$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C19496A61E6711EFAF014F65C4F9AE02.roa File: C19496A61E6711EFAF014F65C4F9AE02.roa (raw, json) Hash identifier: wBsdI6VP2n4iMvPgjlv/xeM4AjTSKsBbYD2fFdk8g0c= Subject key identifier: 72:64:1E:D8:E7:B4:22:0C:06:8F:65:DC:49:DC:6F:38:AE:06:61:21 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 1FCD Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C19496A61E6711EFAF014F65C4F9AE02.roa Signing time: Fri 31 Oct 2025 06:05:11 +0000 ROA not before: Fri 31 Oct 2025 06:05:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 150593 IP address blocks: 157.66.44.0/23 maxlen: 24 160.19.35.0/24 maxlen: 24 160.25.38.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 15:24:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8141 (0x1fcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: Oct 31 06:05:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69045197-b294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:68:a4:8f:a1:df:01:06:4e:f8:fd:2b:45:76: b3:73:29:ca:31:5d:f5:57:01:35:58:6b:bd:9a:49: d6:cf:8d:2f:59:c8:01:2b:89:ed:bf:08:09:33:40: 42:d2:81:34:06:04:9c:91:50:8b:3e:44:46:6d:da: e8:14:80:77:68:48:01:ae:95:04:71:58:de:4d:80: 76:91:21:65:b6:87:1d:1c:f1:98:1e:9c:90:d6:5f: c0:94:31:39:dd:6f:75:b4:f0:a7:97:ec:19:74:4b: 06:91:67:97:c9:75:71:06:91:ae:38:13:5a:d4:a0: cb:b3:0a:26:a3:ba:40:cb:a3:5d:bb:df:44:f0:c7: 70:df:0a:ac:8e:e9:64:2a:20:e1:4a:aa:40:7c:10: 2f:c9:fa:ff:30:a0:12:22:e8:35:b8:fc:b1:cb:37: e1:87:16:3e:36:d8:fe:de:e6:1b:3d:cf:7b:10:aa: 8d:10:ab:78:5e:77:1f:75:10:0b:6f:68:b3:ed:f6: 13:96:5e:1d:a3:76:7d:b0:41:00:07:c7:25:d4:8f: cd:59:01:92:31:97:c7:03:d6:9b:61:6c:5e:14:a5: 69:01:28:2f:2f:91:a6:fa:6e:f9:f6:22:78:ac:35: 46:5d:f9:8c:76:15:6c:30:e1:b5:be:d2:53:a2:b5: 66:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:64:1E:D8:E7:B4:22:0C:06:8F:65:DC:49:DC:6F:38:AE:06:61:21 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/C19496A61E6711EFAF014F65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.44.0/23 160.19.35.0/24 160.25.38.0/23 Signature Algorithm: sha256WithRSAEncryption 49:0d:45:ce:39:9d:2d:78:32:75:7e:ba:73:12:df:10:01:05: e0:3a:fb:68:56:ca:2a:f7:a3:80:a4:88:00:64:2f:00:25:bf: ac:50:d7:a8:78:1e:4f:52:19:44:8d:d1:1c:59:70:ef:f9:44: b3:a8:a3:a5:4a:15:08:96:d6:d7:3e:f5:18:57:3a:34:ec:37: ea:01:45:c7:4a:f4:fe:78:b0:a7:a7:b9:f0:cc:97:ba:ab:f3: cd:d1:f0:39:5f:fe:06:6a:2f:80:64:1d:cd:1a:58:7a:fc:27: dc:48:d1:37:08:e1:5b:1d:d5:2d:64:7d:c1:a8:98:e1:95:f0: 4b:e7:40:30:4c:09:64:f3:ff:f5:4f:d2:7f:ee:45:05:57:83: a8:cc:58:28:b3:5e:27:e0:63:bc:15:c6:13:82:19:bc:f2:09: 97:33:a8:11:fb:78:51:06:7e:60:f2:c1:46:4a:78:2d:59:11: 75:b1:2e:bb:b7:12:b6:0a:6e:6f:52:67:72:64:6f:37:4c:12: 3b:fe:7a:94:01:25:5f:ae:3f:8c:63:f3:74:37:bb:55:a1:05: c6:97:bd:78:ec:ac:93:2d:ef:5a:ea:c0:bd:c4:fd:16:73:b6: 8f:e4:c8:2c:43:2c:1c:60:fc:9c:95:fc:a3:fe:b8:45:e9:f6: 4e:19:f9:71 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICH80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUxMDMxMDYwNTExWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OTA0NTE5Ny1iMjk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA92ikj6HfAQZO+P0rRXazcynKMV31VwE1WGu9mknWz40vWcgBK4ntvwgJM0BC 0oE0BgSckVCLPkRGbdroFIB3aEgBrpUEcVjeTYB2kSFltocdHPGYHpyQ1l/AlDE5 3W91tPCnl+wZdEsGkWeXyXVxBpGuOBNa1KDLswomo7pAy6Ndu99E8Mdw3wqsjulk KiDhSqpAfBAvyfr/MKASIug1uPyxyzfhhxY+Ntj+3uYbPc97EKqNEKt4XncfdRAL b2iz7fYTll4do3Z9sEEAB8cl1I/NWQGSMZfHA9abYWxeFKVpASgvL5Gm+m759iJ4 rDVGXfmMdhVsMOG1vtJTorVmkwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFHJkHtjn tCIMBo9l3EncbziuBmEhMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQzE5NDk2QTYx RTY3MTFFRkFGMDE0RjY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAGdQiwDBACgEyMDBAGgGSYwDQYJKoZIhvcNAQELBQADggEB AEkNRc45nS14MnV+unMS3xABBeA6+2hWyir3o4CkiABkLwAlv6xQ16h4Hk9SGUSN 0RxZcO/5RLOoo6VKFQiW1tc+9RhXOjTsN+oBRcdK9P54sKenufDMl7qr883R8Dlf /gZqL4BkHc0aWHr8J9xI0TcI4Vsd1S1kfcGomOGV8EvnQDBMCWTz//VP0n/uRQVX g6jMWCizXifgY7wVxhOCGbzyCZczqBH7eFEGfmDywUZKeC1ZEXWxLru3ErYKbm9S Z3JkbzdMEjv+epQBJV+uP4xj83Q3u1WhBcaXvXjsrJMt71rqwL3E/RZzto/kyCxD LBxg/JyV/KP+uEXp9k4Z+XE= -----END CERTIFICATE-----Generated at Tue Nov 4 22:23:21 2025 by rpki-client