$ rpki-client -vvf rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/A82042B6FA6B11EFB942DD1EC4F9AE02.roa File: A82042B6FA6B11EFB942DD1EC4F9AE02.roa (raw, json) Hash identifier: j4rFIHTNRhGLJLDjietaNGRc3CHg7H6921oZKrCNics= Subject key identifier: 1E:0A:B8:1C:E3:EC:30:F1:46:9E:F0:9A:13:E3:17:6C:91:7F:B8:6F Certificate issuer: /CN=A9160C9E/serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Certificate serial: 90 Authority key identifier: FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/A82042B6FA6B11EFB942DD1EC4F9AE02.roa Signing time: Wed 02 Jul 2025 06:39:40 +0000 ROA not before: Wed 02 Jul 2025 06:39:39 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153365 IP address blocks: 160.191.20.0/24 maxlen: 24 160.191.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 06:39:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 144 (0x90) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9160C9E, serialNumber=FD9D7F660F3A130CA48BEBBA66E162BD3034E38D Validity Not Before: Jul 2 06:39:39 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=6864d42b-97e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d0:38:24:9d:0f:09:1d:20:d6:58:56:8b:af: 94:c5:c1:3e:f9:16:85:93:57:8f:ee:e0:65:d2:b0: 7b:f5:1e:52:89:bd:cf:f9:ac:f1:1f:7d:76:dc:fe: 19:59:78:d2:06:f7:1a:59:4c:3d:a0:03:c8:f2:5c: 7e:98:dc:ce:e0:e3:b2:4a:a0:f2:59:a6:51:82:db: cf:0e:a1:b5:1c:1f:6f:21:02:1b:a6:8a:86:cb:9f: 8f:3a:a6:0c:6c:da:49:a7:9f:cb:1a:ec:57:98:88: 64:58:61:ad:07:be:49:ad:8e:af:77:9c:55:5f:ad: b1:ef:f3:fe:b6:74:e5:14:52:a3:17:d2:23:ea:0f: f1:26:ec:d9:6d:0f:1b:b4:a5:78:55:bb:3e:5f:4a: a4:cf:0e:fa:3d:d8:fc:e0:bc:64:df:e6:c4:3a:6b: a8:42:6f:ec:98:08:2f:44:ca:67:9f:e5:30:88:ec: dd:59:64:03:7c:99:81:3a:b1:90:e3:db:24:ca:f4: e7:60:2b:0d:9b:92:6c:e7:15:17:b3:b8:8e:01:44: 6b:5f:a9:23:88:04:7b:f1:5b:fd:b2:74:54:b2:0e: 8c:0f:05:82:39:8c:50:d6:9f:2e:77:e8:ac:8e:aa: 8c:7b:0c:f5:a5:eb:85:06:59:a0:ad:65:1d:4f:eb: b3:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:0A:B8:1C:E3:EC:30:F1:46:9E:F0:9A:13:E3:17:6C:91:7F:B8:6F X509v3 Authority Key Identifier: keyid:FD:9D:7F:66:0F:3A:13:0C:A4:8B:EB:BA:66:E1:62:BD:30:34:E3:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/_Z1_Zg86Ewyki-u6ZuFivTA0440.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Z1_Zg86Ewyki-u6ZuFivTA0440.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9160C9E/4EFD15B68BCA11EFABFC1A39C4F9AE02/A82042B6FA6B11EFB942DD1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.20.0/23 Signature Algorithm: sha256WithRSAEncryption 87:52:e9:57:54:15:3f:b0:35:e1:e5:e0:da:ef:55:b9:4c:dd: 03:37:f8:84:13:fc:0d:e6:58:53:99:e7:b7:7f:c3:2b:e5:a2: 6f:d7:62:15:c1:ea:bb:51:03:7f:9e:fd:ee:42:68:dd:33:73: 58:4c:f7:24:27:c3:f3:87:83:03:4a:a6:f1:f4:93:6d:11:03: 96:9a:9a:19:15:bf:8f:ed:9f:87:a4:28:ee:43:fc:2d:a2:ca: 2e:6f:f4:d9:de:e8:6e:a3:03:5d:9d:39:5b:8c:06:26:59:b9: e0:b6:6c:bf:39:dd:bc:60:4e:64:2a:01:c2:78:bb:86:fb:32: 82:19:96:5c:c6:3d:04:3e:88:8b:62:fa:dd:2c:d5:ec:47:04: 0d:fb:e2:ca:0c:c6:39:b0:5a:bd:b4:b4:e9:15:ec:d0:17:96: 42:82:cd:68:41:9b:2f:03:d9:b3:bc:08:18:4b:d2:3f:8b:7b: 71:f4:0b:87:3b:d8:5e:bc:f0:66:1e:91:b8:1d:4c:6a:05:a4: 67:40:78:67:21:76:e9:f0:d9:6e:4d:8d:d2:08:a3:2a:11:3b: 9c:b7:60:d2:df:62:bb:44:23:c4:ee:e8:8d:04:51:f1:74:21: 8e:f7:9f:e1:4e:53:b0:08:62:17:89:11:d2:b2:66:f0:79:71: e8:87:b1:d3 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjBDOUUxMTAvBgNVBAUTKEZEOUQ3RjY2MEYzQTEzMENBNDhCRUJCQTY2RTE2MkJE MzAzNEUzOEQwHhcNMjUwNzAyMDYzOTM5WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY0ZDQyYi05N2UwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArNA4JJ0PCR0g1lhWi6+UxcE++RaFk1eP7uBl0rB79R5Sib3P+azxH3123P4Z WXjSBvcaWUw9oAPI8lx+mNzO4OOySqDyWaZRgtvPDqG1HB9vIQIbpoqGy5+POqYM bNpJp5/LGuxXmIhkWGGtB75JrY6vd5xVX62x7/P+tnTlFFKjF9Ij6g/xJuzZbQ8b tKV4Vbs+X0qkzw76Pdj84Lxk3+bEOmuoQm/smAgvRMpnn+UwiOzdWWQDfJmBOrGQ 49skyvTnYCsNm5Js5xUXs7iOAURrX6kjiAR78Vv9snRUsg6MDwWCOYxQ1p8ud+is jqqMewz1peuFBlmgrWUdT+uzSwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB4KuBzj 7DDxRp7wmhPjF2yRf7hvMB8GA1UdIwQYMBaAFP2df2YPOhMMpIvrumbhYr0wNOON MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MEM5RS80RUZEMTVCNjhC Q0ExMUVGQUJGQzFBMzlDNEY5QUUwMi9fWjFfWmc4NkV3eWtpLXU2WnVGaXZUQTA0 NDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19aMV9aZzg2RXd5a2ktdTZadUZpdlRBMDQ0MC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NjBDOUUvNEVGRDE1QjY4QkNBMTFFRkFCRkMxQTM5QzRGOUFFMDIvQTgyMDQyQjZG QTZCMTFFRkI5NDJERDFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgvxQwDQYJKoZIhvcNAQELBQADggEBAIdS6VdUFT+wNeHl 4NrvVblM3QM3+IQT/A3mWFOZ57d/wyvlom/XYhXB6rtRA3+e/e5CaN0zc1hM9yQn w/OHgwNKpvH0k20RA5aamhkVv4/tn4ekKO5D/C2iyi5v9Nne6G6jA12dOVuMBiZZ ueC2bL853bxgTmQqAcJ4u4b7MoIZllzGPQQ+iIti+t0s1exHBA374soMxjmwWr20 tOkV7NAXlkKCzWhBmy8D2bO8CBhL0j+Le3H0C4c72F688GYekbgdTGoFpGdAeGch dunw2W5NjdIIoyoRO5y3YNLfYrtEI8Tu6I0EUfF0IY73n+FOU7AIYheJEdKyZvB5 ceiHsdM= -----END CERTIFICATE-----Generated at Thu Jul 3 03:48:18 2025 by rpki-client