$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C3C8F3BE62F311F095173A3FC4F9AE02.roa File: C3C8F3BE62F311F095173A3FC4F9AE02.roa (raw, json) Hash identifier: vgpq2XoihmSdtwNjOtgsN7T8jK43J5/MCTdWedy1Gr4= Subject key identifier: 25:08:CB:7B:41:3D:C0:1E:22:9B:7A:3B:31:F6:69:88:A5:2B:7A:CA Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 069E Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C3C8F3BE62F311F095173A3FC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:51:31 +0000 ROA not before: Thu 28 Aug 2025 14:51:31 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152978 IP address blocks: 160.30.158.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1694 (0x69e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:31 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06cf3-6171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:72:a7:fb:9a:58:5e:95:76:e6:c8:f2:7c:1c: 5c:f6:93:e5:9e:97:50:db:c5:6c:9a:39:bd:43:ba: 11:90:99:f1:5e:b0:2c:4f:29:27:31:e1:5f:92:61: 5e:68:e0:72:de:c9:0f:71:ef:bb:91:48:79:c8:73: 86:1b:7b:75:ec:3d:93:89:eb:cf:9b:42:ff:0e:b6: 6a:e8:86:b8:e6:07:e1:70:b0:5d:86:eb:a6:24:26: be:4d:91:3b:6a:a9:f2:f7:61:e6:17:cb:da:13:a2: 55:51:7d:64:da:2d:40:cb:8c:f9:03:4e:ad:bb:69: 00:db:06:bc:41:3d:a3:68:f4:80:17:3d:07:ff:a2: 93:22:46:92:8c:74:85:22:20:a8:7a:64:5e:1b:8e: d5:30:ac:60:9b:0f:57:19:bb:b1:13:2c:15:77:bd: 37:56:fb:1b:09:44:9e:07:71:00:6d:2a:a4:bc:bf: fe:d4:14:de:97:48:45:52:a3:3e:b9:1d:72:97:21: 3b:3c:b5:63:72:7d:05:af:07:24:03:6e:36:05:16: ad:48:5f:6e:da:5a:11:16:ff:8f:10:31:99:3a:18: 66:74:67:79:dd:cb:67:cf:5f:e2:1a:17:e5:61:60: 44:b2:ef:2b:73:d4:f8:4f:85:5e:6a:d2:a5:43:36: 7c:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:08:CB:7B:41:3D:C0:1E:22:9B:7A:3B:31:F6:69:88:A5:2B:7A:CA X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C3C8F3BE62F311F095173A3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.158.0/23 Signature Algorithm: sha256WithRSAEncryption 3a:a1:56:94:6e:7e:7f:0e:e3:68:81:3f:fe:08:e8:a9:4e:1a: d2:35:6d:b6:5a:92:ae:51:ea:ee:86:29:8b:80:69:40:15:23: 6c:0e:33:44:2b:ea:b1:03:3b:ad:50:8d:c9:dc:27:d8:23:89: 69:a6:69:cb:c6:c6:87:07:1e:94:35:f7:10:53:2f:86:25:a7: b1:02:ae:ca:51:9d:2d:80:40:ba:1e:f4:bd:e8:cb:a5:5b:80: 19:8d:e3:d0:8b:45:a6:16:b9:c7:83:a9:54:b6:d0:77:f7:f5: 18:08:f7:57:fe:ad:f7:ee:93:fa:d1:b1:04:00:fa:f3:2e:63: 47:e6:96:9b:fc:3e:ac:de:3e:05:e7:e2:7e:79:ab:cc:a0:26: 24:ca:81:21:87:1d:9a:d8:73:f9:09:6f:a2:a3:88:92:ef:36: 59:3d:09:52:a7:0a:49:f4:19:bd:30:18:98:f7:76:48:19:01: fe:77:ca:99:65:bd:b6:4c:cd:20:4f:2b:6c:1d:45:06:98:33: 52:77:99:c0:62:c0:3e:56:41:a0:c7:24:3c:ac:a2:01:8b:37: 8a:73:d9:92:57:c9:ca:e3:75:5a:2a:a0:0f:6d:81:b4:51:4b: 8c:50:cb:90:73:74:bc:b6:b0:23:1b:4a:87:f6:c3:4c:c7:01: 56:18:2b:3d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBp4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTMxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmNmMy02MTcxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApnKn+5pYXpV25sjyfBxc9pPlnpdQ28Vsmjm9Q7oRkJnxXrAsTyknMeFfkmFe aOBy3skPce+7kUh5yHOGG3t17D2TievPm0L/DrZq6Ia45gfhcLBdhuumJCa+TZE7 aqny92HmF8vaE6JVUX1k2i1Ay4z5A06tu2kA2wa8QT2jaPSAFz0H/6KTIkaSjHSF IiCoemReG47VMKxgmw9XGbuxEywVd703VvsbCUSeB3EAbSqkvL/+1BTel0hFUqM+ uR1ylyE7PLVjcn0FrwckA242BRatSF9u2loRFv+PEDGZOhhmdGd53ctnz1/iGhfl YWBEsu8rc9T4T4VeatKlQzZ8LQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCUIy3tB PcAeIpt6OzH2aYilK3rKMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQzNDOEYzQkU2 MkYzMTFGMDk1MTczQTNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgHp4wDQYJKoZIhvcNAQELBQADggEBADqhVpRufn8O42iB P/4I6KlOGtI1bbZakq5R6u6GKYuAaUAVI2wOM0Qr6rEDO61QjcncJ9gjiWmmacvG xocHHpQ19xBTL4Ylp7ECrspRnS2AQLoe9L3oy6VbgBmN49CLRaYWuceDqVS20Hf3 9RgI91f+rffuk/rRsQQA+vMuY0fmlpv8PqzePgXn4n55q8ygJiTKgSGHHZrYc/kJ b6KjiJLvNlk9CVKnCkn0Gb0wGJj3dkgZAf53ypllvbZMzSBPK2wdRQaYM1J3mcBi wD5WQaDHJDysogGLN4pz2ZJXycrjdVoqoA9tgbRRS4xQy5BzdLy2sCMbSof2w0zH AVYYKz0= -----END CERTIFICATE-----Generated at Sun Sep 7 00:32:35 2025 by rpki-client