$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/F9AAE6F8994011F097180C40C4F9AE02.roa File: F9AAE6F8994011F097180C40C4F9AE02.roa (raw, json) Hash identifier: RU5OhSVcdir8OrT3E9J1urB5y05ack2UMndknf/XUMI= Subject key identifier: 9A:6A:ED:68:93:F8:DE:49:64:F4:A1:05:C9:AF:03:DC:DA:A6:FC:20 Certificate issuer: /CN=A91B4873/serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A Certificate serial: EA Authority key identifier: E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/F9AAE6F8994011F097180C40C4F9AE02.roa Signing time: Wed 24 Sep 2025 12:21:19 +0000 ROA not before: Wed 24 Sep 2025 12:21:19 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 147040 IP address blocks: 160.25.70.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:08:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 234 (0xea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B4873, serialNumber=E5B44C69E8DE733DF61966056E7E415EC7C70D2A Validity Not Before: Sep 24 12:21:19 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68d3e23f-5ea2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:bb:6d:38:97:ab:96:d8:05:a4:8c:24:d7:32: b4:fc:4c:f5:74:77:1e:6e:64:72:b1:a4:35:16:b4: e7:08:39:ef:8a:64:73:93:ca:09:e8:8c:b5:f2:18: 2a:12:3f:1c:45:57:a8:7b:b1:b7:2b:08:e6:5f:e1: fe:54:94:cb:14:00:1d:92:f0:b5:33:c6:f7:fe:62: 00:a9:1c:9a:8a:0c:04:a2:9d:2a:ab:f8:f6:c4:23: a3:2f:ce:bd:09:d4:f5:27:f2:51:cc:a6:45:4c:2b: 52:3f:56:90:42:29:9f:37:54:0a:9a:49:bb:66:1f: 31:07:26:0e:75:60:db:01:cd:b2:9e:64:59:36:62: 28:17:c9:e1:2e:9b:8d:5c:84:39:56:02:56:0f:5a: f7:2e:3b:52:7b:06:c9:ef:8d:b1:ea:f0:32:bb:44: ad:8e:9b:a7:d4:99:f3:32:1b:c5:c2:fe:9d:cf:68: 94:95:cf:c2:e0:01:ce:3c:a6:d8:92:4e:b9:b8:e6: c0:2a:b4:e6:a7:23:f6:e9:bd:f8:30:e0:06:e8:89: 29:6d:4a:bc:06:bf:9d:14:57:79:63:e2:75:d0:48: a0:b6:12:a3:11:33:2e:37:9f:40:a6:ca:3b:54:48: 5c:70:a8:d5:a6:94:b7:1c:dd:24:57:07:da:26:a3: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6A:ED:68:93:F8:DE:49:64:F4:A1:05:C9:AF:03:DC:DA:A6:FC:20 X509v3 Authority Key Identifier: keyid:E5:B4:4C:69:E8:DE:73:3D:F6:19:66:05:6E:7E:41:5E:C7:C7:0D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/5bRMaejecz32GWYFbn5BXsfHDSo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5bRMaejecz32GWYFbn5BXsfHDSo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/4E25C8BC38E711EF844B4F65C4F9AE02/F9AAE6F8994011F097180C40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.70.0/23 Signature Algorithm: sha256WithRSAEncryption 05:d3:7e:40:31:d8:53:52:fd:0a:34:a3:8f:4f:f2:5b:fb:1e: 59:56:d1:a3:24:b3:b8:bf:64:f7:1b:be:e5:0c:27:c5:32:b6: 52:26:87:16:f2:a1:aa:63:52:dd:aa:09:de:b4:5c:bd:49:f6: a3:61:67:a6:93:0d:80:e1:16:9b:5b:e2:9e:93:bb:09:f0:dc: e7:ff:aa:2b:f8:10:e0:50:d3:75:3d:e4:2b:25:5c:1f:8d:84: ea:ee:3a:ce:cf:81:ea:b8:f8:de:49:50:d4:10:1a:0e:3a:72: 3e:bc:2b:bd:bb:ba:f7:16:25:0e:41:0b:4f:05:44:76:7b:7e: e7:48:48:55:82:6d:13:d1:1c:3b:c3:b1:a4:c5:fc:33:a4:f9: 1f:75:22:ce:24:e9:a2:15:03:f7:5c:50:f4:22:a1:af:d8:63: a5:35:0d:6a:a7:f0:c1:82:d4:26:00:c9:de:26:a9:70:58:fd: b5:d0:4d:93:68:d6:e0:6d:ab:ef:84:2f:cc:bc:5a:62:33:d2: 50:c0:aa:3b:5c:90:63:11:6e:d3:53:c3:f9:4c:a7:21:b9:1b: c0:95:a6:ff:d5:f0:31:51:2f:5a:f6:13:5e:5d:10:9f:c1:36: 79:d2:eb:66:94:2d:26:d2:55:fb:e6:4a:41:ed:d3:72:fa:a6: 23:10:01:a3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjQ4NzMxMTAvBgNVBAUTKEU1QjQ0QzY5RThERTczM0RGNjE5NjYwNTZFN0U0MTVF QzdDNzBEMkEwHhcNMjUwOTI0MTIyMTE5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGQzZTIzZi01ZWEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0LttOJerltgFpIwk1zK0/Ez1dHcebmRysaQ1FrTnCDnvimRzk8oJ6Iy18hgq Ej8cRVeoe7G3KwjmX+H+VJTLFAAdkvC1M8b3/mIAqRyaigwEop0qq/j2xCOjL869 CdT1J/JRzKZFTCtSP1aQQimfN1QKmkm7Zh8xByYOdWDbAc2ynmRZNmIoF8nhLpuN XIQ5VgJWD1r3LjtSewbJ742x6vAyu0Stjpun1JnzMhvFwv6dz2iUlc/C4AHOPKbY kk65uObAKrTmpyP26b34MOAG6IkpbUq8Br+dFFd5Y+J10EigthKjETMuN59Apso7 VEhccKjVppS3HN0kVwfaJqNBfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJpq7WiT +N5JZPShBcmvA9zapvwgMB8GA1UdIwQYMBaAFOW0TGno3nM99hlmBW5+QV7Hxw0q MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNDg3My80RTI1QzhCQzM4 RTcxMUVGODQ0QjRGNjVDNEY5QUUwMi81YlJNYWVqZWN6MzJHV1lGYm41QlhzZkhE U28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzViUk1hZWplY3ozMkdXWUZibjVCWHNmSERTby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjQ4NzMvNEUyNUM4QkMzOEU3MTFFRjg0NEI0RjY1QzRGOUFFMDIvRjlBQUU2Rjg5 OTQwMTFGMDk3MTgwQzQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGUYwDQYJKoZIhvcNAQELBQADggEBAAXTfkAx2FNS/Qo0 o49P8lv7HllW0aMks7i/ZPcbvuUMJ8UytlImhxbyoapjUt2qCd60XL1J9qNhZ6aT DYDhFptb4p6Tuwnw3Of/qiv4EOBQ03U95CslXB+NhOruOs7Pgeq4+N5JUNQQGg46 cj68K727uvcWJQ5BC08FRHZ7fudISFWCbRPRHDvDsaTF/DOk+R91Is4k6aIVA/dc UPQioa/YY6U1DWqn8MGC1CYAyd4mqXBY/bXQTZNo1uBtq++EL8y8WmIz0lDAqjtc kGMRbtNTw/lMpyG5G8CVpv/V8DFRL1r2E15dEJ/BNnnS62aULSbSVfvmSkHt03L6 piMQAaM= -----END CERTIFICATE-----Generated at Tue Nov 4 17:01:19 2025 by rpki-client