$ rpki-client -vvf rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/A19BECB47DC011F0907B9458C4F9AE02.roa File: A19BECB47DC011F0907B9458C4F9AE02.roa (raw, json) Hash identifier: PV6jY777/SNCb3xfvV4u3m3ixy1j9fHX09H2Nm4Vk4s= Subject key identifier: 23:67:4D:6C:81:B0:73:EF:8E:EC:65:09:29:26:07:18:C4:C7:84:96 Certificate issuer: /CN=A91A46B0/serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Certificate serial: 0667 Authority key identifier: FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/A19BECB47DC011F0907B9458C4F9AE02.roa Signing time: Wed 20 Aug 2025 12:24:35 +0000 ROA not before: Wed 20 Aug 2025 12:24:35 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154117 IP address blocks: 160.238.14.0/24 maxlen: 24 160.238.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1639 (0x667) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A46B0, serialNumber=FF682DF8D44864B341D9CB7B6C0659BFFAACC9C7 Validity Not Before: Aug 20 12:24:35 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a5be82-84be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8a:ab:1a:d2:ec:a9:2e:ca:1a:d1:98:ac:c5: e8:b3:10:a2:87:f7:81:f1:5c:e4:ce:22:50:49:5f: f9:a3:f7:5e:e5:52:19:73:d7:d0:cf:1f:f6:64:3d: ea:93:9f:26:7a:bb:8f:61:b7:80:22:ed:bc:1e:e0: 24:6e:81:42:97:91:d4:5e:7e:6b:57:e0:8c:77:9e: af:f7:a5:c1:34:10:25:80:81:08:d9:0c:c3:4f:6e: c1:64:3d:3a:04:de:60:f2:99:63:c7:7c:f9:51:8b: 89:db:1d:38:68:cb:a0:0b:c8:b7:98:d9:da:2f:d0: 22:ae:fe:2e:51:47:a6:7a:45:75:ef:2c:f3:8d:2a: d8:02:b3:d9:fc:1d:4a:20:2f:c8:5c:bb:93:dd:af: ec:e7:9a:cb:86:ab:7e:74:44:9c:93:94:1b:97:18: a2:6d:b7:ba:47:f0:7c:8c:ae:05:11:e4:6a:83:4d: 03:46:42:57:d6:11:c4:c8:8a:ab:cc:61:de:d9:70: 97:b6:8b:73:3f:73:ab:1a:03:34:68:07:6d:03:43: cf:e1:70:c4:94:7a:e4:c1:85:ba:78:35:6c:6e:e0: 10:16:29:0d:29:ff:5d:cb:e7:8d:78:8f:bf:26:dc: 8e:9c:77:3d:e3:fa:4f:dd:dc:d0:3a:ee:47:db:a7: 59:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:67:4D:6C:81:B0:73:EF:8E:EC:65:09:29:26:07:18:C4:C7:84:96 X509v3 Authority Key Identifier: keyid:FF:68:2D:F8:D4:48:64:B3:41:D9:CB:7B:6C:06:59:BF:FA:AC:C9:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/_2gt-NRIZLNB2ct7bAZZv_qsycc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_2gt-NRIZLNB2ct7bAZZv_qsycc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A46B0/32E9873CBFC811EBB9E4EB6EC4F9AE02/A19BECB47DC011F0907B9458C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.238.14.0/23 Signature Algorithm: sha256WithRSAEncryption 50:58:c9:f2:e1:16:ca:15:31:b8:f2:4b:d3:64:d0:5d:fa:c3: 9b:b1:34:64:ee:b5:aa:94:ad:d3:60:92:4e:44:e7:f4:41:9c: c8:bb:cd:67:2c:27:39:df:f7:86:b5:5b:54:a7:cc:95:56:39: a2:b0:60:17:ba:47:00:69:b3:96:8f:53:04:94:51:48:c8:4e: 61:a5:1c:92:cf:5b:e4:10:fc:43:e6:68:69:62:68:29:58:6e: e3:d0:6c:39:bd:af:b6:f7:da:45:17:33:8c:a1:67:6b:d6:91: 53:88:a0:d8:d6:9d:e2:4b:a9:c5:37:31:31:8d:99:18:20:93: b3:35:80:50:7b:83:b0:42:c4:75:14:23:c4:21:69:5e:d6:74: 1e:79:51:a9:23:20:30:48:8f:48:4e:30:a2:99:c1:b5:74:dd: 93:04:c4:1b:9a:02:5b:e1:5c:5d:9b:60:2c:5b:bf:be:40:81: 14:44:b1:f6:32:8c:29:ae:36:ed:13:aa:20:ed:3e:72:0c:f2: 42:52:7a:46:ef:32:00:fc:6a:a6:00:4c:cc:f6:e6:f6:1c:c2: bd:d5:80:e3:71:81:04:69:f7:6e:12:c8:b5:87:8d:55:e8:9e: 22:23:86:3c:a1:f0:e5:da:9d:0d:b3:c8:6f:48:e7:47:70:1e: ac:8b:0e:eb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBmcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ2QjAxMTAvBgNVBAUTKEZGNjgyREY4RDQ0ODY0QjM0MUQ5Q0I3QjZDMDY1OUJG RkFBQ0M5QzcwHhcNMjUwODIwMTIyNDM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE1YmU4Mi04NGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvoqrGtLsqS7KGtGYrMXosxCih/eB8VzkziJQSV/5o/de5VIZc9fQzx/2ZD3q k58meruPYbeAIu28HuAkboFCl5HUXn5rV+CMd56v96XBNBAlgIEI2QzDT27BZD06 BN5g8pljx3z5UYuJ2x04aMugC8i3mNnaL9Airv4uUUemekV17yzzjSrYArPZ/B1K IC/IXLuT3a/s55rLhqt+dESck5Qblxiibbe6R/B8jK4FEeRqg00DRkJX1hHEyIqr zGHe2XCXtotzP3OrGgM0aAdtA0PP4XDElHrkwYW6eDVsbuAQFikNKf9dy+eNeI+/ JtyOnHc94/pP3dzQOu5H26dZUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCNnTWyB sHPvjuxlCSkmBxjEx4SWMB8GA1UdIwQYMBaAFP9oLfjUSGSzQdnLe2wGWb/6rMnH MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDZCMC8zMkU5ODczQ0JG QzgxMUVCQjlFNEVCNkVDNEY5QUUwMi9fMmd0LU5SSVpMTkIyY3Q3YkFaWnZfcXN5 Y2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL18yZ3QtTlJJWkxOQjJjdDdiQVpadl9xc3ljYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ2QjAvMzJFOTg3M0NCRkM4MTFFQkI5RTRFQjZFQzRGOUFFMDIvQTE5QkVDQjQ3 REMwMTFGMDkwN0I5NDU4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGg7g4wDQYJKoZIhvcNAQELBQADggEBAFBYyfLhFsoVMbjy S9Nk0F36w5uxNGTutaqUrdNgkk5E5/RBnMi7zWcsJznf94a1W1SnzJVWOaKwYBe6 RwBps5aPUwSUUUjITmGlHJLPW+QQ/EPmaGliaClYbuPQbDm9r7b32kUXM4yhZ2vW kVOIoNjWneJLqcU3MTGNmRggk7M1gFB7g7BCxHUUI8QhaV7WdB55UakjIDBIj0hO MKKZwbV03ZMExBuaAlvhXF2bYCxbv75AgRREsfYyjCmuNu0TqiDtPnIM8kJSekbv MgD8aqYATMz25vYcwr3VgONxgQRp924SyLWHjVXoniIjhjyh8OXanQ2zyG9I50dw HqyLDus= -----END CERTIFICATE-----Generated at Sun Aug 24 00:30:14 2025 by rpki-client