$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/4996A7209D9211EFAD3DCF45C4F9AE02.roa File: 4996A7209D9211EFAD3DCF45C4F9AE02.roa (raw, json) Hash identifier: XI4mL6mEa2M+1NS8PfnGuvRQBxr1+O78oNJurqURZgQ= Subject key identifier: 86:62:6D:64:F3:67:E2:26:58:DD:59:28:AF:43:F5:B7:10:D0:CD:C3 Certificate issuer: /CN=A91C1025/serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Certificate serial: 0150 Authority key identifier: 39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/4996A7209D9211EFAD3DCF45C4F9AE02.roa Signing time: Thu 23 Jul 2026 07:32:17 +0000 ROA not before: Thu 23 Jul 2026 07:32:17 +0000 ROA not after: Fri 30 Jul 2027 00:00:00 +0000 asID: 153167 IP address blocks: 160.25.210.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 07:32:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1025, serialNumber=399A7B1FC4207EBA0707A8515195CC68E836ABF8 Validity Not Before: Jul 23 07:32:17 2026 GMT Not After : Jul 30 00:00:00 2027 GMT Subject: CN=6a61c381-43b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ec:98:6b:47:6e:4e:8c:ba:d9:17:ba:a0:ac: d4:8f:6f:c6:da:cd:68:b2:79:27:d2:0e:84:7a:1a: 62:57:3a:29:14:d4:5a:61:f5:aa:2f:74:c8:b5:71: 3c:fe:f5:ac:e8:76:5a:76:f4:5e:c4:4c:99:e2:6c: 6a:98:58:f1:64:f9:c0:3b:b8:5c:85:48:41:04:85: 8f:dd:2a:b7:87:96:d4:95:1d:d6:3a:92:3f:11:58: 0b:cf:67:3a:7e:7a:ae:13:9a:7c:9e:bb:08:af:87: d9:43:8e:eb:df:d1:d5:b3:69:31:0a:9f:0a:69:01: 1c:23:7e:19:47:cf:38:de:46:98:ac:31:e0:30:50: bd:2f:80:f4:b5:e6:aa:24:81:c9:25:c8:10:a1:dc: 4e:7b:47:20:c9:07:45:cf:42:17:8f:72:6e:dc:f9: ae:cc:c3:17:1e:c6:04:5c:01:02:54:41:81:f0:02: 10:0b:99:c5:9a:a3:80:74:dc:05:4a:c4:97:b6:d4: 2c:82:57:62:1b:98:05:f3:c9:c2:c8:fc:f9:cf:f5: 06:c0:1a:61:0a:c2:11:06:ec:7d:bc:3b:a2:e0:89: 4d:18:ac:0a:76:2a:4c:dd:41:c5:e8:ec:03:6e:fa: bc:14:72:67:43:f2:8f:90:c9:8c:93:9e:bb:b5:ea: 81:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:62:6D:64:F3:67:E2:26:58:DD:59:28:AF:43:F5:B7:10:D0:CD:C3 X509v3 Authority Key Identifier: keyid:39:9A:7B:1F:C4:20:7E:BA:07:07:A8:51:51:95:CC:68:E8:36:AB:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/OZp7H8QgfroHB6hRUZXMaOg2q_g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/OZp7H8QgfroHB6hRUZXMaOg2q_g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1025/8D7B9BF29D8411EF817E1420C4F9AE02/4996A7209D9211EFAD3DCF45C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.25.210.0/23 Signature Algorithm: sha256WithRSAEncryption 8b:f6:64:59:31:b9:80:24:b9:58:e1:99:a7:03:6d:34:bd:e8: 37:6a:f5:a5:fe:77:b4:bd:78:0a:33:58:36:df:22:1f:21:a6: 1b:ac:69:95:80:b2:ff:b5:04:7e:e0:33:37:1f:96:9c:e5:c3: 0f:26:4f:79:ef:99:2f:1a:d0:14:f4:85:61:f7:5d:62:32:bc: cf:26:66:0b:3d:32:bf:4b:ae:2c:0a:80:f1:a5:a7:e4:3e:87: f2:43:e0:40:26:93:87:90:eb:4c:29:8d:6f:f6:d7:b1:c4:84: 32:42:9b:f1:78:3f:72:b2:c3:8f:2e:0a:75:4e:51:1e:d7:a7: 41:17:42:94:c9:28:f1:4c:f0:3d:c9:d4:98:68:c5:7c:2e:bc: 60:37:bc:d5:17:95:85:fd:3a:fd:37:37:e7:2a:98:a0:32:9d: 85:68:0b:0b:c6:9f:0f:2e:d1:1e:f9:6a:4b:69:bc:09:5b:70: 22:7a:2b:5e:dc:47:5c:6f:37:2b:60:a0:80:ba:73:8f:dd:93: 7a:e6:13:cb:81:50:a5:ab:36:ec:37:b6:9d:34:10:ec:f1:33: 90:c2:45:17:1e:10:ca:63:97:39:45:4a:83:68:1f:46:9a:eb: 00:f2:2d:14:34:89:f1:c3:18:d5:ca:ee:98:19:0c:3d:f0:40: 96:0d:35:79 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEwMjUxMTAvBgNVBAUTKDM5OUE3QjFGQzQyMDdFQkEwNzA3QTg1MTUxOTVDQzY4 RTgzNkFCRjgwHhcNMjYwNzIzMDczMjE3WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTYxYzM4MS00M2I4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApuyYa0duToy62Re6oKzUj2/G2s1osnkn0g6EehpiVzopFNRaYfWqL3TItXE8 /vWs6HZadvRexEyZ4mxqmFjxZPnAO7hchUhBBIWP3Sq3h5bUlR3WOpI/EVgLz2c6 fnquE5p8nrsIr4fZQ47r39HVs2kxCp8KaQEcI34ZR8843kaYrDHgMFC9L4D0teaq JIHJJcgQodxOe0cgyQdFz0IXj3Ju3PmuzMMXHsYEXAECVEGB8AIQC5nFmqOAdNwF SsSXttQsgldiG5gF88nCyPz5z/UGwBphCsIRBux9vDui4IlNGKwKdipM3UHF6OwD bvq8FHJnQ/KPkMmMk567teqBNQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIZibWTz Z+ImWN1ZKK9D9bcQ0M3DMB8GA1UdIwQYMBaAFDmaex/EIH66BweoUVGVzGjoNqv4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTAyNS84RDdCOUJGMjlE ODQxMUVGODE3RTE0MjBDNEY5QUUwMi9PWnA3SDhRZ2Zyb0hCNmhSVVpYTWFPZzJx X2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL09acDdIOFFnZnJvSEI2aFJVWlhNYU9nMnFfZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEwMjUvOEQ3QjlCRjI5RDg0MTFFRjgxN0UxNDIwQzRGOUFFMDIvNDk5NkE3MjA5 RDkyMTFFRkFEM0RDRjQ1QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBnSMA0GCSqGSIb3DQEBCwUAA4IBAQCL9mRZMbmAJLlY4ZmnA200 veg3avWl/ne0vXgKM1g23yIfIaYbrGmVgLL/tQR+4DM3H5ac5cMPJk9575kvGtAU 9IVh911iMrzPJmYLPTK/S64sCoDxpafkPofyQ+BAJpOHkOtMKY1v9texxIQyQpvx eD9yssOPLgp1TlEe16dBF0KUySjxTPA9ydSYaMV8LrxgN7zVF5WF/Tr9NzfnKpig Mp2FaAsLxp8PLtEe+WpLabwJW3Aieite3EdcbzcrYKCAunOP3ZN65hPLgVClqzbs N7adNBDs8TOQwkUXHhDKY5c5RUqDaB9GmusA8i0UNInxwxjVyu6YGQw98ECWDTV5 -----END CERTIFICATE-----Generated at Fri Jul 24 15:39:34 2026 by rpki-client