$ rpki-client -vvf rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/CD1FB5C2643611EFA2C41948C4F9AE02.roa File: CD1FB5C2643611EFA2C41948C4F9AE02.roa (raw, json) Hash identifier: twXmxkbpIQCRuWIwXhAhA1PLu233oTOVjX0i9qp3D/s= Subject key identifier: 7A:9E:5C:8F:EA:1A:6A:61:1A:59:0D:7E:3D:16:F5:5A:2E:51:CF:3B Certificate issuer: /CN=A91850AD/serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E Certificate serial: E2 Authority key identifier: 0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/CD1FB5C2643611EFA2C41948C4F9AE02.roa Signing time: Mon 03 Nov 2025 05:50:36 +0000 ROA not before: Mon 03 Nov 2025 05:50:36 +0000 ROA not after: Sun 01 Mar 2026 00:00:00 +0000 asID: 139058 IP address blocks: 160.30.186.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:40:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91850AD, serialNumber=0F6B4720B0A35722D85F3446EFD4740BD341834E Validity Not Before: Nov 3 05:50:36 2025 GMT Not After : Mar 1 00:00:00 2026 GMT Subject: CN=690842ab-efad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fd:51:50:93:20:8d:ea:d2:cb:f2:21:1d:74: cd:23:77:3f:d2:f6:e1:2e:13:11:1a:a2:b8:c9:2b: 0d:3c:f3:99:3c:16:78:18:9c:93:32:6a:12:32:6d: 82:27:f5:a9:22:e9:11:78:7f:2e:9e:08:45:a3:68: b3:2d:a2:19:34:e4:e8:df:3e:70:76:39:a9:d6:41: 15:b5:19:01:20:e9:db:1e:da:4e:24:2a:25:c7:38: 97:df:56:d4:2a:e5:53:b4:84:aa:ac:18:39:03:34: 0a:5c:b0:0b:8e:c7:27:d0:5d:21:93:2a:b0:b9:d0: 66:f2:cf:e8:b6:74:5a:b3:19:b2:fd:6b:51:a6:42: 22:4a:71:3f:4d:9d:8e:41:f5:4f:49:e9:22:99:eb: 6c:fa:2c:27:62:78:b4:7b:e7:68:9b:27:e2:b5:07: 3b:f8:8b:76:66:5e:d6:a8:2f:7a:33:15:27:4f:38: d1:2d:ed:3b:8a:f6:5f:fe:a3:10:be:59:f9:34:0a: c4:20:85:87:d6:61:6e:d2:86:e4:5c:45:2f:7d:b0: c9:17:de:25:bd:98:00:0e:00:c6:b0:41:21:81:8b: 45:11:30:a2:39:e6:37:10:65:b5:4b:2c:4f:71:33: 6c:07:29:5a:3e:fc:3d:e3:a6:4b:d1:8b:76:c9:95: 84:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:9E:5C:8F:EA:1A:6A:61:1A:59:0D:7E:3D:16:F5:5A:2E:51:CF:3B X509v3 Authority Key Identifier: keyid:0F:6B:47:20:B0:A3:57:22:D8:5F:34:46:EF:D4:74:0B:D3:41:83:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/D2tHILCjVyLYXzRG79R0C9NBg04.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/D2tHILCjVyLYXzRG79R0C9NBg04.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91850AD/60EBE1AC643411EF842FC620C4F9AE02/CD1FB5C2643611EFA2C41948C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.186.0/23 Signature Algorithm: sha256WithRSAEncryption 89:b8:33:cf:b7:b9:0d:00:62:48:e6:d9:c1:b6:c7:42:98:0d: 17:9f:c8:e1:61:71:3d:57:65:1a:ba:fa:dd:8d:c0:03:ed:e1: 1a:6e:d6:f0:20:df:01:b9:c8:57:cf:5a:a2:2c:c5:5a:eb:53: 9e:e7:85:37:b8:1e:5a:80:7b:36:98:22:6d:08:ec:64:38:9c: 33:03:28:1c:d4:31:df:ba:7f:ab:8b:a0:ee:57:84:82:fe:e2: ba:a0:be:29:50:c8:49:fc:ae:f2:2b:f4:3c:6c:b9:8b:fb:91: a0:13:9e:b0:ca:b0:f2:0e:75:2e:b7:9a:e3:82:9a:91:cf:e0: 6e:8e:93:2e:d0:87:5b:1a:06:54:8e:fa:23:17:19:1d:71:45: 99:8f:c5:31:c9:99:42:02:de:eb:1a:93:a6:30:91:44:22:c0: d8:aa:e9:41:31:3d:7f:bf:4c:35:31:76:2d:0e:02:22:b0:a2: 70:e3:0b:48:bc:04:0f:18:2e:9d:6a:27:c1:83:10:b2:ce:1e: bd:b4:8c:f5:23:0a:57:1e:7c:a4:57:c1:8d:b4:ed:4f:c6:a9: 24:cb:85:74:b7:15:66:20:95:bb:6b:67:f4:c8:fd:73:ad:c9: 9b:74:ca:1d:f3:9e:42:49:04:0b:e2:bd:93:64:b7:79:1c:3d: a5:3b:8d:58 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODUwQUQxMTAvBgNVBAUTKDBGNkI0NzIwQjBBMzU3MjJEODVGMzQ0NkVGRDQ3NDBC RDM0MTgzNEUwHhcNMjUxMTAzMDU1MDM2WhcNMjYwMzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA4NDJhYi1lZmFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxv1RUJMgjerSy/IhHXTNI3c/0vbhLhMRGqK4ySsNPPOZPBZ4GJyTMmoSMm2C J/WpIukReH8unghFo2izLaIZNOTo3z5wdjmp1kEVtRkBIOnbHtpOJColxziX31bU KuVTtISqrBg5AzQKXLALjscn0F0hkyqwudBm8s/otnRasxmy/WtRpkIiSnE/TZ2O QfVPSekimets+iwnYni0e+domyfitQc7+It2Zl7WqC96MxUnTzjRLe07ivZf/qMQ vln5NArEIIWH1mFu0obkXEUvfbDJF94lvZgADgDGsEEhgYtFETCiOeY3EGW1SyxP cTNsBylaPvw946ZL0Yt2yZWEpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHqeXI/q GmphGlkNfj0W9VouUc87MB8GA1UdIwQYMBaAFA9rRyCwo1ci2F80Ru/UdAvTQYNO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NTBBRC82MEVCRTFBQzY0 MzQxMUVGODQyRkM2MjBDNEY5QUUwMi9EMnRISUxDalZ5TFlYelJHNzlSMEM5TkJn MDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0QydEhJTENqVnlMWVh6Ukc3OVIwQzlOQmcwNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODUwQUQvNjBFQkUxQUM2NDM0MTFFRjg0MkZDNjIwQzRGOUFFMDIvQ0QxRkI1QzI2 NDM2MTFFRkEyQzQxOTQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgHrowDQYJKoZIhvcNAQELBQADggEBAIm4M8+3uQ0AYkjm 2cG2x0KYDRefyOFhcT1XZRq6+t2NwAPt4Rpu1vAg3wG5yFfPWqIsxVrrU57nhTe4 HlqAezaYIm0I7GQ4nDMDKBzUMd+6f6uLoO5XhIL+4rqgvilQyEn8rvIr9DxsuYv7 kaATnrDKsPIOdS63muOCmpHP4G6Oky7Qh1saBlSO+iMXGR1xRZmPxTHJmUIC3usa k6YwkUQiwNiq6UExPX+/TDUxdi0OAiKwonDjC0i8BA8YLp1qJ8GDELLOHr20jPUj ClcefKRXwY207U/GqSTLhXS3FWYglbtrZ/TI/XOtyZt0yh3znkJJBAvivZNkt3kc PaU7jVg= -----END CERTIFICATE-----Generated at Wed Nov 5 15:21:21 2025 by rpki-client