$ rpki-client -vvf rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/08D9C8604ABE11EF8708395BC4F9AE02.roa File: 08D9C8604ABE11EF8708395BC4F9AE02.roa (raw, json) Hash identifier: ORm53sfx2hhoKeW+AllOGpPuP99qec7a8uPMzE4I0Zw= Subject key identifier: EC:4E:5F:0B:A4:90:07:80:AE:0B:D3:02:FE:04:1A:D9:D0:BD:D6:66 Certificate issuer: /CN=A911BDA9/serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Certificate serial: 0138 Authority key identifier: 24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/08D9C8604ABE11EF8708395BC4F9AE02.roa Signing time: Sun 01 Mar 2026 10:39:05 +0000 ROA not before: Tue 05 Aug 2025 06:44:16 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 29802 IP address blocks: 160.25.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 04:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 312 (0x138) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BDA9, serialNumber=24920C5DF989FCCD990B08A8F0479EA4AFB36198 Validity Not Before: Aug 5 06:44:16 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=69a41749-086f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:af:7f:f6:e2:ae:8f:13:70:34:40:5f:1f:df: 44:6b:4a:b8:c3:d8:7a:51:2f:e2:e8:e9:aa:c4:f4: 26:db:ca:88:ef:9f:0d:9c:1b:d6:f2:8f:f0:6c:87: 51:97:e5:f0:3a:75:19:9c:16:12:96:f6:7e:dc:5a: 02:f0:68:92:13:56:91:69:87:cd:34:6c:dc:26:68: 37:c2:39:5b:f5:38:86:14:f9:19:cc:dc:15:3e:4e: 0b:9a:5e:07:57:f0:25:6e:0a:7f:03:f0:32:82:84: 35:80:28:25:51:9d:36:1b:cf:1b:8a:c9:f4:1e:76: f0:2c:2d:8b:30:78:4d:8b:5b:be:fc:cb:5b:44:8b: 64:5e:f8:7b:ff:00:bf:3e:83:a5:f7:69:cb:6f:dc: 44:2c:f3:f6:d9:2b:75:77:9d:1b:2f:23:1e:19:ef: 77:ad:06:04:15:c0:ed:60:a6:af:b0:ab:7e:9f:07: 90:7b:ed:a3:7a:46:e0:43:48:6d:f7:b2:3f:98:05: 3d:4e:4c:35:b7:fd:2a:1b:f9:61:42:65:ea:df:68: b9:bd:79:27:e1:07:32:24:8c:e3:ba:a4:d6:48:eb: 17:a8:59:80:b6:b3:72:a7:db:91:c8:f0:2e:7a:a7: a3:cc:d8:ae:4e:74:1c:18:18:38:cd:cd:88:17:72: d2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:4E:5F:0B:A4:90:07:80:AE:0B:D3:02:FE:04:1A:D9:D0:BD:D6:66 X509v3 Authority Key Identifier: keyid:24:92:0C:5D:F9:89:FC:CD:99:0B:08:A8:F0:47:9E:A4:AF:B3:61:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/JJIMXfmJ_M2ZCwio8EeepK-zYZg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/JJIMXfmJ_M2ZCwio8EeepK-zYZg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BDA9/2E0CB55E44BD11EFB73DB77BC4F9AE02/08D9C8604ABE11EF8708395BC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.25.227.0/24 Signature Algorithm: sha256WithRSAEncryption a6:ab:d8:1e:0c:eb:47:d1:14:f4:c8:42:ba:9c:ff:04:58:29: ca:92:08:52:0b:24:15:0c:be:a0:4f:18:72:28:38:c4:aa:21: 7c:b8:bc:25:7c:41:b4:96:6a:b1:fe:d8:5c:ec:23:af:8a:c9: 25:87:2c:b6:e5:ce:9f:ef:0d:f1:7b:a3:14:9b:2f:e5:3e:a1: d3:e1:d2:87:b6:0d:fd:a6:b6:4f:e4:d7:e8:b8:c8:ff:b4:d8: 4f:c5:a5:ef:5d:fb:fb:74:40:9d:5f:66:5b:f8:fc:19:d2:0c: 2c:24:54:18:68:90:4e:b2:5f:af:35:f6:fc:f8:40:f6:01:8e: 1a:4e:7f:10:26:45:a3:be:68:f8:4c:c1:de:8c:b2:a2:e7:60: cc:e7:78:dd:1b:31:cb:48:78:3b:30:94:85:ed:df:3f:90:bc: 27:0e:ba:e9:a3:03:63:61:11:ed:a0:31:30:5c:61:82:78:ad: 9c:75:45:b1:9d:66:cd:5d:32:21:8e:20:85:69:8d:0f:69:26: f5:30:c5:e0:49:70:7f:08:a0:45:30:d6:f6:21:ec:0b:6f:e5: 42:31:1d:f0:3b:92:30:c8:38:81:e4:04:be:c4:a1:60:e7:18: 56:84:3b:78:d7:51:ad:1f:2e:b5:84:7c:23:b4:a9:3c:75:32: f7:98:1b:07 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICATgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJEQTkxMTAvBgNVBAUTKDI0OTIwQzVERjk4OUZDQ0Q5OTBCMDhBOEYwNDc5RUE0 QUZCMzYxOTgwHhcNMjUwODA1MDY0NDE2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE0MTc0OS0wODZmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp69/9uKujxNwNEBfH99Ea0q4w9h6US/i6OmqxPQm28qI758NnBvW8o/wbIdR l+XwOnUZnBYSlvZ+3FoC8GiSE1aRaYfNNGzcJmg3wjlb9TiGFPkZzNwVPk4Lml4H V/Albgp/A/AygoQ1gCglUZ02G88bisn0HnbwLC2LMHhNi1u+/MtbRItkXvh7/wC/ PoOl92nLb9xELPP22St1d50bLyMeGe93rQYEFcDtYKavsKt+nweQe+2jekbgQ0ht 97I/mAU9Tkw1t/0qG/lhQmXq32i5vXkn4QcyJIzjuqTWSOsXqFmAtrNyp9uRyPAu eqejzNiuTnQcGBg4zc2IF3LSZQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFOxOXwuk kAeArgvTAv4EGtnQvdZmMB8GA1UdIwQYMBaAFCSSDF35ifzNmQsIqPBHnqSvs2GY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkRBOS8yRTBDQjU1RTQ0 QkQxMUVGQjczREI3N0JDNEY5QUUwMi9KSklNWGZtSl9NMlpDd2lvOEVlZXBLLXpZ WmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0pKSU1YZm1KX00yWkN3aW84RWVlcEstellaZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJEQTkvMkUwQ0I1NUU0NEJEMTFFRkI3M0RCNzdCQzRGOUFFMDIvMDhEOUM4NjA0 QUJFMTFFRjg3MDgzOTVCQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoBnjMA0GCSqGSIb3DQEBCwUAA4IBAQCmq9geDOtH0RT0yEK6nP8E WCnKkghSCyQVDL6gTxhyKDjEqiF8uLwlfEG0lmqx/thc7COvisklhyy25c6f7w3x e6MUmy/lPqHT4dKHtg39prZP5NfouMj/tNhPxaXvXfv7dECdX2Zb+PwZ0gwsJFQY aJBOsl+vNfb8+ED2AY4aTn8QJkWjvmj4TMHejLKi52DM53jdGzHLSHg7MJSF7d8/ kLwnDrrpowNjYRHtoDEwXGGCeK2cdUWxnWbNXTIhjiCFaY0PaSb1MMXgSXB/CKBF MNb2IewLb+VCMR3wO5IwyDiB5AS+xKFg5xhWhDt411GtHy61hHwjtKk8dTL3mBsH -----END CERTIFICATE-----Generated at Thu Mar 26 10:11:03 2026 by rpki-client