$ rpki-client -vvf rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/172F46B6B2AA11EFA6C7B35AC4F9AE02.roa File: 172F46B6B2AA11EFA6C7B35AC4F9AE02.roa (raw, json) Hash identifier: H5cfxoLL862cb5gfNbu7rXxwWCXmbFUjKDm2O6hUwkc= Subject key identifier: 56:F6:74:7D:20:03:EC:50:B5:5A:D4:D4:D8:84:2A:49:7E:4C:BE:15 Certificate issuer: /CN=A9161B37/serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Certificate serial: 74 Authority key identifier: 8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/172F46B6B2AA11EFA6C7B35AC4F9AE02.roa Signing time: Tue 01 Jul 2025 07:43:29 +0000 ROA not before: Tue 01 Jul 2025 07:43:29 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 153381 IP address blocks: 198.49.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 116 (0x74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9161B37, serialNumber=8A80FE8A0D23BC30C664A77AA08ED90E19B591DC Validity Not Before: Jul 1 07:43:29 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=686391a0-5f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:29:52:bd:62:2d:49:4e:80:c9:10:54:2b:06: 59:36:b9:cb:35:fa:8d:12:b0:7e:d1:c2:e9:25:92: 3e:a7:08:40:22:ac:96:c0:84:7c:99:32:80:31:34: 0b:7d:14:c8:20:f7:f5:4a:ea:42:ff:1b:db:25:18: 09:ef:72:6f:9f:5c:c5:93:0b:cd:d5:63:33:d0:0c: 90:43:27:d8:15:e0:6a:ec:2c:59:a8:1f:89:c4:53: d4:74:5e:e4:78:f8:96:6a:37:5c:6e:d2:e9:e3:ad: 5b:8a:16:77:47:1e:b8:55:70:8d:19:a4:59:23:83: 07:1b:ba:a4:4e:72:5b:78:6d:44:65:8a:79:d8:f0: d0:30:ae:dc:be:d3:8a:da:df:9c:e4:f2:56:fe:32: 77:f7:18:19:51:86:bc:f7:e7:12:f9:92:7d:5b:ce: 26:7d:ae:88:cd:c1:ed:66:56:92:7e:e2:96:f7:dc: a6:15:79:42:85:15:60:88:f1:9b:4c:a5:76:ff:c7: bf:c1:ad:d4:8f:a9:65:0a:d7:3d:df:02:08:07:37: 4c:2c:7c:44:bc:ab:19:8d:df:18:e9:7a:6e:07:53: ad:96:c9:a7:9a:1f:c9:42:27:c3:ff:05:8c:84:aa: 93:ee:89:4e:58:ea:11:ee:ed:3e:a2:fd:ed:a7:32: 27:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F6:74:7D:20:03:EC:50:B5:5A:D4:D4:D8:84:2A:49:7E:4C:BE:15 X509v3 Authority Key Identifier: keyid:8A:80:FE:8A:0D:23:BC:30:C6:64:A7:7A:A0:8E:D9:0E:19:B5:91:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ioD-ig0jvDDGZKd6oI7ZDhm1kdw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161B37/532A2E0AABBC11EFB3D9CE6EC4F9AE02/172F46B6B2AA11EFA6C7B35AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 198.49.32.0/21 Signature Algorithm: sha256WithRSAEncryption 09:64:37:db:c3:71:ff:f4:1f:68:30:7c:d7:33:75:7e:5c:f8: 45:ba:c8:d1:38:08:f4:08:81:96:67:1b:87:42:9b:32:96:53: 36:3f:88:2c:93:b0:09:8a:79:52:7f:3e:c3:e6:14:94:2b:f5: 2f:02:8a:62:65:51:c9:6e:80:63:e6:6c:9e:75:19:11:76:31: 18:28:bf:6e:f6:1e:24:00:b9:9c:9e:76:fb:02:11:00:d6:6e: e9:81:38:bb:a4:ac:04:9a:d5:15:5f:f3:d4:2e:f8:57:8b:40: 75:6c:7e:52:8f:68:87:b7:11:90:cd:58:29:a2:40:6f:5f:8b: f5:d9:41:a4:c4:ed:b0:18:b7:e0:3d:0f:51:56:1c:8a:0f:e9: bc:5b:e6:86:e3:72:f1:3b:ea:ec:5c:f4:97:cc:51:76:d9:83: 55:00:2d:22:e6:e4:e5:f3:8f:ac:b1:01:3d:28:ca:9b:db:b7: 28:59:ed:66:c4:49:bb:a7:82:f7:83:a0:f4:7a:62:0e:ba:55: 47:b9:03:8e:f5:11:5c:c6:4b:d2:a6:09:97:cc:cb:a2:a6:52: 9f:d2:84:6b:a7:81:a4:c1:e4:bd:90:55:e6:fd:97:95:d7:17: 71:a9:3c:fd:a1:1a:b6:e1:cf:54:65:2b:1f:de:5a:38:50:16: 0d:94:b9:6b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBdDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2 MUIzNzExMC8GA1UEBRMoOEE4MEZFOEEwRDIzQkMzMEM2NjRBNzdBQTA4RUQ5MEUx OUI1OTFEQzAeFw0yNTA3MDEwNzQzMjlaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NjM5MWEwLTVmMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCcKVK9Yi1JToDJEFQrBlk2ucs1+o0SsH7Rwuklkj6nCEAirJbAhHyZMoAxNAt9 FMgg9/VK6kL/G9slGAnvcm+fXMWTC83VYzPQDJBDJ9gV4GrsLFmoH4nEU9R0XuR4 +JZqN1xu0unjrVuKFndHHrhVcI0ZpFkjgwcbuqROclt4bURlinnY8NAwrty+04ra 35zk8lb+Mnf3GBlRhrz35xL5kn1bziZ9rojNwe1mVpJ+4pb33KYVeUKFFWCI8ZtM pXb/x7/BrdSPqWUK1z3fAggHN0wsfES8qxmN3xjpem4HU62WyaeaH8lCJ8P/BYyE qpPuiU5Y6hHu7T6i/e2nMic9AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUVvZ0fSAD 7FC1WtTU2IQqSX5MvhUwHwYDVR0jBBgwFoAUioD+ig0jvDDGZKd6oI7ZDhm1kdww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTYxQjM3LzUzMkEyRTBBQUJC QzExRUZCM0Q5Q0U2RUM0RjlBRTAyL2lvRC1pZzBqdkRER1pLZDZvSTdaRGhtMWtk dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvaW9ELWlnMGp2RERHWktkNm9JN1pEaG0xa2R3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MUIzNy81MzJBMkUwQUFCQkMxMUVGQjNEOUNFNkVDNEY5QUUwMi8xNzJGNDZCNkIy QUExMUVGQTZDN0IzNUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEA8YxIDANBgkqhkiG9w0BAQsFAAOCAQEACWQ328Nx//QfaDB8 1zN1flz4RbrI0TgI9AiBlmcbh0KbMpZTNj+ILJOwCYp5Un8+w+YUlCv1LwKKYmVR yW6AY+ZsnnUZEXYxGCi/bvYeJAC5nJ52+wIRANZu6YE4u6SsBJrVFV/z1C74V4tA dWx+Uo9oh7cRkM1YKaJAb1+L9dlBpMTtsBi34D0PUVYcig/pvFvmhuNy8Tvq7Fz0 l8xRdtmDVQAtIubk5fOPrLEBPSjKm9u3KFntZsRJu6eC94Og9HpiDrpVR7kDjvUR XMZL0qYJl8zLoqZSn9KEa6eBpMHkvZBV5v2XldcXcak8/aEatuHPVGUrH95aOFAW DZS5aw== -----END CERTIFICATE-----Generated at Fri Jul 4 14:21:22 2025 by rpki-client