$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF1FE2BAB5E511EFBD3C4A3EC4F9AE02.roa File: CF1FE2BAB5E511EFBD3C4A3EC4F9AE02.roa (raw, json) Hash identifier: uTCxX/uNHeaCJsBevNMzxT8Z+ENBsc7Qf6jzceZMZ+s= Subject key identifier: 57:24:3E:3E:59:BF:FE:21:78:3A:B3:B1:6D:80:EE:B9:5E:EE:18:89 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 06AB Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF1FE2BAB5E511EFBD3C4A3EC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:51:41 +0000 ROA not before: Thu 28 Aug 2025 14:51:41 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153005 IP address blocks: 160.187.156.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1707 (0x6ab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:41 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06cfd-c06d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f2:0f:29:19:7e:bd:f0:05:f7:13:ee:63:ae: bf:4c:85:a1:3c:e0:c3:50:6b:07:29:93:fb:4f:65: 45:27:4d:6e:3a:ab:ea:06:6a:fd:18:f0:88:42:af: 89:2b:cc:4d:5b:a9:cb:d8:d9:18:33:c6:1f:96:85: d4:ee:93:c6:4d:e1:f2:38:d1:64:48:63:56:16:59: 9b:e1:03:70:55:1e:90:cb:87:a6:07:0b:37:c5:af: 78:94:88:87:80:42:c0:11:52:77:cb:ab:4c:99:76: e9:e5:b0:0e:18:8b:64:33:d3:14:32:fc:c1:95:a9: a4:de:9e:55:52:81:8e:ba:d3:e1:1a:46:a9:11:f8: e3:b6:8d:d6:0b:42:7c:8e:76:de:cf:df:24:c2:7d: db:9a:17:b9:00:e4:f5:06:c8:89:3f:3f:62:e9:f0: 70:8b:42:c0:28:73:f1:c6:1a:10:dd:47:bd:35:18: b9:c2:42:54:12:55:e2:84:44:4b:83:51:01:ba:2e: fe:d5:0a:37:8d:cd:d9:64:02:d9:94:54:ff:f2:29: 4a:9b:5a:d3:61:dc:62:4c:09:29:f8:42:92:24:85: fc:ab:12:b1:b3:7e:60:0d:71:b5:73:7a:13:0c:bf: ae:85:5c:6a:1e:17:c0:d3:b9:d1:75:d0:96:42:b1: f7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:24:3E:3E:59:BF:FE:21:78:3A:B3:B1:6D:80:EE:B9:5E:EE:18:89 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/CF1FE2BAB5E511EFBD3C4A3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.156.0/23 Signature Algorithm: sha256WithRSAEncryption 92:b8:3a:49:96:dc:e0:79:a1:15:bc:e3:4e:85:9e:7f:67:2c: 5e:f0:3d:b6:0c:94:0f:31:0a:f0:30:2f:28:f3:57:dc:70:b8: ed:1f:cd:b5:42:90:18:a4:9b:58:2f:4c:ad:ed:f1:ab:14:79: 21:f1:51:8c:16:1c:e8:bb:b1:a1:58:f7:74:56:c1:11:8e:cb: 24:3e:cc:e9:17:55:be:cf:14:b6:52:04:40:70:46:cb:8e:af: e2:6c:ff:4b:cb:69:94:26:d6:b5:6d:df:8f:78:5e:9d:de:c6: 3b:87:7f:b9:a6:2c:4e:6f:48:f7:0d:76:88:27:19:a4:c6:e3: 3f:1d:cd:b2:ee:ed:e8:b9:08:9a:ca:d9:85:ec:50:ee:93:52: 09:87:96:cd:0b:d9:04:7f:6a:3b:bc:82:3c:c0:41:fc:05:39: e7:72:75:48:58:85:1e:ca:59:7d:bf:78:85:b6:da:89:f9:f7: 40:61:7c:3e:48:22:9b:cd:49:4e:b1:0f:cb:9c:e4:ae:fa:74: 02:96:69:ab:66:8e:af:70:05:1c:ae:1c:63:c2:97:52:4a:e5: 12:58:23:c7:7e:bf:21:02:33:58:31:71:c0:a7:da:e1:36:65: be:46:3b:a3:15:8a:95:8b:55:87:1f:77:c2:c6:69:33:fc:29: c7:ca:9e:06 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBqswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTQxWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmNmZC1jMDZkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4vIPKRl+vfAF9xPuY66/TIWhPODDUGsHKZP7T2VFJ01uOqvqBmr9GPCIQq+J K8xNW6nL2NkYM8YfloXU7pPGTeHyONFkSGNWFlmb4QNwVR6Qy4emBws3xa94lIiH gELAEVJ3y6tMmXbp5bAOGItkM9MUMvzBlamk3p5VUoGOutPhGkapEfjjto3WC0J8 jnbez98kwn3bmhe5AOT1BsiJPz9i6fBwi0LAKHPxxhoQ3Ue9NRi5wkJUElXihERL g1EBui7+1Qo3jc3ZZALZlFT/8ilKm1rTYdxiTAkp+EKSJIX8qxKxs35gDXG1c3oT DL+uhVxqHhfA07nRddCWQrH3lwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFckPj5Z v/4heDqzsW2A7rle7hiJMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQ0YxRkUyQkFC NUU1MTFFRkJEM0M0QTNFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgu5wwDQYJKoZIhvcNAQELBQADggEBAJK4OkmW3OB5oRW8 406Fnn9nLF7wPbYMlA8xCvAwLyjzV9xwuO0fzbVCkBikm1gvTK3t8asUeSHxUYwW HOi7saFY93RWwRGOyyQ+zOkXVb7PFLZSBEBwRsuOr+Js/0vLaZQm1rVt3494Xp3e xjuHf7mmLE5vSPcNdognGaTG4z8dzbLu7ei5CJrK2YXsUO6TUgmHls0L2QR/aju8 gjzAQfwFOedydUhYhR7KWX2/eIW22on590BhfD5IIpvNSU6xD8uc5K76dAKWaatm jq9wBRyuHGPCl1JK5RJYI8d+vyECM1gxccCn2uE2Zb5GO6MVipWLVYcfd8LGaTP8 KcfKngY= -----END CERTIFICATE-----Generated at Sun Sep 7 00:28:04 2025 by rpki-client