$ rpki-client -vvf rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa File: D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa (raw, json) Hash identifier: R8HXpTKiYzOK8eX9NLZRgUVX35WrC+0ru/2MFWBu2jU= Subject key identifier: 02:7F:5A:77:65:31:28:29:20:F1:07:EE:18:3B:94:4C:42:DC:5C:67 Certificate issuer: /CN=A9187325/serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Certificate serial: F3 Authority key identifier: D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa Signing time: Sun 01 Mar 2026 13:14:24 +0000 ROA not before: Wed 07 Jan 2026 05:23:49 +0000 ROA not after: Tue 02 Mar 2027 00:00:00 +0000 asID: 142588 IP address blocks: 160.250.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 14:59:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 243 (0xf3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187325, serialNumber=D174453E9563EBAFCBBB32ACC6CF866FBD8E22F0 Validity Not Before: Jan 7 05:23:49 2026 GMT Not After : Mar 2 00:00:00 2027 GMT Subject: CN=69a43bb0-a924 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:81:17:fc:27:6a:32:70:86:4b:6f:d7:1d:89: 0d:01:df:7c:7f:1e:cf:8a:7a:aa:82:cd:11:96:54: 09:66:7c:6d:0b:07:5a:bf:bb:59:b7:8d:30:a6:2c: 61:d0:b6:db:2b:0b:1b:4e:f0:91:16:49:d7:4a:03: 90:0b:21:48:a7:c5:ab:4a:d6:a6:a2:df:6b:66:0f: a3:8e:f0:a0:32:eb:fe:a6:e0:c8:fe:9b:6a:6f:01: f3:44:03:c2:16:d9:2c:a2:21:1a:bf:31:21:35:2c: 65:7f:f1:d5:3c:af:2a:d4:7d:2c:2f:cd:85:96:ad: 6a:f0:4b:12:b0:a7:67:10:14:49:f4:f2:6e:2c:e2: 96:26:85:03:86:e8:57:cb:f0:7f:b8:3f:e5:ad:9d: c5:95:c0:87:e5:db:e3:fa:3d:76:9a:17:25:02:fb: 86:cf:40:8f:10:02:40:d7:f5:59:a4:95:d8:33:76: 86:54:5b:52:bb:bc:16:25:d8:da:6e:e2:72:42:af: e2:5c:c8:98:ae:56:a6:4b:cf:ad:bd:be:e8:25:c5: d1:0f:b8:7d:af:35:c6:15:21:21:57:d5:a3:43:93: e7:f9:30:f6:45:b6:9a:c6:fc:1f:8f:c8:79:05:cf: be:66:a7:ff:d8:6f:88:42:ff:70:9e:31:6b:11:2d: b1:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:7F:5A:77:65:31:28:29:20:F1:07:EE:18:3B:94:4C:42:DC:5C:67 X509v3 Authority Key Identifier: keyid:D1:74:45:3E:95:63:EB:AF:CB:BB:32:AC:C6:CF:86:6F:BD:8E:22:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/0XRFPpVj66_LuzKsxs-Gb72OIvA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0XRFPpVj66_LuzKsxs-Gb72OIvA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187325/7B334A4AAAE911EFB721C25DC4F9AE02/D9DB29CCAAEF11EF9187EE2AC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.250.70.0/23 Signature Algorithm: sha256WithRSAEncryption 61:d5:2e:de:f1:a3:c4:f3:35:91:33:6f:c4:9b:7d:22:16:17: 8e:8a:4a:a7:31:7f:b0:bc:38:37:15:1f:81:59:35:4e:3e:3e: 8c:2d:d1:72:31:98:84:8c:65:a1:ca:80:95:7b:b8:48:1a:d7: 60:88:26:32:c3:8e:d7:07:3b:17:6f:33:a8:d4:cb:76:79:72: 58:51:04:e7:65:5c:df:55:e7:08:9e:b8:59:f5:0e:3f:5e:e4: 75:75:6b:0f:df:c7:f6:3c:24:f5:a5:a1:3c:8f:a6:fc:34:15: 28:2f:51:97:f4:67:82:bf:f0:c9:92:ec:12:8a:99:a5:25:ff: 42:dc:a7:0a:d0:1c:f4:2f:af:6a:b6:32:53:f0:ad:18:70:06: 10:b5:ba:2e:4d:b0:40:a5:f2:0b:88:39:31:88:62:f3:3d:8e: 8e:c3:7f:35:e9:3f:93:05:f2:a5:38:3d:83:90:50:fb:6d:b7: 9c:69:28:28:26:62:25:c3:69:39:b9:fa:60:c9:db:f8:75:b1: b5:3b:f8:b2:b0:59:a0:fa:2f:32:ba:43:16:de:3d:c9:18:df: 68:e9:1a:12:6d:e7:46:ad:1f:32:9e:90:ad:15:c0:8a:a3:71: e9:2c:28:ad:5f:46:7e:b2:66:39:a4:9a:f7:54:2e:17:c9:3f: 01:70:f6:0e -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODczMjUxMTAvBgNVBAUTKEQxNzQ0NTNFOTU2M0VCQUZDQkJCMzJBQ0M2Q0Y4NjZG QkQ4RTIyRjAwHhcNMjYwMTA3MDUyMzQ5WhcNMjcwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0M2JiMC1hOTI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlYEX/CdqMnCGS2/XHYkNAd98fx7Pinqqgs0RllQJZnxtCwdav7tZt40wpixh 0LbbKwsbTvCRFknXSgOQCyFIp8WrStamot9rZg+jjvCgMuv+puDI/ptqbwHzRAPC FtksoiEavzEhNSxlf/HVPK8q1H0sL82Flq1q8EsSsKdnEBRJ9PJuLOKWJoUDhuhX y/B/uD/lrZ3FlcCH5dvj+j12mhclAvuGz0CPEAJA1/VZpJXYM3aGVFtSu7wWJdja buJyQq/iXMiYrlamS8+tvb7oJcXRD7h9rzXGFSEhV9WjQ5Pn+TD2Rbaaxvwfj8h5 Bc++Zqf/2G+IQv9wnjFrES2xUwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFAJ/Wndl MSgpIPEH7hg7lExC3FxnMB8GA1UdIwQYMBaAFNF0RT6VY+uvy7syrMbPhm+9jiLw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzMyNS83QjMzNEE0QUFB RTkxMUVGQjcyMUMyNURDNEY5QUUwMi8wWFJGUHBWajY2X0x1ektzeHMtR2I3Mk9J dkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzBYUkZQcFZqNjZfTHV6S3N4cy1HYjcyT0l2QS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODczMjUvN0IzMzRBNEFBQUU5MTFFRkI3MjFDMjVEQzRGOUFFMDIvRDlEQjI5Q0NB QUVGMTFFRjkxODdFRTJBQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoPpGMA0GCSqGSIb3DQEBCwUAA4IBAQBh1S7e8aPE8zWRM2/Em30i FheOikqnMX+wvDg3FR+BWTVOPj6MLdFyMZiEjGWhyoCVe7hIGtdgiCYyw47XBzsX bzOo1Mt2eXJYUQTnZVzfVecInrhZ9Q4/XuR1dWsP38f2PCT1paE8j6b8NBUoL1GX 9GeCv/DJkuwSipmlJf9C3KcK0Bz0L69qtjJT8K0YcAYQtbouTbBApfILiDkxiGLz PY6Ow3816T+TBfKlOD2DkFD7bbecaSgoJmIlw2k5ufpgydv4dbG1O/iysFmg+i8y ukMW3j3JGN9o6RoSbedGrR8ynpCtFcCKo3HpLCitX0Z+smY5pJr3VC4XyT8BcPYO -----END CERTIFICATE-----Generated at Mon Mar 2 03:59:20 2026 by rpki-client