$ rpki-client -vvf rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/EE04266A08C811F09F9B7B57C4F9AE02.roa File: EE04266A08C811F09F9B7B57C4F9AE02.roa (raw, json) Hash identifier: lfdyi++bWKTqNq0AntGKkt45cnrhAjp+IKIVrz1KfzY= Subject key identifier: 74:46:0C:F6:CC:6B:6C:FF:00:B9:7D:4D:12:B6:93:D0:4B:86:6A:41 Certificate issuer: /CN=A9145E09/serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4 Certificate serial: 6F Authority key identifier: 08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/EE04266A08C811F09F9B7B57C4F9AE02.roa Signing time: Thu 23 Oct 2025 09:20:49 +0000 ROA not before: Thu 23 Oct 2025 09:20:49 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 142647 IP address blocks: 160.30.142.0/24 maxlen: 24 160.30.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 111 (0x6f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9145E09, serialNumber=08A391C6B389C810E95BC6139CECB29D5D3958C4 Validity Not Before: Oct 23 09:20:49 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68f9f371-34f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:cd:bd:fa:43:f4:08:bb:38:40:af:2a:1f:2e: df:7f:61:d9:7d:9d:8b:9b:42:d0:ed:68:06:60:58: c0:83:bc:e2:d5:2d:87:78:2f:2e:f6:f4:cf:11:d7: af:fe:d4:41:5a:9c:c4:0f:b7:81:cc:3e:0b:60:6c: aa:54:a4:3a:00:f0:82:93:33:24:a4:ad:2e:de:9f: 55:b6:cd:08:8f:a9:03:ce:d0:6a:3f:55:14:72:09: 30:59:18:09:2d:fc:c3:cd:12:40:f1:50:b3:8a:e3: 29:87:e3:c0:5c:e3:a5:1a:e4:2a:92:cf:72:5a:0d: be:4f:77:74:04:46:7b:d8:92:35:b1:01:09:74:4b: 2c:94:1e:85:85:58:84:24:dc:11:2a:34:8e:86:09: 81:55:26:81:44:f3:09:15:d2:8f:85:20:c8:25:ef: 06:28:25:d2:a7:8c:4e:eb:a5:24:45:f8:d5:01:6e: f4:89:5a:74:8d:ee:29:72:f0:64:23:69:2e:b1:3b: c1:f3:f7:59:88:3b:4b:92:10:f4:d7:9d:25:89:9f: 05:17:7f:4e:bc:95:97:70:fe:97:57:3d:c2:0f:08: 8e:9b:0d:ef:f8:f2:17:00:1f:ef:29:87:75:16:ea: 1a:fd:1d:ae:83:a2:51:d6:f7:d7:46:da:dc:0c:ca: 64:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:46:0C:F6:CC:6B:6C:FF:00:B9:7D:4D:12:B6:93:D0:4B:86:6A:41 X509v3 Authority Key Identifier: keyid:08:A3:91:C6:B3:89:C8:10:E9:5B:C6:13:9C:EC:B2:9D:5D:39:58:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/CKORxrOJyBDpW8YTnOyynV05WMQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/CKORxrOJyBDpW8YTnOyynV05WMQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145E09/87055B3208C811F0A0D34E56C4F9AE02/EE04266A08C811F09F9B7B57C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.142.0/23 Signature Algorithm: sha256WithRSAEncryption 9e:81:31:52:39:fd:0e:2c:3c:0e:56:36:24:09:81:8c:7f:a5: bf:90:12:fa:f2:db:b8:61:49:d3:3e:3e:14:47:0e:0a:82:08: ec:18:07:09:a3:29:3e:b2:70:5b:66:70:86:84:7f:0a:cb:b4: 1d:1b:f9:e8:59:e2:ad:79:ba:32:0d:ad:1b:a6:c6:1d:60:d2: 12:54:66:28:cc:d6:2a:ff:3b:93:36:2d:5b:fd:bf:cb:cf:f3: 44:3e:09:7a:bd:c4:c3:e6:2b:6c:94:68:e9:89:7a:4a:e3:05: 80:9a:37:44:51:c6:03:90:75:c6:3c:ef:d0:84:a6:42:21:a7: bf:a6:fc:f5:6a:90:92:a6:46:d7:45:d7:67:31:61:79:a1:5e: 9a:c4:fc:da:1d:93:c7:ef:a8:b8:7f:09:a1:c7:18:59:9a:e3: 78:ad:05:ba:f4:dc:cc:67:b0:ae:cf:5f:ad:b3:b1:14:41:a2: af:74:43:bf:6f:cd:b4:ac:8a:2d:dd:85:89:4a:f7:8c:07:a1: 0b:84:7c:69:73:69:4d:ad:0d:88:df:9a:c6:04:17:96:a3:0b: 8a:19:d5:7f:b8:5f:8f:a1:63:cf:7a:d8:a6:f9:20:cf:d9:16: eb:a3:c4:a0:00:eb:a0:39:d6:dc:bc:d1:59:d3:86:4c:61:07: 44:37:93:2a -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBbzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 NUUwOTExMC8GA1UEBRMoMDhBMzkxQzZCMzg5QzgxMEU5NUJDNjEzOUNFQ0IyOUQ1 RDM5NThDNDAeFw0yNTEwMjMwOTIwNDlaFw0yNjEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZjlmMzcxLTM0ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC7zb36Q/QIuzhAryofLt9/Ydl9nYubQtDtaAZgWMCDvOLVLYd4Ly729M8R16/+ 1EFanMQPt4HMPgtgbKpUpDoA8IKTMySkrS7en1W2zQiPqQPO0Go/VRRyCTBZGAkt /MPNEkDxULOK4ymH48Bc46Ua5CqSz3JaDb5Pd3QERnvYkjWxAQl0SyyUHoWFWIQk 3BEqNI6GCYFVJoFE8wkV0o+FIMgl7wYoJdKnjE7rpSRF+NUBbvSJWnSN7ily8GQj aS6xO8Hz91mIO0uSEPTXnSWJnwUXf068lZdw/pdXPcIPCI6bDe/48hcAH+8ph3UW 6hr9Ha6DolHW99dG2twMymRjAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUdEYM9sxr bP8AuX1NEraT0EuGakEwHwYDVR0jBBgwFoAUCKORxrOJyBDpW8YTnOyynV05WMQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQ1RTA5Lzg3MDU1QjMyMDhD ODExRjBBMEQzNEU1NkM0RjlBRTAyL0NLT1J4ck9KeUJEcFc4WVRuT3l5blYwNVdN US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQ0tPUnhyT0p5QkRwVzhZVG5PeXluVjA1V01RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 NUUwOS84NzA1NUIzMjA4QzgxMUYwQTBEMzRFNTZDNEY5QUUwMi9FRTA0MjY2QTA4 QzgxMUYwOUY5QjdCNTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAejjANBgkqhkiG9w0BAQsFAAOCAQEAnoExUjn9Diw8DlY2 JAmBjH+lv5AS+vLbuGFJ0z4+FEcOCoII7BgHCaMpPrJwW2ZwhoR/Csu0HRv56Fni rXm6Mg2tG6bGHWDSElRmKMzWKv87kzYtW/2/y8/zRD4Jer3Ew+YrbJRo6Yl6SuMF gJo3RFHGA5B1xjzv0ISmQiGnv6b89WqQkqZG10XXZzFheaFemsT82h2Tx++ouH8J occYWZrjeK0FuvTczGewrs9frbOxFEGir3RDv2/NtKyKLd2FiUr3jAehC4R8aXNp Ta0NiN+axgQXlqMLihnVf7hfj6Fjz3rYpvkgz9kW66PEoADroDnW3LzRWdOGTGEH RDeTKg== -----END CERTIFICATE-----Generated at Tue Nov 4 12:13:34 2025 by rpki-client