$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/4996A7209D9211EFAD3DCF45C4F9AE02.roa File: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (raw, json) Hash identifier: X6VArMN74z4tgeDbEQQzHaT88BAEASciUle7rIza6xc= Subject key identifier: E9:AC:46:90:D5:7A:72:99:C9:A5:3C:28:EF:8D:2D:94:49:3F:65:42 Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: 70 Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/4996A7209D9211EFAD3DCF45C4F9AE02.roa Signing time: Sat 31 May 2025 06:58:52 +0000 ROA not before: Sat 31 May 2025 06:58:52 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 153167 IP address blocks: 160.25.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:43:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 112 (0x70) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: May 31 06:58:52 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683aa8ac-a32c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:fe:89:df:98:34:72:3c:98:ac:83:98:21:28: 6f:eb:97:e3:33:29:94:7d:f5:01:cd:af:ef:9a:75: b4:12:4e:86:02:81:f6:5d:26:b9:bd:da:5f:1b:1e: c2:e2:58:3f:63:05:63:61:8e:cd:9c:f4:cc:a8:d9: ec:d9:ec:e5:ee:59:be:7e:61:4a:13:13:61:5a:8a: 4b:5c:a0:f1:ed:f5:ac:24:3c:08:54:26:0a:e4:b9: c1:59:30:1f:ae:fb:18:ee:9e:a3:dd:ce:14:ce:78: 8a:ac:92:fc:14:78:6f:81:0f:ff:90:16:72:aa:e8: 81:a8:d7:4d:6e:10:2d:d7:72:75:9c:3b:7d:d6:be: 10:ae:3a:87:de:7a:6f:ad:38:8d:9b:c6:60:2f:a5: 3b:82:5b:4a:ac:91:78:54:a1:be:47:e0:b5:9f:85: 1f:0e:0e:f1:16:12:6d:39:28:59:eb:20:5c:de:df: 21:1c:c6:66:53:93:01:3a:c5:2d:01:e6:45:d9:21: 7a:31:10:23:e0:11:71:59:c4:92:a0:00:1b:e6:8e: 26:08:02:99:b1:72:a8:a1:67:4f:9b:31:14:1e:19: c6:6f:05:c9:28:e6:b7:82:dd:24:8b:2c:61:99:ee: dc:c8:9a:c0:f0:95:9e:b4:6c:fd:fe:73:cf:91:72: 93:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AC:46:90:D5:7A:72:99:C9:A5:3C:28:EF:8D:2D:94:49:3F:65:42 X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/4996A7209D9211EFAD3DCF45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.210.0/23 Signature Algorithm: sha256WithRSAEncryption 24:75:be:c1:1c:f5:54:1a:41:b2:41:1a:ab:3c:ed:d4:4b:00: 1e:31:82:87:88:c4:6e:ad:c8:de:e0:ba:42:dc:76:b9:a1:98: 4a:c5:32:70:2d:a6:42:4c:30:59:f7:08:62:f9:0c:4a:e9:b6: aa:03:be:6b:19:2d:b2:d4:bd:77:37:e7:8f:ab:d9:19:91:8f: 6e:46:a0:bb:2a:fd:07:d5:85:d8:ef:38:c0:b6:a3:49:3b:ed: 1d:37:65:e9:0d:db:15:bd:ec:54:bc:73:ea:b8:d2:d9:f0:d1: 81:59:7f:0a:26:12:92:d6:e0:9e:a4:a5:fe:8b:09:fb:2d:cf: a6:d1:51:41:4c:95:ba:4b:34:e5:37:9b:f4:b7:49:f2:15:d9: 15:c7:47:af:f8:b0:81:60:b7:a8:ff:3b:18:9a:48:8a:76:e9: 0d:0b:7c:51:4b:47:33:cc:d1:6e:8f:b6:25:ed:43:09:b2:d4: ed:77:2f:06:bb:41:95:c0:0d:07:33:ee:8d:41:5a:fb:00:65: 59:cd:44:e7:e5:07:28:d9:e1:a9:ec:59:00:df:39:38:99:d9: 88:e6:ff:44:24:50:f3:22:3f:cf:8c:61:e9:e1:9b:bf:17:62: 07:75:e4:47:47:fa:94:80:62:db:c7:aa:cf:fc:5b:7e:31:89: 01:c3:d9:b1 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBcDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD MTAyNTExMC8GA1UEBRMoMzk5QTdCMUZDNDIwN0VCQTA3MDdBODUxNTE5NUNDNjhF ODM2QUJGODAeFw0yNTA1MzEwNjU4NTJaFw0yNjA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4M2FhOGFjLWEzMmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDE/onfmDRyPJisg5ghKG/rl+MzKZR99QHNr++adbQSToYCgfZdJrm92l8bHsLi WD9jBWNhjs2c9Myo2ezZ7OXuWb5+YUoTE2FaiktcoPHt9awkPAhUJgrkucFZMB+u +xjunqPdzhTOeIqskvwUeG+BD/+QFnKq6IGo101uEC3XcnWcO33WvhCuOofeem+t OI2bxmAvpTuCW0qskXhUob5H4LWfhR8ODvEWEm05KFnrIFze3yEcxmZTkwE6xS0B 5kXZIXoxECPgEXFZxJKgABvmjiYIApmxcqihZ0+bMRQeGcZvBcko5reC3SSLLGGZ 7tzImsDwlZ60bP3+c8+RcpMrAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU6axGkNV6 cpnJpTwo740tlEk/ZUIwHwYDVR0jBBgwFoAUOZp7H8QgfroHB6hRUZXMaOg2q/gw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUMxMDI1LzhEN0I5QkYyOUQ4 NDExRUY4MTdFMTQyMEM0RjlBRTAyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFf Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvT1pwN0g4UWdmcm9IQjZoUlVaWE1hT2cycV9nLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MTAyNS84RDdCOUJGMjlEODQxMUVGODE3RTE0MjBDNEY5QUUwMi80OTk2QTcyMDlE OTIxMUVGQUQzRENGNDVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAZ0jANBgkqhkiG9w0BAQsFAAOCAQEAJHW+wRz1VBpBskEa qzzt1EsAHjGCh4jEbq3I3uC6Qtx2uaGYSsUycC2mQkwwWfcIYvkMSum2qgO+axkt stS9dzfnj6vZGZGPbkaguyr9B9WF2O84wLajSTvtHTdl6Q3bFb3sVLxz6rjS2fDR gVl/CiYSktbgnqSl/osJ+y3PptFRQUyVuks05Teb9LdJ8hXZFcdHr/iwgWC3qP87 GJpIinbpDQt8UUtHM8zRbo+2Je1DCbLU7XcvBrtBlcANBzPujUFa+wBlWc1E5+UH KNnhqexZAN85OJnZiOb/RCRQ8yI/z4xh6eGbvxdiB3XkR0f6lIBi28eqz/xbfjGJ AcPZsQ== -----END CERTIFICATE-----Generated at Wed Jun 4 12:16:11 2025 by rpki-client