$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/F17DA0FE85FC11EFBD7A485FC4F9AE02.roa File: F17DA0FE85FC11EFBD7A485FC4F9AE02.roa (raw, json) Hash identifier: +1YVoYAarcTcq9CjGoyqxTV7x6G+Zf3EIQipKgeUN5Y= Subject key identifier: 6C:C3:D9:53:8F:C2:B8:E7:63:FF:12:94:3A:8F:B3:28:4D:A7:B1:0A Certificate issuer: /CN=A911A4F7/serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Certificate serial: B1 Authority key identifier: B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/F17DA0FE85FC11EFBD7A485FC4F9AE02.roa Signing time: Sat 13 Sep 2025 06:13:15 +0000 ROA not before: Sat 13 Sep 2025 06:13:15 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 153200 IP address blocks: 160.30.110.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:58:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 177 (0xb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911A4F7, serialNumber=B5D955977ADA4683AC5B59C25818B44381C24FE6 Validity Not Before: Sep 13 06:13:15 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c50b7a-38cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:18:00:a4:e3:1b:d8:53:ac:1e:9d:01:40:21: 8f:6c:c9:f1:62:fe:f9:3a:95:c8:ca:ee:f7:e7:5b: 6a:34:b6:92:c7:dd:c3:c2:5f:a2:c0:f3:20:57:14: 94:4b:e9:dc:aa:b2:5c:6b:03:83:42:c4:46:55:35: 89:47:27:80:1c:86:ba:1c:a7:9e:e6:c3:a6:c6:ea: 39:f4:29:76:18:d4:99:a6:d6:b1:3c:8d:c9:ec:52: 33:de:d0:c6:28:8e:8a:3a:19:ab:cc:e6:90:52:51: b7:84:e1:81:78:90:1a:e7:6a:31:e8:2a:54:73:ac: 11:24:db:bd:fa:21:2c:6b:16:0e:ca:24:0a:b5:29: a7:ee:66:df:40:3f:ca:ab:d8:26:1c:f4:98:72:73: 5c:c8:53:1d:78:a6:a5:f5:bf:e1:44:63:f7:71:00: 9a:b1:ff:ba:43:3a:9f:2e:03:aa:d1:65:92:68:83: b0:d5:61:68:e9:16:c3:3a:bc:6e:0e:80:2f:71:2b: ab:0f:dc:06:f5:83:b9:c1:66:4a:18:fd:10:b2:6f: 77:fb:82:e9:4c:78:81:24:6b:a3:f3:f9:be:c4:b4: 9a:fe:75:f9:2d:b6:c2:ef:36:2d:7b:5a:4b:67:94: b8:4b:37:a7:e0:84:a3:43:0a:f9:ec:af:b3:be:a8: e9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:C3:D9:53:8F:C2:B8:E7:63:FF:12:94:3A:8F:B3:28:4D:A7:B1:0A X509v3 Authority Key Identifier: keyid:B5:D9:55:97:7A:DA:46:83:AC:5B:59:C2:58:18:B4:43:81:C2:4F:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tdlVl3raRoOsW1nCWBi0Q4HCT-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/9A58C38A85FC11EFBC210F5EC4F9AE02/F17DA0FE85FC11EFBD7A485FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.110.0/24 Signature Algorithm: sha256WithRSAEncryption 4d:78:c2:09:a9:ac:03:99:a4:6e:f5:46:8b:71:2c:1b:74:b8: 23:69:98:d7:69:09:27:ff:10:ca:44:ce:ed:f4:5c:fb:c8:9e: 62:45:ea:0c:be:5e:cd:85:08:16:a6:74:eb:92:0d:53:63:f7: 47:06:25:41:e4:64:49:1a:d6:5e:a3:a7:06:dc:8b:92:f2:e1: d8:57:a7:7a:a7:e3:91:6e:80:8a:0b:8d:55:d7:79:2e:8c:a2: 2a:9e:18:ea:2c:f7:e1:b5:09:f9:a9:ef:79:6a:e0:41:93:b3: c6:5e:ad:37:56:42:55:cc:fc:3c:72:ab:8c:4b:98:d7:b1:51: b7:c6:6d:e6:28:a6:f8:b1:51:6d:40:b0:78:70:04:43:33:cf: 88:0f:25:53:27:4c:94:0a:c2:fb:09:fe:cc:29:c5:a2:a4:60: b0:d7:5c:e8:6a:49:59:7a:5b:c9:49:ed:c1:e0:cd:81:24:1e: 9b:81:a2:2b:bf:a3:8d:32:a3:09:29:49:a0:fa:69:15:17:5f: 3c:b0:35:71:9f:66:59:65:bc:32:51:77:b9:8f:9a:34:0b:d6: 99:39:a9:05:5b:58:65:a5:fc:61:8d:13:13:84:99:c7:b7:7d: b3:85:d4:d8:7d:97:3d:1f:37:1e:f3:d3:f3:74:39:c5:ea:07: c4:b0:d2:49 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUE0RjcxMTAvBgNVBAUTKEI1RDk1NTk3N0FEQTQ2ODNBQzVCNTlDMjU4MThCNDQz ODFDMjRGRTYwHhcNMjUwOTEzMDYxMzE1WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM1MGI3YS0zOGNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoRgApOMb2FOsHp0BQCGPbMnxYv75OpXIyu7351tqNLaSx93Dwl+iwPMgVxSU S+ncqrJcawODQsRGVTWJRyeAHIa6HKee5sOmxuo59Cl2GNSZptaxPI3J7FIz3tDG KI6KOhmrzOaQUlG3hOGBeJAa52ox6CpUc6wRJNu9+iEsaxYOyiQKtSmn7mbfQD/K q9gmHPSYcnNcyFMdeKal9b/hRGP3cQCasf+6QzqfLgOq0WWSaIOw1WFo6RbDOrxu DoAvcSurD9wG9YO5wWZKGP0Qsm93+4LpTHiBJGuj8/m+xLSa/nX5LbbC7zYte1pL Z5S4Szen4ISjQwr57K+zvqjppQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGzD2VOP wrjnY/8SlDqPsyhNp7EKMB8GA1UdIwQYMBaAFLXZVZd62kaDrFtZwlgYtEOBwk/m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQTRGNy85QTU4QzM4QTg1 RkMxMUVGQkMyMTBGNUVDNEY5QUUwMi90ZGxWbDNyYVJvT3NXMW5DV0JpMFE0SENU LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3RkbFZsM3JhUm9Pc1cxbkNXQmkwUTRIQ1QtWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUE0RjcvOUE1OEMzOEE4NUZDMTFFRkJDMjEwRjVFQzRGOUFFMDIvRjE3REEwRkU4 NUZDMTFFRkJEN0E0ODVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgHm4wDQYJKoZIhvcNAQELBQADggEBAE14wgmprAOZpG71 RotxLBt0uCNpmNdpCSf/EMpEzu30XPvInmJF6gy+Xs2FCBamdOuSDVNj90cGJUHk ZEka1l6jpwbci5Ly4dhXp3qn45FugIoLjVXXeS6MoiqeGOos9+G1Cfmp73lq4EGT s8ZerTdWQlXM/Dxyq4xLmNexUbfGbeYopvixUW1AsHhwBEMzz4gPJVMnTJQKwvsJ /swpxaKkYLDXXOhqSVl6W8lJ7cHgzYEkHpuBoiu/o40yowkpSaD6aRUXXzywNXGf ZlllvDJRd7mPmjQL1pk5qQVbWGWl/GGNExOEmce3fbOF1Nh9lz0fNx7z0/N0OcXq B8Sw0kk= -----END CERTIFICATE-----Generated at Tue Oct 21 03:09:21 2025 by rpki-client