$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/50CD2AC8B3A411EF8B0CF846C4F9AE02.roa File: 50CD2AC8B3A411EF8B0CF846C4F9AE02.roa (raw, json) Hash identifier: uL2TyCwQV+0wra0r+FfrsDFS7+vHTTQVhn23yrjY6vE= Subject key identifier: 31:C0:71:2A:E8:49:AB:4B:98:A1:2B:12:76:A3:E3:EB:18:C9:C2:51 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 06B2 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/50CD2AC8B3A411EF8B0CF846C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:51:48 +0000 ROA not before: Thu 28 Aug 2025 14:51:48 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153416 IP address blocks: 160.191.242.0/23 maxlen: 23 160.191.244.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1714 (0x6b2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:48 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d03-ddbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:60:58:fc:25:a6:9e:e5:0f:c2:bc:d5:ed:39: 0e:70:76:a8:50:2c:c7:47:27:60:bc:e1:70:0c:2b: 8e:e1:fc:9a:72:37:90:fa:72:d4:49:1d:a5:8b:b4: 8d:10:12:b4:e9:09:c5:9c:e8:dd:58:ea:d6:41:0f: 9f:66:7a:88:e5:31:c2:c3:08:96:19:e1:bf:4d:0a: 83:69:6b:dc:78:bf:af:14:65:b3:89:65:e6:4e:d6: 6e:40:06:f3:45:4e:69:9c:7c:68:12:cc:0a:79:5b: 52:4f:0c:91:25:e3:a1:04:2a:92:cb:96:45:92:ec: 8b:a5:4a:eb:3a:00:d4:99:96:d7:c5:12:0c:a8:c2: bc:d2:51:9d:0e:7d:e4:73:5e:a5:8d:1c:a0:8b:f8: 3f:51:23:aa:8f:43:63:a1:f2:2c:1d:46:d7:23:3d: bd:2c:16:48:bc:20:f3:a1:89:cb:a0:ef:9b:71:7e: c2:3c:6b:ba:4f:2a:aa:c4:de:70:d5:ec:c6:72:e3: df:43:e7:9f:bf:d8:b4:88:0d:af:39:ef:e2:22:66: e7:74:66:07:ce:91:13:39:0d:60:8c:b9:48:ff:cc: 92:6b:98:e3:19:ae:4e:32:ca:9c:71:33:96:0c:3c: c2:01:64:93:a9:e2:6b:68:55:f6:82:6d:34:64:e7: ab:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C0:71:2A:E8:49:AB:4B:98:A1:2B:12:76:A3:E3:EB:18:C9:C2:51 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/50CD2AC8B3A411EF8B0CF846C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.242.0-160.191.245.255 Signature Algorithm: sha256WithRSAEncryption 12:b2:dc:f9:23:2f:dd:46:48:11:63:4e:f2:06:ec:a7:b2:6d: 76:59:59:f6:cd:07:4c:87:74:36:0d:ee:af:f9:8d:52:25:b7: 10:bd:a4:ad:35:50:9a:97:d6:14:e4:bb:d3:88:b3:71:ae:48: 40:6d:e8:e1:d7:5c:7c:bf:e5:24:8c:9b:52:f5:23:2d:97:0c: a5:2a:e4:e2:25:3e:3f:9b:dd:64:5d:77:e5:57:47:74:85:02: 18:60:a8:d6:b5:41:c9:9e:7f:12:1c:62:bd:78:cf:eb:e5:87: c7:17:7c:95:21:2a:ce:42:2a:be:9b:7f:a8:1f:d0:ea:3b:dc: 19:d1:7c:5f:48:a5:00:12:61:3e:43:2d:59:4f:07:64:fd:41: 35:2d:6a:e6:0b:64:c8:87:d7:55:f1:62:8f:9f:bf:dd:08:27: fc:3f:7e:e6:82:f3:c3:cd:cf:54:5a:17:5f:af:eb:66:ce:69: 31:8c:fc:3d:c6:35:3b:df:7c:77:11:cc:53:44:cf:a9:d4:d8: f2:58:59:64:85:2c:3b:a5:f0:4b:bb:46:74:b6:20:14:a6:fd: 2c:11:0c:f5:33:8a:45:8c:55:95:0e:11:f3:8a:97:f0:b8:e8: 98:ff:99:fd:d6:f8:d1:1e:b6:b2:fe:33:dd:8d:72:60:34:8f: 93:7f:9e:4b -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICBrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTQ4WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQwMy1kZGJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzWBY/CWmnuUPwrzV7TkOcHaoUCzHRydgvOFwDCuO4fyacjeQ+nLUSR2li7SN EBK06QnFnOjdWOrWQQ+fZnqI5THCwwiWGeG/TQqDaWvceL+vFGWziWXmTtZuQAbz RU5pnHxoEswKeVtSTwyRJeOhBCqSy5ZFkuyLpUrrOgDUmZbXxRIMqMK80lGdDn3k c16ljRygi/g/USOqj0NjofIsHUbXIz29LBZIvCDzoYnLoO+bcX7CPGu6TyqqxN5w 1ezGcuPfQ+efv9i0iA2vOe/iImbndGYHzpETOQ1gjLlI/8ySa5jjGa5OMsqccTOW DDzCAWSTqeJraFX2gm00ZOerWwIDAQABo4ICnTCCApkwHQYDVR0OBBYEFDHAcSro SatLmKErEnaj4+sYycJRMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNTBDRDJBQzhC M0E0MTFFRjhCMENGODQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAaC/8gMEAaC/9DANBgkqhkiG9w0BAQsFAAOCAQEAErLc +SMv3UZIEWNO8gbsp7JtdllZ9s0HTId0Ng3ur/mNUiW3EL2krTVQmpfWFOS704iz ca5IQG3o4ddcfL/lJIybUvUjLZcMpSrk4iU+P5vdZF135VdHdIUCGGCo1rVByZ5/ EhxivXjP6+WHxxd8lSEqzkIqvpt/qB/Q6jvcGdF8X0ilABJhPkMtWU8HZP1BNS1q 5gtkyIfXVfFij5+/3Qgn/D9+5oLzw83PVFoXX6/rZs5pMYz8PcY1O998dxHMU0TP qdTY8lhZZIUsO6XwS7tGdLYgFKb9LBEM9TOKRYxVlQ4R84qX8LjomP+Z/db40R62 sv4z3Y1yYDSPk3+eSw== -----END CERTIFICATE-----Generated at Mon Oct 20 17:08:22 2025 by rpki-client