$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BFD94B4C6D5611F0925A6B7BC4F9AE02.roa File: BFD94B4C6D5611F0925A6B7BC4F9AE02.roa (raw, json) Hash identifier: oggxoI7ma2d4mD4RuHvniC3R7UDlp1UjBipbOUNyS3M= Subject key identifier: B4:B5:D9:E7:FE:04:CE:43:98:D5:31:D4:BC:F5:E6:39:62:0E:30:65 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0670 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BFD94B4C6D5611F0925A6B7BC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:50:52 +0000 ROA not before: Thu 28 Aug 2025 14:50:52 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140810 IP address blocks: 160.250.216.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:50:52 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06ccc-514e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:5d:7c:c9:1d:5e:38:ce:38:5f:b4:69:27:50: c0:4c:59:15:1f:5d:30:9e:4b:6d:0d:cf:1c:b1:e1: 9d:9e:a0:00:9a:0f:cb:d4:92:e4:a8:45:2b:9e:26: 55:4e:f3:22:ae:ec:3e:cd:1a:8b:73:48:c8:d6:72: 60:f8:9a:29:2d:22:b1:28:ea:68:df:7c:97:3c:d6: d4:66:23:81:0f:2e:81:e4:21:d6:73:09:56:1b:64: 28:34:42:aa:d5:cc:fd:30:1c:09:af:1c:5b:09:1f: 29:10:4a:6e:20:44:71:e1:59:88:7a:11:11:6d:84: 84:b2:f1:51:8b:86:78:0c:2c:a8:16:ba:15:dc:27: c7:ea:dd:ab:10:be:69:a3:ce:50:2e:23:f1:34:9c: 2c:f9:64:e5:a7:a7:fc:2b:4f:77:9d:b5:25:2b:0b: 79:4c:d5:2e:f5:8e:08:ee:19:f0:e9:dc:67:8c:39: e9:34:46:05:8c:94:6f:7f:00:b4:f1:c0:70:7c:5f: 1d:21:3a:d8:82:26:51:0b:0e:b2:31:be:17:f0:f8: 09:a0:cf:f6:90:42:82:f2:6a:13:81:9a:ab:e6:c6: eb:f8:c2:7c:ce:c3:20:c9:0c:07:bd:8a:d3:0c:a3: 44:23:4e:9d:af:60:1f:b4:2a:77:4d:6b:71:54:ff: 7a:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:B5:D9:E7:FE:04:CE:43:98:D5:31:D4:BC:F5:E6:39:62:0E:30:65 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/BFD94B4C6D5611F0925A6B7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.216.0/23 Signature Algorithm: sha256WithRSAEncryption 01:a7:28:8f:96:21:19:36:13:25:ac:18:04:d4:84:df:0d:2e: 95:61:7f:e0:a2:13:8c:c3:aa:c1:24:03:b3:29:d3:b3:24:d8: 19:53:ac:f6:0d:dc:d0:83:8f:d5:7e:c9:e4:d8:fc:5d:39:2b: 5f:91:19:55:00:7d:3f:07:fc:06:39:70:98:7b:68:4f:6e:cf: b6:70:0e:87:c0:2d:ea:45:fa:79:e5:3c:71:f3:09:ae:cb:ed: 9e:d8:14:08:71:ce:f0:76:12:2b:11:e1:21:e2:7e:af:60:5c: 62:11:1d:6c:e4:c8:b6:74:ad:eb:3c:68:e2:94:77:6b:22:42: fb:ea:8e:5f:9d:2f:63:cd:78:b2:e9:59:af:59:c6:03:bc:bf: 4e:6f:99:8d:f9:c4:ac:d3:6c:2b:de:0e:17:34:1e:f8:55:82: c3:0c:74:0d:d0:30:ed:67:96:0e:60:23:76:15:e2:14:89:45: bc:37:97:9c:34:fd:8f:e0:11:9a:32:1d:2a:e1:42:22:b7:c4: ec:b0:cd:22:67:6e:f6:da:c2:fe:f1:7f:d7:87:3b:e4:ce:38: 50:c7:e6:8a:03:d5:59:b1:cb:9e:98:02:c8:42:3f:01:5b:d1: e3:ed:d9:88:76:00:73:a6:d3:68:9e:fd:3b:48:a6:c2:d3:5e: 01:a8:14:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MDUyWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmNjYy01MTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4V18yR1eOM44X7RpJ1DATFkVH10wnkttDc8cseGdnqAAmg/L1JLkqEUrniZV TvMiruw+zRqLc0jI1nJg+JopLSKxKOpo33yXPNbUZiOBDy6B5CHWcwlWG2QoNEKq 1cz9MBwJrxxbCR8pEEpuIERx4VmIehERbYSEsvFRi4Z4DCyoFroV3CfH6t2rEL5p o85QLiPxNJws+WTlp6f8K093nbUlKwt5TNUu9Y4I7hnw6dxnjDnpNEYFjJRvfwC0 8cBwfF8dITrYgiZRCw6yMb4X8PgJoM/2kEKC8moTgZqr5sbr+MJ8zsMgyQwHvYrT DKNEI06dr2AftCp3TWtxVP96LQIDAQABo4IClTCCApEwHQYDVR0OBBYEFLS12ef+ BM5DmNUx1Lz15jliDjBlMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQkZEOTRCNEM2 RDU2MTFGMDkyNUE2QjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGg+tgwDQYJKoZIhvcNAQELBQADggEBAAGnKI+WIRk2EyWs GATUhN8NLpVhf+CiE4zDqsEkA7Mp07Mk2BlTrPYN3NCDj9V+yeTY/F05K1+RGVUA fT8H/AY5cJh7aE9uz7ZwDofALepF+nnlPHHzCa7L7Z7YFAhxzvB2EisR4SHifq9g XGIRHWzkyLZ0res8aOKUd2siQvvqjl+dL2PNeLLpWa9ZxgO8v05vmY35xKzTbCve Dhc0HvhVgsMMdA3QMO1nlg5gI3YV4hSJRbw3l5w0/Y/gEZoyHSrhQiK3xOywzSJn bvbawv7xf9eHO+TOOFDH5ooD1Vmxy56YAshCPwFb0ePt2Yh2AHOm02ie/TtIpsLT XgGoFO8= -----END CERTIFICATE-----Generated at Sun Sep 7 00:29:39 2025 by rpki-client