$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CDCF164CCBF711EF850FAC39C4F9AE02.roa File: CDCF164CCBF711EF850FAC39C4F9AE02.roa (raw, json) Hash identifier: hex4WzLJD3CJrH6WV0cNufRamYxVsJJ0sqgknAZCzuk= Subject key identifier: A5:D0:54:04:58:D3:5C:6E:AC:93:DE:8D:46:BE:D6:94:2A:88:16:44 Certificate issuer: /CN=A918EDB2/serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Certificate serial: 2C11 Authority key identifier: A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CDCF164CCBF711EF850FAC39C4F9AE02.roa Signing time: Sun 01 Mar 2026 22:45:30 +0000 ROA not before: Thu 08 May 2025 15:54:11 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152509 IP address blocks: 160.25.192.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 09:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11281 (0x2c11) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918EDB2, serialNumber=A7AE474416B0E8AD3A89E86774A640FEBE6973F9 Validity Not Before: May 8 15:54:11 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=69a4c18a-a648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:fe:1b:4f:5c:dc:93:ac:0d:fa:a9:c6:59:5f: 59:c2:e9:05:a1:5e:d5:9c:b9:09:27:5a:da:b8:0a: 76:58:82:1c:ea:bb:1b:a8:bc:d5:c8:8c:67:bb:50: 33:63:31:46:b9:3f:3c:dc:1b:52:13:4d:2b:30:ec: df:44:94:42:c8:77:c9:df:59:74:b6:f9:48:02:7d: d4:27:3b:a9:a7:a7:da:9d:d2:de:af:51:45:72:2d: 45:7a:74:c9:56:19:42:4d:1e:fc:a6:98:7a:d7:17: 82:26:dc:89:65:46:68:0d:90:26:da:5a:4b:2c:65: c2:cd:59:17:bd:c2:a6:60:9c:37:9d:d8:c6:71:af: 79:f0:61:f4:10:0d:44:4e:6f:24:80:4b:eb:c8:d3: af:31:51:24:df:40:c4:20:89:b3:ba:c0:05:a3:40: 93:dc:98:c1:53:98:d1:df:d9:7e:01:4d:68:c4:25: 5f:8c:48:4f:3f:cc:25:64:69:06:33:da:8a:e3:2f: 43:5b:8d:bd:8c:7f:ce:38:ef:66:38:16:2d:50:a9: 2c:b0:bd:58:01:16:f0:94:92:59:6d:56:22:17:fb: 34:76:7b:e8:eb:f1:8c:cc:b6:34:ed:9a:93:81:e5: 73:d9:a4:d7:9d:49:3b:07:0b:cf:1c:44:bb:24:be: d1:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D0:54:04:58:D3:5C:6E:AC:93:DE:8D:46:BE:D6:94:2A:88:16:44 X509v3 Authority Key Identifier: keyid:A7:AE:47:44:16:B0:E8:AD:3A:89:E8:67:74:A6:40:FE:BE:69:73:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/p65HRBaw6K06iehndKZA_r5pc_k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/p65HRBaw6K06iehndKZA_r5pc_k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/1C57CEAC70E911E2B36D4B6B2979BB20/CDCF164CCBF711EF850FAC39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.25.192.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:b6:07:f9:4c:3b:98:be:7b:9f:78:39:3c:7e:e4:4d:99:27: 49:ca:60:5a:cb:e0:14:d4:68:08:20:d2:cf:df:39:c2:b9:7e: e8:de:f8:53:23:6b:c2:a3:5b:61:ad:cb:39:8d:9a:bd:be:72: 06:f1:64:58:12:ca:19:65:31:95:f6:ba:3e:d6:69:d6:89:a5: d7:05:29:e0:88:e5:22:c9:b7:f3:72:34:b9:bb:ed:8d:6c:13: 1b:b3:e2:d6:9d:33:ae:42:bb:a1:27:1b:58:d6:95:6c:15:7b: 4e:96:bc:ed:66:d3:42:ba:27:f2:05:21:e2:d2:ea:33:ea:07: 10:53:9b:2c:a3:9b:03:18:11:21:b7:cf:0d:94:ac:15:9d:17: cf:29:bf:e6:ef:9d:09:12:6e:88:4d:f5:70:6c:fd:64:c1:4a: fe:02:04:1e:70:06:86:7c:15:df:ce:ba:cc:e2:d1:cb:29:e8: d2:88:77:78:69:7f:da:d8:62:78:d0:fe:71:58:51:79:f1:fd: 9d:ac:57:42:d9:ed:62:50:b8:f2:23:df:57:58:05:b3:b4:fb: 9a:ae:d2:85:8c:ce:3e:aa:fe:89:b6:cd:30:d4:f5:fc:bd:d7: f2:19:0f:06:bc:49:b1:af:41:57:f6:8e:ed:7b:02:e6:be:3f: 6d:b5:1d:dc -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICLBEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OEVEQjIxMTAvBgNVBAUTKEE3QUU0NzQ0MTZCMEU4QUQzQTg5RTg2Nzc0QTY0MEZF QkU2OTczRjkwHhcNMjUwNTA4MTU1NDExWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0YzE4YS1hNjQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyf4bT1zck6wN+qnGWV9ZwukFoV7VnLkJJ1rauAp2WIIc6rsbqLzVyIxnu1Az YzFGuT883BtSE00rMOzfRJRCyHfJ31l0tvlIAn3UJzupp6fandLer1FFci1FenTJ VhlCTR78pph61xeCJtyJZUZoDZAm2lpLLGXCzVkXvcKmYJw3ndjGca958GH0EA1E Tm8kgEvryNOvMVEk30DEIImzusAFo0CT3JjBU5jR39l+AU1oxCVfjEhPP8wlZGkG M9qK4y9DW429jH/OOO9mOBYtUKkssL1YARbwlJJZbVYiF/s0dnvo6/GMzLY07ZqT geVz2aTXnUk7BwvPHES7JL7RGwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKXQVARY 01xurJPejUa+1pQqiBZEMB8GA1UdIwQYMBaAFKeuR0QWsOitOonoZ3SmQP6+aXP5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RURCMi8xQzU3Q0VBQzcw RTkxMUUyQjM2RDRCNkIyOTc5QkIyMC9wNjVIUkJhdzZLMDZpZWhuZEtaQV9yNXBj X2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3A2NUhSQmF3NkswNmllaG5kS1pBX3I1cGNfay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OEVEQjIvMUM1N0NFQUM3MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvQ0RDRjE2NEND QkY3MTFFRjg1MEZBQzM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBnAMA0GCSqGSIb3DQEBCwUAA4IBAQBdtgf5TDuYvnufeDk8fuRN mSdJymBay+AU1GgIINLP3znCuX7o3vhTI2vCo1thrcs5jZq9vnIG8WRYEsoZZTGV 9ro+1mnWiaXXBSngiOUiybfzcjS5u+2NbBMbs+LWnTOuQruhJxtY1pVsFXtOlrzt ZtNCuifyBSHi0uoz6gcQU5sso5sDGBEht88NlKwVnRfPKb/m750JEm6ITfVwbP1k wUr+AgQecAaGfBXfzrrM4tHLKejSiHd4aX/a2GJ40P5xWFF58f2drFdC2e1iULjy I99XWAWztPuartKFjM4+qv6Jts0w1PX8vdfyGQ8GvEmxr0FX9o7tewLmvj9ttR3c -----END CERTIFICATE-----Generated at Mon Mar 2 16:46:48 2026 by rpki-client