$ rpki-client -vvf rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/8B9AE5E6843211F099BF476CC4F9AE02.roa File: 8B9AE5E6843211F099BF476CC4F9AE02.roa (raw, json) Hash identifier: f0yL6dm4aQQSfB+ngsxTE6LWk8z3YuY+EKGRY0bzeRc= Subject key identifier: 99:B9:41:3D:B4:2F:B4:0B:C8:E7:18:B5:62:1D:52:2B:E0:D4:9C:E4 Certificate issuer: /CN=A9170F11/serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Certificate serial: A0 Authority key identifier: 21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/8B9AE5E6843211F099BF476CC4F9AE02.roa Signing time: Thu 28 Aug 2025 17:15:07 +0000 ROA not before: Thu 28 Aug 2025 17:15:07 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 153383 IP address blocks: 160.191.148.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 06:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9170F11, serialNumber=211A021E8ABDF4DBF20708226CC8328FD24131DF Validity Not Before: Aug 28 17:15:07 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=68b08e9b-4a2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:11:ad:f3:c4:1e:52:9d:6d:bd:a9:e4:07:8b: c8:48:0e:a8:9f:a0:5b:62:80:65:35:e1:43:70:2a: 48:9f:c9:22:39:3c:3e:a0:64:e4:0f:6f:40:0c:d9: 23:9e:40:70:b6:b0:d9:08:f1:16:92:5e:0a:a3:fb: 56:78:a5:63:ae:b2:45:62:0c:00:f5:27:76:d5:dc: 43:de:97:d0:e0:f9:4e:cb:9e:44:d7:73:b1:ed:7e: c4:e3:bf:17:ab:54:8a:f5:a8:0f:99:f4:54:74:9f: 8c:43:4f:68:95:9b:0f:a0:99:61:17:a5:ea:4d:de: bc:7c:da:f7:3b:af:e4:f3:b7:f6:b0:a1:82:c9:bb: 5e:89:34:f2:2a:fc:3a:95:6a:f9:fb:01:72:62:03: ee:8e:67:f5:b9:da:dd:47:d2:de:e7:45:46:fd:94: 27:33:86:0c:b4:38:18:fc:de:1d:2d:9e:c7:d2:e1: 66:ab:af:0e:2c:fe:05:cc:f5:68:4e:e5:dd:30:6b: 01:ff:60:1d:be:6b:3e:51:7e:51:0c:6e:c8:42:d7: e2:a3:49:16:93:97:a0:4e:df:62:d1:ad:33:20:3f: 9f:66:24:25:29:eb:3a:c7:99:fe:05:57:60:06:86: 37:01:15:4d:07:1f:8f:83:0b:c1:c0:fe:c5:6b:ca: a1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B9:41:3D:B4:2F:B4:0B:C8:E7:18:B5:62:1D:52:2B:E0:D4:9C:E4 X509v3 Authority Key Identifier: keyid:21:1A:02:1E:8A:BD:F4:DB:F2:07:08:22:6C:C8:32:8F:D2:41:31:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/IRoCHoq99NvyBwgibMgyj9JBMd8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/IRoCHoq99NvyBwgibMgyj9JBMd8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170F11/E16389109A7C11EF84950D33C4F9AE02/8B9AE5E6843211F099BF476CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.148.0/23 Signature Algorithm: sha256WithRSAEncryption 6e:c9:49:5b:7c:03:8d:c4:88:e1:3f:9c:ed:62:6c:ba:8b:4e: 9f:84:00:26:28:19:c4:bd:71:7b:e0:79:9b:b4:ba:d0:c6:a2: 3c:ce:93:b9:e7:0b:b0:2d:0c:8e:3a:f3:80:b7:4e:32:38:fb: b1:b2:61:a1:18:99:1f:c9:8f:d9:5f:16:fe:c9:f9:ac:48:a5: 48:b1:85:d1:9f:f2:3d:23:b3:67:29:a7:ce:15:4f:21:b6:d7: c8:2d:4e:a5:ce:fb:5e:50:23:3c:26:8e:21:e0:53:1e:e2:a0: 8b:da:0c:97:bf:32:51:84:9d:64:41:48:88:5c:51:ab:5a:8c: 8e:84:9f:53:86:73:01:f9:c8:f9:33:e5:46:a2:3b:06:2c:a1: b5:9e:0f:2c:8e:d8:35:6c:0e:14:3d:4d:43:87:29:fd:11:f0: 86:0d:81:e5:ed:14:69:07:ba:35:bc:86:a2:ea:68:37:52:40: a5:49:73:ed:6c:77:3b:8b:89:19:1b:a1:4b:64:6f:26:e6:0e: 96:e8:ad:3d:aa:ad:28:80:45:64:65:6c:53:a8:14:14:a6:5c: 84:10:0b:3f:fc:bb:8d:c1:1e:23:f3:49:9e:12:38:1c:68:6f: e7:dc:47:d0:4e:3e:8f:15:00:0f:9c:24:38:ce:e4:00:e8:a3: 38:9d:a5:19 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzBGMTExMTAvBgNVBAUTKDIxMUEwMjFFOEFCREY0REJGMjA3MDgyMjZDQzgzMjhG RDI0MTMxREYwHhcNMjUwODI4MTcxNTA3WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwOGU5Yi00YTJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRGt88QeUp1tvankB4vISA6on6BbYoBlNeFDcCpIn8kiOTw+oGTkD29ADNkj nkBwtrDZCPEWkl4Ko/tWeKVjrrJFYgwA9Sd21dxD3pfQ4PlOy55E13Ox7X7E478X q1SK9agPmfRUdJ+MQ09olZsPoJlhF6XqTd68fNr3O6/k87f2sKGCybteiTTyKvw6 lWr5+wFyYgPujmf1udrdR9Le50VG/ZQnM4YMtDgY/N4dLZ7H0uFmq68OLP4FzPVo TuXdMGsB/2Advms+UX5RDG7IQtfio0kWk5egTt9i0a0zID+fZiQlKes6x5n+BVdg BoY3ARVNBx+PgwvBwP7Fa8qh2wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJm5QT20 L7QLyOcYtWIdUivg1JzkMB8GA1UdIwQYMBaAFCEaAh6KvfTb8gcIImzIMo/SQTHf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MEYxMS9FMTYzODkxMDlB N0MxMUVGODQ5NTBEMzNDNEY5QUUwMi9JUm9DSG9xOTlOdnlCd2dpYk1neWo5SkJN ZDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lSb0NIb3E5OU52eUJ3Z2liTWd5ajlKQk1kOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzBGMTEvRTE2Mzg5MTA5QTdDMTFFRjg0OTUwRDMzQzRGOUFFMDIvOEI5QUU1RTY4 NDMyMTFGMDk5QkY0NzZDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv5QwDQYJKoZIhvcNAQELBQADggEBAG7JSVt8A43EiOE/ nO1ibLqLTp+EACYoGcS9cXvgeZu0utDGojzOk7nnC7AtDI4684C3TjI4+7GyYaEY mR/Jj9lfFv7J+axIpUixhdGf8j0js2cpp84VTyG218gtTqXO+15QIzwmjiHgUx7i oIvaDJe/MlGEnWRBSIhcUatajI6En1OGcwH5yPkz5UaiOwYsobWeDyyO2DVsDhQ9 TUOHKf0R8IYNgeXtFGkHujW8hqLqaDdSQKVJc+1sdzuLiRkboUtkbybmDpborT2q rSiARWRlbFOoFBSmXIQQCz/8u43BHiPzSZ4SOBxob+fcR9BOPo8VAA+cJDjO5ADo ozidpRk= -----END CERTIFICATE-----Generated at Sat Sep 6 20:29:41 2025 by rpki-client