$ rpki-client -vvf rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/79E40530CB5A11EFA1C64B62C4F9AE02.roa File: 79E40530CB5A11EFA1C64B62C4F9AE02.roa (raw, json) Hash identifier: drd+idSshs98eOD0pXc/+ttH+udrA5TRp96UQZXHfUU= Subject key identifier: 58:A1:60:9B:95:DE:ED:13:88:6E:E1:13:CB:84:CC:9A:37:5B:BC:D6 Certificate issuer: /CN=A91476E2/serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Certificate serial: A8 Authority key identifier: 6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/79E40530CB5A11EFA1C64B62C4F9AE02.roa Signing time: Wed 05 Nov 2025 06:50:38 +0000 ROA not before: Wed 05 Nov 2025 06:50:37 +0000 ROA not after: Sun 31 Jan 2027 00:00:00 +0000 asID: 140937 IP address blocks: 160.187.212.0/23 maxlen: 23 160.187.212.0/24 maxlen: 24 160.187.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:50:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 168 (0xa8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91476E2, serialNumber=6AAF3D9BC3DFA3A125082965D8FF33B8128F291F Validity Not Before: Nov 5 06:50:37 2025 GMT Not After : Jan 31 00:00:00 2027 GMT Subject: CN=690af3bd-1a2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a0:f1:12:27:7f:96:83:03:5d:0d:67:5c:70: 43:07:8e:79:f1:a1:b6:cc:c7:fe:9e:8d:0f:eb:92: 1c:78:1e:4f:42:5c:77:73:83:62:c1:eb:58:2a:29: c3:8d:5b:9e:83:20:73:6d:be:30:55:55:22:5a:d6: 67:a1:67:3c:d0:0e:91:ba:65:5e:60:7f:6b:74:8c: 66:e5:84:a1:84:8f:55:50:70:fa:2d:aa:78:1a:dc: 91:df:e5:66:52:6e:92:33:9c:0d:79:2d:6f:27:7c: 51:52:2a:4a:5b:62:1e:f4:5b:b4:d1:84:14:e3:3d: d2:71:69:aa:14:a2:6d:98:db:f8:ec:46:4b:85:6d: a4:bf:60:32:bf:a4:dd:37:a2:de:ca:14:a1:f9:65: ca:da:38:1b:ea:42:c4:00:14:6f:21:86:33:59:3a: 17:af:ee:07:55:f7:10:8d:81:28:4a:2d:7c:71:46: 93:68:14:85:18:f1:57:b3:f4:2a:ef:79:32:47:2f: 39:13:33:24:29:df:13:11:98:cd:15:6a:9d:71:56: a7:8c:93:ac:81:71:7f:92:db:b5:3c:e6:e8:d7:2e: 93:00:86:5a:30:42:3a:42:71:e4:4e:21:8c:14:07: 64:3e:ac:2a:d4:c1:38:d2:ea:e6:34:fb:0a:be:55: 1e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:A1:60:9B:95:DE:ED:13:88:6E:E1:13:CB:84:CC:9A:37:5B:BC:D6 X509v3 Authority Key Identifier: keyid:6A:AF:3D:9B:C3:DF:A3:A1:25:08:29:65:D8:FF:33:B8:12:8F:29:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/aq89m8Pfo6ElCCll2P8zuBKPKR8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aq89m8Pfo6ElCCll2P8zuBKPKR8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91476E2/3B541F20CB3D11EF8703F75AC4F9AE02/79E40530CB5A11EFA1C64B62C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.212.0/23 Signature Algorithm: sha256WithRSAEncryption 4c:e5:dd:35:ea:09:93:e0:72:c1:da:3a:db:1b:fc:78:76:8c: e3:f7:ce:66:51:cd:b2:6f:09:33:40:08:72:02:c6:03:53:02: 66:e4:01:ba:af:6f:5b:70:15:55:b4:1c:a3:40:1f:16:34:41: f6:e4:ae:cf:ab:7b:24:90:38:54:8c:42:93:00:97:f9:a8:49: 0b:2f:d3:4c:30:ae:87:9d:c3:e2:0d:fa:11:52:12:e6:2a:eb: 5f:20:18:bc:db:07:d2:6e:60:3d:95:5a:a0:a1:27:92:15:0f: 6d:5f:5a:13:0b:cb:21:f5:c9:ca:1d:4d:24:2c:56:4e:a0:12: f2:89:ce:df:88:14:da:f4:82:a4:20:e4:26:66:86:4b:a4:db: 08:9f:6a:66:cb:1c:52:2f:12:7c:91:64:1e:40:70:e7:23:b2: 37:83:14:99:9e:84:ac:3b:65:56:22:81:0e:e1:39:d0:2f:25: 97:fe:5e:99:06:17:6b:f5:94:eb:c7:c5:69:87:42:f7:7d:eb: b3:a9:c8:2a:e5:68:12:6a:80:0b:f1:1e:81:9d:81:d3:c9:d2: a1:ed:bf:cb:a3:4e:dc:af:cf:12:24:29:74:ce:11:b1:cb:b1: 9b:38:80:6c:a6:19:f5:21:9f:b1:4a:c2:65:e8:70:bf:9c:49: c5:32:40:73 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDc2RTIxMTAvBgNVBAUTKDZBQUYzRDlCQzNERkEzQTEyNTA4Mjk2NUQ4RkYzM0I4 MTI4RjI5MUYwHhcNMjUxMTA1MDY1MDM3WhcNMjcwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTBhZjNiZC0xYTJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtKDxEid/loMDXQ1nXHBDB4558aG2zMf+no0P65IceB5PQlx3c4NiwetYKinD jVuegyBzbb4wVVUiWtZnoWc80A6RumVeYH9rdIxm5YShhI9VUHD6Lap4GtyR3+Vm Um6SM5wNeS1vJ3xRUipKW2Ie9Fu00YQU4z3ScWmqFKJtmNv47EZLhW2kv2Ayv6Td N6LeyhSh+WXK2jgb6kLEABRvIYYzWToXr+4HVfcQjYEoSi18cUaTaBSFGPFXs/Qq 73kyRy85EzMkKd8TEZjNFWqdcVanjJOsgXF/ktu1PObo1y6TAIZaMEI6QnHkTiGM FAdkPqwq1ME40urmNPsKvlUerwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFihYJuV 3u0TiG7hE8uEzJo3W7zWMB8GA1UdIwQYMBaAFGqvPZvD36OhJQgpZdj/M7gSjykf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NzZFMi8zQjU0MUYyMENC M0QxMUVGODcwM0Y3NUFDNEY5QUUwMi9hcTg5bThQZm82RWxDQ2xsMlA4enVCS1BL UjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FxODltOFBmbzZFbENDbGwyUDh6dUJLUEtSOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDc2RTIvM0I1NDFGMjBDQjNEMTFFRjg3MDNGNzVBQzRGOUFFMDIvNzlFNDA1MzBD QjVBMTFFRkExQzY0QjYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgu9QwDQYJKoZIhvcNAQELBQADggEBAEzl3TXqCZPgcsHa Otsb/Hh2jOP3zmZRzbJvCTNACHICxgNTAmbkAbqvb1twFVW0HKNAHxY0Qfbkrs+r eySQOFSMQpMAl/moSQsv00wwroedw+IN+hFSEuYq618gGLzbB9JuYD2VWqChJ5IV D21fWhMLyyH1ycodTSQsVk6gEvKJzt+IFNr0gqQg5CZmhkuk2wifambLHFIvEnyR ZB5AcOcjsjeDFJmehKw7ZVYigQ7hOdAvJZf+XpkGF2v1lOvHxWmHQvd967OpyCrl aBJqgAvxHoGdgdPJ0qHtv8ujTtyvzxIkKXTOEbHLsZs4gGymGfUhn7FKwmXocL+c ScUyQHM= -----END CERTIFICATE-----Generated at Wed Nov 5 16:42:36 2025 by rpki-client