$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/39032028BB8211F0ACBBE862C4F9AE02.roa File: 39032028BB8211F0ACBBE862C4F9AE02.roa (raw, json) Hash identifier: iHKf7sQGLzn26aeuBZcN6tASKPu3JaPIxOiIgdyND58= Subject key identifier: B8:F6:08:08:01:0E:83:7F:65:58:33:BE:93:4F:C2:5C:C5:B8:DC:65 Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Certificate serial: 019C Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/39032028BB8211F0ACBBE862C4F9AE02.roa Signing time: Tue 07 Jul 2026 06:31:14 +0000 ROA not before: Tue 07 Jul 2026 06:31:14 +0000 ROA not after: Tue 31 Aug 2027 00:00:00 +0000 asID: 154309 IP address blocks: 160.25.20.0/23 maxlen: 23 160.25.20.0/24 maxlen: 24 160.25.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 05:58:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 412 (0x19c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Validity Not Before: Jul 7 06:31:14 2026 GMT Not After : Aug 31 00:00:00 2027 GMT Subject: CN=6a4c9d32-54ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:6b:73:d2:db:c1:8a:ed:e9:1a:08:87:2a:64: 9e:1d:62:f2:02:93:bc:e3:26:18:80:ea:3c:51:5b: 63:9e:f4:ac:e0:6e:91:53:b5:83:dc:7b:53:38:81: 08:19:27:2f:7f:30:ca:65:aa:bd:9a:84:54:f2:dd: 83:67:3e:da:7c:b1:e9:fa:5b:28:4f:a1:4c:18:40: 2d:87:3e:91:29:59:33:37:cd:e4:f7:1c:93:fb:60: 8d:11:f0:06:38:ad:fd:3a:8f:f7:56:6f:ed:45:a2: 61:78:b0:31:2e:14:73:83:ee:d4:a2:74:69:cc:5c: c0:d9:5e:58:ed:75:00:9a:44:ad:c9:ce:bc:ee:28: 32:bc:6a:8c:58:32:29:98:02:16:8c:0c:11:cc:35: d7:3f:30:35:61:25:31:ba:80:0a:52:57:46:7e:00: 57:72:16:0f:12:29:88:a2:4b:8e:f0:3b:90:a3:85: 99:a3:30:f9:e4:4a:25:26:c4:a9:81:cf:e9:3d:21: 36:51:81:a3:ed:1e:f6:58:95:4f:34:5b:05:0b:46: c6:e3:5c:9f:ed:e1:35:03:67:96:a9:b6:2a:ee:82: 69:46:de:63:71:98:32:a3:2a:aa:35:40:d8:0f:f1: 21:70:75:fc:c5:77:e8:fd:38:0e:aa:f7:20:74:e1: 0c:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:F6:08:08:01:0E:83:7F:65:58:33:BE:93:4F:C2:5C:C5:B8:DC:65 X509v3 Authority Key Identifier: keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/39032028BB8211F0ACBBE862C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.25.20.0/23 Signature Algorithm: sha256WithRSAEncryption 69:d6:a2:4d:4e:bf:4f:73:8e:63:48:af:2e:c9:9f:b4:05:dc: 62:80:49:27:e4:f6:21:03:c6:01:8e:d2:9a:df:4a:74:bb:18: 30:e4:ec:1c:28:76:30:45:9c:f4:a3:b9:15:33:52:15:ce:f8: 53:5b:77:cf:56:c3:eb:81:d9:91:d9:42:14:c1:58:cc:da:59: d1:28:fc:fc:a2:2b:02:4c:86:36:ba:89:ce:1f:c4:6f:55:a8: ed:15:c5:1f:68:a1:bb:64:67:39:75:9a:cd:2d:38:5b:91:ff: 12:ea:fd:c8:d9:f8:3e:e4:0b:c6:98:f7:c1:0f:cf:52:3f:fe: ee:ce:47:8e:a8:00:c0:ec:1b:e9:3c:e3:52:2c:e4:26:75:2a: d7:8f:97:2b:a9:1f:bd:6c:f3:37:da:66:f3:6f:f2:55:2a:b7: 46:62:cb:a0:4f:ec:8d:12:58:9d:c8:35:2e:59:07:ac:b1:fb: 28:89:40:c7:6b:07:98:1e:53:5d:cb:a4:d5:44:fc:da:69:c5: e7:44:f2:6b:02:64:ce:09:79:88:25:47:c8:ea:b5:9c:bb:0c: 13:02:b9:9b:3d:2c:69:80:85:ec:7b:a5:5e:4b:46:06:a7:fd: 1e:14:98:99:02:60:0c:da:7a:76:34:3a:d8:2f:49:8c:fa:06: 79:96:37:99 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAZwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdDRTMxMTAvBgNVBAUTKEMyNkY0NkZEOTk1MkIzQUYzQTdENzE1REUxQkYzQTYx RTI1Qzc5OEEwHhcNMjYwNzA3MDYzMTE0WhcNMjcwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02YTRjOWQzMi01NGNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyWtz0tvBiu3pGgiHKmSeHWLyApO84yYYgOo8UVtjnvSs4G6RU7WD3HtTOIEI GScvfzDKZaq9moRU8t2DZz7afLHp+lsoT6FMGEAthz6RKVkzN83k9xyT+2CNEfAG OK39Oo/3Vm/tRaJheLAxLhRzg+7UonRpzFzA2V5Y7XUAmkStyc687igyvGqMWDIp mAIWjAwRzDXXPzA1YSUxuoAKUldGfgBXchYPEimIokuO8DuQo4WZozD55EolJsSp gc/pPSE2UYGj7R72WJVPNFsFC0bG41yf7eE1A2eWqbYq7oJpRt5jcZgyoyqqNUDY D/EhcHX8xXfo/TgOqvcgdOEM4QIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFLj2CAgB DoN/ZVgzvpNPwlzFuNxlMB8GA1UdIwQYMBaAFMJvRv2ZUrOvOn1xXeG/OmHiXHmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NFMy9BOTBDQUZDNDM0 NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2ODZmWEZkNGI4NlllSmNl WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dtOUdfWmxTczY4NmZYRmQ0Yjg2WWVKY2VZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTdDRTMvQTkwQ0FGQzQzNDY1MTFFRkI5QzA3NjRGQzRGOUFFMDIvMzkwMzIwMjhC QjgyMTFGMEFDQkJFODYyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBkUMA0GCSqGSIb3DQEBCwUAA4IBAQBp1qJNTr9Pc45jSK8uyZ+0 BdxigEkn5PYhA8YBjtKa30p0uxgw5OwcKHYwRZz0o7kVM1IVzvhTW3fPVsPrgdmR 2UIUwVjM2lnRKPz8oisCTIY2uonOH8RvVajtFcUfaKG7ZGc5dZrNLThbkf8S6v3I 2fg+5AvGmPfBD89SP/7uzkeOqADA7BvpPONSLOQmdSrXj5crqR+9bPM32mbzb/JV KrdGYsugT+yNElidyDUuWQessfsoiUDHaweYHlNdy6TVRPzaacXnRPJrAmTOCXmI JUfI6rWcuwwTArmbPSxpgIXse6VeS0YGp/0eFJiZAmAM2np2NDrYL0mM+gZ5ljeZ -----END CERTIFICATE-----Generated at Fri Jul 24 13:08:13 2026 by rpki-client