$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5C65E16A6F5011EF9432D187C4F9AE02.roa File: 5C65E16A6F5011EF9432D187C4F9AE02.roa (raw, json) Hash identifier: Hbkma/7Q1ceO0+oD/Y/h0nqSCmR8KP1YYnkbv2z82XM= Subject key identifier: C2:F7:95:A3:CC:A6:01:B8:90:CA:7F:1C:97:C0:41:5C:20:60:98:DB Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0674 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5C65E16A6F5011EF9432D187C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:50:55 +0000 ROA not before: Thu 28 Aug 2025 14:50:55 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 140825 IP address blocks: 160.30.172.0/23 maxlen: 23 160.250.64.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1652 (0x674) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:50:55 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06ccf-fc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f4:f3:8c:72:c6:40:81:79:28:98:9e:d1:d4: 8f:bc:60:9d:70:ae:fa:26:98:1b:bc:5d:59:03:cd: d1:f8:37:83:fe:dc:e8:41:63:55:0d:a3:f9:a7:4d: cd:8e:3c:ad:47:c9:32:4c:92:57:05:b9:77:7f:85: 06:dd:88:ea:13:3e:aa:ec:f7:01:f1:32:e6:8f:63: 52:9d:30:87:ce:bb:61:d6:43:3e:0f:a1:20:ff:e4: ac:2f:4a:87:20:a2:9e:ef:7f:fe:35:c1:f4:37:d5: 7e:20:b0:15:4d:48:a9:b7:33:ee:3a:b1:10:4a:85: cc:09:e5:b9:62:d3:b7:99:c6:29:6a:03:9d:b5:9f: 82:b5:c6:46:77:ca:35:c3:36:06:db:b7:6d:a2:4d: 2e:81:f3:6b:91:3f:9f:51:51:5c:2a:48:d9:82:64: c4:58:1b:ae:be:d8:f3:b5:83:ec:5c:96:6c:e0:ee: 0a:46:6b:54:7a:b8:f1:70:37:fa:7c:54:22:6c:8b: ce:fc:59:cc:52:d1:b7:56:a1:fe:9b:9f:a9:ea:65: ae:0b:68:f5:1b:94:b4:ed:94:ec:48:b7:e8:ba:6d: a6:0d:ac:ae:21:5f:48:c8:2e:f1:28:4f:2a:d3:22: 74:90:71:8c:70:38:cd:32:ce:4f:3a:88:1e:76:83: b3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F7:95:A3:CC:A6:01:B8:90:CA:7F:1C:97:C0:41:5C:20:60:98:DB X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/5C65E16A6F5011EF9432D187C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.172.0/23 160.250.64.0/23 Signature Algorithm: sha256WithRSAEncryption b2:6e:df:32:65:8e:98:92:ce:6a:c2:c7:58:88:8b:76:99:a8: 99:6a:e3:55:ba:f0:cb:9b:13:7a:2d:d6:d3:dc:19:42:44:1b: 72:58:bb:fb:b3:02:71:42:dc:88:44:ee:2f:e9:79:e4:f9:bf: 21:cb:6f:a7:d6:f3:94:0d:6d:d2:bf:4a:cf:9b:41:ca:b5:f8: da:e1:3e:9a:9d:aa:e6:1c:59:93:74:8f:b3:6b:ab:72:ed:20: 3a:9b:f2:4d:cb:97:60:9b:a7:23:52:33:72:f9:f0:2c:47:c6: 83:ba:88:fc:1c:18:7f:77:39:2b:6a:05:dc:73:44:36:ba:1d: 9a:15:52:dc:77:7e:cb:0d:12:10:80:2a:f8:38:73:2d:5c:30: c6:70:62:4a:26:1a:85:d6:8d:1a:dd:84:8f:a2:7a:87:41:47: 24:42:4b:da:1e:76:63:43:57:ff:c5:19:5e:dd:16:07:44:7f: 7f:4a:5b:d1:bb:67:d5:0d:ff:c6:ef:de:9a:79:de:fc:8f:3e: 6f:85:bd:0d:ea:4b:1b:6e:a5:87:bb:8a:4d:3f:25:ae:90:1e: 61:b2:a3:ff:8a:4c:56:6f:5b:53:84:b9:2f:2c:cb:6b:79:82: 46:52:f8:c6:9d:b6:dd:f2:36:5e:16:ab:a2:f2:23:45:b8:22: e2:24:c0:c9 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBnQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MDU1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmNjZi1mYzY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fTzjHLGQIF5KJie0dSPvGCdcK76JpgbvF1ZA83R+DeD/tzoQWNVDaP5p03N jjytR8kyTJJXBbl3f4UG3YjqEz6q7PcB8TLmj2NSnTCHzrth1kM+D6Eg/+SsL0qH IKKe73/+NcH0N9V+ILAVTUiptzPuOrEQSoXMCeW5YtO3mcYpagOdtZ+CtcZGd8o1 wzYG27dtok0ugfNrkT+fUVFcKkjZgmTEWBuuvtjztYPsXJZs4O4KRmtUerjxcDf6 fFQibIvO/FnMUtG3VqH+m5+p6mWuC2j1G5S07ZTsSLfoum2mDayuIV9IyC7xKE8q 0yJ0kHGMcDjNMs5POogedoOz2QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFML3laPM pgG4kMp/HJfAQVwgYJjbMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNUM2NUUxNkE2 RjUwMTFFRjk0MzJEMTg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGgHqwDBAGg+kAwDQYJKoZIhvcNAQELBQADggEBALJu3zJl jpiSzmrCx1iIi3aZqJlq41W68MubE3ot1tPcGUJEG3JYu/uzAnFC3IhE7i/peeT5 vyHLb6fW85QNbdK/Ss+bQcq1+NrhPpqdquYcWZN0j7Nrq3LtIDqb8k3Ll2CbpyNS M3L58CxHxoO6iPwcGH93OStqBdxzRDa6HZoVUtx3fssNEhCAKvg4cy1cMMZwYkom GoXWjRrdhI+ieodBRyRCS9oedmNDV//FGV7dFgdEf39KW9G7Z9UN/8bv3pp53vyP Pm+FvQ3qSxtupYe7ik0/Ja6QHmGyo/+KTFZvW1OEuS8sy2t5gkZS+Madtt3yNl4W q6LyI0W4IuIkwMk= -----END CERTIFICATE-----Generated at Mon Oct 20 17:10:55 2025 by rpki-client