$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/2B6A4C480CDC11F0BAA65183C4F9AE02.roa File: 2B6A4C480CDC11F0BAA65183C4F9AE02.roa (raw, json) Hash identifier: htNwSI5H54iT9rmt0clXooV7uI/0VSjQJZC/u1wLlfY= Subject key identifier: 35:C7:F6:B2:CE:38:97:0A:37:08:C4:3E:AD:56:0E:6C:8D:9F:CB:D8 Certificate issuer: /CN=A91E5EEA/serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Certificate serial: A0 Authority key identifier: D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/2B6A4C480CDC11F0BAA65183C4F9AE02.roa Signing time: Wed 29 Oct 2025 06:21:48 +0000 ROA not before: Wed 29 Oct 2025 06:21:48 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153340 IP address blocks: 160.187.126.0/23 maxlen: 23 160.187.126.0/24 maxlen: 24 160.187.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5EEA, serialNumber=D60C30B1A9F59C959AD4967F2F6D572ACB75299C Validity Not Before: Oct 29 06:21:48 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6901b27c-8dfb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:9f:e3:ce:f1:ec:92:b9:38:6d:e0:c4:fe:82: 24:65:af:c1:32:89:10:ce:e3:79:60:05:22:56:35: cb:a0:68:08:16:c4:22:12:79:24:15:f7:da:75:34: 22:43:ef:17:7b:94:0f:32:b2:d9:6e:0d:81:0d:b4: a6:4e:85:96:e8:88:48:20:db:a5:0b:39:f4:4e:58: 3d:d5:d0:05:02:0e:19:3d:91:99:9f:64:bc:e0:7a: bb:23:92:be:c2:79:40:b5:37:54:48:f9:5e:09:5e: 1f:bf:e8:fe:1c:e4:16:52:5a:23:6c:8e:e6:81:2f: 67:e3:e2:17:d7:4d:60:23:76:52:93:0b:4b:94:68: 93:69:bf:29:72:ea:8a:1c:60:96:78:7d:47:26:db: 34:47:1d:0c:cf:54:f1:78:7d:d6:b9:d1:f6:51:65: d9:4d:0b:82:c3:8c:6d:4c:62:e4:85:7a:0a:39:6c: ad:32:a5:22:f6:c0:6b:b1:b2:3d:dc:aa:da:ba:59: 2e:ba:3a:c2:f6:36:f1:f3:25:b6:4a:96:04:46:66: 18:2d:04:5c:7e:82:46:77:f6:6a:a9:81:c4:6f:8f: 92:3f:5b:a9:50:87:3f:1b:73:72:1c:03:da:f0:b9: d0:9d:ca:ca:26:c3:f9:7d:05:ad:12:21:0f:ea:71: f7:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C7:F6:B2:CE:38:97:0A:37:08:C4:3E:AD:56:0E:6C:8D:9F:CB:D8 X509v3 Authority Key Identifier: keyid:D6:0C:30:B1:A9:F5:9C:95:9A:D4:96:7F:2F:6D:57:2A:CB:75:29:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/1gwwsan1nJWa1JZ_L21XKst1KZw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1gwwsan1nJWa1JZ_L21XKst1KZw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/E3FCD144D4CF11EF98DF982BC4F9AE02/2B6A4C480CDC11F0BAA65183C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.126.0/23 Signature Algorithm: sha256WithRSAEncryption 83:4d:7e:f8:33:1a:01:05:d8:a7:25:79:ed:65:bb:93:9a:57: 8c:07:08:d6:fb:79:4f:df:44:86:0d:c2:82:3c:b0:68:37:bc: cb:d5:2f:da:64:2c:94:da:73:d1:70:e2:c2:4d:5b:6c:a0:45: fb:5a:b0:93:f3:e8:6c:4a:07:ed:6f:f8:55:65:89:4a:47:f5: 75:79:ff:b9:76:42:34:ca:f3:c3:38:b5:61:78:10:f1:7a:7e: ab:9b:fc:06:38:5d:bf:e9:2f:7f:de:18:fb:56:e1:fa:73:cd: 49:8f:0c:cd:1e:66:11:32:13:92:4a:bf:ff:39:7b:e6:da:de: 43:8f:75:e3:98:3b:56:da:f1:8e:c7:19:05:5e:87:19:87:b5: 75:fa:20:06:15:a8:b4:81:e7:7c:c7:25:e7:4c:34:c0:de:7c: ca:50:24:01:e9:00:8a:a9:af:cb:1e:41:fc:b2:a8:18:34:0d: c7:ce:f9:11:33:cd:bb:a9:bf:c3:d1:17:a3:55:43:3c:13:8f: f3:79:bb:93:33:c8:87:71:d4:b5:d7:72:bb:b8:05:f3:32:77: 6e:c4:bf:28:a3:db:70:3c:44:b4:10:77:5b:e7:1a:14:56:bb: ee:ee:6b:83:ba:88:ce:6f:2d:9a:c0:24:a1:01:80:eb:da:cc: 98:ef:2f:47 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTVFRUExMTAvBgNVBAUTKEQ2MEMzMEIxQTlGNTlDOTU5QUQ0OTY3RjJGNkQ1NzJB Q0I3NTI5OUMwHhcNMjUxMDI5MDYyMTQ4WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OTAxYjI3Yy04ZGZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwZ/jzvHskrk4beDE/oIkZa/BMokQzuN5YAUiVjXLoGgIFsQiEnkkFffadTQi Q+8Xe5QPMrLZbg2BDbSmToWW6IhIINulCzn0Tlg91dAFAg4ZPZGZn2S84Hq7I5K+ wnlAtTdUSPleCV4fv+j+HOQWUlojbI7mgS9n4+IX101gI3ZSkwtLlGiTab8pcuqK HGCWeH1HJts0Rx0Mz1TxeH3WudH2UWXZTQuCw4xtTGLkhXoKOWytMqUi9sBrsbI9 3KraulkuujrC9jbx8yW2SpYERmYYLQRcfoJGd/ZqqYHEb4+SP1upUIc/G3NyHAPa 8LnQncrKJsP5fQWtEiEP6nH3PQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDXH9rLO OJcKNwjEPq1WDmyNn8vYMB8GA1UdIwQYMBaAFNYMMLGp9ZyVmtSWfy9tVyrLdSmc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNUVFQS9FM0ZDRDE0NEQ0 Q0YxMUVGOThERjk4MkJDNEY5QUUwMi8xZ3d3c2FuMW5KV2ExSlpfTDIxWEtzdDFL WncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFnd3dzYW4xbkpXYTFKWl9MMjFYS3N0MUtady5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTVFRUEvRTNGQ0QxNDRENENGMTFFRjk4REY5ODJCQzRGOUFFMDIvMkI2QTRDNDgw Q0RDMTFGMEJBQTY1MTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgu34wDQYJKoZIhvcNAQELBQADggEBAINNfvgzGgEF2Kcl ee1lu5OaV4wHCNb7eU/fRIYNwoI8sGg3vMvVL9pkLJTac9Fw4sJNW2ygRftasJPz 6GxKB+1v+FVliUpH9XV5/7l2QjTK88M4tWF4EPF6fqub/AY4Xb/pL3/eGPtW4fpz zUmPDM0eZhEyE5JKv/85e+ba3kOPdeOYO1ba8Y7HGQVehxmHtXX6IAYVqLSB53zH JedMNMDefMpQJAHpAIqpr8seQfyyqBg0DcfO+REzzbupv8PRF6NVQzwTj/N5u5Mz yIdx1LXXcru4BfMyd27Evyij23A8RLQQd1vnGhRWu+7ua4O6iM5vLZrAJKEBgOva zJjvL0c= -----END CERTIFICATE-----Generated at Wed Nov 5 22:31:59 2025 by rpki-client