$ rpki-client -vvf rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/FEF58B2CA4FD11F0B44CA476C4F9AE02.roa File: FEF58B2CA4FD11F0B44CA476C4F9AE02.roa (raw, json) Hash identifier: iGhDBnOxWhw1jSJu/LLfS77DST3/2+GFITpYk8hPiGQ= Subject key identifier: CD:71:6E:65:6C:C3:61:3D:B0:A3:C9:61:21:F9:4F:DD:2E:D5:36:D7 Certificate issuer: /CN=A911F753/serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Certificate serial: A8 Authority key identifier: 2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/FEF58B2CA4FD11F0B44CA476C4F9AE02.roa Signing time: Thu 09 Oct 2025 10:52:06 +0000 ROA not before: Thu 09 Oct 2025 10:52:06 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 214441 IP address blocks: 160.250.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 06:16:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911F753, serialNumber=2D49B3AE6DA18B63464A3177AB32101942E6A51A Validity Not Before: Oct 9 10:52:06 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=68e793d6-3a66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c9:50:bd:bb:9f:85:00:2c:9d:9e:b1:13:41: 24:22:ba:2e:2e:b0:82:2f:c8:17:ae:2e:1b:b8:a7: 54:68:fa:5a:39:d2:a7:00:76:b2:af:e2:fe:a4:d3: 2c:ec:e3:a1:52:d9:22:ee:6e:17:af:0e:63:da:cd: dc:4d:5a:41:6a:50:93:4d:07:ab:1f:14:1e:ed:68: 26:94:e8:80:67:3a:03:8b:09:4b:44:3b:57:a8:d7: bf:8b:66:1f:26:97:1c:32:83:ce:a2:0e:18:2d:79: df:92:79:99:04:a9:da:0a:2d:64:15:65:59:fe:2e: ec:89:c8:4e:5e:20:1b:b8:90:2f:07:f1:bd:53:14: 19:13:79:8b:f8:79:42:4b:05:ca:8d:27:1a:94:c6: 31:76:69:c7:92:00:6e:38:da:9a:23:2a:31:2c:58: fe:34:4e:17:7d:0b:71:e6:08:ec:2b:df:c2:13:d5: fe:52:d4:0e:7a:99:8e:0b:9e:97:f5:69:47:3a:30: f7:97:9d:f1:23:d5:71:a7:0c:4a:a3:8c:75:d6:db: 82:13:e7:35:42:93:e9:ab:79:b2:6a:52:b6:b5:16: d2:5d:96:ce:f0:f1:d7:aa:a0:c4:ae:a5:18:5c:4a: 06:98:f6:eb:e3:72:1a:47:c3:49:c8:99:26:81:81: 74:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:71:6E:65:6C:C3:61:3D:B0:A3:C9:61:21:F9:4F:DD:2E:D5:36:D7 X509v3 Authority Key Identifier: keyid:2D:49:B3:AE:6D:A1:8B:63:46:4A:31:77:AB:32:10:19:42:E6:A5:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/LUmzrm2hi2NGSjF3qzIQGULmpRo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LUmzrm2hi2NGSjF3qzIQGULmpRo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911F753/7809DA02BC0D11EF9B4AD649C4F9AE02/FEF58B2CA4FD11F0B44CA476C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.225.0/24 Signature Algorithm: sha256WithRSAEncryption 40:65:2c:bb:5b:27:b9:28:c4:25:94:91:46:92:66:64:05:45: b9:82:be:17:59:d8:8f:f8:fa:43:99:34:f4:6b:68:f1:2b:42: 76:0f:7c:55:7d:5b:03:74:c0:61:74:ec:d2:51:fa:2a:69:d8: 48:4c:26:c8:89:df:5c:b5:ec:1d:1f:5c:b9:ce:6c:6d:2c:30: db:98:4c:d1:f1:dd:d4:3c:b1:49:3d:7a:7c:6a:db:97:c9:33: c2:1c:9b:bc:a5:9b:59:8d:3c:79:22:8a:b7:02:8f:0a:a7:30: a9:24:56:3f:73:c9:b9:02:e9:79:50:e0:30:52:65:39:f8:6d: 91:51:41:59:d0:e6:5e:07:73:bd:97:dd:74:92:5f:43:68:b2: f8:e6:38:f9:bd:e7:05:22:89:e5:25:82:cf:af:67:7c:31:dd: 6c:94:bf:6a:fc:d2:f4:b0:d9:48:20:e4:28:b0:8f:db:dc:02: e7:8b:6b:dd:e0:12:ea:6b:c1:6a:64:f8:bf:a6:a3:02:5b:1f: fe:18:dc:fd:58:c1:d7:18:f5:d8:ae:71:73:a4:61:b3:72:07: eb:aa:60:bb:6b:00:80:82:ff:fc:4d:b1:29:e3:38:c5:67:a2: 4e:40:8d:ff:d9:a5:79:9e:1a:cc:62:d8:51:9a:84:00:ec:e0: 12:da:d7:14 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUY3NTMxMTAvBgNVBAUTKDJENDlCM0FFNkRBMThCNjM0NjRBMzE3N0FCMzIxMDE5 NDJFNkE1MUEwHhcNMjUxMDA5MTA1MjA2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU3OTNkNi0zYTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlMlQvbufhQAsnZ6xE0EkIrouLrCCL8gXri4buKdUaPpaOdKnAHayr+L+pNMs 7OOhUtki7m4Xrw5j2s3cTVpBalCTTQerHxQe7WgmlOiAZzoDiwlLRDtXqNe/i2Yf JpccMoPOog4YLXnfknmZBKnaCi1kFWVZ/i7sichOXiAbuJAvB/G9UxQZE3mL+HlC SwXKjScalMYxdmnHkgBuONqaIyoxLFj+NE4XfQtx5gjsK9/CE9X+UtQOepmOC56X 9WlHOjD3l53xI9VxpwxKo4x11tuCE+c1QpPpq3myalK2tRbSXZbO8PHXqqDErqUY XEoGmPbr43IaR8NJyJkmgYF0PwIDAQABo4IClTCCApEwHQYDVR0OBBYEFM1xbmVs w2E9sKPJYSH5T90u1TbXMB8GA1UdIwQYMBaAFC1Js65toYtjRkoxd6syEBlC5qUa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExRjc1My83ODA5REEwMkJD MEQxMUVGOUI0QUQ2NDlDNEY5QUUwMi9MVW16cm0yaGkyTkdTakYzcXpJUUdVTG1w Um8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0xVbXpybTJoaTJOR1NqRjNxeklRR1VMbXBSby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUY3NTMvNzgwOURBMDJCQzBEMTFFRjlCNEFENjQ5QzRGOUFFMDIvRkVGNThCMkNB NEZEMTFGMEI0NENBNDc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACg+uEwDQYJKoZIhvcNAQELBQADggEBAEBlLLtbJ7koxCWU kUaSZmQFRbmCvhdZ2I/4+kOZNPRraPErQnYPfFV9WwN0wGF07NJR+ipp2EhMJsiJ 31y17B0fXLnObG0sMNuYTNHx3dQ8sUk9enxq25fJM8Icm7ylm1mNPHkiircCjwqn MKkkVj9zybkC6XlQ4DBSZTn4bZFRQVnQ5l4Hc72X3XSSX0NosvjmOPm95wUiieUl gs+vZ3wx3WyUv2r80vSw2Ugg5Ciwj9vcAueLa93gEuprwWpk+L+mowJbH/4Y3P1Y wdcY9diucXOkYbNyB+uqYLtrAICC//xNsSnjOMVnok5Ajf/ZpXmeGsxi2FGahADs 4BLa1xQ= -----END CERTIFICATE-----Generated at Wed Nov 5 02:13:28 2025 by rpki-client