$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E59030F0AB2511F083A1D935C4F9AE02.roa File: E59030F0AB2511F083A1D935C4F9AE02.roa (raw, json) Hash identifier: MpvpXKuhcvQBkMHSuFypYFGcIk1FtZPmBhgSC+OiG3s= Subject key identifier: E7:CF:D0:70:1C:A5:5C:09:95:5F:4B:D3:9F:F1:6C:A2:AD:C7:E6:61 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 06F7 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E59030F0AB2511F083A1D935C4F9AE02.roa Signing time: Fri 17 Oct 2025 06:52:50 +0000 ROA not before: Fri 17 Oct 2025 06:52:50 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 45899 IP address blocks: 160.19.78.0/23 maxlen: 23 160.22.2.0/23 maxlen: 24 160.25.74.0/23 maxlen: 24 160.30.54.0/23 maxlen: 24 160.191.52.0/23 maxlen: 24 161.248.30.0/23 maxlen: 24 165.99.58.0/24 maxlen: 24 165.99.59.0/24 maxlen: 24 165.101.234.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 14:37:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1783 (0x6f7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Oct 17 06:52:50 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68f1e7c2-6c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:95:2a:97:f9:1d:9c:53:97:78:34:e2:2b:2a: ea:12:5e:6e:0c:86:18:f1:79:de:1e:1d:e6:e6:c5: 78:fd:62:35:47:22:f0:6b:cd:b9:bb:ee:b2:0a:6f: 5b:1c:39:a7:2f:4d:4c:af:79:ab:e9:ca:a3:b7:a4: b1:7a:07:f1:20:99:bb:61:44:df:3b:a2:f8:0a:1a: 1c:ce:78:e0:35:7c:63:25:0b:3a:5d:f6:e7:8c:e9: cc:cf:5b:5d:38:33:cf:98:a4:9c:86:4e:a1:43:fa: 91:b2:7f:8f:e4:96:06:90:82:6a:06:08:d4:91:ec: 3d:33:a1:03:f0:f9:eb:38:75:21:31:06:a9:8c:20: 47:e7:08:8d:d9:eb:f6:2a:11:30:cc:8d:ab:22:be: eb:ec:9b:c3:37:af:70:38:6c:7a:56:b3:a8:68:ea: f6:88:d2:98:96:49:3f:0e:c9:65:3d:7a:04:a3:18: 60:0c:a6:5f:18:bc:a9:17:e5:9d:fb:59:05:dc:f7: 51:90:94:d3:b3:fa:82:01:30:0e:39:e3:29:b6:d5: 9a:19:9c:16:39:40:92:d4:6e:f4:0a:09:6a:c3:6b: 20:91:21:6f:08:6a:a1:e0:79:0c:f5:6c:e1:62:c1: d6:b5:f8:64:61:92:4d:1d:c5:1a:31:95:5c:45:e8: cb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CF:D0:70:1C:A5:5C:09:95:5F:4B:D3:9F:F1:6C:A2:AD:C7:E6:61 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/E59030F0AB2511F083A1D935C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.19.78.0/23 160.22.2.0/23 160.25.74.0/23 160.30.54.0/23 160.191.52.0/23 161.248.30.0/23 165.99.58.0/23 165.101.234.0/23 Signature Algorithm: sha256WithRSAEncryption 75:12:d8:66:ee:ff:2c:d8:d2:c5:66:fb:8a:35:df:78:fc:ae: 70:fd:da:78:a6:33:19:fc:2d:70:7c:75:e0:0d:72:e0:de:17: 71:b9:f4:f3:1b:92:47:09:ac:b5:4c:aa:41:09:00:07:14:11: f0:28:87:66:dc:b4:f0:8d:f7:51:4e:a7:be:70:71:49:42:1d: 47:49:da:cd:fc:1a:2c:57:2b:a7:93:7e:3f:55:e6:83:a4:7b: 9b:40:ed:cc:ad:92:8f:84:e3:c2:75:05:c2:d8:23:31:a0:d4: c4:7b:cc:d4:97:f6:36:c9:d0:8d:b1:d2:c0:12:34:16:78:47: c9:fc:77:b9:bb:63:9c:dd:11:fd:3d:4e:a5:d4:73:9e:05:4a: cc:f9:16:33:ec:c3:f6:a9:f6:f6:5b:b2:64:0e:f7:ba:4e:17: 7e:ef:9d:13:9d:00:1c:e2:26:de:8c:95:44:3c:ff:c5:a3:7b: df:99:dd:e1:ad:18:57:09:0b:bb:b7:09:9e:5f:96:0c:92:ef: 55:88:0c:eb:f2:ff:af:2a:21:41:da:ec:dc:e7:14:86:85:62: 65:fb:b0:83:2d:32:8f:c0:85:8d:19:0e:09:08:31:90:cb:9f: d7:61:3d:17:2a:aa:85:83:aa:49:5e:36:b3:34:9d:be:a5:3c: ee:2e:2b:7d -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICBvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUxMDE3MDY1MjUwWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGYxZTdjMi02Yzk2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2ZUql/kdnFOXeDTiKyrqEl5uDIYY8XneHh3m5sV4/WI1RyLwa825u+6yCm9b HDmnL01Mr3mr6cqjt6SxegfxIJm7YUTfO6L4ChocznjgNXxjJQs6XfbnjOnMz1td ODPPmKSchk6hQ/qRsn+P5JYGkIJqBgjUkew9M6ED8PnrOHUhMQapjCBH5wiN2ev2 KhEwzI2rIr7r7JvDN69wOGx6VrOoaOr2iNKYlkk/DsllPXoEoxhgDKZfGLypF+Wd +1kF3PdRkJTTs/qCATAOOeMpttWaGZwWOUCS1G70Cglqw2sgkSFvCGqh4HkM9Wzh YsHWtfhkYZJNHcUaMZVcRejL7wIDAQABo4ICvzCCArswHQYDVR0OBBYEFOfP0HAc pVwJlV9L05/xbKKtx+ZhMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRTU5MDMwRjBB QjI1MTFGMDgzQTFEOTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MDYEAgABMDADBAGgE04DBAGgFgIDBAGgGUoDBAGgHjYDBAGgvzQDBAGh+B4D BAGlYzoDBAGlZeowDQYJKoZIhvcNAQELBQADggEBAHUS2Gbu/yzY0sVm+4o133j8 rnD92nimMxn8LXB8deANcuDeF3G59PMbkkcJrLVMqkEJAAcUEfAoh2bctPCN91FO p75wcUlCHUdJ2s38GixXK6eTfj9V5oOke5tA7cytko+E48J1BcLYIzGg1MR7zNSX 9jbJ0I2x0sASNBZ4R8n8d7m7Y5zdEf09TqXUc54FSsz5FjPsw/ap9vZbsmQO97pO F37vnROdABziJt6MlUQ8/8Wje9+Z3eGtGFcJC7u3CZ5flgyS71WIDOvy/68qIUHa 7NznFIaFYmX7sIMtMo/AhY0ZDgkIMZDLn9dhPRcqqoWDqkleNrM0nb6lPO4uK30= -----END CERTIFICATE-----Generated at Wed Nov 5 00:02:59 2025 by rpki-client