$ rpki-client -vvf rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/212E0B520DFE11F0B266963AC4F9AE02.roa File: 212E0B520DFE11F0B266963AC4F9AE02.roa (raw, json) Hash identifier: dDhbAceYPTZoJoEOB7Q4AGN3lBigI7VE7UVJ4rk45bI= Subject key identifier: DB:A4:ED:21:F3:C7:7B:9B:76:89:94:23:5F:60:22:76:27:F5:9E:9D Certificate issuer: /CN=A91E85F1/serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Certificate serial: 75 Authority key identifier: E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/212E0B520DFE11F0B266963AC4F9AE02.roa Signing time: Fri 31 Oct 2025 07:21:16 +0000 ROA not before: Fri 31 Oct 2025 07:21:16 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 153322 IP address blocks: 160.187.14.0/23 maxlen: 23 160.187.14.0/24 maxlen: 24 160.187.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:06:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 117 (0x75) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E85F1, serialNumber=E4E4C24247785C342FF35907F7E11C4ABB398B83 Validity Not Before: Oct 31 07:21:16 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=6904636c-cf9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:9f:72:b7:7d:26:17:a0:ce:49:8d:6a:6e: b3:08:99:60:77:85:8b:75:99:5f:c3:b6:89:ac:33: 32:c1:27:c7:94:c8:92:3b:46:4b:06:31:a7:72:57: c2:e5:5e:48:6d:be:28:bb:14:1f:b5:f2:ce:7c:2a: 6c:27:09:79:aa:9d:ca:ed:23:e0:4d:4c:5f:21:bb: 27:26:fe:19:4e:57:8c:67:d7:e7:80:c9:c7:eb:8a: 47:45:4b:ab:0e:42:7e:c8:4b:05:9f:72:eb:28:33: f1:57:d5:70:fe:fe:31:dc:1f:ce:a9:ca:e3:e0:ff: 87:a1:6a:a7:8a:2d:eb:41:2b:e5:de:37:58:8c:16: b6:25:90:7a:db:be:54:c5:40:70:fb:9d:68:96:e3: 93:5f:eb:fc:53:04:5d:2a:90:44:88:81:0b:9f:be: b1:b5:89:f8:a2:80:a8:34:f7:c0:9b:d4:0b:a8:4f: f1:e0:b4:ef:f8:6a:ba:99:98:3d:cc:16:06:bf:98: ce:3b:3c:26:90:d3:69:b6:86:06:07:94:ba:bb:4e: 66:24:fd:e0:74:ee:b2:fe:df:e3:83:23:45:e5:db: 4f:36:41:8f:5e:5b:63:09:8f:2b:51:66:1d:dc:3c: 38:d3:06:98:aa:f5:dc:62:11:e2:52:f8:35:35:a9: 87:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A4:ED:21:F3:C7:7B:9B:76:89:94:23:5F:60:22:76:27:F5:9E:9D X509v3 Authority Key Identifier: keyid:E4:E4:C2:42:47:78:5C:34:2F:F3:59:07:F7:E1:1C:4A:BB:39:8B:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/5OTCQkd4XDQv81kH9-EcSrs5i4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5OTCQkd4XDQv81kH9-EcSrs5i4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E85F1/6220633C0DFC11F0A1D98053C4F9AE02/212E0B520DFE11F0B266963AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.14.0/23 Signature Algorithm: sha256WithRSAEncryption 62:86:f7:d8:2d:cc:51:f3:60:79:3a:88:00:16:83:8c:12:e9: c0:c4:8a:1e:a1:03:a9:e6:84:4a:b4:8c:2e:e8:0a:8a:cd:5e: 09:fb:0a:38:bb:a2:2a:5a:3f:8d:ff:c7:0e:8f:f3:9e:27:27: 32:2e:4d:9f:34:cb:87:49:e3:73:78:8e:e1:7b:a1:68:7f:c9: 8f:fd:16:49:6c:18:d8:65:51:9a:83:33:24:af:86:92:1a:ff: a6:24:31:f5:06:a3:b9:bb:c0:68:ec:b4:ed:40:e6:34:52:39: 0d:8e:c7:a7:01:f3:78:d4:b2:f3:31:1e:57:90:0c:85:b1:65: 07:ed:ef:38:c0:71:d2:37:1e:5e:aa:71:26:15:27:b4:34:18: 71:4a:84:23:09:05:81:ab:00:4f:0d:5c:11:9f:ad:84:c2:ce: bf:87:0e:40:71:64:22:92:e0:53:e8:36:6b:1c:1e:aa:93:fd: 77:2a:77:47:af:8d:b7:cb:da:2a:8e:3e:cf:e9:a3:b4:78:33: 1b:57:6c:21:c9:ef:24:69:5e:55:96:52:f2:43:63:54:07:7f: 64:70:61:7e:fc:ef:7a:43:5f:cd:91:02:ce:86:84:a8:63:c2: 42:30:94:b0:bc:93:e0:c4:0b:cf:43:69:44:64:b7:3d:65:c7: d7:74:07:e4 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBdTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF ODVGMTExMC8GA1UEBRMoRTRFNEMyNDI0Nzc4NUMzNDJGRjM1OTA3RjdFMTFDNEFC QjM5OEI4MzAeFw0yNTEwMzEwNzIxMTZaFw0yNjEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY5MDQ2MzZjLWNmOWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCwyp9yt30mF6DOSY1qbrMImWB3hYt1mV/DtomsMzLBJ8eUyJI7RksGMadyV8Ll Xkhtvii7FB+18s58KmwnCXmqncrtI+BNTF8huycm/hlOV4xn1+eAycfrikdFS6sO Qn7ISwWfcusoM/FX1XD+/jHcH86pyuPg/4ehaqeKLetBK+XeN1iMFrYlkHrbvlTF QHD7nWiW45Nf6/xTBF0qkESIgQufvrG1ifiigKg098Cb1AuoT/HgtO/4arqZmD3M Fga/mM47PCaQ02m2hgYHlLq7TmYk/eB07rL+3+ODI0Xl2082QY9eW2MJjytRZh3c PDjTBpiq9dxiEeJS+DU1qYe3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU26TtIfPH e5t2iZQjX2Aidif1np0wHwYDVR0jBBgwFoAU5OTCQkd4XDQv81kH9+EcSrs5i4Mw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUU4NUYxLzYyMjA2MzNDMERG QzExRjBBMUQ5ODA1M0M0RjlBRTAyLzVPVENRa2Q0WERRdjgxa0g5LUVjU3JzNWk0 TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNU9UQ1FrZDRYRFF2ODFrSDktRWNTcnM1aTRNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF ODVGMS82MjIwNjMzQzBERkMxMUYwQTFEOTgwNTNDNEY5QUUwMi8yMTJFMEI1MjBE RkUxMUYwQjI2Njk2M0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC7DjANBgkqhkiG9w0BAQsFAAOCAQEAYob32C3MUfNgeTqI ABaDjBLpwMSKHqEDqeaESrSMLugKis1eCfsKOLuiKlo/jf/HDo/znicnMi5NnzTL h0njc3iO4XuhaH/Jj/0WSWwY2GVRmoMzJK+Gkhr/piQx9QajubvAaOy07UDmNFI5 DY7HpwHzeNSy8zEeV5AMhbFlB+3vOMBx0jceXqpxJhUntDQYcUqEIwkFgasATw1c EZ+thMLOv4cOQHFkIpLgU+g2axweqpP9dyp3R6+Nt8vaKo4+z+mjtHgzG1dsIcnv JGleVZZS8kNjVAd/ZHBhfvzvekNfzZECzoaEqGPCQjCUsLyT4MQLz0NpRGS3PWXH 13QH5A== -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:18 2025 by rpki-client