$ rpki-client -vvf rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/CB6840EE3BAC11EF9C334410C4F9AE02.roa File: CB6840EE3BAC11EF9C334410C4F9AE02.roa (raw, json) Hash identifier: ZvCy+bWFzqtRYDBx0KF4WSusiAuzJtz1KNa6j03cnY8= Subject key identifier: E2:FF:4E:1B:85:AB:53:54:21:84:82:21:DD:41:34:C4:30:F2:86:3D Certificate issuer: /CN=A9194AE2/serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Certificate serial: E2 Authority key identifier: 84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/CB6840EE3BAC11EF9C334410C4F9AE02.roa Signing time: Sun 31 Aug 2025 06:24:24 +0000 ROA not before: Sun 31 Aug 2025 06:24:23 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 55714 IP address blocks: 160.25.2.0/23 maxlen: 23 160.25.2.0/24 maxlen: 24 160.25.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 02:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9194AE2, serialNumber=845D88E0A215145F367D9304BF3F71AEE8EB4C2D Validity Not Before: Aug 31 06:24:23 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68b3ea97-8dcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:4f:c0:ef:4e:c5:aa:85:fb:d2:52:4f:c3:28: 01:47:89:ef:b2:78:65:28:5e:ed:cd:cc:df:23:37: 40:93:62:cc:eb:41:d0:7e:48:40:b0:bc:2b:74:4c: 97:cd:0a:12:fb:04:c3:e5:f5:8d:3b:96:17:0b:f5: 57:d4:73:92:40:b7:3c:bc:6f:96:82:cf:43:20:3d: 8e:4f:54:b2:bc:21:53:96:e6:65:a8:97:9b:43:bb: 60:03:41:82:47:12:81:43:0c:24:08:23:85:3b:69: eb:4b:90:70:51:07:73:df:86:02:75:00:4d:cf:f0: c5:91:b8:b0:79:f2:0d:6d:e3:17:4f:3a:95:e7:80: 5b:1e:37:88:cf:04:05:4b:22:6f:8c:3c:9e:7e:2e: 61:72:1b:d1:7f:38:41:0d:50:17:b5:4e:fc:b2:57: 00:59:d8:1c:12:11:bf:8e:90:d2:cd:3c:86:bf:a2: b5:01:f4:db:6f:04:de:c8:7c:d0:ce:09:7b:ae:c8: b7:c9:96:b9:4c:ef:31:c7:58:d9:2d:1a:12:97:b5: 9d:23:95:2e:4c:d3:e5:02:3b:1a:e4:2e:d2:af:ea: 2e:c5:a7:75:9e:48:33:c9:76:5c:c8:43:c2:da:8b: 3c:5c:a7:a6:c9:6f:31:f3:6d:11:46:a2:a3:b6:fc: e4:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:FF:4E:1B:85:AB:53:54:21:84:82:21:DD:41:34:C4:30:F2:86:3D X509v3 Authority Key Identifier: keyid:84:5D:88:E0:A2:15:14:5F:36:7D:93:04:BF:3F:71:AE:E8:EB:4C:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/hF2I4KIVFF82fZMEvz9xrujrTC0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/hF2I4KIVFF82fZMEvz9xrujrTC0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9194AE2/26A6F44C3BAC11EF9D7EA871C4F9AE02/CB6840EE3BAC11EF9C334410C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.2.0/23 Signature Algorithm: sha256WithRSAEncryption 90:ab:7e:d7:51:f9:7d:ca:36:bc:22:a1:9b:8d:d8:ac:6c:3a: dc:d3:10:e1:03:f8:81:fe:dd:95:6a:04:43:c6:ff:fe:84:8c: df:eb:79:8d:3e:5f:10:d5:ac:7e:43:50:7f:2f:52:8b:21:e2: f1:60:03:81:7b:da:2e:1a:10:6c:c3:6a:34:02:25:82:48:20: ed:fb:e1:f6:d0:5a:44:d3:40:91:f6:4c:fa:94:ef:7b:4f:92: 64:e1:f0:da:51:c7:85:aa:50:90:23:20:d4:6e:df:53:62:4c: 24:8d:46:06:4a:1c:6b:f2:44:99:d5:60:c6:9c:19:59:4d:dc: 79:e3:60:7a:17:d7:d8:3e:a9:ab:bb:30:89:96:52:88:79:8f: 6b:7b:16:36:16:96:f7:fd:3e:6b:0b:db:2b:a2:d4:3f:b9:2b: 3b:33:6c:60:fc:05:79:28:0b:f6:72:72:19:c8:65:02:a9:33: 58:90:d3:2e:a9:13:86:de:ba:9d:09:1c:b0:0f:b6:88:bd:dd: 19:ec:b0:06:25:ff:5d:7e:05:37:1e:a3:69:70:34:d1:57:14: 62:3f:ee:48:1b:9f:d0:2b:4a:2f:fb:47:ca:b8:a9:49:bc:40: 02:77:e8:c6:b1:bb:b2:87:be:d1:35:41:7d:e5:c5:5a:9d:9a: 8b:a0:21:be -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTRBRTIxMTAvBgNVBAUTKDg0NUQ4OEUwQTIxNTE0NUYzNjdEOTMwNEJGM0Y3MUFF RThFQjRDMkQwHhcNMjUwODMxMDYyNDIzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIzZWE5Ny04ZGNjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0E/A707FqoX70lJPwygBR4nvsnhlKF7tzczfIzdAk2LM60HQfkhAsLwrdEyX zQoS+wTD5fWNO5YXC/VX1HOSQLc8vG+Wgs9DID2OT1SyvCFTluZlqJebQ7tgA0GC RxKBQwwkCCOFO2nrS5BwUQdz34YCdQBNz/DFkbiwefINbeMXTzqV54BbHjeIzwQF SyJvjDyefi5hchvRfzhBDVAXtU78slcAWdgcEhG/jpDSzTyGv6K1AfTbbwTeyHzQ zgl7rsi3yZa5TO8xx1jZLRoSl7WdI5UuTNPlAjsa5C7Sr+ouxad1nkgzyXZcyEPC 2os8XKemyW8x820RRqKjtvzk0QIDAQABo4IClTCCApEwHQYDVR0OBBYEFOL/ThuF q1NUIYSCId1BNMQw8oY9MB8GA1UdIwQYMBaAFIRdiOCiFRRfNn2TBL8/ca7o60wt MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NEFFMi8yNkE2RjQ0QzNC QUMxMUVGOUQ3RUE4NzFDNEY5QUUwMi9oRjJJNEtJVkZGODJmWk1Fdno5eHJ1anJU QzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2hGMkk0S0lWRkY4MmZaTUV2ejl4cnVqclRDMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTRBRTIvMjZBNkY0NEMzQkFDMTFFRjlEN0VBODcxQzRGOUFFMDIvQ0I2ODQwRUUz QkFDMTFFRjlDMzM0NDEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGQIwDQYJKoZIhvcNAQELBQADggEBAJCrftdR+X3KNrwi oZuN2KxsOtzTEOED+IH+3ZVqBEPG//6EjN/reY0+XxDVrH5DUH8vUosh4vFgA4F7 2i4aEGzDajQCJYJIIO374fbQWkTTQJH2TPqU73tPkmTh8NpRx4WqUJAjINRu31Ni TCSNRgZKHGvyRJnVYMacGVlN3HnjYHoX19g+qau7MImWUoh5j2t7FjYWlvf9PmsL 2yui1D+5KzszbGD8BXkoC/ZychnIZQKpM1iQ0y6pE4beup0JHLAPtoi93RnssAYl /11+BTceo2lwNNFXFGI/7kgbn9ArSi/7R8q4qUm8QAJ36Maxu7KHvtE1QX3lxVqd mougIb4= -----END CERTIFICATE-----Generated at Fri Sep 5 10:04:01 2025 by rpki-client