$ rpki-client -vvf rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/002622285F8F11EF9D02A046C4F9AE02.roa File: 002622285F8F11EF9D02A046C4F9AE02.roa (raw, json) Hash identifier: 9QvR+q9usp35MPBZykna9F1NepFSoFk8M5dJdWZQYbs= Subject key identifier: B0:DB:D7:AF:87:35:BA:39:12:C5:DB:44:6C:F5:B4:56:9D:65:A2:1A Certificate issuer: /CN=A91326FF/serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Certificate serial: CB Authority key identifier: C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/002622285F8F11EF9D02A046C4F9AE02.roa Signing time: Sat 13 Sep 2025 06:12:34 +0000 ROA not before: Sat 13 Sep 2025 06:12:34 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 134216 IP address blocks: 160.30.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:35:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91326FF, serialNumber=C0DD2C55857A92FFE7CDCBA2949983D48A42B9D8 Validity Not Before: Sep 13 06:12:34 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c50b52-d4ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:24:2b:9d:39:19:74:3f:43:bc:5a:ce:8d:86: 86:b5:1b:2d:29:b3:e4:33:7c:e6:38:45:88:0f:35: 57:ab:e5:e1:18:c1:87:72:b2:c9:2c:4a:a8:5c:82: a1:39:16:86:00:63:c5:8b:bb:e6:ea:3f:1e:5e:c8: 68:b4:b6:dd:37:b8:e3:0a:0d:65:6d:eb:77:e5:0d: 61:42:e4:ad:f9:d6:be:99:3b:6c:f7:28:28:19:76: 78:e0:98:f5:49:e6:f1:ae:78:c3:1d:86:84:10:16: 37:86:c5:33:34:4b:bd:9c:b5:db:82:7d:a9:12:3a: 95:53:f2:2e:0d:a3:70:cb:91:be:ee:0f:a0:3e:d5: 31:7d:b0:ce:da:82:77:b8:9e:75:5f:85:a0:77:7b: a7:70:8a:41:00:07:18:26:5e:0b:a8:8a:e0:61:3b: 87:2b:c8:83:d6:20:29:9c:1e:28:fe:26:4c:f9:b6: 48:b6:a9:5e:82:53:3d:16:0f:4e:80:e7:f3:2d:8c: 9c:0f:01:9c:8e:64:f7:32:6f:8d:c2:4c:88:db:3b: e6:24:2a:cd:96:f6:0f:80:d7:89:98:d6:d7:e4:54: ef:87:a0:b7:6a:7f:73:38:5c:c6:3a:d6:aa:0e:81: 14:e9:a5:58:81:81:f8:b6:f8:88:76:49:19:a9:73: a6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:DB:D7:AF:87:35:BA:39:12:C5:DB:44:6C:F5:B4:56:9D:65:A2:1A X509v3 Authority Key Identifier: keyid:C0:DD:2C:55:85:7A:92:FF:E7:CD:CB:A2:94:99:83:D4:8A:42:B9:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/wN0sVYV6kv_nzcuilJmD1IpCudg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wN0sVYV6kv_nzcuilJmD1IpCudg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91326FF/94104B4A5F8E11EFB23E7945C4F9AE02/002622285F8F11EF9D02A046C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.141.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:7b:9e:b2:08:a8:88:ed:34:90:dd:86:ab:05:cf:0e:a0:89: 1d:3a:51:20:03:b6:4f:54:fa:35:cc:e3:cb:46:4a:a4:26:b2: 4e:f4:be:ee:6b:7c:13:56:1c:37:4d:b4:38:43:4b:c7:54:d7: 7c:68:84:17:f7:3c:40:8a:7e:77:38:b7:ea:67:f8:47:b1:93: cb:dc:ae:a4:e0:e5:2e:13:76:e0:e9:5e:b1:0e:39:6a:fd:c3: 9d:0f:3f:fb:56:05:27:38:ec:09:ed:16:8d:7f:63:2a:d2:27: 53:87:7d:03:76:6d:75:06:bc:f4:3c:44:4b:e2:5d:2e:1a:c2: 37:a3:06:55:fd:ca:76:4f:fe:22:60:28:a5:9c:76:2e:98:9f: 7b:10:31:40:66:4b:84:b2:e9:91:19:d5:d2:af:6a:7d:2a:84: 47:d7:84:dc:49:10:91:34:a2:bb:6d:96:55:d0:5f:ce:12:7c: f8:16:13:55:9d:27:0b:6d:c8:a5:7c:ab:be:72:a0:f2:7b:44: 39:d5:1a:c4:bd:ca:03:a0:a1:a0:57:18:bb:7a:f7:1b:0f:20: 2b:b1:94:34:40:fc:59:88:37:5a:ac:9f:c3:bb:67:28:ac:2b: 36:5e:b0:e2:5d:08:7b:b4:83:5d:34:bb:85:70:e7:99:7b:b2: e1:01:56:bc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzI2RkYxMTAvBgNVBAUTKEMwREQyQzU1ODU3QTkyRkZFN0NEQ0JBMjk0OTk4M0Q0 OEE0MkI5RDgwHhcNMjUwOTEzMDYxMjM0WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM1MGI1Mi1kNGJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAoyQrnTkZdD9DvFrOjYaGtRstKbPkM3zmOEWIDzVXq+XhGMGHcrLJLEqoXIKh ORaGAGPFi7vm6j8eXshotLbdN7jjCg1lbet35Q1hQuSt+da+mTts9ygoGXZ44Jj1 SebxrnjDHYaEEBY3hsUzNEu9nLXbgn2pEjqVU/IuDaNwy5G+7g+gPtUxfbDO2oJ3 uJ51X4Wgd3uncIpBAAcYJl4LqIrgYTuHK8iD1iApnB4o/iZM+bZItqleglM9Fg9O gOfzLYycDwGcjmT3Mm+NwkyI2zvmJCrNlvYPgNeJmNbX5FTvh6C3an9zOFzGOtaq DoEU6aVYgYH4tviIdkkZqXOmQwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLDb16+H Nbo5EsXbRGz1tFadZaIaMB8GA1UdIwQYMBaAFMDdLFWFepL/583LopSZg9SKQrnY MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMjZGRi85NDEwNEI0QTVG OEUxMUVGQjIzRTc5NDVDNEY5QUUwMi93TjBzVllWNmt2X256Y3VpbEptRDFJcEN1 ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dOMHNWWVY2a3ZfbnpjdWlsSm1EMUlwQ3VkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzI2RkYvOTQxMDRCNEE1RjhFMTFFRkIyM0U3OTQ1QzRGOUFFMDIvMDAyNjIyMjg1 RjhGMTFFRjlEMDJBMDQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgHo0wDQYJKoZIhvcNAQELBQADggEBABp7nrIIqIjtNJDd hqsFzw6giR06USADtk9U+jXM48tGSqQmsk70vu5rfBNWHDdNtDhDS8dU13xohBf3 PECKfnc4t+pn+Eexk8vcrqTg5S4TduDpXrEOOWr9w50PP/tWBSc47AntFo1/YyrS J1OHfQN2bXUGvPQ8REviXS4awjejBlX9ynZP/iJgKKWcdi6Yn3sQMUBmS4Sy6ZEZ 1dKvan0qhEfXhNxJEJE0orttllXQX84SfPgWE1WdJwttyKV8q75yoPJ7RDnVGsS9 ygOgoaBXGLt69xsPICuxlDRA/FmIN1qsn8O7ZyisKzZesOJdCHu0g100u4Vw55l7 suEBVrw= -----END CERTIFICATE-----Generated at Tue Oct 21 00:52:24 2025 by rpki-client