$ rpki-client -vvf rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa File: C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa (raw, json) Hash identifier: i/i9Fi7DO7CQzIWXaTSwtFH1LWaUqhByPYFzXOD85Kk= Subject key identifier: 61:5C:27:5F:67:1F:50:05:00:25:C1:B3:32:7A:8A:6F:06:75:5E:BD Certificate issuer: /CN=A9165A58/serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Certificate serial: BC Authority key identifier: F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa Signing time: Thu 11 Sep 2025 06:45:58 +0000 ROA not before: Thu 11 Sep 2025 06:45:58 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 132372 IP address blocks: 160.187.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:52:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 188 (0xbc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9165A58, serialNumber=F247AEBD075FC8CBF3D9B805569EABBEE7975B0B Validity Not Before: Sep 11 06:45:58 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c27026-520e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:e0:a1:74:90:06:47:72:7e:3a:bb:a4:de: 5e:dd:70:5f:69:7e:cb:8e:d8:f5:b6:79:84:a5:c7: 80:58:a0:05:e0:b6:fe:c7:dc:23:1c:23:80:74:04: ca:14:2a:6a:cf:6c:02:a6:e7:2c:2e:31:30:e6:a8: 60:0f:a0:4b:11:7f:bf:46:ee:77:c0:ff:28:b5:d6: f7:cf:8e:0d:0f:af:35:5f:e7:97:44:d7:57:06:4c: 8e:69:7e:46:1c:8a:09:1b:9a:f1:a4:d6:49:53:39: 4e:6b:93:a0:9d:21:25:32:43:92:70:eb:5e:39:75: a1:a1:73:09:7f:b9:53:45:85:b1:1a:1e:3f:cf:a9: 3b:0f:66:be:f2:3c:96:31:06:48:5f:cd:59:83:17: 2c:77:06:f9:35:6b:8a:63:f1:c7:92:34:45:33:79: 30:1d:fa:dc:85:e1:9a:4a:83:77:86:d5:45:6f:6c: 26:6f:18:e0:70:df:86:78:66:c2:39:95:af:2d:33: 0f:20:9f:2b:ae:aa:37:5d:8a:db:a7:44:3e:85:54: 35:80:d3:de:9c:3f:23:2b:bb:d7:fd:f6:dd:bc:ca: 14:bf:47:ee:d2:3d:b5:8a:92:bd:b4:b6:90:96:7e: 13:9b:d4:16:93:1d:ec:cb:ae:15:88:6c:6f:71:13: fa:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5C:27:5F:67:1F:50:05:00:25:C1:B3:32:7A:8A:6F:06:75:5E:BD X509v3 Authority Key Identifier: keyid:F2:47:AE:BD:07:5F:C8:CB:F3:D9:B8:05:56:9E:AB:BE:E7:97:5B:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/8keuvQdfyMvz2bgFVp6rvueXWws.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8keuvQdfyMvz2bgFVp6rvueXWws.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9165A58/D6F105227BFD11EFA7B8EB5CC4F9AE02/C1BC5C5E7BFF11EFA2FCE774C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.97.0/24 Signature Algorithm: sha256WithRSAEncryption ba:e8:e6:2a:08:80:cc:0b:f3:55:ba:b2:4f:25:68:2b:e8:6b: a2:33:4e:e3:da:ca:78:1e:a4:42:44:2d:dd:92:eb:f9:6d:3a: da:9e:bc:08:68:94:cc:9f:da:dd:ca:04:19:70:20:7c:9d:5d: 83:b6:a2:b9:4b:77:35:0c:6d:cb:1e:33:c4:e4:6b:cd:71:bb: a1:c7:7d:f7:b4:43:53:08:4d:dc:b7:cd:16:ce:ef:a2:75:dd: e4:b0:82:bb:a5:53:39:9a:a6:9e:63:19:82:34:f5:1e:3f:31: a1:c8:e2:26:17:23:c8:c1:2f:05:46:e6:49:a6:04:54:a4:3f: 03:e2:51:61:0f:26:35:f7:a2:a0:79:79:f8:20:64:42:e0:19: df:22:35:56:37:41:42:8a:5d:ba:4e:ac:e4:d6:59:c2:9c:9d: 28:15:70:6c:51:24:ef:ec:7d:f2:83:85:62:09:d1:8b:48:24: 2f:9b:ee:a5:1a:94:98:b7:c3:b5:7e:f0:40:41:66:48:6f:3e: 53:56:93:39:c2:e2:cf:12:89:2b:80:ab:68:3a:8b:51:01:ca: d5:1d:08:ec:bd:5b:f0:bc:6d:c7:4e:8f:7d:aa:98:8e:19:72: 0f:60:61:f0:68:80:c8:e7:72:5b:17:1b:5e:ac:7a:3f:40:88: 3e:f4:ef:1a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjVBNTgxMTAvBgNVBAUTKEYyNDdBRUJEMDc1RkM4Q0JGM0Q5QjgwNTU2OUVBQkJF RTc5NzVCMEIwHhcNMjUwOTExMDY0NTU4WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGMyNzAyNi01MjBlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx1vgoXSQBkdyfjq7pN5e3XBfaX7Ljtj1tnmEpceAWKAF4Lb+x9wjHCOAdATK FCpqz2wCpucsLjEw5qhgD6BLEX+/Ru53wP8otdb3z44ND681X+eXRNdXBkyOaX5G HIoJG5rxpNZJUzlOa5OgnSElMkOScOteOXWhoXMJf7lTRYWxGh4/z6k7D2a+8jyW MQZIX81Zgxcsdwb5NWuKY/HHkjRFM3kwHfrcheGaSoN3htVFb2wmbxjgcN+GeGbC OZWvLTMPIJ8rrqo3XYrbp0Q+hVQ1gNPenD8jK7vX/fbdvMoUv0fu0j21ipK9tLaQ ln4Tm9QWkx3sy64ViGxvcRP65wIDAQABo4IClTCCApEwHQYDVR0OBBYEFGFcJ19n H1AFACXBszJ6im8GdV69MB8GA1UdIwQYMBaAFPJHrr0HX8jL89m4BVaeq77nl1sL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NUE1OC9ENkYxMDUyMjdC RkQxMUVGQTdCOEVCNUNDNEY5QUUwMi84a2V1dlFkZnlNdnoyYmdGVnA2cnZ1ZVhX d3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzhrZXV2UWRmeU12ejJiZ0ZWcDZydnVlWFd3cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjVBNTgvRDZGMTA1MjI3QkZEMTFFRkE3QjhFQjVDQzRGOUFFMDIvQzFCQzVDNUU3 QkZGMTFFRkEyRkNFNzc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgu2EwDQYJKoZIhvcNAQELBQADggEBALro5ioIgMwL81W6 sk8laCvoa6IzTuPayngepEJELd2S6/ltOtqevAholMyf2t3KBBlwIHydXYO2orlL dzUMbcseM8Tka81xu6HHffe0Q1MITdy3zRbO76J13eSwgrulUzmapp5jGYI09R4/ MaHI4iYXI8jBLwVG5kmmBFSkPwPiUWEPJjX3oqB5efggZELgGd8iNVY3QUKKXbpO rOTWWcKcnSgVcGxRJO/sffKDhWIJ0YtIJC+b7qUalJi3w7V+8EBBZkhvPlNWkznC 4s8SiSuAq2g6i1EBytUdCOy9W/C8bcdOj32qmI4Zcg9gYfBogMjnclsXG16sej9A iD707xo= -----END CERTIFICATE-----Generated at Mon Oct 20 20:41:31 2025 by rpki-client