$ rpki-client -vvf rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/A90D181AC36C11EFAF838D35C4F9AE02.roa File: A90D181AC36C11EFAF838D35C4F9AE02.roa (raw, json) Hash identifier: 5yVwTXwHog4Q0IanZkL0bw8GxEJ/NReVj7nFHVmCcnE= Subject key identifier: 50:EC:53:F2:22:32:96:F5:E3:9F:F1:8C:B4:5D:57:91:D1:3C:9D:0C Certificate issuer: /CN=A913854D/serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A Certificate serial: 62 Authority key identifier: 15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/A90D181AC36C11EFAF838D35C4F9AE02.roa Signing time: Fri 27 Jun 2025 07:21:10 +0000 ROA not before: Fri 27 Jun 2025 07:21:10 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152903 IP address blocks: 160.20.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 98 (0x62) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913854D, serialNumber=1535CA7909AE7A48C0BB38C0827AED766E30F82A Validity Not Before: Jun 27 07:21:10 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685e4666-c5f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:e0:79:46:04:f4:d4:76:01:13:8f:fb:b4:76: 36:8c:f9:68:3f:68:7f:8f:38:f3:fd:2f:4a:9b:cf: 25:66:7d:25:4e:c2:c4:d6:0d:f2:e2:c8:6e:23:c6: 6d:d3:62:09:e0:b7:d3:5f:94:55:f2:59:18:fa:3c: 13:d4:75:f4:de:4f:e9:e4:d8:5d:43:7e:a0:61:66: 8a:a2:48:05:e1:22:45:8d:66:bc:dc:7c:6b:da:f2: 2c:83:c7:7e:b7:a8:06:3a:42:a1:ce:cf:8c:13:d0: 4b:c0:e3:a9:7b:2b:91:24:06:cb:83:05:89:67:68: 5b:39:91:37:a3:df:40:d2:ad:00:23:56:66:cc:64: df:a0:14:3d:ec:1d:07:6b:b4:9e:b9:09:8f:48:0f: 4f:0a:34:f0:48:63:2a:37:ba:54:0d:76:b5:79:c5: c9:dc:a0:80:9a:69:b7:5b:b5:6c:f5:ab:36:e9:77: 38:b6:1d:b1:01:af:9c:1e:22:40:0f:5c:fd:b4:79: c7:82:c3:83:79:80:55:23:1f:c0:6a:36:2f:06:80: 0d:0b:af:7b:11:8c:cc:c0:bc:f8:33:ed:cb:9b:34: 39:87:21:3b:41:47:44:80:7b:04:8b:d3:5a:2b:8d: 6a:4c:c0:14:f8:54:2a:dc:76:70:4e:f4:1f:7a:d9: bf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:EC:53:F2:22:32:96:F5:E3:9F:F1:8C:B4:5D:57:91:D1:3C:9D:0C X509v3 Authority Key Identifier: keyid:15:35:CA:79:09:AE:7A:48:C0:BB:38:C0:82:7A:ED:76:6E:30:F8:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/FTXKeQmuekjAuzjAgnrtdm4w-Co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FTXKeQmuekjAuzjAgnrtdm4w-Co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913854D/DF3898DEC36B11EFBCBC5B16C4F9AE02/A90D181AC36C11EFAF838D35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.20.122.0/24 Signature Algorithm: sha256WithRSAEncryption 0e:dc:28:d9:7d:3a:04:65:ad:7e:01:fb:be:64:22:58:fd:11: fc:c0:e8:6a:a9:63:0b:ca:cd:f3:57:16:ff:01:0b:c8:2f:1f: 03:ab:ce:45:2c:85:b7:46:76:8d:02:7a:25:d1:dc:cd:f2:41: 28:46:f7:43:fe:b0:97:59:5f:fd:24:2a:87:c6:d9:ac:21:e5: e5:4e:ce:12:81:06:9e:19:72:f0:2f:e9:26:11:ec:2e:67:04: 8e:2e:65:34:94:9b:1b:db:ad:64:fa:2a:5e:d5:72:f5:bb:b6: ac:75:b4:7f:41:7f:eb:e9:f6:df:6e:f3:6e:52:12:33:7d:d7: 4a:de:f7:0f:9b:ba:ca:7e:1b:98:2a:6e:96:be:b6:c1:37:24: 92:9a:2e:f3:87:09:7e:4b:c9:4f:cf:46:1b:e7:4a:36:ea:b6: dd:19:59:bb:3c:a0:85:09:0e:e2:6d:cc:f6:d6:b8:bd:40:d7: 8c:90:88:a4:dc:0f:17:9c:ec:5d:ae:a2:f1:77:bf:57:e8:76: 65:1b:00:aa:64:6b:1b:8d:cf:f7:76:b7:39:b5:ce:5c:eb:46: 3c:ed:ea:87:c3:58:65:ba:c1:90:0d:b9:78:7d:cd:13:c3:60: a8:cf:25:d1:89:4f:e0:4c:4a:d2:fc:0c:6e:a8:21:41:ec:9b: 83:ab:45:75 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBYjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODU0RDExMC8GA1UEBRMoMTUzNUNBNzkwOUFFN0E0OEMwQkIzOEMwODI3QUVENzY2 RTMwRjgyQTAeFw0yNTA2MjcwNzIxMTBaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NWU0NjY2LWM1ZjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDe4HlGBPTUdgETj/u0djaM+Wg/aH+POPP9L0qbzyVmfSVOwsTWDfLiyG4jxm3T Ygngt9NflFXyWRj6PBPUdfTeT+nk2F1DfqBhZoqiSAXhIkWNZrzcfGva8iyDx363 qAY6QqHOz4wT0EvA46l7K5EkBsuDBYlnaFs5kTej30DSrQAjVmbMZN+gFD3sHQdr tJ65CY9ID08KNPBIYyo3ulQNdrV5xcncoICaabdbtWz1qzbpdzi2HbEBr5weIkAP XP20eceCw4N5gFUjH8BqNi8GgA0Lr3sRjMzAvPgz7cubNDmHITtBR0SAewSL01or jWpMwBT4VCrcdnBO9B962b8rAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUUOxT8iIy lvXjn/GMtF1XkdE8nQwwHwYDVR0jBBgwFoAUFTXKeQmuekjAuzjAgnrtdm4w+Cow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4NTREL0RGMzg5OERFQzM2 QjExRUZCQ0JDNUIxNkM0RjlBRTAyL0ZUWEtlUW11ZWtqQXV6akFnbnJ0ZG00dy1D by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRlRYS2VRbXVla2pBdXpqQWducnRkbTR3LUNvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODU0RC9ERjM4OThERUMzNkIxMUVGQkNCQzVCMTZDNEY5QUUwMi9BOTBEMTgxQUMz NkMxMUVGQUY4MzhEMzVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKAUejANBgkqhkiG9w0BAQsFAAOCAQEADtwo2X06BGWtfgH7 vmQiWP0R/MDoaqljC8rN81cW/wELyC8fA6vORSyFt0Z2jQJ6JdHczfJBKEb3Q/6w l1lf/SQqh8bZrCHl5U7OEoEGnhly8C/pJhHsLmcEji5lNJSbG9utZPoqXtVy9bu2 rHW0f0F/6+n2327zblISM33XSt73D5u6yn4bmCpulr62wTckkpou84cJfkvJT89G G+dKNuq23RlZuzyghQkO4m3M9ta4vUDXjJCIpNwPF5zsXa6i8Xe/V+h2ZRsAqmRr G43P93a3ObXOXOtGPO3qh8NYZbrBkA25eH3NE8NgqM8l0YlP4ExK0vwMbqghQeyb g6tFdQ== -----END CERTIFICATE-----Generated at Fri Jul 4 22:05:58 2025 by rpki-client