$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/03FFD61EEF8A11F09F678C04616F56BC.roa File: 03FFD61EEF8A11F09F678C04616F56BC.roa (raw, json) Hash identifier: Vq7WOAaGyHrEANMuaydXxs4oGlSE1GWybP72WD+YuWk= Subject key identifier: 4E:49:DD:88:19:85:01:57:EE:3B:78:20:2B:66:9C:89:45:7D:70:0B Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: 0100 Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/03FFD61EEF8A11F09F678C04616F56BC.roa Signing time: Sun 01 Mar 2026 08:24:40 +0000 ROA not before: Mon 12 Jan 2026 07:40:50 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 53167 IP address blocks: 160.25.210.0/24 maxlen: 26 160.25.211.0/24 maxlen: 24 160.25.211.0/27 maxlen: 27 160.25.211.32/28 maxlen: 28 160.25.211.48/28 maxlen: 28 160.25.211.64/28 maxlen: 28 160.25.211.80/28 maxlen: 28 160.25.211.96/28 maxlen: 28 160.25.211.112/28 maxlen: 28 160.25.211.128/28 maxlen: 28 160.25.211.144/28 maxlen: 28 160.25.211.160/29 maxlen: 29 160.25.211.168/29 maxlen: 29 160.25.211.176/29 maxlen: 29 160.25.211.184/29 maxlen: 29 160.25.211.192/29 maxlen: 29 160.25.211.200/29 maxlen: 29 160.25.211.208/29 maxlen: 29 160.25.211.216/29 maxlen: 29 160.25.211.224/28 maxlen: 28 160.25.211.240/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 23:43:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 256 (0x100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Jan 12 07:40:50 2026 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=69a3f7c8-251b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:eb:92:d4:99:41:79:30:13:52:75:13:28:80: 5b:98:c1:24:b4:4b:de:df:7c:35:9b:2b:57:98:84: ad:b0:9d:37:82:81:50:d6:c4:85:31:56:b8:72:98: dc:74:e3:99:a3:b5:58:06:73:f4:a3:87:80:3c:66: 18:e1:cc:ff:54:07:fa:f1:47:d6:f0:e3:6b:2b:bc: be:c0:0e:80:2f:b6:b6:5c:5b:3d:22:c2:4e:07:5b: 7b:e9:55:f6:a1:e4:f0:b6:c8:25:ea:52:83:9b:c1: 0c:87:a3:24:22:c0:53:92:69:e6:c4:e4:54:e9:41: 99:fb:a7:71:03:65:c1:a1:f2:20:07:a1:f9:14:57: e8:43:e1:22:88:84:e5:8f:1d:50:48:ef:8a:85:79: 3e:99:f7:3b:48:93:f5:0a:e3:01:ca:09:91:a0:97: 32:01:f2:ce:62:36:21:0a:4f:d0:25:94:5f:1e:46: 50:20:91:f0:89:74:6a:64:cd:66:df:2c:f3:ba:f6: d4:40:86:f7:55:7e:62:8e:81:1f:27:4c:e6:d9:57: 89:cf:fb:e4:c9:79:08:36:0a:50:57:c5:08:92:1b: 14:d2:b7:70:96:3e:f1:b0:23:fa:51:c7:10:13:60: 94:4e:34:06:a5:64:2c:a0:66:81:98:bd:57:44:17: 67:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:49:DD:88:19:85:01:57:EE:3B:78:20:2B:66:9C:89:45:7D:70:0B X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/03FFD61EEF8A11F09F678C04616F56BC.roa sbgp-ipAddrBlock: critical IPv4: 160.25.210.0/23 Signature Algorithm: sha256WithRSAEncryption 47:23:65:39:04:6d:18:ae:71:4a:64:d6:65:56:43:44:7d:cf: 2d:df:d9:18:aa:64:03:0a:55:19:87:4c:ab:e9:f2:af:9a:b3: 27:22:5e:d5:e1:0a:be:49:e2:ee:e6:f6:68:96:80:ad:fd:74: 80:ad:d3:bd:69:28:b7:4a:97:a8:27:1f:9c:07:f0:24:cf:08: 63:6a:06:cd:11:04:71:e4:0a:bb:43:da:6c:8f:ec:6b:ff:05: 92:d8:47:6c:46:92:1a:b0:f6:d2:cf:bd:df:4d:52:a0:61:0e: e6:37:d3:72:00:13:9b:79:80:22:68:05:ab:64:ca:cb:42:7d: f4:c2:34:ec:84:6d:b9:03:5b:01:85:86:b5:28:59:d7:71:7c: 34:07:fa:74:2c:13:64:15:05:78:c7:d2:04:63:25:e5:e5:54: 34:a9:99:11:67:fe:34:7d:8f:e8:67:0b:af:09:94:43:56:12: 67:a1:7b:02:c2:e8:4a:c2:f3:8d:28:b8:f7:c6:4f:3d:6b:04: ab:17:b3:a2:b9:a5:42:9c:c8:6f:9e:72:5c:f2:1b:cb:92:3c: b3:30:4b:f1:ba:f8:73:76:04:55:ec:79:7c:29:1a:7f:21:46: e7:3c:0f:c9:8a:ec:8b:0f:6f:5c:6f:44:eb:04:2a:1c:ac:8e: e3:d9:85:1f -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjYwMTEyMDc0MDUwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWEzZjdjOC0yNTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+uS1JlBeTATUnUTKIBbmMEktEve33w1mytXmIStsJ03goFQ1sSFMVa4cpjc dOOZo7VYBnP0o4eAPGYY4cz/VAf68UfW8ONrK7y+wA6AL7a2XFs9IsJOB1t76VX2 oeTwtsgl6lKDm8EMh6MkIsBTkmnmxORU6UGZ+6dxA2XBofIgB6H5FFfoQ+EiiITl jx1QSO+KhXk+mfc7SJP1CuMBygmRoJcyAfLOYjYhCk/QJZRfHkZQIJHwiXRqZM1m 3yzzuvbUQIb3VX5ijoEfJ0zm2VeJz/vkyXkINgpQV8UIkhsU0rdwlj7xsCP6UccQ E2CUTjQGpWQsoGaBmL1XRBdnYwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFE5J3YgZ hQFX7jt4ICtmnIlFfXALMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEwMjUvOEQ3QjlCRjI5RDg0MTFFRjgxN0UxNDIwQzRGOUFFMDIvMDNGRkQ2MUVF RjhBMTFGMDlGNjc4QzA0NjE2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBnSMA0GCSqGSIb3DQEBCwUAA4IBAQBHI2U5BG0YrnFKZNZlVkNE fc8t39kYqmQDClUZh0yr6fKvmrMnIl7V4Qq+SeLu5vZoloCt/XSArdO9aSi3Speo Jx+cB/AkzwhjagbNEQRx5Aq7Q9psj+xr/wWS2EdsRpIasPbSz73fTVKgYQ7mN9Ny ABObeYAiaAWrZMrLQn30wjTshG25A1sBhYa1KFnXcXw0B/p0LBNkFQV4x9IEYyXl 5VQ0qZkRZ/40fY/oZwuvCZRDVhJnoXsCwuhKwvONKLj3xk89awSrF7OiuaVCnMhv nnJc8hvLkjyzMEvxuvhzdgRV7Hl8KRp/IUbnPA/JiuyLD29cb0TrBCocrI7j2YUf -----END CERTIFICATE-----Generated at Mon Mar 2 20:51:51 2026 by rpki-client