$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/4996A7209D9211EFAD3DCF45C4F9AE02.roa File: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (raw, json) Hash identifier: B1/WSOOIaUIICIAoWxESuLK0xmGEdJQLFEyBKXVApQY= Subject key identifier: A3:55:F2:CF:FD:CC:07:77:66:10:D5:7A:BD:BC:09:F7:89:E7:56:91 Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: 0141 Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/4996A7209D9211EFAD3DCF45C4F9AE02.roa Signing time: Wed 01 Jul 2026 07:32:08 +0000 ROA not before: Wed 01 Jul 2026 07:32:08 +0000 ROA not after: Fri 30 Oct 2026 00:00:00 +0000 asID: 153167 IP address blocks: 160.25.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 14 Jul 2026 06:33:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 321 (0x141) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Jul 1 07:32:08 2026 GMT Not After : Oct 30 00:00:00 2026 GMT Subject: CN=6a44c278-85e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:19:15:b7:5c:42:69:31:5c:3d:5a:41:3e:2f: 67:72:6f:8a:af:86:d1:f1:cb:37:25:25:03:69:7d: 8a:8b:f4:1f:47:4e:f1:48:86:37:04:7e:a1:e3:79: da:83:66:64:64:bf:4f:27:bf:e5:83:d1:e8:4a:4e: 31:2e:2d:53:f6:9d:a4:c5:7b:aa:b5:b6:e6:63:95: 91:05:a7:07:90:11:8e:ed:73:31:59:fa:64:98:ff: cf:63:3e:74:a7:3d:3d:61:1f:65:4c:8b:86:6a:da: fd:6a:62:5d:27:7d:2b:8b:02:60:a9:d2:66:7d:6e: a4:61:23:19:e8:0b:64:c4:2a:b1:de:3e:97:25:8a: df:07:6a:18:68:51:ac:e4:37:d3:99:95:42:de:e4: 9c:aa:b0:11:5e:cd:9a:f7:75:e2:6e:04:6f:51:59: 44:6a:e9:52:32:d1:38:2a:bc:66:af:0e:9c:59:91: df:59:3a:78:af:07:4b:83:3e:e4:44:6f:df:48:b3: 9b:85:9e:30:07:83:27:f7:d3:d0:1d:6a:ec:59:99: 8e:c4:ff:a5:39:08:ca:d5:84:b3:63:6c:07:44:0c: 5a:f7:a5:65:28:6a:07:53:5c:57:89:52:62:0f:61: c8:cc:76:9c:9b:ae:1d:bd:96:b9:83:f1:44:56:93: ca:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:55:F2:CF:FD:CC:07:77:66:10:D5:7A:BD:BC:09:F7:89:E7:56:91 X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/4996A7209D9211EFAD3DCF45C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.25.210.0/23 Signature Algorithm: sha256WithRSAEncryption d5:95:28:d9:92:cf:02:dd:23:a6:04:9a:08:02:b6:04:42:e9: 66:d5:14:65:5a:b4:54:6a:66:cc:ac:b7:ed:79:04:98:84:87: 15:06:ea:fd:4f:7d:59:20:20:53:d3:93:68:f0:7a:28:3b:cb: 0e:8d:d5:08:52:8d:bd:e7:9b:c2:53:01:2a:60:4f:9d:f7:6e: f8:1b:21:92:2d:ba:e6:68:6f:c5:1f:0b:29:6c:8c:9a:9f:46: 95:30:43:6e:53:31:8d:8f:c3:4b:7b:dc:fd:3a:1f:c1:3f:bf: fc:83:a9:97:cf:fa:0d:e0:20:a6:e6:40:4f:db:a8:63:9d:9a: 32:f0:76:b0:95:2b:7b:00:76:93:b6:17:ed:5a:ef:d2:a8:72: 38:f7:dc:6b:b3:b4:d9:3f:9d:13:11:1f:ad:05:e4:b1:55:36: 17:48:02:6f:56:73:ed:e5:f0:ef:61:30:91:9e:d2:4b:cf:00: af:1d:2b:36:e3:39:ea:46:0c:9b:c1:33:ff:3a:70:1f:2a:7a: 12:66:59:73:c7:2d:b3:5d:00:68:31:ca:2a:8a:ce:b7:34:80: f1:95:f9:3d:26:16:a3:54:4e:c9:62:e4:80:bb:cf:c2:3d:dc: b3:6f:84:71:de:85:37:3b:6d:0f:ba:7c:a2:95:36:5f:01:53: e9:4a:f9:22 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAUEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjYwNzAxMDczMjA4WhcNMjYxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ0YzI3OC04NWU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuRkVt1xCaTFcPVpBPi9ncm+Kr4bR8cs3JSUDaX2Ki/QfR07xSIY3BH6h43na g2ZkZL9PJ7/lg9HoSk4xLi1T9p2kxXuqtbbmY5WRBacHkBGO7XMxWfpkmP/PYz50 pz09YR9lTIuGatr9amJdJ30riwJgqdJmfW6kYSMZ6AtkxCqx3j6XJYrfB2oYaFGs 5DfTmZVC3uScqrARXs2a93XibgRvUVlEaulSMtE4Krxmrw6cWZHfWTp4rwdLgz7k RG/fSLObhZ4wB4Mn99PQHWrsWZmOxP+lOQjK1YSzY2wHRAxa96VlKGoHU1xXiVJi D2HIzHacm64dvZa5g/FEVpPKdQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKNV8s/9 zAd3ZhDVer28CfeJ51aRMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEwMjUvOEQ3QjlCRjI5RDg0MTFFRjgxN0UxNDIwQzRGOUFFMDIvNDk5NkE3MjA5 RDkyMTFFRkFEM0RDRjQ1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBnSMA0GCSqGSIb3DQEBCwUAA4IBAQDVlSjZks8C3SOmBJoIArYE Qulm1RRlWrRUambMrLfteQSYhIcVBur9T31ZICBT05No8HooO8sOjdUIUo2955vC UwEqYE+d9274GyGSLbrmaG/FHwspbIyan0aVMENuUzGNj8NLe9z9Oh/BP7/8g6mX z/oN4CCm5kBP26hjnZoy8HawlSt7AHaTthftWu/SqHI499xrs7TZP50TER+tBeSx VTYXSAJvVnPt5fDvYTCRntJLzwCvHSs24znqRgybwTP/OnAfKnoSZllzxy2zXQBo Mcoqis63NIDxlfk9JhajVE7JYuSAu8/CPdyzb4Rx3oU3O20PunyilTZfAVPpSvki -----END CERTIFICATE-----Generated at Wed Jul 8 22:04:40 2026 by rpki-client