAV60psH51pwBoG/VtZOR8SftCSbkQSmezKXRbXxLB cgwNw4WYDZS6MSFOiD/HD352cQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJqBN8Ww PfOnzqy/VyHBbjVkPno/MB8GA1UdIwQYMBaAFATHmk3ST/oD+o+SlnZvgqA4XOKT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyRTg3RS83QzZFREE4Q0Ex Q0YxMUVGODc4RTYwNjFDNEY5QUUwMi9CTWVhVGRKUC1nUDZqNUtXZG0tQ29EaGM0 cE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0JNZWFUZEpQLWdQNmo1S1dkbS1Db0RoYzRwTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MkU4N0UvN0M2RURBOENBMUNGMTFFRjg3OEU2MDYxQzRGOUFFMDIvMDU3NjY5NkM4 ODkzMTFGMEIyMUNBNTI2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv4AwDQYJKoZIhvcNAQELBQADggEBABROgeVpQ0S91Ark U8lVgJqFOzj0qBtoo0bN2L5vibS2UARNyJOBtI8hwIgjnFiO3TMX8L5Ll7cx+hm/ NmbiB0S9XAIWMAVGFBU5xRDDfy+D5ahdv73cjW4bzjXoicDo19OX91LXNIn2x1nS CbJB8tb3wZ4LU0jsqRZsTmKWCQxnfpVMdnG1Uv988MsF4DLDGbQx/uS7JJUuf/x4 BVz3e/ouw5V4A86EiLFieio7KWqEgpAWCNZuglW4PCz1gfzvl0aUb18Qme8tHy9H 4jPMOe0373bTJD9wbzQBRCQcRbq9j4++8kPD1JgEaK61uIEylicneR1TRzjkTtP0 UyoyDfw= -----END CERTIFICATE-----Generated at Sun Sep 7 19:23:03 2025 by rpki-client