$ rpki-client -vvf rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/E9B0903AF38811EF81B8CE39C4F9AE02.roa File: E9B0903AF38811EF81B8CE39C4F9AE02.roa (raw, json) Hash identifier: SSKa739rT23rOpIYYisZx12/v/K7+nclE63wWrbXXlU= Subject key identifier: 23:8E:90:8C:AA:8C:D6:77:DE:FD:38:12:90:33:0E:DE:21:81:57:09 Certificate issuer: /CN=A9160A05/serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Certificate serial: 0125 Authority key identifier: 14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/E9B0903AF38811EF81B8CE39C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:01:22 +0000 ROA not before: Mon 03 Nov 2025 05:51:12 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 150142 IP address blocks: 160.187.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 05:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 293 (0x125) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160A05, serialNumber=14DD8684294F1B33A313AFB8F0EBA1C8A0037809 Validity Not Before: Nov 3 05:51:12 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=69a58a21-4887 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d4:f6:a2:fd:d5:5c:d2:88:96:43:87:41:57: 11:3a:54:92:67:05:ea:9b:89:81:8d:9c:f2:10:35: 7c:2b:c4:4a:4c:64:ae:94:c7:a1:46:60:5a:d2:a0: 65:5b:27:48:d5:d8:fa:b1:ab:4f:53:d9:13:8e:e1: 10:66:0b:27:fb:cc:79:41:5b:07:79:11:1e:ed:72: f5:27:0b:d1:e4:72:19:88:5b:10:9f:91:6c:19:30: 47:e7:48:91:18:1b:a3:25:58:61:d9:91:33:7f:1a: 24:d4:84:a2:0d:5f:6a:78:ec:7c:6f:a6:95:a0:53: e8:f5:9c:de:87:7e:f5:a7:ea:71:5b:86:97:be:d9: 5e:0d:7f:e3:28:6d:24:e8:86:25:1a:7c:41:8b:cb: 74:5c:4d:44:a4:42:19:57:48:e7:03:f4:a6:ec:73: 0d:33:11:b1:53:70:ef:f8:6b:62:3e:cd:76:57:e5: a8:51:30:d2:b0:45:dc:bf:7d:ce:d5:fd:db:41:4b: a8:53:f0:58:16:77:4f:ca:c3:c0:96:7e:a1:f8:3f: b8:88:f3:e0:03:11:13:62:0a:31:b7:92:6b:2a:85: 9c:80:c2:84:ff:a4:31:3b:32:b4:0f:3c:3e:ba:8f: 6e:7f:43:7e:99:85:1e:80:b8:f0:9c:b1:b0:e9:55: 3b:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:8E:90:8C:AA:8C:D6:77:DE:FD:38:12:90:33:0E:DE:21:81:57:09 X509v3 Authority Key Identifier: keyid:14:DD:86:84:29:4F:1B:33:A3:13:AF:B8:F0:EB:A1:C8:A0:03:78:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/FN2GhClPGzOjE6-48OuhyKADeAk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FN2GhClPGzOjE6-48OuhyKADeAk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160A05/D17C88687C8A11EF8FAB6909C4F9AE02/E9B0903AF38811EF81B8CE39C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.187.130.0/24 Signature Algorithm: sha256WithRSAEncryption 0c:ad:ce:3e:68:d6:4b:57:7a:66:be:03:e3:58:66:01:74:8e: 67:d1:dd:bf:f0:a6:87:20:14:15:21:4a:fe:8f:36:f4:00:5d: 34:3b:10:e3:9f:53:2f:a1:41:4f:d3:36:de:66:00:b4:d9:55: 25:5c:a8:d8:d9:6c:6b:c2:84:7a:c1:6f:8c:09:74:92:ee:2d: 9c:20:89:f1:55:92:59:f4:01:eb:72:ac:2b:c1:bd:26:8a:94: 38:69:af:5a:b5:82:aa:b9:0e:d2:2e:40:d2:b3:de:f2:03:95: 22:62:0c:cb:c9:a9:00:a6:e6:70:0c:91:16:26:c3:34:44:dc: 47:8b:74:47:6c:fc:f4:e4:19:44:31:0c:03:05:cb:17:89:6f: 16:f0:81:66:f5:cb:d3:19:3e:f7:77:5a:8b:b8:bb:03:aa:35: 7d:7a:b7:62:3c:a3:03:9c:4d:0d:11:9f:97:e3:ee:76:07:c7: f5:72:44:20:54:61:47:1e:59:e1:eb:2a:58:6d:93:7e:c2:2d: 76:46:56:fa:f4:41:f0:66:77:c1:8a:66:89:86:37:9d:93:12: a4:a1:6f:a9:07:fc:40:4a:61:be:9e:79:99:00:c8:89:a2:3a: 73:f4:ff:5d:b4:58:d1:07:a0:49:3d:c7:ea:3a:ec:d4:44:ee: 5e:01:3e:f5 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICASUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBBMDUxMTAvBgNVBAUTKDE0REQ4Njg0Mjk0RjFCMzNBMzEzQUZCOEYwRUJBMUM4 QTAwMzc4MDkwHhcNMjUxMTAzMDU1MTEyWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OGEyMS00ODg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAh9T2ov3VXNKIlkOHQVcROlSSZwXqm4mBjZzyEDV8K8RKTGSulMehRmBa0qBl WydI1dj6satPU9kTjuEQZgsn+8x5QVsHeREe7XL1JwvR5HIZiFsQn5FsGTBH50iR GBujJVhh2ZEzfxok1ISiDV9qeOx8b6aVoFPo9Zzeh371p+pxW4aXvtleDX/jKG0k 6IYlGnxBi8t0XE1EpEIZV0jnA/Sm7HMNMxGxU3Dv+GtiPs12V+WoUTDSsEXcv33O 1f3bQUuoU/BYFndPysPAln6h+D+4iPPgAxETYgoxt5JrKoWcgMKE/6QxOzK0Dzw+ uo9uf0N+mYUegLjwnLGw6VU7lQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFCOOkIyq jNZ33v04EpAzDt4hgVcJMB8GA1UdIwQYMBaAFBTdhoQpTxszoxOvuPDrocigA3gJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEEwNS9EMTdDODg2ODdD OEExMUVGOEZBQjY5MDlDNEY5QUUwMi9GTjJHaENsUEd6T2pFNi00OE91aHlLQURl QWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0ZOMkdoQ2xQR3pPakU2LTQ4T3VoeUtBRGVBay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjBBMDUvRDE3Qzg4Njg3QzhBMTFFRjhGQUI2OTA5QzRGOUFFMDIvRTlCMDkwM0FG Mzg4MTFFRjgxQjhDRTM5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQAoLuCMA0GCSqGSIb3DQEBCwUAA4IBAQAMrc4+aNZLV3pmvgPjWGYB dI5n0d2/8KaHIBQVIUr+jzb0AF00OxDjn1MvoUFP0zbeZgC02VUlXKjY2WxrwoR6 wW+MCXSS7i2cIInxVZJZ9AHrcqwrwb0mipQ4aa9atYKquQ7SLkDSs97yA5UiYgzL yakApuZwDJEWJsM0RNxHi3RHbPz05BlEMQwDBcsXiW8W8IFm9cvTGT73d1qLuLsD qjV9erdiPKMDnE0NEZ+X4+52B8f1ckQgVGFHHlnh6ypYbZN+wi12Rlb69EHwZnfB imaJhjedkxKkoW+pB/xASmG+nnmZAMiJojpz9P9dtFjRB6BJPcfqOuzURO5eAT71 -----END CERTIFICATE-----Generated at Thu Mar 26 12:25:49 2026 by rpki-client