$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/03FFD61EEF8A11F09F678C04616F56BC.roa File: 03FFD61EEF8A11F09F678C04616F56BC.roa (raw, json) Hash identifier: A7HwJDVNxwJYLBDJd9TfXMdwuNFGxBemZdYTybMyqFE= Subject key identifier: CE:D0:B0:6B:C9:85:56:68:E9:8B:29:54:DA:EF:3F:7C:93:11:4F:C8 Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: 0151 Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/03FFD61EEF8A11F09F678C04616F56BC.roa Signing time: Thu 23 Jul 2026 07:32:19 +0000 ROA not before: Thu 23 Jul 2026 07:32:19 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 53167 IP address blocks: 160.25.210.0/24 maxlen: 26 160.25.211.0/24 maxlen: 24 160.25.211.0/27 maxlen: 27 160.25.211.32/28 maxlen: 28 160.25.211.48/28 maxlen: 28 160.25.211.64/28 maxlen: 28 160.25.211.80/28 maxlen: 28 160.25.211.96/28 maxlen: 28 160.25.211.112/28 maxlen: 28 160.25.211.128/28 maxlen: 28 160.25.211.144/28 maxlen: 28 160.25.211.160/29 maxlen: 29 160.25.211.168/29 maxlen: 29 160.25.211.176/29 maxlen: 29 160.25.211.184/29 maxlen: 29 160.25.211.192/29 maxlen: 29 160.25.211.200/29 maxlen: 29 160.25.211.208/29 maxlen: 29 160.25.211.216/29 maxlen: 29 160.25.211.224/28 maxlen: 28 160.25.211.240/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 337 (0x151) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Jul 23 07:32:19 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a61c383-1383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:88:58:fd:a4:f5:0a:e8:b7:2e:21:a8:d5:87: 34:f3:5d:00:50:8a:7b:5d:43:23:86:69:89:17:f1: 8a:0a:85:44:20:82:6f:d2:44:6e:44:87:91:4c:b7: f3:90:64:26:90:9f:a2:7a:d3:6c:94:ba:59:8d:de: f5:2d:bb:4c:ec:b2:97:e4:f1:f8:01:7a:8a:b6:78: ef:3a:22:5d:6d:60:6e:0f:16:0e:a7:5b:ec:b6:d4: a2:ac:bc:d7:af:6f:5b:48:4e:a7:a6:12:8e:e9:e9: 29:2b:e2:f9:3e:f8:0e:d0:eb:f3:1e:27:d8:66:e6: 83:c0:08:b6:56:b1:15:6c:ec:2e:cf:bb:ef:35:5d: 6a:e3:b2:44:09:39:a5:b7:88:42:9d:8b:84:c4:dd: 60:43:6d:29:d5:e6:f4:66:ab:74:61:3f:02:ae:da: 5a:75:7a:fe:32:56:ef:71:2e:8a:aa:9e:03:59:9b: e3:41:e9:43:ab:f1:7c:8a:67:31:e5:df:e2:94:31: b2:99:be:57:f2:47:ab:e8:f2:97:65:de:33:f7:f7: 87:a1:29:63:f6:3c:2c:36:80:ac:99:f0:27:38:8b: ad:a3:ba:c1:1a:90:d7:02:55:75:51:a4:93:93:2c: 84:c6:a0:94:6d:1d:5a:9f:ab:00:76:b9:05:9e:d7: d2:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:D0:B0:6B:C9:85:56:68:E9:8B:29:54:DA:EF:3F:7C:93:11:4F:C8 X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/03FFD61EEF8A11F09F678C04616F56BC.roa sbgp-ipAddrBlock: critical IPv4: 160.25.210.0/23 Signature Algorithm: sha256WithRSAEncryption 00:1e:4e:df:db:f9:c1:d4:58:94:91:ab:e7:79:a4:92:49:0d: 91:0c:65:7b:65:b6:d8:36:6e:67:2c:27:77:2d:2e:a5:a5:08: 66:34:68:a6:2b:3d:20:0b:64:58:f5:a2:ee:28:74:8a:a0:8c: 94:15:42:f4:db:b7:a6:e1:6c:62:78:96:76:12:1a:c6:13:48: dc:7c:01:bb:0a:a7:61:6a:4f:7f:b0:07:68:18:07:c6:a4:9b: 36:17:b7:9d:57:c1:fb:8f:82:69:3b:fa:ba:c5:f1:e8:98:69: 1f:d2:38:5b:00:92:f8:cb:ad:c9:c5:c9:77:86:84:9b:b0:1a: e0:d4:ad:0e:c2:08:ae:c0:91:02:48:da:56:76:a9:27:40:99: c8:88:04:6e:be:2b:7e:b8:c6:12:6f:d7:65:eb:e2:42:01:17: d1:a8:32:1a:92:69:39:0e:35:36:5c:82:9e:8b:34:1b:4f:af: 39:44:d3:b5:bb:bc:5a:b2:aa:a9:90:b5:31:26:fe:ca:3c:eb: 53:3f:a7:09:68:0b:53:e7:d0:72:76:34:a5:17:13:13:12:9f: 47:d0:41:ce:a6:16:40:de:27:89:31:f0:11:78:65:6d:af:4f: ae:60:1c:65:0c:00:62:a3:06:a6:a4:2c:5e:a4:f0:aa:b3:58: 69:de:af:5d -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAVEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjYwNzIzMDczMjE5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxYzM4My0xMzgzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3IhY/aT1Cui3LiGo1Yc0810AUIp7XUMjhmmJF/GKCoVEIIJv0kRuRIeRTLfz kGQmkJ+ietNslLpZjd71LbtM7LKX5PH4AXqKtnjvOiJdbWBuDxYOp1vsttSirLzX r29bSE6nphKO6ekpK+L5PvgO0OvzHifYZuaDwAi2VrEVbOwuz7vvNV1q47JECTml t4hCnYuExN1gQ20p1eb0Zqt0YT8CrtpadXr+MlbvcS6Kqp4DWZvjQelDq/F8imcx 5d/ilDGymb5X8ker6PKXZd4z9/eHoSlj9jwsNoCsmfAnOIuto7rBGpDXAlV1UaST kyyExqCUbR1an6sAdrkFntfSxQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFM7QsGvJ hVZo6YspVNrvP3yTEU/IMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEwMjUvOEQ3QjlCRjI5RDg0MTFFRjgxN0UxNDIwQzRGOUFFMDIvMDNGRkQ2MUVF RjhBMTFGMDlGNjc4QzA0NjE2RjU2QkMucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBnSMA0GCSqGSIb3DQEBCwUAA4IBAQAAHk7f2/nB1FiUkavneaSS SQ2RDGV7ZbbYNm5nLCd3LS6lpQhmNGimKz0gC2RY9aLuKHSKoIyUFUL027em4Wxi eJZ2EhrGE0jcfAG7Cqdhak9/sAdoGAfGpJs2F7edV8H7j4JpO/q6xfHomGkf0jhb AJL4y63Jxcl3hoSbsBrg1K0OwgiuwJECSNpWdqknQJnIiARuvit+uMYSb9dl6+JC ARfRqDIakmk5DjU2XIKeizQbT685RNO1u7xasqqpkLUxJv7KPOtTP6cJaAtT59By djSlFxMTEp9H0EHOphZA3ieJMfAReGVtr0+uYBxlDABiowampCxepPCqs1hp3q9d -----END CERTIFICATE-----Generated at Fri Jul 24 16:55:15 2026 by rpki-client