$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9DAC4BF8879E11EF8944AB12C4F9AE02.roa File: 9DAC4BF8879E11EF8944AB12C4F9AE02.roa (raw, json) Hash identifier: ygFbEdoKZdcGa7IyE+X/dbDwLa4wzVHn+G/+0kbdirM= Subject key identifier: 19:72:4E:83:D4:55:D3:8B:C7:B2:E5:7A:92:BE:8B:61:4C:54:4D:06 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0697 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9DAC4BF8879E11EF8944AB12C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:51:26 +0000 ROA not before: Thu 28 Aug 2025 14:51:26 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152955 IP address blocks: 160.25.208.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1687 (0x697) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:26 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06cee-e370 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2d:66:da:37:fc:cb:f4:18:65:34:3d:71:0f: c1:33:df:0e:9c:5b:6e:e4:9d:1f:5e:05:82:49:5a: a4:36:c0:7b:34:ac:d0:96:d4:e6:ae:e0:3d:8b:87: 41:81:e1:0d:4d:71:22:19:71:92:f4:a9:8e:5d:4f: 84:1c:56:15:de:3a:81:ea:54:c6:34:a1:55:4e:1a: 79:81:0f:be:01:97:ad:b2:71:e0:37:d1:ed:68:61: 00:87:51:59:af:63:80:3c:01:62:c9:1e:ef:3d:3b: 1e:09:ca:0f:aa:ce:74:51:42:3a:1b:d2:f3:f3:f0: b1:a8:ea:be:ef:e7:d1:01:fa:c3:a0:d0:0f:78:3f: 16:36:18:e2:7d:6e:d7:b9:16:01:dd:97:36:fe:9b: 2e:32:4f:61:1d:66:a6:9e:74:1b:37:84:b1:68:23: e6:c9:2e:6e:6b:f7:1e:d6:3d:7f:c1:d1:90:fc:06: d1:5f:68:c0:f6:47:a8:9d:13:86:8c:58:1e:37:87: 11:81:48:56:35:f8:1d:fd:d7:b3:dc:53:bf:09:af: 81:63:3c:7b:bc:ab:21:19:c6:3c:15:21:a9:87:44: cf:52:79:80:85:8a:8f:d6:95:0b:a0:1c:38:dc:c5: f6:9f:1b:36:53:32:3d:d4:6f:27:83:34:ec:aa:32: 9c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:72:4E:83:D4:55:D3:8B:C7:B2:E5:7A:92:BE:8B:61:4C:54:4D:06 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/9DAC4BF8879E11EF8944AB12C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.208.0/23 Signature Algorithm: sha256WithRSAEncryption 63:f5:df:e0:01:3e:94:6b:38:63:d1:8d:05:6e:a5:3a:27:cf: 56:82:97:1a:d8:00:35:6a:2e:5d:ef:d2:7b:07:88:44:92:ac: 0a:ee:c7:03:f7:1d:e3:b0:23:6f:43:08:e6:0e:98:a6:c1:1d: 79:b3:f3:50:7b:63:33:16:db:b2:20:95:cf:7e:f5:ce:c3:81: 01:c0:ff:c3:f9:ab:02:3b:e0:6e:0d:94:12:a5:b9:d8:e0:3a: c0:68:b0:6f:98:bb:02:e3:34:e1:b8:52:4a:01:70:50:b0:b5: 12:d6:be:a7:aa:27:35:ef:21:d4:6b:6e:5a:2b:a3:f6:a5:30: 30:01:11:aa:3f:0e:cc:41:6f:73:d1:10:99:ae:ae:c4:80:b7: 3f:4d:e7:51:bf:37:4b:79:c9:3f:96:6d:10:c7:41:36:c9:4a: d6:e1:09:8d:3a:90:45:31:5f:e3:92:38:78:8c:49:69:d5:6d: d7:13:2b:5e:5c:86:4b:d0:62:97:d1:6d:1b:d5:2a:b1:6f:82: 94:64:20:50:a2:aa:69:5d:8d:58:30:f5:22:59:ca:3d:7b:15: 57:7f:14:c1:22:b8:57:c5:21:82:d5:5d:54:21:e2:19:bb:d3: af:dc:f3:ad:38:c5:c5:6d:63:06:a4:52:64:e5:c3:1a:e7:49: d6:8b:98:37 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBpcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTI2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmNlZS1lMzcwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtS1m2jf8y/QYZTQ9cQ/BM98OnFtu5J0fXgWCSVqkNsB7NKzQltTmruA9i4dB geENTXEiGXGS9KmOXU+EHFYV3jqB6lTGNKFVThp5gQ++AZetsnHgN9HtaGEAh1FZ r2OAPAFiyR7vPTseCcoPqs50UUI6G9Lz8/CxqOq+7+fRAfrDoNAPeD8WNhjifW7X uRYB3Zc2/psuMk9hHWamnnQbN4SxaCPmyS5ua/ce1j1/wdGQ/AbRX2jA9keonROG jFgeN4cRgUhWNfgd/dez3FO/Ca+BYzx7vKshGcY8FSGph0TPUnmAhYqP1pULoBw4 3MX2nxs2UzI91G8ngzTsqjKcFwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBlyToPU VdOLx7LlepK+i2FMVE0GMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvOURBQzRCRjg4 NzlFMTFFRjg5NDRBQjEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGdAwDQYJKoZIhvcNAQELBQADggEBAGP13+ABPpRrOGPR jQVupTonz1aClxrYADVqLl3v0nsHiESSrAruxwP3HeOwI29DCOYOmKbBHXmz81B7 YzMW27Iglc9+9c7DgQHA/8P5qwI74G4NlBKludjgOsBosG+YuwLjNOG4UkoBcFCw tRLWvqeqJzXvIdRrbloro/alMDABEao/DsxBb3PREJmursSAtz9N51G/N0t5yT+W bRDHQTbJStbhCY06kEUxX+OSOHiMSWnVbdcTK15chkvQYpfRbRvVKrFvgpRkIFCi qmldjVgw9SJZyj17FVd/FMEiuFfFIYLVXVQh4hm706/c8604xcVtYwakUmTlwxrn SdaLmDc= -----END CERTIFICATE-----Generated at Sun Sep 7 00:35:04 2025 by rpki-client