$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/607B5F6AB05411EF84C8DC74C4F9AE02.roa File: 607B5F6AB05411EF84C8DC74C4F9AE02.roa (raw, json) Hash identifier: CDlWFm2LtxVmYaaBC5EKvKez8sI4jo8CXca3FR8eDpc= Subject key identifier: BE:AF:18:90:B7:56:20:80:D4:6D:EF:D8:01:D6:47:11:84:4F:6D:18 Certificate issuer: /CN=A91F523F/serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B Certificate serial: 99 Authority key identifier: 2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/607B5F6AB05411EF84C8DC74C4F9AE02.roa Signing time: Fri 19 Sep 2025 07:15:14 +0000 ROA not before: Fri 19 Sep 2025 07:15:14 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 138391 IP address blocks: 160.187.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 09:27:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 153 (0x99) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F523F, serialNumber=2A59B96C30A55FBD61D2230373CEB89D1DB01A8B Validity Not Before: Sep 19 07:15:14 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68cd0302-ff24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:89:98:5c:01:d8:b1:1e:87:ca:21:9c:1b:5a: c4:17:63:d2:29:b5:dc:fa:f7:d2:db:ef:23:5c:8c: 5b:88:e1:92:9a:b4:54:9e:4e:f3:6c:0e:a3:db:e2: 76:44:d6:c7:0e:08:9b:91:09:18:4a:4a:55:fd:e4: 4e:4b:21:e4:b4:5f:a8:be:0c:6b:d9:f5:12:af:16: c9:a4:d2:2e:90:27:7b:5c:c9:5f:58:29:5b:e4:09: 28:51:e6:d4:d1:bf:b0:09:b5:8f:9c:0d:ae:31:ee: a6:50:98:b0:76:d0:87:99:e0:74:d6:f1:60:fb:92: 83:aa:70:1c:6a:1b:9e:b3:6f:df:13:2a:3c:ac:4f: aa:e2:27:85:11:c5:c6:37:b3:14:14:69:ff:c4:e9: c8:a1:e8:10:b4:06:18:29:b7:b4:90:c4:60:1b:59: 24:10:45:a4:04:7f:74:8d:04:78:46:8d:20:b0:73: 1e:0a:b8:50:da:f6:eb:9d:92:dc:93:0c:a9:a6:9f: d0:f1:87:5e:d4:3a:45:af:26:db:a6:9b:51:81:1a: 37:48:8d:3e:f6:6a:15:e8:97:24:f2:5e:3b:ad:1b: e5:cf:ff:a4:a9:1c:81:d4:f8:bf:e9:b1:e7:31:d6: 35:b6:3d:e1:4a:28:3f:78:d8:1e:74:0f:a9:84:58: 68:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AF:18:90:B7:56:20:80:D4:6D:EF:D8:01:D6:47:11:84:4F:6D:18 X509v3 Authority Key Identifier: keyid:2A:59:B9:6C:30:A5:5F:BD:61:D2:23:03:73:CE:B8:9D:1D:B0:1A:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/Klm5bDClX71h0iMDc864nR2wGos.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Klm5bDClX71h0iMDc864nR2wGos.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/4EBA6B32B05311EF9C2B8D3FC4F9AE02/607B5F6AB05411EF84C8DC74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.133.0/24 Signature Algorithm: sha256WithRSAEncryption 8d:12:f2:7d:c4:12:b0:0d:b2:fb:1a:0c:2e:e0:e8:30:16:5f: 67:64:80:99:14:8c:57:88:24:45:6a:cf:cb:ff:4a:ca:08:7a: b7:e0:5f:69:c4:cf:ff:3b:52:db:c5:e1:dc:52:7f:89:45:cf: 15:66:ae:82:50:55:1a:24:57:f0:60:77:54:0a:f9:34:86:e2: 61:ab:d9:66:5c:53:96:72:9d:bd:58:0f:30:b8:ce:c5:fb:da: e5:5f:84:8b:d8:96:b6:af:a2:9f:fc:c5:92:63:d2:ae:f9:4e: 0b:4f:72:f8:58:ab:2b:00:0a:d7:e4:a1:8e:e7:36:9b:ed:0c: 09:eb:b0:bd:77:e2:7f:86:df:e9:fc:0a:d5:58:35:00:c0:e4: e3:5b:00:72:6f:e9:78:1f:af:33:69:71:f5:5c:09:d1:f3:6a: 6f:33:43:db:c5:68:2a:e2:fa:c7:36:6b:af:a7:3a:86:8b:87: 6a:d8:1b:4d:f8:e0:da:0b:d6:54:65:bb:18:08:cd:0a:54:d6: 6e:9a:93:48:70:a6:97:e9:b5:01:5e:ef:38:95:75:19:76:d2: bd:e3:ba:b5:be:ce:ce:12:9e:e4:3a:c5:7c:f1:8d:2c:bc:3d: 48:8e:11:af:f9:68:0a:de:b6:1b:eb:69:47:5b:4f:0c:ab:ad: 1c:f6:33:b8 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyM0YxMTAvBgNVBAUTKDJBNTlCOTZDMzBBNTVGQkQ2MUQyMjMwMzczQ0VCODlE MURCMDFBOEIwHhcNMjUwOTE5MDcxNTE0WhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGNkMDMwMi1mZjI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2omYXAHYsR6HyiGcG1rEF2PSKbXc+vfS2+8jXIxbiOGSmrRUnk7zbA6j2+J2 RNbHDgibkQkYSkpV/eROSyHktF+ovgxr2fUSrxbJpNIukCd7XMlfWClb5AkoUebU 0b+wCbWPnA2uMe6mUJiwdtCHmeB01vFg+5KDqnAcahues2/fEyo8rE+q4ieFEcXG N7MUFGn/xOnIoegQtAYYKbe0kMRgG1kkEEWkBH90jQR4Ro0gsHMeCrhQ2vbrnZLc kwyppp/Q8Yde1DpFrybbpptRgRo3SI0+9moV6Jck8l47rRvlz/+kqRyB1Pi/6bHn MdY1tj3hSig/eNgedA+phFhokQIDAQABo4IClTCCApEwHQYDVR0OBBYEFL6vGJC3 ViCA1G3v2AHWRxGET20YMB8GA1UdIwQYMBaAFCpZuWwwpV+9YdIjA3POuJ0dsBqL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIzRi80RUJBNkIzMkIw NTMxMUVGOUMyQjhEM0ZDNEY5QUUwMi9LbG01YkRDbFg3MWgwaU1EYzg2NG5SMndH b3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tsbTViRENsWDcxaDBpTURjODY0blIyd0dvcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjUyM0YvNEVCQTZCMzJCMDUzMTFFRjlDMkI4RDNGQzRGOUFFMDIvNjA3QjVGNkFC MDU0MTFFRjg0QzhEQzc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgu4UwDQYJKoZIhvcNAQELBQADggEBAI0S8n3EErANsvsa DC7g6DAWX2dkgJkUjFeIJEVqz8v/SsoIerfgX2nEz/87UtvF4dxSf4lFzxVmroJQ VRokV/Bgd1QK+TSG4mGr2WZcU5Zynb1YDzC4zsX72uVfhIvYlravop/8xZJj0q75 TgtPcvhYqysACtfkoY7nNpvtDAnrsL134n+G3+n8CtVYNQDA5ONbAHJv6XgfrzNp cfVcCdHzam8zQ9vFaCri+sc2a6+nOoaLh2rYG0344NoL1lRluxgIzQpU1m6ak0hw ppfptQFe7ziVdRl20r3jurW+zs4SnuQ6xXzxjSy8PUiOEa/5aArethvraUdbTwyr rRz2M7g= -----END CERTIFICATE-----Generated at Tue Oct 21 11:02:50 2025 by rpki-client