$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7BA39106F58A11EFA9C8FE1EC4F9AE02.roa File: 7BA39106F58A11EFA9C8FE1EC4F9AE02.roa (raw, json) Hash identifier: Hs3zkNuuVcdGDlXT0X5q0wQwRsTatE6lc/OImGriQXY= Subject key identifier: 46:4D:0E:01:1C:93:1B:D7:03:EE:58:A4:D2:C2:67:28:8F:F3:CC:96 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 068E Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7BA39106F58A11EFA9C8FE1EC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:51:18 +0000 ROA not before: Thu 28 Aug 2025 14:51:18 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152935 IP address blocks: 160.250.166.0/23 maxlen: 23 161.248.98.0/23 maxlen: 23 161.248.210.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 14:32:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1678 (0x68e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:18 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06ce5-4069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:1c:df:8d:01:de:92:52:9b:c8:13:b8:2a:eb: e6:e2:bc:ca:b2:9b:8b:e7:6b:b5:06:78:c7:99:58: b2:6f:8a:66:9b:5e:89:50:36:e6:4e:72:35:c1:ba: 95:87:c3:ef:36:7f:c5:e7:97:7a:61:c0:fb:fa:37: 7b:94:e5:21:aa:ab:1b:75:a2:9c:b5:ea:9c:0f:70: f6:29:46:63:58:2d:96:4d:54:af:5a:5d:17:7c:8b: d5:bc:99:11:2f:d7:55:f2:7d:95:cf:b7:6c:9c:a4: 8c:b6:56:74:36:78:81:4b:3e:2a:10:25:19:ca:bf: 4b:ae:8c:c1:f6:13:10:25:d4:59:89:a1:ab:66:38: 0d:c2:ef:8c:ed:f0:5e:05:f4:c5:e9:18:94:ab:1a: 57:4a:be:43:bf:06:58:16:fe:8b:2e:07:35:fd:98: d1:99:fd:5e:b0:86:8b:45:ee:38:ac:6a:e4:9b:f5: cb:3c:d8:fe:8e:bd:f5:61:47:07:74:75:d0:ae:f7: e5:a8:1b:71:73:76:7d:3b:c2:18:45:e6:13:9f:41: 17:39:f5:b5:21:ba:75:f0:b5:cf:2e:4a:84:9a:d1: d3:f5:29:fe:3d:15:2f:d2:f9:d6:be:be:ef:59:54: 17:c9:d1:c9:db:44:ee:00:9b:97:32:1a:f6:3b:8a: 9f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:4D:0E:01:1C:93:1B:D7:03:EE:58:A4:D2:C2:67:28:8F:F3:CC:96 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/7BA39106F58A11EFA9C8FE1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.166.0/23 161.248.98.0/23 161.248.210.0/23 Signature Algorithm: sha256WithRSAEncryption ae:c2:5a:c2:71:e0:36:82:e0:dc:a2:70:5a:e9:d9:11:10:07: 61:8d:10:37:17:5e:56:94:c1:3e:24:7b:d7:d5:76:51:98:7b: 00:d0:b3:59:6b:75:d5:bd:fc:c7:4a:85:cc:7b:98:3f:fb:b5: b5:d1:9d:eb:37:7b:71:d4:53:26:29:ee:ef:67:e7:36:b7:84: 8d:8d:7b:0e:aa:d7:68:a5:99:c4:09:18:a8:65:2d:58:e1:0e: 6f:03:7c:21:ad:36:10:79:cc:b4:89:74:f0:86:96:88:b6:71: cc:81:3f:6d:01:14:48:19:2e:9e:2a:a8:d8:59:ab:48:cd:95: 34:e1:11:dd:57:1b:b6:51:c7:eb:1a:4d:3b:c9:31:3a:67:ff: 41:c3:77:73:a0:92:77:c9:92:d4:ae:dd:cb:3d:cd:f5:59:fe: 72:03:8d:80:30:94:26:49:e7:06:ef:4d:43:9b:60:19:22:f1: a7:07:e5:b0:c3:dd:f2:7c:f0:db:14:dd:30:2e:e5:09:fe:71: 99:76:56:58:fb:01:bf:49:aa:da:7c:8d:64:e7:51:63:bb:31: 44:44:9d:be:ee:8c:3f:67:fb:09:a2:6a:61:5e:87:52:f0:e6: 6b:40:ad:6b:65:73:10:e6:8d:85:43:23:f3:c2:35:a5:cc:a6: 2b:d4:c2:f7 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBo4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTE4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmNlNS00MDY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyRzfjQHeklKbyBO4Kuvm4rzKspuL52u1BnjHmViyb4pmm16JUDbmTnI1wbqV h8PvNn/F55d6YcD7+jd7lOUhqqsbdaKcteqcD3D2KUZjWC2WTVSvWl0XfIvVvJkR L9dV8n2Vz7dsnKSMtlZ0NniBSz4qECUZyr9LrozB9hMQJdRZiaGrZjgNwu+M7fBe BfTF6RiUqxpXSr5DvwZYFv6LLgc1/ZjRmf1esIaLRe44rGrkm/XLPNj+jr31YUcH dHXQrvflqBtxc3Z9O8IYReYTn0EXOfW1Ibp18LXPLkqEmtHT9Sn+PRUv0vnWvr7v WVQXydHJ20TuAJuXMhr2O4qfDQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFEZNDgEc kxvXA+5YpNLCZyiP88yWMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvN0JBMzkxMDZG NThBMTFFRkE5QzhGRTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGg+qYDBAGh+GIDBAGh+NIwDQYJKoZIhvcNAQELBQADggEB AK7CWsJx4DaC4NyicFrp2REQB2GNEDcXXlaUwT4ke9fVdlGYewDQs1lrddW9/MdK hcx7mD/7tbXRnes3e3HUUyYp7u9n5za3hI2New6q12ilmcQJGKhlLVjhDm8DfCGt NhB5zLSJdPCGloi2ccyBP20BFEgZLp4qqNhZq0jNlTThEd1XG7ZRx+saTTvJMTpn /0HDd3OgknfJktSu3cs9zfVZ/nIDjYAwlCZJ5wbvTUObYBki8acH5bDD3fJ88NsU 3TAu5Qn+cZl2Vlj7Ab9Jqtp8jWTnUWO7MUREnb7ujD9n+wmiamFeh1Lw5mtArWtl cxDmjYVDI/PCNaXMpivUwvc= -----END CERTIFICATE-----Generated at Tue Sep 9 03:40:17 2025 by rpki-client