$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C4A5964644EB11F088B1CD7BC4F9AE02.roa File: C4A5964644EB11F088B1CD7BC4F9AE02.roa (raw, json) Hash identifier: 7ic1uuMzWwSKDUB+VEnqU8xZnGc2PqhtM3g1rKKCucg= Subject key identifier: 95:07:B9:10:BF:57:1F:97:A0:72:2C:12:46:EC:0E:45:08:45:BC:60 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 068D Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C4A5964644EB11F088B1CD7BC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:51:17 +0000 ROA not before: Thu 28 Aug 2025 14:51:17 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152934 IP address blocks: 160.22.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 27 Oct 2025 14:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1677 (0x68d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:17 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06ce5-e109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:90:96:5d:87:4d:19:ee:60:f6:c4:cb:86:91: 2e:f2:8f:37:13:a6:34:71:b4:be:12:b3:ec:1d:47: 23:39:83:b7:df:19:82:ba:3d:9f:4a:86:9b:49:ff: 24:fc:3b:07:21:e7:94:f8:42:45:c7:99:ab:5b:66: 4b:c3:a0:af:e5:94:2b:19:ad:b4:58:4a:7c:1a:11: 3c:2c:34:0d:78:cd:dc:3f:1a:63:72:f6:ca:b1:07: c1:43:e3:e4:48:91:f8:61:4d:bd:7b:17:40:2f:0d: bc:30:c1:59:83:57:b4:ee:14:b0:a8:c9:ea:d9:d2: df:13:90:ae:0f:39:9f:28:10:8d:c1:7d:00:2d:34: a2:c7:60:de:71:c3:f4:31:d4:f6:b5:3d:82:cf:7c: 9d:ba:e6:ee:1f:3c:98:7d:a8:db:f4:95:f0:54:e2: 5b:dc:8c:bd:7f:03:11:cc:6e:b1:24:49:2f:1e:8b: 99:84:c4:2f:cd:8c:ab:07:2e:81:16:ef:6e:dc:f8: 9d:44:8c:35:b8:7a:7b:71:bb:40:4d:54:2a:45:a9: 7e:ba:f6:1e:34:76:89:70:ab:c9:88:c4:eb:96:26: 88:c0:88:92:d4:7b:a3:4a:fd:15:c3:d8:46:85:7e: 96:f8:13:ae:8e:b1:60:91:02:a3:6a:65:74:98:89: b9:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:07:B9:10:BF:57:1F:97:A0:72:2C:12:46:EC:0E:45:08:45:BC:60 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C4A5964644EB11F088B1CD7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.170.0/23 Signature Algorithm: sha256WithRSAEncryption 08:37:82:a5:da:9d:a4:f3:ba:d9:9b:69:b6:0a:1a:16:b2:56: 88:11:2e:93:df:d5:72:11:28:f4:c4:22:ff:85:c6:71:8d:f5: c9:18:11:35:ee:4a:dc:af:77:e9:b1:23:d0:44:0c:e3:82:f8: 9f:29:31:27:a7:b8:71:c1:75:d9:03:03:20:38:c4:75:73:62: bd:30:da:04:46:37:5f:4c:16:c5:97:c7:63:48:0d:57:c9:62: 11:02:22:55:c9:16:b9:a0:a7:b4:bd:e6:13:79:eb:20:6b:06: 5a:cb:cc:2b:01:9d:27:a5:3d:1e:bd:02:20:49:72:36:08:a9: b9:b8:21:1a:a9:ae:dd:e5:b3:af:23:0a:d8:ab:05:3a:2b:aa: 4c:69:7a:c1:19:e4:d8:67:50:53:bf:a2:f8:e5:7c:3e:ed:6c: c0:ca:7f:df:47:48:cb:96:ba:31:bf:32:fa:89:ec:af:ba:82: af:c9:5b:49:8e:de:fa:b3:62:40:9d:61:43:9f:f1:6d:af:cc: 43:86:0c:d6:60:a4:9f:7a:2f:f6:d3:b5:4e:c9:66:3b:5c:6f: 5e:47:fd:c2:0c:9a:0d:95:e3:0a:f4:17:3f:65:f9:90:b7:6f: 27:7e:2b:e9:ea:91:35:19:94:5a:ee:da:21:fc:35:33:60:13: a1:1a:02:24 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTE3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmNlNS1lMTA5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp5CWXYdNGe5g9sTLhpEu8o83E6Y0cbS+ErPsHUcjOYO33xmCuj2fSoabSf8k /DsHIeeU+EJFx5mrW2ZLw6Cv5ZQrGa20WEp8GhE8LDQNeM3cPxpjcvbKsQfBQ+Pk SJH4YU29exdALw28MMFZg1e07hSwqMnq2dLfE5CuDzmfKBCNwX0ALTSix2DeccP0 MdT2tT2Cz3yduubuHzyYfajb9JXwVOJb3Iy9fwMRzG6xJEkvHouZhMQvzYyrBy6B Fu9u3PidRIw1uHp7cbtATVQqRal+uvYeNHaJcKvJiMTrliaIwIiS1HujSv0Vw9hG hX6W+BOujrFgkQKjamV0mIm5qwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJUHuRC/ Vx+XoHIsEkbsDkUIRbxgMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQzRBNTk2NDY0 NEVCMTFGMDg4QjFDRDdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFqowDQYJKoZIhvcNAQELBQADggEBAAg3gqXanaTzutmb abYKGhayVogRLpPf1XIRKPTEIv+FxnGN9ckYETXuStyvd+mxI9BEDOOC+J8pMSen uHHBddkDAyA4xHVzYr0w2gRGN19MFsWXx2NIDVfJYhECIlXJFrmgp7S95hN56yBr BlrLzCsBnSelPR69AiBJcjYIqbm4IRqprt3ls68jCtirBTorqkxpesEZ5NhnUFO/ ovjlfD7tbMDKf99HSMuWujG/MvqJ7K+6gq/JW0mO3vqzYkCdYUOf8W2vzEOGDNZg pJ96L/bTtU7JZjtcb15H/cIMmg2V4wr0Fz9l+ZC3byd+K+nqkTUZlFru2iH8NTNg E6EaAiQ= -----END CERTIFICATE-----Generated at Mon Oct 20 17:13:19 2025 by rpki-client