$ rpki-client -vvf rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2DE2034C7CE611F09D6F9158C4F9AE02.roa File: 2DE2034C7CE611F09D6F9158C4F9AE02.roa (raw, json) Hash identifier: 9bfhDxpjGk5MpXlYmgoEbLayeYNZ5CvO3E2O+ZYV9gc= Subject key identifier: 01:EE:4E:86:9F:7C:B4:09:B9:01:D1:C8:FF:5E:8A:D7:C7:8F:7B:D8 Certificate issuer: /CN=A916069A/serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Certificate serial: A4 Authority key identifier: D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2DE2034C7CE611F09D6F9158C4F9AE02.roa Signing time: Tue 19 Aug 2025 10:20:50 +0000 ROA not before: Tue 19 Aug 2025 10:20:50 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 151133 IP address blocks: 160.191.184.0/24 maxlen: 24 160.191.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 06:37:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 164 (0xa4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A916069A, serialNumber=D908393C5BA8035AF68B7EC009558E812ED095E0 Validity Not Before: Aug 19 10:20:50 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68a45002-c963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:2d:ec:2e:fe:68:cb:b6:f7:eb:d5:66:d2:4b: fc:f5:ce:02:5d:5e:2a:c1:59:2d:86:76:ab:25:87: e3:9e:de:42:4c:6c:2d:93:19:fd:df:e1:3f:2c:a1: f3:a9:28:1e:4d:dc:e6:ac:1b:a3:56:36:88:e3:ef: 58:c9:ff:fb:eb:eb:d9:dc:82:66:39:ac:74:3b:57: 2f:b4:49:ed:69:a8:f6:89:63:03:ed:c0:13:88:a7: b6:7a:14:ea:c0:b1:8a:a6:f6:5a:b0:04:de:93:64: 45:b5:80:68:09:28:65:96:2d:d4:58:04:34:e9:15: af:04:ad:da:11:00:86:a0:bb:1d:6b:21:f6:66:74: 7e:03:ab:f9:d5:d8:8e:6b:7a:ef:bb:98:aa:38:0d: d9:cc:d5:40:7d:bf:cd:7c:65:49:e8:a5:a7:42:54: c8:72:04:35:2c:87:df:b4:91:61:7e:70:e0:bf:c2: ba:02:c6:0c:d6:e5:a2:c5:97:6e:3b:8e:9d:5f:3c: bc:94:06:a1:b9:cf:e4:53:8d:5a:f9:e2:20:79:45: 11:a5:f0:c0:4c:c4:63:5b:51:18:f9:c6:8e:c8:3b: 20:09:31:f8:d1:9c:94:4b:72:49:5f:cc:1f:aa:75: 4c:71:da:9d:9b:45:b8:99:ef:a5:7d:b1:89:e3:16: 43:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:EE:4E:86:9F:7C:B4:09:B9:01:D1:C8:FF:5E:8A:D7:C7:8F:7B:D8 X509v3 Authority Key Identifier: keyid:D9:08:39:3C:5B:A8:03:5A:F6:8B:7E:C0:09:55:8E:81:2E:D0:95:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2Qg5PFuoA1r2i37ACVWOgS7QleA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/2Qg5PFuoA1r2i37ACVWOgS7QleA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916069A/2EB607969BF011EF81C90267C4F9AE02/2DE2034C7CE611F09D6F9158C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.184.0/23 Signature Algorithm: sha256WithRSAEncryption 22:ff:22:c2:22:95:36:11:08:89:02:98:da:58:86:e2:25:88: f6:b4:46:9d:e9:ec:86:8c:93:a7:10:c3:bc:c9:fc:68:04:92: 86:07:1b:80:cb:28:65:7e:cc:09:e7:ec:3d:09:c8:c7:b9:b5: f5:9b:e2:21:02:04:dd:2e:14:2b:da:5d:90:f6:24:3f:75:ec: f8:d9:15:41:36:b6:fb:4e:d9:a7:e2:d4:39:48:92:61:e3:7c: e8:5f:1f:9d:44:81:26:23:12:6d:ed:c0:3b:fd:60:e4:04:0a: 58:2e:a1:3d:92:28:6b:e5:a2:de:e9:84:a9:5f:48:a6:05:a4: 93:42:95:05:f2:16:74:e9:64:ed:91:93:e8:95:dc:b8:16:20: 25:67:2a:81:eb:b5:fe:2c:6b:21:83:b7:e7:05:2a:e4:1f:5b: a9:83:e7:ff:8e:db:f2:8c:a0:6c:f6:b6:b9:fd:e3:5a:b4:3f: ce:69:ec:95:7e:65:d3:9e:2c:d6:be:5d:a2:2f:0f:9e:32:4d: 84:bb:e8:de:e6:8f:6f:33:24:0e:c4:94:9a:6c:a8:a7:9f:d1: 0e:c9:3e:c1:c5:c5:96:3b:3c:fc:0b:99:13:76:6f:03:f2:f2: 96:92:e5:fd:6b:ef:d1:95:18:fd:ad:b5:24:f6:89:e2:9e:f9: 41:15:61:c3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjA2OUExMTAvBgNVBAUTKEQ5MDgzOTNDNUJBODAzNUFGNjhCN0VDMDA5NTU4RTgx MkVEMDk1RTAwHhcNMjUwODE5MTAyMDUwWhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE0NTAwMi1jOTYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6i3sLv5oy7b369Vm0kv89c4CXV4qwVkthnarJYfjnt5CTGwtkxn93+E/LKHz qSgeTdzmrBujVjaI4+9Yyf/76+vZ3IJmOax0O1cvtEntaaj2iWMD7cATiKe2ehTq wLGKpvZasATek2RFtYBoCShlli3UWAQ06RWvBK3aEQCGoLsdayH2ZnR+A6v51diO a3rvu5iqOA3ZzNVAfb/NfGVJ6KWnQlTIcgQ1LIfftJFhfnDgv8K6AsYM1uWixZdu O46dXzy8lAahuc/kU41a+eIgeUURpfDATMRjW1EY+caOyDsgCTH40ZyUS3JJX8wf qnVMcdqdm0W4me+lfbGJ4xZDyQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAHuToaf fLQJuQHRyP9eitfHj3vYMB8GA1UdIwQYMBaAFNkIOTxbqANa9ot+wAlVjoEu0JXg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MDY5QS8yRUI2MDc5NjlC RjAxMUVGODFDOTAyNjdDNEY5QUUwMi8yUWc1UEZ1b0ExcjJpMzdBQ1ZXT2dTN1Fs ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzJRZzVQRnVvQTFyMmkzN0FDVldPZ1M3UWxlQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjA2OUEvMkVCNjA3OTY5QkYwMTFFRjgxQzkwMjY3QzRGOUFFMDIvMkRFMjAzNEM3 Q0U2MTFGMDlENkY5MTU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv7gwDQYJKoZIhvcNAQELBQADggEBACL/IsIilTYRCIkC mNpYhuIliPa0Rp3p7IaMk6cQw7zJ/GgEkoYHG4DLKGV+zAnn7D0JyMe5tfWb4iEC BN0uFCvaXZD2JD917PjZFUE2tvtO2afi1DlIkmHjfOhfH51EgSYjEm3twDv9YOQE ClguoT2SKGvlot7phKlfSKYFpJNClQXyFnTpZO2Rk+iV3LgWICVnKoHrtf4sayGD t+cFKuQfW6mD5/+O2/KMoGz2trn941q0P85p7JV+ZdOeLNa+XaIvD54yTYS76N7m j28zJA7ElJpsqKef0Q7JPsHFxZY7PPwLmRN2bwPy8paS5f1r79GVGP2ttST2ieKe +UEVYcM= -----END CERTIFICATE-----Generated at Sun Aug 24 01:27:43 2025 by rpki-client