$ rpki-client -vvf rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa File: 7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa (raw, json) Hash identifier: yxYbVT0G3FIFNHaQq21RRd4odOx6/tGbrON4MVMOYMI= Subject key identifier: ED:CE:89:07:DE:0A:C1:0B:26:FD:F0:78:9A:A7:35:A3:A9:31:A7:0D Certificate issuer: /CN=A91186C2/serialNumber=C626583298578D1D4AF7273EBD791C7230A37449 Certificate serial: 98 Authority key identifier: C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa Signing time: Sat 01 Nov 2025 06:50:05 +0000 ROA not before: Sat 01 Nov 2025 06:50:05 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 137054 IP address blocks: 160.191.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 152 (0x98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91186C2, serialNumber=C626583298578D1D4AF7273EBD791C7230A37449 Validity Not Before: Nov 1 06:50:05 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=6905ad9d-4573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:82:f8:49:1c:64:d1:ef:4e:3b:fd:60:42:15: 37:00:ee:f7:2c:b5:75:0a:da:63:5f:13:f9:21:f1: 1f:a7:52:15:a2:7c:fc:46:08:14:4c:40:5e:22:4f: b5:64:bd:28:03:00:f2:fa:39:e3:89:90:72:ab:f0: 84:f6:cb:bb:04:aa:12:0a:df:56:c0:b7:3a:35:0c: f7:a9:57:c7:53:08:83:23:c5:07:c2:48:f3:bc:c0: 42:26:b7:f3:d9:6c:eb:41:92:3b:b0:cc:15:1b:1e: 0e:4c:8f:ed:c5:bd:d8:53:0c:e1:64:58:8d:1b:f8: 57:5e:77:77:bb:ec:c4:11:30:cc:15:16:7c:e9:88: 02:7d:69:fc:c8:bc:d9:1b:77:de:51:fa:f9:40:1d: f8:b4:78:79:83:56:e0:3c:f4:f1:4a:b4:1d:66:03: c8:be:8e:76:c7:76:b2:7a:a9:19:6e:26:f8:dc:d1: ae:a2:5e:72:c8:46:db:76:c4:53:de:b0:03:ed:2f: d9:77:76:fe:40:c8:d4:5c:96:f6:51:23:f1:bf:7d: ca:65:d5:42:21:da:f2:52:2c:b3:b4:aa:68:0a:b9: 82:80:bc:45:74:e3:96:a3:bc:25:3d:1c:b2:9c:b0: ed:96:cc:9e:5a:bf:a2:a2:dc:83:91:47:a7:e9:07: a3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:CE:89:07:DE:0A:C1:0B:26:FD:F0:78:9A:A7:35:A3:A9:31:A7:0D X509v3 Authority Key Identifier: keyid:C6:26:58:32:98:57:8D:1D:4A:F7:27:3E:BD:79:1C:72:30:A3:74:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/xiZYMphXjR1K9yc-vXkccjCjdEk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xiZYMphXjR1K9yc-vXkccjCjdEk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91186C2/1D2F0724D17F11EFB3846928C4F9AE02/7DFFCDA4D17F11EF8FAE452BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.118.0/23 Signature Algorithm: sha256WithRSAEncryption 8c:19:1d:a1:b7:c4:09:eb:5c:67:22:e3:62:7a:33:f4:89:8b: 6e:7e:50:b5:26:6f:f3:55:e4:86:81:5e:04:c4:92:be:78:37: 6e:08:7b:04:70:a1:0a:ca:62:ea:d2:01:31:f5:21:33:24:17: c6:98:52:a1:96:d7:4b:01:f6:d1:36:2b:3d:ec:5d:5c:3c:a0: 75:69:27:eb:7e:e4:d0:9b:2c:1e:d6:54:3d:d0:15:c2:eb:68: fd:d6:3c:e4:08:05:d0:80:a9:1f:c2:57:74:3a:bd:2f:b2:d4: 75:75:d5:ee:be:f7:9b:1d:e1:88:95:a8:61:4a:63:a2:88:51: d8:6c:2b:14:59:40:09:4d:59:da:8e:d0:8d:33:bf:d4:9a:44: c7:d8:b0:32:a8:5b:71:f3:3f:e4:d5:8d:e3:36:43:7e:40:35: 9d:06:ed:ec:f8:43:81:9b:f9:c9:0d:27:be:64:96:42:a1:88: e5:b0:01:59:a0:a7:b8:be:ea:03:2b:5e:9c:db:71:2d:d6:d6: e4:79:59:a0:a3:ec:4b:cc:91:bc:c8:cc:a1:fa:0f:02:3e:5d: 04:f9:44:6a:3e:16:05:d3:85:c6:00:ee:7d:18:46:7e:09:21: 4d:50:54:a3:f8:0b:fa:ad:a7:88:c7:ce:ce:f0:99:d0:3f:b2: 27:b3:e1:75 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTg2QzIxMTAvBgNVBAUTKEM2MjY1ODMyOTg1NzhEMUQ0QUY3MjczRUJENzkxQzcy MzBBMzc0NDkwHhcNMjUxMTAxMDY1MDA1WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA1YWQ5ZC00NTczMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvYL4SRxk0e9OO/1gQhU3AO73LLV1CtpjXxP5IfEfp1IVonz8RggUTEBeIk+1 ZL0oAwDy+jnjiZByq/CE9su7BKoSCt9WwLc6NQz3qVfHUwiDI8UHwkjzvMBCJrfz 2WzrQZI7sMwVGx4OTI/txb3YUwzhZFiNG/hXXnd3u+zEETDMFRZ86YgCfWn8yLzZ G3feUfr5QB34tHh5g1bgPPTxSrQdZgPIvo52x3ayeqkZbib43NGuol5yyEbbdsRT 3rAD7S/Zd3b+QMjUXJb2USPxv33KZdVCIdryUiyztKpoCrmCgLxFdOOWo7wlPRyy nLDtlsyeWr+iotyDkUen6QejSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFO3OiQfe CsELJv3weJqnNaOpMacNMB8GA1UdIwQYMBaAFMYmWDKYV40dSvcnPr15HHIwo3RJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODZDMi8xRDJGMDcyNEQx N0YxMUVGQjM4NDY5MjhDNEY5QUUwMi94aVpZTXBoWGpSMUs5eWMtdlhrY2NqQ2pk RWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3hpWllNcGhYalIxSzl5Yy12WGtjY2pDamRFay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTg2QzIvMUQyRjA3MjREMTdGMTFFRkIzODQ2OTI4QzRGOUFFMDIvN0RGRkNEQTRE MTdGMTFFRjhGQUU0NTJCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv3YwDQYJKoZIhvcNAQELBQADggEBAIwZHaG3xAnrXGci 42J6M/SJi25+ULUmb/NV5IaBXgTEkr54N24IewRwoQrKYurSATH1ITMkF8aYUqGW 10sB9tE2Kz3sXVw8oHVpJ+t+5NCbLB7WVD3QFcLraP3WPOQIBdCAqR/CV3Q6vS+y 1HV11e6+95sd4YiVqGFKY6KIUdhsKxRZQAlNWdqO0I0zv9SaRMfYsDKoW3HzP+TV jeM2Q35ANZ0G7ez4Q4Gb+ckNJ75klkKhiOWwAVmgp7i+6gMrXpzbcS3W1uR5WaCj 7EvMkbzIzKH6DwI+XQT5RGo+FgXThcYA7n0YRn4JIU1QVKP4C/qtp4jHzs7wmdA/ siez4XU= -----END CERTIFICATE-----Generated at Thu Nov 6 00:09:21 2025 by rpki-client