$ rpki-client -vvf rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/FFE6CB36228111EFA702E016C4F9AE02.roa File: FFE6CB36228111EFA702E016C4F9AE02.roa (raw, json) Hash identifier: UR1/D+V/HfsARytm1z1u12yu/ZwctEFat0Uu8xOAKlY= Subject key identifier: 92:86:E2:E2:98:2F:14:D3:13:4F:3B:C6:2E:05:1F:B0:07:F9:AD:DC Certificate issuer: /CN=A9129023/serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Certificate serial: CA Authority key identifier: 4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/FFE6CB36228111EFA702E016C4F9AE02.roa Signing time: Tue 01 Jul 2025 06:44:14 +0000 ROA not before: Tue 01 Jul 2025 06:44:14 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 147001 IP address blocks: 160.20.134.0/23 maxlen: 23 160.20.134.0/24 maxlen: 24 160.20.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 202 (0xca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9129023, serialNumber=4F146F5CC4F4BC873822FA1E33452A541A1EE546 Validity Not Before: Jul 1 06:44:14 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=686383bd-4d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:4f:46:37:d6:38:26:e8:37:3a:cf:16:65:ec: 00:43:8a:9d:98:df:17:b9:d0:88:c4:fe:eb:e2:a9: ec:ae:2b:8e:70:0d:04:40:87:f7:22:bb:e7:d8:f3: 55:c0:5d:e9:35:35:dd:bb:6d:3a:7f:d1:e9:22:9a: 4c:46:b6:a3:5b:70:0d:04:96:a6:d7:3d:c6:4e:f8: 7d:a6:c1:10:8e:79:bb:1c:8c:11:33:94:b3:94:31: 3f:3b:9d:3c:ec:f4:78:bc:2d:c3:23:51:a9:75:03: c1:ec:9e:9a:d9:c9:20:f1:5e:8b:d9:ed:22:6b:91: cb:37:0d:ad:26:db:55:7b:2d:5a:ec:41:aa:ee:22: af:18:72:6b:56:1d:51:81:05:22:57:27:a3:f1:04: 54:f3:55:f3:71:c8:7f:61:f2:0b:33:93:52:cf:a3: b3:0e:fc:47:ac:ad:f2:df:b3:97:af:19:12:26:3f: 38:42:8f:94:8d:6b:34:9a:63:bc:59:af:ce:b6:24: a7:d0:e8:95:e3:e7:7e:eb:4f:d8:f3:cc:3a:98:86: 10:e4:db:22:43:95:dd:6d:3e:0b:a3:19:c9:fe:48: e2:e1:bd:6e:fa:cb:59:4e:bc:6b:24:44:5d:c2:cc: da:3c:61:6d:df:15:82:dd:a2:c1:d2:fd:f7:cd:81: c8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:86:E2:E2:98:2F:14:D3:13:4F:3B:C6:2E:05:1F:B0:07:F9:AD:DC X509v3 Authority Key Identifier: keyid:4F:14:6F:5C:C4:F4:BC:87:38:22:FA:1E:33:45:2A:54:1A:1E:E5:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/TxRvXMT0vIc4IvoeM0UqVBoe5UY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/TxRvXMT0vIc4IvoeM0UqVBoe5UY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129023/F33BB4A6228011EFA7283C14C4F9AE02/FFE6CB36228111EFA702E016C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.20.134.0/23 Signature Algorithm: sha256WithRSAEncryption 72:35:5f:09:b4:3f:08:cc:45:f8:39:91:f1:64:1a:af:95:af: af:e8:38:71:73:46:ff:e2:26:6e:36:c6:14:ea:b8:a4:37:c6: 52:96:39:01:2d:13:8f:84:28:4a:cb:7b:36:9d:0c:db:ca:80: fb:ad:e3:b5:8d:f3:c5:9a:ed:f5:0a:96:32:cb:0e:da:3f:8e: d1:f4:b3:8d:86:5b:8f:38:fb:6c:fe:11:26:3d:3c:ca:d9:ad: cb:a1:bc:58:bd:cf:2a:16:fd:5c:1c:04:cb:26:34:44:a0:6c: c3:73:0c:5c:04:bf:aa:8b:fc:10:a6:95:d5:6a:d6:f3:f9:15: 5d:9a:a5:a3:0c:31:26:60:39:43:07:84:60:4e:0b:bc:fa:a1: 1e:cd:94:79:20:97:62:1a:8c:6d:e3:de:e8:f3:ca:5c:e8:87: 30:83:aa:a4:17:38:57:5e:a7:2e:15:78:f9:1b:d2:1a:88:04: eb:7b:3e:d3:0c:ce:14:fa:60:c7:63:2c:f5:86:3a:c4:65:a9: 45:23:00:c9:ea:b2:1f:61:1c:c4:2a:47:38:a3:70:bd:9c:4c: 23:9c:7c:04:13:ef:20:5f:d2:d8:52:0a:13:14:4a:af:36:17: 4e:23:37:e6:c9:00:26:cc:b2:47:58:fd:b8:e1:39:ca:bc:2d: c6:24:5a:e5 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjkwMjMxMTAvBgNVBAUTKDRGMTQ2RjVDQzRGNEJDODczODIyRkExRTMzNDUyQTU0 MUExRUU1NDYwHhcNMjUwNzAxMDY0NDE0WhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzODNiZC00ZDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+k9GN9Y4Jug3Os8WZewAQ4qdmN8XudCIxP7r4qnsriuOcA0EQIf3Irvn2PNV wF3pNTXdu206f9HpIppMRrajW3ANBJam1z3GTvh9psEQjnm7HIwRM5SzlDE/O508 7PR4vC3DI1GpdQPB7J6a2ckg8V6L2e0ia5HLNw2tJttVey1a7EGq7iKvGHJrVh1R gQUiVyej8QRU81Xzcch/YfILM5NSz6OzDvxHrK3y37OXrxkSJj84Qo+UjWs0mmO8 Wa/OtiSn0OiV4+d+60/Y88w6mIYQ5NsiQ5XdbT4LoxnJ/kji4b1u+stZTrxrJERd wszaPGFt3xWC3aLB0v33zYHIKQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJKG4uKY LxTTE087xi4FH7AH+a3cMB8GA1UdIwQYMBaAFE8Ub1zE9LyHOCL6HjNFKlQaHuVG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOTAyMy9GMzNCQjRBNjIy ODAxMUVGQTcyODNDMTRDNEY5QUUwMi9UeFJ2WE1UMHZJYzRJdm9lTTBVcVZCb2U1 VVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1R4UnZYTVQwdkljNEl2b2VNMFVxVkJvZTVVWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjkwMjMvRjMzQkI0QTYyMjgwMTFFRkE3MjgzQzE0QzRGOUFFMDIvRkZFNkNCMzYy MjgxMTFFRkE3MDJFMDE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFIYwDQYJKoZIhvcNAQELBQADggEBAHI1Xwm0PwjMRfg5 kfFkGq+Vr6/oOHFzRv/iJm42xhTquKQ3xlKWOQEtE4+EKErLezadDNvKgPut47WN 88Wa7fUKljLLDto/jtH0s42GW484+2z+ESY9PMrZrcuhvFi9zyoW/VwcBMsmNESg bMNzDFwEv6qL/BCmldVq1vP5FV2apaMMMSZgOUMHhGBOC7z6oR7NlHkgl2IajG3j 3ujzylzohzCDqqQXOFdepy4VePkb0hqIBOt7PtMMzhT6YMdjLPWGOsRlqUUjAMnq sh9hHMQqRzijcL2cTCOcfAQT7yBf0thSChMUSq82F04jN+bJACbMskdY/bjhOcq8 LcYkWuU= -----END CERTIFICATE-----Generated at Sat Jul 5 02:34:30 2025 by rpki-client