$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/0D38E31833A411EF82E92524C4F9AE02.roa File: 0D38E31833A411EF82E92524C4F9AE02.roa (raw, json) Hash identifier: EPqvpxlJgwQtY4nw1cFwMuEYfLLzI7V4J9A9JpW8gvM= Subject key identifier: 43:FD:26:54:19:A3:C8:98:70:BA:07:CF:EA:A6:A0:10:2D:BF:52:5F Certificate issuer: /CN=A91FA69F/serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Certificate serial: CB Authority key identifier: B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/0D38E31833A411EF82E92524C4F9AE02.roa Signing time: Wed 23 Jul 2025 06:13:33 +0000 ROA not before: Wed 23 Jul 2025 06:13:33 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 134371 IP address blocks: 160.25.8.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FA69F, serialNumber=B2E88EDD361BCC6194C97F68C4725180FF02F724 Validity Not Before: Jul 23 06:13:33 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68807d8d-d19e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8c:28:84:f4:04:a5:87:53:10:4b:50:cd:f5: 33:79:02:c5:19:36:26:c8:2a:66:6d:39:b7:85:26: 28:22:34:09:58:bc:df:b3:de:5e:6c:f1:08:e6:5a: 84:7e:a8:85:48:ac:d5:66:56:d9:0a:5d:34:e6:a6: a5:9c:3c:aa:66:f0:0f:b6:3e:c5:5c:8a:bc:e1:62: ea:f5:68:51:30:06:78:84:98:31:d1:15:6a:9b:83: 54:a3:c9:4a:5b:59:90:dc:af:14:f4:5b:c7:d4:93: fa:87:c5:74:78:12:f1:ff:25:c4:18:48:48:29:af: 30:55:2e:f5:f2:f4:4a:8e:40:54:57:7e:06:03:9b: 60:bf:3b:2e:06:eb:54:5a:a8:0f:41:3a:44:9c:b3: 5f:ec:80:ae:86:ae:bc:fb:9f:2d:9b:f1:d9:22:37: 3b:ed:8e:39:b1:b0:38:74:b3:f0:b9:c0:a4:91:46: 28:30:62:fc:64:bc:d0:c4:4d:56:8b:36:ad:bd:82: 06:7f:1a:04:3a:f1:d6:ee:e4:5d:6c:e1:2f:c4:28: 19:0d:d3:5c:8c:33:03:02:d9:bf:b3:06:b7:1e:84: 82:aa:66:37:57:bb:fb:c0:2a:2d:d7:b6:61:c0:d5: 56:d9:f8:6a:79:bf:29:63:b3:84:99:7d:65:0b:8f: cb:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FD:26:54:19:A3:C8:98:70:BA:07:CF:EA:A6:A0:10:2D:BF:52:5F X509v3 Authority Key Identifier: keyid:B2:E8:8E:DD:36:1B:CC:61:94:C9:7F:68:C4:72:51:80:FF:02:F7:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/suiO3TYbzGGUyX9oxHJRgP8C9yQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/suiO3TYbzGGUyX9oxHJRgP8C9yQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA69F/BD859F9633A311EFA5B49B23C4F9AE02/0D38E31833A411EF82E92524C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.8.0/23 Signature Algorithm: sha256WithRSAEncryption 13:ab:ca:02:d3:4c:b8:3b:5d:99:51:a0:cc:96:f6:65:d7:37: 9e:8a:6d:5b:72:27:b2:3b:a7:6d:f2:4a:15:b3:92:0c:db:59: a7:e2:c4:13:37:c5:11:a3:a1:33:52:11:f3:44:e5:22:81:c6: 7d:73:a9:d4:b9:ce:12:59:d2:62:b2:66:2a:44:0c:cf:a6:3d: 07:38:3a:25:f8:a7:60:63:e5:23:58:cb:3b:7b:3b:83:54:1f: 4e:db:b2:62:56:cb:78:a4:4b:1f:1b:f4:fa:8a:ee:1b:76:a9: b4:a2:af:33:94:30:92:8c:76:f7:b1:fd:04:71:1b:21:da:26: 78:dd:0e:b1:80:16:94:38:47:a7:ea:e2:26:ed:61:eb:db:37: 70:0b:03:55:61:d6:32:7b:fc:7a:87:e7:a2:f5:77:dc:ed:3f: 8a:2d:b8:1e:e1:58:17:31:53:92:9f:d3:03:f4:f4:09:c9:6b: 58:6a:9b:4e:ca:5e:fb:f2:c7:e8:03:5d:77:5e:51:b5:b3:68: de:1f:31:89:24:ed:ef:fc:c6:89:1d:34:40:41:c5:d3:31:34: 5e:8f:3e:78:ef:93:5e:92:18:ec:a7:2b:7f:f9:31:93:51:de: 0f:7c:6f:24:8b:50:7c:ea:c5:15:01:bd:3a:89:be:b2:86:cd: fc:38:86:eb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkE2OUYxMTAvBgNVBAUTKEIyRTg4RUREMzYxQkNDNjE5NEM5N0Y2OEM0NzI1MTgw RkYwMkY3MjQwHhcNMjUwNzIzMDYxMzMzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgwN2Q4ZC1kMTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4wohPQEpYdTEEtQzfUzeQLFGTYmyCpmbTm3hSYoIjQJWLzfs95ebPEI5lqE fqiFSKzVZlbZCl005qalnDyqZvAPtj7FXIq84WLq9WhRMAZ4hJgx0RVqm4NUo8lK W1mQ3K8U9FvH1JP6h8V0eBLx/yXEGEhIKa8wVS718vRKjkBUV34GA5tgvzsuButU WqgPQTpEnLNf7ICuhq68+58tm/HZIjc77Y45sbA4dLPwucCkkUYoMGL8ZLzQxE1W izatvYIGfxoEOvHW7uRdbOEvxCgZDdNcjDMDAtm/swa3HoSCqmY3V7v7wCot17Zh wNVW2fhqeb8pY7OEmX1lC4/LcwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEP9JlQZ o8iYcLoHz+qmoBAtv1JfMB8GA1UdIwQYMBaAFLLojt02G8xhlMl/aMRyUYD/Avck MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQTY5Ri9CRDg1OUY5NjMz QTMxMUVGQTVCNDlCMjNDNEY5QUUwMi9zdWlPM1RZYnpHR1V5WDlveEhKUmdQOEM5 eVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3N1aU8zVFliekdHVXlYOW94SEpSZ1A4Qzl5US5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkE2OUYvQkQ4NTlGOTYzM0EzMTFFRkE1QjQ5QjIzQzRGOUFFMDIvMEQzOEUzMTgz M0E0MTFFRjgyRTkyNTI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGQgwDQYJKoZIhvcNAQELBQADggEBABOrygLTTLg7XZlR oMyW9mXXN56KbVtyJ7I7p23yShWzkgzbWafixBM3xRGjoTNSEfNE5SKBxn1zqdS5 zhJZ0mKyZipEDM+mPQc4OiX4p2Bj5SNYyzt7O4NUH07bsmJWy3ikSx8b9PqK7ht2 qbSirzOUMJKMdvex/QRxGyHaJnjdDrGAFpQ4R6fq4ibtYevbN3ALA1Vh1jJ7/HqH 56L1d9ztP4otuB7hWBcxU5Kf0wP09AnJa1hqm07KXvvyx+gDXXdeUbWzaN4fMYkk 7e/8xokdNEBBxdMxNF6PPnjvk16SGOynK3/5MZNR3g98bySLUHzqxRUBvTqJvrKG zfw4hus= -----END CERTIFICATE-----Generated at Wed Nov 5 12:03:18 2025 by rpki-client