$ rpki-client -vvf rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa File: B23569E2756511EFB018F20DC4F9AE02.roa (raw, json) Hash identifier: 5VNZ8rNXbQQKdKelf/v7rMupqWLx2zXfYFtsUljtzac= Subject key identifier: 55:0D:32:C8:2F:80:EF:98:66:70:2D:49:BB:2E:BC:49:0E:44:23:B6 Certificate issuer: /CN=A91D44BE/serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Certificate serial: CE Authority key identifier: 95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa Signing time: Tue 16 Sep 2025 04:37:00 +0000 ROA not before: Tue 16 Sep 2025 04:37:00 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138166 IP address blocks: 160.30.212.0/23 maxlen: 23 160.30.212.0/24 maxlen: 24 160.30.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 206 (0xce) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D44BE, serialNumber=95F09D5E5B8BCD6F4B4D69B5C936C912F77D2CFD Validity Not Before: Sep 16 04:37:00 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68c8e96b-5f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:17:c4:51:21:28:c3:df:69:f1:ca:34:e4:77: ae:95:64:c2:96:b9:12:1a:9c:a5:9f:55:6f:cc:67: f4:2e:76:10:19:b3:88:1b:c9:03:ad:5c:a5:eb:08: 95:3e:42:3a:7b:d9:de:7f:58:f7:b6:8b:51:8f:c2: 34:4c:02:48:58:0f:e9:6e:bc:50:30:d4:11:49:20: 96:4e:34:a8:2a:e9:8a:80:0f:49:f9:60:18:f5:f2: 6e:c1:b7:b1:0e:cd:5c:39:46:13:46:c4:43:b8:20: 75:1f:94:44:9e:27:76:6d:86:b0:22:9c:00:9e:43: 1a:e1:f3:3c:7a:e5:d4:c9:36:e6:d9:92:47:e1:68: 93:6f:02:cf:0d:aa:1c:2f:2d:d6:26:c6:5e:c8:70: ef:32:22:00:82:2f:d0:3e:0e:83:60:94:5f:38:83: 4f:29:a6:aa:97:b1:fc:84:55:0f:60:8d:c0:31:2d: 1e:25:65:8c:19:39:f8:8d:ee:7c:71:3b:67:a7:bf: 8b:ac:59:bd:86:93:6d:90:66:48:c3:aa:7b:53:04: 35:d3:cc:7e:41:63:0c:2d:62:04:53:38:10:9e:bc: af:bf:ee:c3:b7:e6:55:1a:91:81:cb:44:1b:d2:03: 13:6a:9f:50:58:8f:45:7b:e4:dc:42:bb:46:02:6a: e0:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0D:32:C8:2F:80:EF:98:66:70:2D:49:BB:2E:BC:49:0E:44:23:B6 X509v3 Authority Key Identifier: keyid:95:F0:9D:5E:5B:8B:CD:6F:4B:4D:69:B5:C9:36:C9:12:F7:7D:2C:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/lfCdXluLzW9LTWm1yTbJEvd9LP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lfCdXluLzW9LTWm1yTbJEvd9LP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D44BE/028ABE42692211EFBF87BB0EC4F9AE02/B23569E2756511EFB018F20DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.212.0/23 Signature Algorithm: sha256WithRSAEncryption 19:31:1d:24:c2:14:b0:ae:21:b3:ce:19:7c:f3:e9:ba:03:f8: d2:63:e7:cd:dc:bc:6a:16:bd:8e:09:ef:ae:d6:11:77:99:99: 01:a2:03:be:61:0d:bd:e5:d8:69:29:d8:8e:4c:c7:d4:e9:41: 84:bf:45:c8:7f:ca:d1:69:b8:38:0a:87:6f:bf:6d:89:10:44: 5d:c1:f6:5a:d3:ef:1e:8c:6e:ab:39:c7:59:6a:ce:35:3d:f1: 0d:15:2d:5b:14:2b:55:0a:0e:66:4e:e4:bc:2a:b4:fd:85:4d: b6:1d:b3:bd:6a:aa:22:0e:80:a8:8a:09:69:b2:0d:cc:da:4d: 88:cd:66:c5:6e:76:1c:6f:f5:78:f7:13:ac:3f:58:83:4a:a1: 0d:b4:7a:07:60:57:0f:d6:00:b7:7b:58:87:51:c7:f8:48:7b: 29:4a:14:44:d5:ed:8a:b0:5e:ad:f2:78:78:30:93:96:b9:9c: 1b:cc:2c:c1:8e:17:69:f1:70:b1:8b:fb:00:a3:aa:41:1f:15: f9:bf:c6:76:12:7e:69:06:45:a5:04:32:5c:d3:fb:3c:f8:e3: e6:e7:9a:3d:9c:98:c8:67:2f:2d:45:f8:ab:c4:d7:80:76:99: 16:fe:d2:e1:07:11:5e:e0:89:ff:6e:86:9b:07:1d:c6:d9:bb: d7:f7:e2:02 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAM4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDQ0QkUxMTAvBgNVBAUTKDk1RjA5RDVFNUI4QkNENkY0QjRENjlCNUM5MzZDOTEy Rjc3RDJDRkQwHhcNMjUwOTE2MDQzNzAwWhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM4ZTk2Yi01Zjc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvxfEUSEow99p8co05HeulWTClrkSGpyln1VvzGf0LnYQGbOIG8kDrVyl6wiV PkI6e9nef1j3totRj8I0TAJIWA/pbrxQMNQRSSCWTjSoKumKgA9J+WAY9fJuwbex Ds1cOUYTRsRDuCB1H5REnid2bYawIpwAnkMa4fM8euXUyTbm2ZJH4WiTbwLPDaoc Ly3WJsZeyHDvMiIAgi/QPg6DYJRfOINPKaaql7H8hFUPYI3AMS0eJWWMGTn4je58 cTtnp7+LrFm9hpNtkGZIw6p7UwQ108x+QWMMLWIEUzgQnryvv+7Dt+ZVGpGBy0Qb 0gMTap9QWI9Fe+TcQrtGAmrgfwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFUNMsgv gO+YZnAtSbsuvEkORCO2MB8GA1UdIwQYMBaAFJXwnV5bi81vS01ptck2yRL3fSz9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDRCRS8wMjhBQkU0MjY5 MjIxMUVGQkY4N0JCMEVDNEY5QUUwMi9sZkNkWGx1THpXOUxUV20xeVRiSkV2ZDlM UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmQ2RYbHVMelc5TFRXbTF5VGJKRXZkOUxQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDQ0QkUvMDI4QUJFNDI2OTIyMTFFRkJGODdCQjBFQzRGOUFFMDIvQjIzNTY5RTI3 NTY1MTFFRkIwMThGMjBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgHtQwDQYJKoZIhvcNAQELBQADggEBABkxHSTCFLCuIbPO GXzz6boD+NJj583cvGoWvY4J767WEXeZmQGiA75hDb3l2Gkp2I5Mx9TpQYS/Rch/ ytFpuDgKh2+/bYkQRF3B9lrT7x6Mbqs5x1lqzjU98Q0VLVsUK1UKDmZO5LwqtP2F TbYds71qqiIOgKiKCWmyDczaTYjNZsVudhxv9Xj3E6w/WINKoQ20egdgVw/WALd7 WIdRx/hIeylKFETV7YqwXq3yeHgwk5a5nBvMLMGOF2nxcLGL+wCjqkEfFfm/xnYS fmkGRaUEMlzT+zz44+bnmj2cmMhnLy1F+KvE14B2mRb+0uEHEV7gif9uhpsHHcbZ u9f34gI= -----END CERTIFICATE-----Generated at Tue Oct 21 17:13:32 2025 by rpki-client