$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/03FFD61EEF8A11F09F678C04616F56BC.roa File: 03FFD61EEF8A11F09F678C04616F56BC.roa (raw, json) Hash identifier: cAWrYOUdSRsxkdYtOQ0K7zXjxO3SOJaVmj7JDmeFh+o= Subject key identifier: 00:0B:D2:89:C3:64:7B:CE:85:4B:F9:54:17:79:CF:1B:C3:D7:17:9A Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: 0142 Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/03FFD61EEF8A11F09F678C04616F56BC.roa Signing time: Wed 01 Jul 2026 07:32:09 +0000 ROA not before: Wed 01 Jul 2026 07:32:09 +0000 ROA not after: Fri 30 Oct 2026 00:00:00 +0000 asID: 53167 IP address blocks: 160.25.210.0/24 maxlen: 26 160.25.211.0/24 maxlen: 24 160.25.211.0/27 maxlen: 27 160.25.211.32/28 maxlen: 28 160.25.211.48/28 maxlen: 28 160.25.211.64/28 maxlen: 28 160.25.211.80/28 maxlen: 28 160.25.211.96/28 maxlen: 28 160.25.211.112/28 maxlen: 28 160.25.211.128/28 maxlen: 28 160.25.211.144/28 maxlen: 28 160.25.211.160/29 maxlen: 29 160.25.211.168/29 maxlen: 29 160.25.211.176/29 maxlen: 29 160.25.211.184/29 maxlen: 29 160.25.211.192/29 maxlen: 29 160.25.211.200/29 maxlen: 29 160.25.211.208/29 maxlen: 29 160.25.211.216/29 maxlen: 29 160.25.211.224/28 maxlen: 28 160.25.211.240/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 06:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 322 (0x142) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Jul 1 07:32:09 2026 GMT Not After : Oct 30 00:00:00 2026 GMT Subject: CN=6a44c279-4c36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:06:1d:f1:89:78:57:fc:34:c4:36:4d:2f:6a: f8:ed:0c:c7:10:ed:bb:f5:74:d3:1b:95:ad:f3:4c: aa:de:fe:ae:93:92:49:05:7b:59:2a:5a:04:9b:ef: 63:f9:d1:7a:8b:20:2e:73:fa:7d:80:5b:01:33:cb: 79:4b:44:57:84:85:00:02:8f:30:39:db:90:cf:b8: 67:7f:16:2b:91:f0:41:c4:b7:c3:45:01:10:e8:90: ee:7f:9b:be:90:dc:1a:ea:c1:78:e3:a1:72:a9:c2: 47:7e:8b:61:5f:9e:19:a4:e2:e8:f9:f7:11:94:b1: a5:d7:6d:b7:9f:ca:22:86:55:aa:19:4d:75:5c:d2: 28:ba:5a:9f:08:55:1a:21:09:6d:ab:85:7a:ef:1b: c9:9d:43:80:b3:e6:e9:98:58:55:fa:ab:57:71:1c: 5f:b0:14:e3:62:83:92:95:0a:d8:2a:ff:41:30:9e: 46:9d:86:18:ed:c5:7a:3b:e7:46:a1:35:63:31:63: 4a:7d:16:7d:15:6f:f9:18:d4:07:9a:d6:5e:7b:f2: 56:35:ff:6f:84:d4:7b:d5:0f:bc:05:34:b5:ed:50: 0b:34:78:bb:d9:14:f3:3a:3a:78:56:e2:2d:52:e6: c4:32:17:98:8b:93:f7:4d:fb:e4:49:7c:c6:89:b3: 03:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:0B:D2:89:C3:64:7B:CE:85:4B:F9:54:17:79:CF:1B:C3:D7:17:9A X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/03FFD61EEF8A11F09F678C04616F56BC.roa sbgp-ipAddrBlock: critical IPv4: 160.25.210.0/23 Signature Algorithm: sha256WithRSAEncryption 7b:9b:47:9d:d2:29:a0:7a:35:70:3f:5f:90:77:0b:10:f6:b6: ee:0b:83:1b:6e:b7:b6:d8:af:20:bd:24:92:ad:cf:8d:75:01: b5:ef:8e:7c:0b:9b:9b:dc:b3:33:f0:67:44:46:ea:17:f5:78: 27:81:15:52:df:f4:d1:c1:88:b9:bc:5b:de:b1:f7:ec:5e:2d: e4:3a:e3:93:59:97:43:ca:b2:b2:b1:cb:ca:d9:c6:c6:ac:fd: 3e:6b:bd:fb:fa:2d:1a:4d:7e:e9:71:73:d5:6e:28:3d:05:0a: 0b:05:7c:88:af:e3:c2:e1:21:38:43:b0:3f:db:8e:ca:75:07: e1:91:17:eb:59:93:40:d3:0c:df:50:a8:d6:0a:31:78:e2:af: ab:9c:46:df:65:9d:28:90:04:c3:6d:e0:6b:81:68:18:8a:c5: f4:81:2b:f4:46:22:08:c4:05:41:46:e0:d2:07:6b:3b:18:8b: 7f:4b:35:4d:19:94:64:60:74:22:0a:b5:77:e9:31:1b:c6:6c: ff:3f:9c:f5:6f:84:a0:c2:b6:be:3d:86:76:08:b5:11:4c:ef: ad:89:b8:25:03:ae:a6:88:4c:ff:ea:57:9a:a5:fe:3a:76:e1: 71:d6:bb:4f:7d:62:96:be:72:cc:0a:a4:1a:ef:d6:5b:37:75: 82:01:46:2d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAUIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjYwNzAxMDczMjA5WhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0YzI3OS00YzM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3wYd8Yl4V/w0xDZNL2r47QzHEO279XTTG5Wt80yq3v6uk5JJBXtZKloEm+9j +dF6iyAuc/p9gFsBM8t5S0RXhIUAAo8wOduQz7hnfxYrkfBBxLfDRQEQ6JDuf5u+ kNwa6sF446FyqcJHfothX54ZpOLo+fcRlLGl1223n8oihlWqGU11XNIoulqfCFUa IQltq4V67xvJnUOAs+bpmFhV+qtXcRxfsBTjYoOSlQrYKv9BMJ5GnYYY7cV6O+dG oTVjMWNKfRZ9FW/5GNQHmtZee/JWNf9vhNR71Q+8BTS17VALNHi72RTzOjp4VuIt UubEMheYi5P3TfvkSXzGibMDRwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAAL0onD ZHvOhUv5VBd5zxvD1xeaMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEwMjUvOEQ3QjlCRjI5RDg0MTFFRjgxN0UxNDIwQzRGOUFFMDIvMDNGRkQ2MUVF RjhBMTFGMDlGNjc4QzA0NjE2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBnSMA0GCSqGSIb3DQEBCwUAA4IBAQB7m0ed0imgejVwP1+QdwsQ 9rbuC4Mbbre22K8gvSSSrc+NdQG17458C5ub3LMz8GdERuoX9XgngRVS3/TRwYi5 vFvesffsXi3kOuOTWZdDyrKyscvK2cbGrP0+a737+i0aTX7pcXPVbig9BQoLBXyI r+PC4SE4Q7A/247KdQfhkRfrWZNA0wzfUKjWCjF44q+rnEbfZZ0okATDbeBrgWgY isX0gSv0RiIIxAVBRuDSB2s7GIt/SzVNGZRkYHQiCrV36TEbxmz/P5z1b4Sgwra+ PYZ2CLURTO+tibglA66miEz/6leapf46duFx1rtPfWKWvnLMCqQa79ZbN3WCAUYt -----END CERTIFICATE-----Generated at Wed Jul 8 19:57:26 2026 by rpki-client