$ rpki-client -vvf rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/2017BFC2B07211EF83629B37C4F9AE02.roa File: 2017BFC2B07211EF83629B37C4F9AE02.roa (raw, json) Hash identifier: mZ/ViBjIVIPe+nE/GVSLUGS2VukLj6yBRBsTJ8+0mQA= Subject key identifier: 70:8B:9E:66:8A:54:59:AF:4C:8D:D0:86:1B:50:05:26:CC:62:10:24 Certificate issuer: /CN=A914B45F/serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Certificate serial: 94 Authority key identifier: 41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/2017BFC2B07211EF83629B37C4F9AE02.roa Signing time: Sun 31 Aug 2025 04:21:53 +0000 ROA not before: Sun 31 Aug 2025 04:21:53 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151637 IP address blocks: 160.250.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 03:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 148 (0x94) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A914B45F, serialNumber=4115223460A3DDFAC83A82FC61B2BE9EC626C20C Validity Not Before: Aug 31 04:21:53 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b3cde1-58f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:1d:0f:d5:9f:dd:3e:b2:e8:26:de:04:84: 26:cd:b6:29:af:d5:48:60:e6:f4:59:0c:3c:41:68: 36:07:65:f5:bd:b2:bd:ef:c2:79:60:8f:c8:09:4b: 36:2a:ce:fe:46:2b:d8:84:fc:93:f0:47:88:3f:02: 6e:f2:2a:9e:2b:6e:ad:83:ff:3f:40:37:86:63:b4: 7c:20:09:c5:35:0c:40:12:e5:0c:39:c0:d4:bb:5d: 56:b4:2d:cb:6b:12:ea:f6:bd:37:41:74:cb:2a:75: 0c:74:69:d5:ec:ca:a9:c9:c2:cd:31:b7:fe:f4:7a: 47:a6:55:2b:0a:8b:f9:50:d5:85:67:14:ef:8f:f3: e7:d0:22:be:fb:bf:7c:03:9f:f6:c4:45:6c:b1:8b: f9:f6:97:d1:fb:32:50:53:9e:83:ae:dc:3b:16:01: e3:d9:11:99:f3:97:db:69:a3:d2:8a:ce:df:6b:1d: c1:d1:2a:12:c8:ab:87:3a:e4:12:b7:f7:f6:4b:ed: 0f:8d:80:ec:a4:29:91:0f:36:5a:7b:9a:7a:11:8c: 72:d1:5f:12:bd:37:08:49:73:2c:c9:1b:bd:92:33: 3b:e2:bb:fd:1f:d0:72:d9:e2:8b:2c:03:8b:66:d7: a6:9f:fd:bc:71:f1:73:31:61:f4:f7:58:ca:1c:e6: 30:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8B:9E:66:8A:54:59:AF:4C:8D:D0:86:1B:50:05:26:CC:62:10:24 X509v3 Authority Key Identifier: keyid:41:15:22:34:60:A3:DD:FA:C8:3A:82:FC:61:B2:BE:9E:C6:26:C2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/QRUiNGCj3frIOoL8YbK-nsYmwgw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QRUiNGCj3frIOoL8YbK-nsYmwgw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B45F/8CA20A1CAAD211EF9AA0EF80C4F9AE02/2017BFC2B07211EF83629B37C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.66.0/24 Signature Algorithm: sha256WithRSAEncryption 75:56:a1:2a:fd:c3:44:72:bc:2f:6c:ff:a0:51:59:2c:c6:aa: 23:16:6e:0d:b9:86:c3:42:d5:34:0a:41:86:5d:c8:5c:66:98: 1b:7e:1d:45:cd:a0:2a:a2:e8:37:a4:9b:83:ff:b1:52:f0:18: 9e:72:ca:5b:9d:35:e6:ef:d1:23:4d:26:eb:43:7a:c2:63:08: 03:29:08:d2:26:01:b8:1f:e0:82:dd:c3:29:8f:ef:b4:df:3b: 9a:e5:8c:b2:80:8d:95:e4:bb:46:de:ed:08:df:8b:ae:96:92: 32:67:af:0d:ec:b4:3d:76:6e:e2:b9:05:f2:a1:54:2e:db:09: 03:5b:e1:8e:8a:8c:86:3f:bb:02:99:c1:c8:95:61:7c:f9:a5: 43:e7:31:ad:eb:e5:e8:fb:4b:f8:0b:0b:a2:f0:5e:0d:c4:e6: e6:c7:aa:a9:13:d2:09:34:ef:51:66:1d:33:b4:d7:92:a5:7d: c0:24:8c:1e:8c:c1:c2:3f:04:ca:a9:60:6c:d5:ea:f4:a6:a4: f6:71:3a:25:1d:33:7c:89:0d:3b:62:36:d5:27:f4:e3:1b:d5: 56:6c:f6:94:a5:a4:26:b0:ef:70:cd:fb:18:2c:0d:2b:fb:ee: 88:eb:67:53:f5:db:68:3d:bd:57:92:20:5c:82:6f:90:4a:30: 64:52:a4:a1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NEI0NUYxMTAvBgNVBAUTKDQxMTUyMjM0NjBBM0RERkFDODNBODJGQzYxQjJCRTlF QzYyNkMyMEMwHhcNMjUwODMxMDQyMTUzWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzY2RlMS01OGY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxG0dD9Wf3T6y6CbeBIQmzbYpr9VIYOb0WQw8QWg2B2X1vbK978J5YI/ICUs2 Ks7+RivYhPyT8EeIPwJu8iqeK26tg/8/QDeGY7R8IAnFNQxAEuUMOcDUu11WtC3L axLq9r03QXTLKnUMdGnV7MqpycLNMbf+9HpHplUrCov5UNWFZxTvj/Pn0CK++798 A5/2xEVssYv59pfR+zJQU56Drtw7FgHj2RGZ85fbaaPSis7fax3B0SoSyKuHOuQS t/f2S+0PjYDspCmRDzZae5p6EYxy0V8SvTcISXMsyRu9kjM74rv9H9By2eKLLAOL Ztemn/28cfFzMWH091jKHOYwWQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHCLnmaK VFmvTI3QhhtQBSbMYhAkMB8GA1UdIwQYMBaAFEEVIjRgo936yDqC/GGyvp7GJsIM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QjQ1Ri84Q0EyMEExQ0FB RDIxMUVGOUFBMEVGODBDNEY5QUUwMi9RUlVpTkdDajNmcklPb0w4WWJLLW5zWW13 Z3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FSVWlOR0NqM2ZySU9vTDhZYkstbnNZbXdndy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NEI0NUYvOENBMjBBMUNBQUQyMTFFRjlBQTBFRjgwQzRGOUFFMDIvMjAxN0JGQzJC MDcyMTFFRjgzNjI5QjM3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACg+kIwDQYJKoZIhvcNAQELBQADggEBAHVWoSr9w0RyvC9s /6BRWSzGqiMWbg25hsNC1TQKQYZdyFxmmBt+HUXNoCqi6Dekm4P/sVLwGJ5yylud Nebv0SNNJutDesJjCAMpCNImAbgf4ILdwymP77TfO5rljLKAjZXku0be7Qjfi66W kjJnrw3stD12buK5BfKhVC7bCQNb4Y6KjIY/uwKZwciVYXz5pUPnMa3r5ej7S/gL C6LwXg3E5ubHqqkT0gk071FmHTO015KlfcAkjB6MwcI/BMqpYGzV6vSmpPZxOiUd M3yJDTtiNtUn9OMb1VZs9pSlpCaw73DN+xgsDSv77ojrZ1P122g9vVeSIFyCb5BK MGRSpKE= -----END CERTIFICATE-----Generated at Sun Oct 19 07:12:12 2025 by rpki-client