$ rpki-client -vvf rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/431868FE2EC811EFBB3A6574C4F9AE02.roa File: 431868FE2EC811EFBB3A6574C4F9AE02.roa (raw, json) Hash identifier: JX5w2iqj431WRtyZcCgZPVKDStTcP2gabCAwRuPUPtU= Subject key identifier: 19:51:B4:EE:34:7F:7E:69:66:47:91:D8:9E:85:A3:22:7E:1D:92:34 Certificate issuer: /CN=A91A15FB/serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF Certificate serial: C4 Authority key identifier: 92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/431868FE2EC811EFBB3A6574C4F9AE02.roa Signing time: Thu 03 Jul 2025 06:10:27 +0000 ROA not before: Thu 03 Jul 2025 06:10:27 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138997 IP address blocks: 160.22.48.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 196 (0xc4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A15FB, serialNumber=92E633978F3C5C2D0860ACDB0E1DD512100E89EF Validity Not Before: Jul 3 06:10:27 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68661ed3-f9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:14:f1:23:ab:e0:e3:85:50:82:2b:ad:fa:44: 3e:59:04:81:6d:4d:19:67:5b:e2:1d:50:19:ad:f2: 39:6e:5b:1b:95:f2:e9:8b:4c:e6:02:61:48:44:47: d0:fa:c6:19:4e:25:c2:1c:27:5a:9c:0c:86:f1:95: 72:a1:b7:8c:0c:6b:8f:d8:9d:a6:ae:40:11:4a:ef: fe:eb:89:01:51:54:fe:ed:17:14:29:7a:8b:a7:b2: df:03:06:7f:b6:6a:ec:af:5e:c3:b9:03:c9:1e:fd: c3:d6:77:41:0f:a5:43:3f:71:d7:dc:14:66:f9:9f: 15:c7:48:ef:ee:a8:ed:71:bd:a6:95:7c:50:4b:35: 21:ea:0f:8d:6d:50:d5:f2:33:30:c7:68:8f:d8:bc: 7a:49:94:05:62:7c:57:1a:68:bf:dc:8d:3e:1e:22: d1:a2:10:cf:29:fe:19:e9:bd:f4:a9:11:0a:e6:ef: 6b:d5:be:e7:90:9b:e8:04:3e:92:9a:a6:e4:c9:b1: 92:c5:d0:4c:0a:ad:21:1d:fd:17:e1:4d:ed:a6:66: 71:68:bb:f8:4e:45:aa:e1:13:f0:45:20:b7:e7:5c: f3:52:b2:01:ff:b5:fd:67:a9:f1:de:85:06:4b:0d: f8:7b:cb:01:cc:52:01:25:e3:83:ec:49:b5:96:51: 66:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:51:B4:EE:34:7F:7E:69:66:47:91:D8:9E:85:A3:22:7E:1D:92:34 X509v3 Authority Key Identifier: keyid:92:E6:33:97:8F:3C:5C:2D:08:60:AC:DB:0E:1D:D5:12:10:0E:89:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/kuYzl488XC0IYKzbDh3VEhAOie8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kuYzl488XC0IYKzbDh3VEhAOie8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A15FB/BE88A70C2EC711EF82208273C4F9AE02/431868FE2EC811EFBB3A6574C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.48.0/23 Signature Algorithm: sha256WithRSAEncryption 4e:56:12:d3:f2:c6:46:1d:a2:e1:ab:11:31:19:fc:e0:88:11: c5:df:40:50:55:bb:e1:3e:be:b3:e9:93:0a:00:c6:d4:00:9d: a6:dc:df:05:0e:ec:93:1c:f9:5f:91:3b:47:ce:1e:94:f2:fc: 75:65:c5:bc:cc:a3:ac:dc:0b:f3:e0:f7:bb:e2:57:66:4f:cb: b7:20:f6:3a:84:9a:bc:fa:60:0b:fc:ea:de:7f:2b:07:61:1c: 94:61:47:e1:99:ea:7e:a3:ec:5b:62:bf:45:2d:64:50:c2:3d: 05:a0:bc:72:08:50:a9:8d:53:c2:2b:2e:f3:10:46:c5:c9:3f: 00:09:03:22:9c:d4:30:4e:af:e9:72:9b:c3:c4:04:4f:58:8b: a6:b5:5e:8f:62:0b:56:30:06:91:de:b7:bf:27:5d:e4:e4:b0: 10:25:1e:1a:b9:dc:98:24:bd:21:29:54:98:40:98:77:9b:94: 35:b9:d8:b3:a8:ff:33:8b:92:b2:4b:65:39:ed:69:13:e7:df: e9:bc:f2:41:4a:bf:4e:ee:e2:8b:4e:40:62:97:47:24:42:da: b7:82:96:e4:54:f5:b7:f8:3b:3e:11:e6:9a:f5:73:9e:4d:7c: 37:a1:7a:06:66:c8:f2:92:1c:e6:01:a1:ea:49:32:4c:2f:58: 4f:c2:36:66 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTE1RkIxMTAvBgNVBAUTKDkyRTYzMzk3OEYzQzVDMkQwODYwQUNEQjBFMURENTEy MTAwRTg5RUYwHhcNMjUwNzAzMDYxMDI3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY2MWVkMy1mOWQ1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6RTxI6vg44VQgiut+kQ+WQSBbU0ZZ1viHVAZrfI5blsblfLpi0zmAmFIREfQ +sYZTiXCHCdanAyG8ZVyobeMDGuP2J2mrkARSu/+64kBUVT+7RcUKXqLp7LfAwZ/ tmrsr17DuQPJHv3D1ndBD6VDP3HX3BRm+Z8Vx0jv7qjtcb2mlXxQSzUh6g+NbVDV 8jMwx2iP2Lx6SZQFYnxXGmi/3I0+HiLRohDPKf4Z6b30qREK5u9r1b7nkJvoBD6S mqbkybGSxdBMCq0hHf0X4U3tpmZxaLv4TkWq4RPwRSC351zzUrIB/7X9Z6nx3oUG Sw34e8sBzFIBJeOD7Em1llFmNwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBlRtO40 f35pZkeR2J6FoyJ+HZI0MB8GA1UdIwQYMBaAFJLmM5ePPFwtCGCs2w4d1RIQDonv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTVGQi9CRTg4QTcwQzJF QzcxMUVGODIyMDgyNzNDNEY5QUUwMi9rdVl6bDQ4OFhDMElZS3piRGgzVkVoQU9p ZTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2t1WXpsNDg4WEMwSVlLemJEaDNWRWhBT2llOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTE1RkIvQkU4OEE3MEMyRUM3MTFFRjgyMjA4MjczQzRGOUFFMDIvNDMxODY4RkUy RUM4MTFFRkJCM0E2NTc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFjAwDQYJKoZIhvcNAQELBQADggEBAE5WEtPyxkYdouGr ETEZ/OCIEcXfQFBVu+E+vrPpkwoAxtQAnabc3wUO7JMc+V+RO0fOHpTy/HVlxbzM o6zcC/Pg97viV2ZPy7cg9jqEmrz6YAv86t5/KwdhHJRhR+GZ6n6j7Ftiv0UtZFDC PQWgvHIIUKmNU8IrLvMQRsXJPwAJAyKc1DBOr+lym8PEBE9Yi6a1Xo9iC1YwBpHe t78nXeTksBAlHhq53JgkvSEpVJhAmHeblDW52LOo/zOLkrJLZTntaRPn3+m88kFK v07u4otOQGKXRyRC2reCluRU9bf4Oz4R5pr1c55NfDehegZmyPKSHOYBoepJMkwv WE/CNmY= -----END CERTIFICATE-----Generated at Fri Jul 4 14:40:57 2025 by rpki-client