$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/C532393AB3A811F084597180C4F9AE02.roa File: C532393AB3A811F084597180C4F9AE02.roa (raw, json) Hash identifier: 2izRKzpGeHD6MVI55CDUdaaQ/cOqkorsu2rOvJGpqlk= Subject key identifier: C6:E3:F6:70:43:B4:FF:49:C5:4E:C7:9A:03:D5:38:FF:F5:25:5C:3A Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Certificate serial: CA Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/C532393AB3A811F084597180C4F9AE02.roa Signing time: Tue 28 Oct 2025 02:49:49 +0000 ROA not before: Tue 28 Oct 2025 02:49:49 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 153791 IP address blocks: 160.191.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:08:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Validity Not Before: Oct 28 02:49:49 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=69002f4d-a7b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:c2:56:aa:47:84:36:36:f3:05:c2:ac:51:73: 61:3d:83:0e:4a:12:cd:3e:f3:4f:ce:c1:53:e0:f1: e6:fc:f5:6f:b5:d4:35:13:7f:da:3d:d9:8c:d6:41: ca:c8:ee:99:d6:48:a4:e9:9c:bd:5b:74:e5:80:5c: 8c:cc:2f:ef:e5:91:65:20:01:20:64:d2:b3:bf:a4: 36:cc:24:eb:77:67:38:a3:5e:35:46:8a:25:de:72: b1:11:68:a1:05:f6:3e:b8:ce:84:76:ec:a3:e5:36: aa:f6:be:12:c0:8e:9f:e4:d3:0a:77:da:70:b0:e7: 9b:1f:87:52:e3:52:04:b9:eb:aa:ef:95:8b:69:0c: 03:cd:cd:2e:6a:ad:2a:71:11:a4:6b:64:4f:5b:5e: ef:c3:57:04:e9:aa:68:eb:15:7a:37:71:98:94:ca: 52:4d:25:52:91:30:55:d0:ed:3b:df:9c:a4:b5:88: 3d:14:06:48:b7:c8:36:90:38:b4:0d:04:a2:53:f3: d4:89:49:26:38:e0:53:7c:e2:e0:d8:e3:1a:e9:c0: 19:82:45:05:4b:07:7e:9f:ae:4c:38:3f:c4:22:ed: 68:63:54:d8:d2:5f:18:ca:4b:b2:41:2c:44:e5:3d: bf:12:4e:79:0c:ca:36:7f:8c:24:36:4c:5e:ca:22: 3e:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:E3:F6:70:43:B4:FF:49:C5:4E:C7:9A:03:D5:38:FF:F5:25:5C:3A X509v3 Authority Key Identifier: keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/C532393AB3A811F084597180C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.185.0/24 Signature Algorithm: sha256WithRSAEncryption a7:68:10:9c:e5:74:4d:17:87:ad:c4:cf:cd:58:45:8d:fe:8a: bd:ab:3d:60:cf:ba:f4:01:ef:00:78:0d:80:db:d8:2c:38:a0: a9:9c:31:9d:98:02:b8:e6:4f:34:78:e0:4a:71:85:f6:72:b2: 13:a8:55:80:33:1a:cf:3c:1b:0b:4a:11:25:66:c8:2d:60:d9: d8:15:ae:4f:f4:fb:dc:8e:61:3f:d4:a1:c0:04:62:47:0f:21: a1:38:14:83:1c:61:3c:74:96:61:78:c1:da:fc:42:09:d1:60: cd:ac:cd:2d:05:25:3e:c7:cb:79:37:e8:63:6d:36:fc:55:3c: 1d:d9:6b:b7:54:ad:d2:6d:a1:a7:31:da:fd:dc:3d:c2:97:6e: 62:37:32:79:02:d2:7e:f0:3b:c3:30:ed:4d:a7:06:2c:dc:53: 37:f1:65:a1:e0:d9:a5:69:4c:69:7e:27:dd:5a:69:8a:44:e4: c8:59:81:48:e0:94:ed:c3:6b:10:bc:4f:e2:a3:12:54:2f:97: d1:88:4c:57:90:54:2e:a1:7d:3f:a8:ba:e7:4a:01:b6:3b:4e: 9b:98:ee:37:2d:82:11:fd:53:56:73:ca:de:70:46:0d:c8:23: 96:75:f4:98:65:70:e5:b3:1d:b9:1a:50:36:6f:a0:dd:fd:a7: 44:03:e8:d7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2OUExMTAvBgNVBAUTKEQ5MDgzOTNDNUJBODAzNUFGNjhCN0VDMDA5NTU4RTgx MkVEMDk1RTAwHhcNMjUxMDI4MDI0OTQ5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAwMmY0ZC1hN2IzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlcJWqkeENjbzBcKsUXNhPYMOShLNPvNPzsFT4PHm/PVvtdQ1E3/aPdmM1kHK yO6Z1kik6Zy9W3TlgFyMzC/v5ZFlIAEgZNKzv6Q2zCTrd2c4o141Rool3nKxEWih BfY+uM6Eduyj5Taq9r4SwI6f5NMKd9pwsOebH4dS41IEueuq75WLaQwDzc0uaq0q cRGka2RPW17vw1cE6apo6xV6N3GYlMpSTSVSkTBV0O0735yktYg9FAZIt8g2kDi0 DQSiU/PUiUkmOOBTfOLg2OMa6cAZgkUFSwd+n65MOD/EIu1oY1TY0l8YykuyQSxE 5T2/Ek55DMo2f4wkNkxeyiI+9wIDAQABo4IClTCCApEwHQYDVR0OBBYEFMbj9nBD tP9JxU7HmgPVOP/1JVw6MB8GA1UdIwQYMBaAFNkIOTxbqANa9ot+wAlVjoEu0JXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8yRUI2MDc5NjlC RjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0ExcjJpMzdBQ1ZXT2dTN1Fs ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRZzVQRnVvQTFyMmkzN0FDVldPZ1M3UWxlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjA2OUEvMkVCNjA3OTY5QkYwMTFFRjgxQzkwMjY3QzRGOUFFMDIvQzUzMjM5M0FC M0E4MTFGMDg0NTk3MTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgv7kwDQYJKoZIhvcNAQELBQADggEBAKdoEJzldE0Xh63E z81YRY3+ir2rPWDPuvQB7wB4DYDb2Cw4oKmcMZ2YArjmTzR44EpxhfZyshOoVYAz Gs88GwtKESVmyC1g2dgVrk/0+9yOYT/UocAEYkcPIaE4FIMcYTx0lmF4wdr8QgnR YM2szS0FJT7Hy3k36GNtNvxVPB3Za7dUrdJtoacx2v3cPcKXbmI3MnkC0n7wO8Mw 7U2nBizcUzfxZaHg2aVpTGl+J91aaYpE5MhZgUjglO3DaxC8T+KjElQvl9GITFeQ VC6hfT+ouudKAbY7TpuY7jctghH9U1Zzyt5wRg3II5Z19JhlcOWzHbkaUDZvoN39 p0QD6Nc= -----END CERTIFICATE-----Generated at Wed Nov 5 16:56:12 2025 by rpki-client