$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa File: 5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa (raw, json) Hash identifier: +1ovp2NN4rcx7JakHr8vwRXXsKphyunMjKUMuwNMqnQ= Subject key identifier: 85:9E:D0:25:36:88:5C:61:FF:EF:46:3B:F6:79:C0:C9:F4:50:F9:BE Certificate issuer: /CN=A911C7CD/serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Certificate serial: C5 Authority key identifier: C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa Signing time: Thu 21 Aug 2025 06:12:45 +0000 ROA not before: Thu 21 Aug 2025 06:12:45 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138580 IP address blocks: 160.30.9.0/24 maxlen: 24 160.250.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 197 (0xc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911C7CD, serialNumber=C3372DE1FE9E53C18B30516D964C436722EB3ECB Validity Not Before: Aug 21 06:12:45 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a6b8dd-b720 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e9:ca:63:f5:27:c4:35:38:46:4c:a0:bc:5d: 62:0c:a4:f4:eb:f2:ce:fb:5a:f2:3b:cd:66:bb:09: 29:90:b1:49:41:21:ae:a5:d7:18:55:74:e2:ae:03: f8:f1:e2:e2:eb:56:ae:04:0f:cf:e9:01:17:9a:39: 47:be:28:f8:f8:a8:07:01:56:8c:11:5c:84:c9:f0: 4b:df:40:a7:e7:98:96:a3:72:6b:70:e1:a8:4c:6e: 43:85:40:fa:d8:bc:45:7f:60:b3:a1:af:6e:0f:32: 24:6c:b8:97:21:6a:65:d9:fb:f0:22:d1:1d:c2:b4: 72:88:6b:18:cb:92:fa:e0:cb:2e:09:b5:14:92:13: f7:74:7c:5e:cd:84:0e:f9:31:26:3e:d7:66:fc:52: cd:de:e4:b9:b8:4c:59:31:4e:b2:ac:d8:16:ca:84: 77:14:89:f7:a5:74:30:c0:ef:ab:4f:25:55:9b:9e: e2:9f:88:66:10:20:93:c5:85:53:20:a9:84:99:61: 88:2d:08:ff:1d:85:bb:a5:00:70:68:db:34:a2:20: 74:5d:d9:e6:c0:5c:90:95:03:c4:47:be:fa:4b:b3: 6c:65:c3:95:91:3f:e0:f0:0d:78:ad:f2:12:b6:d7: 1d:8c:88:ac:7a:54:92:1d:ca:fd:49:a4:ec:78:9f: 64:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9E:D0:25:36:88:5C:61:FF:EF:46:3B:F6:79:C0:C9:F4:50:F9:BE X509v3 Authority Key Identifier: keyid:C3:37:2D:E1:FE:9E:53:C1:8B:30:51:6D:96:4C:43:67:22:EB:3E:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/wzct4f6eU8GLMFFtlkxDZyLrPss.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wzct4f6eU8GLMFFtlkxDZyLrPss.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/D64A1FB45EA211EFB1677243C4F9AE02/5C8F0D505ECB11EFA4D8E07CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.9.0/24 160.250.86.0/24 Signature Algorithm: sha256WithRSAEncryption 2c:b8:be:2b:82:44:74:0a:66:25:14:6b:0f:d8:78:d6:3b:b5: c5:2a:d7:e4:fe:77:a1:67:b1:e0:c1:9b:44:90:6a:6f:c9:24: 79:eb:21:e1:c5:fd:90:77:fa:10:22:1a:b7:c4:b2:86:a9:65: 08:02:e4:6f:fb:c1:01:14:85:8c:bf:0b:11:fe:6c:12:28:64: 55:8e:5d:ed:05:12:11:04:92:85:f9:63:e6:9c:53:b2:a6:76: 61:ef:ec:c6:b8:25:e7:29:19:f9:24:ca:8d:5b:2d:41:28:85: 97:65:c2:f5:23:f7:be:8c:0c:29:cd:f9:60:7d:8c:f8:e8:06: b5:42:04:fc:73:81:67:05:ed:b2:d8:68:c5:30:9d:77:27:51: 5c:e8:4d:21:a6:78:28:67:a7:08:15:03:99:13:f8:87:eb:3a: 10:1e:b5:b7:8f:4d:0a:11:18:a2:84:79:cb:98:60:9d:f4:28: 43:28:48:0c:2a:6e:f3:7d:42:d0:0b:4d:cb:74:46:bf:6b:93: 5d:44:3b:5a:1b:f8:2b:dc:c1:95:64:84:7b:5b:85:ca:88:76: 96:95:84:b7:10:cd:1d:c3:7e:23:7d:78:c2:22:10:ea:56:75: e3:7e:1c:70:6f:3e:77:07:7e:4c:af:95:14:ec:64:95:17:b4: 5d:fe:05:bf -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAMUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUM3Q0QxMTAvBgNVBAUTKEMzMzcyREUxRkU5RTUzQzE4QjMwNTE2RDk2NEM0MzY3 MjJFQjNFQ0IwHhcNMjUwODIxMDYxMjQ1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE2YjhkZC1iNzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5enKY/UnxDU4RkygvF1iDKT06/LO+1ryO81muwkpkLFJQSGupdcYVXTirgP4 8eLi61auBA/P6QEXmjlHvij4+KgHAVaMEVyEyfBL30Cn55iWo3JrcOGoTG5DhUD6 2LxFf2Czoa9uDzIkbLiXIWpl2fvwItEdwrRyiGsYy5L64MsuCbUUkhP3dHxezYQO +TEmPtdm/FLN3uS5uExZMU6yrNgWyoR3FIn3pXQwwO+rTyVVm57in4hmECCTxYVT IKmEmWGILQj/HYW7pQBwaNs0oiB0XdnmwFyQlQPER776S7NsZcOVkT/g8A14rfIS ttcdjIiselSSHcr9SaTseJ9kdwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFIWe0CU2 iFxh/+9GO/Z5wMn0UPm+MB8GA1UdIwQYMBaAFMM3LeH+nlPBizBRbZZMQ2ci6z7L MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ENjRBMUZCNDVF QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi93emN0NGY2ZVU4R0xNRkZ0bGt4RFp5THJQ c3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3d6Y3Q0ZjZlVThHTE1GRnRsa3hEWnlMclBzcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUM3Q0QvRDY0QTFGQjQ1RUEyMTFFRkIxNjc3MjQzQzRGOUFFMDIvNUM4RjBENTA1 RUNCMTFFRkE0RDhFMDdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBACgHgkDBACg+lYwDQYJKoZIhvcNAQELBQADggEBACy4viuC RHQKZiUUaw/YeNY7tcUq1+T+d6FnseDBm0SQam/JJHnrIeHF/ZB3+hAiGrfEsoap ZQgC5G/7wQEUhYy/CxH+bBIoZFWOXe0FEhEEkoX5Y+acU7KmdmHv7Ma4JecpGfkk yo1bLUEohZdlwvUj976MDCnN+WB9jPjoBrVCBPxzgWcF7bLYaMUwnXcnUVzoTSGm eChnpwgVA5kT+IfrOhAetbePTQoRGKKEecuYYJ30KEMoSAwqbvN9QtALTct0Rr9r k11EO1ob+CvcwZVkhHtbhcqIdpaVhLcQzR3DfiN9eMIiEOpWdeN+HHBvPncHfkyv lRTsZJUXtF3+Bb8= -----END CERTIFICATE-----Generated at Wed Nov 5 16:29:11 2025 by rpki-client