$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F840BBBECD1011EFA6223D25C4F9AE02.roa File: F840BBBECD1011EFA6223D25C4F9AE02.roa (raw, json) Hash identifier: jazt/tr2S3ZmUCH3LeQJKVZyCLoPeuZqUp9dqMY4+hg= Subject key identifier: 0E:BC:A9:F1:3A:FB:E6:A1:98:3E:08:2C:E9:66:2A:83:35:2B:5F:A2 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0605 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F840BBBECD1011EFA6223D25C4F9AE02.roa Signing time: Tue 24 Jun 2025 02:00:49 +0000 ROA not before: Tue 24 Jun 2025 02:00:49 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 24088 IP address blocks: 160.250.76.0/23 maxlen: 24 165.99.200.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1541 (0x605) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Jun 24 02:00:49 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=685a06d1-d657 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:57:b8:39:9e:74:c2:01:f0:bb:88:2b:f2:04: f4:48:49:12:8f:f2:60:16:c9:2c:e3:fb:97:e6:51: 64:3d:eb:08:a1:4e:70:29:04:3e:e2:93:28:1c:7e: 68:25:eb:71:32:cb:0b:7e:c6:dc:49:36:50:37:e3: 3b:04:81:16:58:05:dc:38:4d:b5:c3:e5:62:6f:16: e8:73:4b:9b:bb:c9:5e:17:a6:fe:99:31:89:3d:0c: 51:f4:1d:a5:88:8f:ca:d0:a4:3e:54:6f:36:00:30: cd:c3:e6:d8:dc:ea:da:9e:d6:7e:f8:c1:85:56:e5: b3:d4:14:3b:57:3a:3f:2d:1f:82:de:13:d0:3f:3d: bd:66:87:49:08:9d:31:d5:79:4e:da:6e:a1:6a:f4: 28:ef:65:88:8e:1d:64:54:0d:11:0d:21:34:47:ee: ba:65:9b:3f:3c:bc:8f:09:7f:63:ee:b7:a7:6d:f4: 57:e7:31:bf:8c:7c:8b:e5:e6:7f:55:2b:8b:ca:ee: 33:8c:c0:95:1b:75:a9:73:b9:65:ef:07:f2:cf:0f: 3d:13:05:22:06:22:8c:2d:dc:2b:9a:b1:b6:f2:9b: 32:df:7d:3e:20:5f:a8:4a:61:f6:66:70:f6:40:07: a0:d8:61:52:ca:68:46:23:62:6e:8c:b5:fd:fd:4f: d2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BC:A9:F1:3A:FB:E6:A1:98:3E:08:2C:E9:66:2A:83:35:2B:5F:A2 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/F840BBBECD1011EFA6223D25C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.76.0/23 165.99.200.0/23 Signature Algorithm: sha256WithRSAEncryption 19:09:d8:bc:b8:1b:61:32:0d:c9:cf:82:2a:ea:23:b9:75:0e: df:35:aa:af:6c:03:1f:b4:33:f3:1d:cf:09:e0:f3:db:30:c9: 17:6c:23:0d:3d:d6:c6:88:e2:db:1e:cc:f1:cb:39:b1:97:41: da:57:a5:88:51:a4:57:d5:e0:cb:6d:8c:1a:9f:30:5c:cf:67: 72:b2:8e:74:e6:ec:19:6b:ff:41:40:e7:b4:66:51:d9:26:62: d1:fc:b8:79:16:03:bc:6e:c4:e0:a9:0a:e5:f6:f2:c7:ad:ff: 97:4b:4f:9b:5f:28:f6:23:28:dd:b9:62:60:34:af:c0:80:ab: 90:91:e2:f1:dc:cf:80:02:68:70:ea:fc:69:df:ca:ba:6c:2e: 1a:aa:a4:d2:d3:87:0b:d6:f2:03:9d:18:50:63:a1:05:a0:ac: 19:e8:e6:2d:bd:b3:18:62:26:c1:50:95:a9:b0:3e:3e:f1:b9: ca:5a:05:53:46:a9:4e:00:74:2f:f0:f1:d4:b3:40:24:5b:ed: 90:68:2c:a1:5f:1c:84:27:c3:ef:7e:a4:62:9a:b2:a6:2a:9a: ea:90:98:1f:15:8b:cb:d0:5e:ee:0f:5f:c4:f8:c4:ce:2b:a2: d2:78:5f:73:2b:07:48:98:3a:c0:85:2b:d3:36:e8:9a:08:1d: 01:b3:86:ff -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBgUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwNjI0MDIwMDQ5WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVhMDZkMS1kNjU3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA01e4OZ50wgHwu4gr8gT0SEkSj/JgFsks4/uX5lFkPesIoU5wKQQ+4pMoHH5o JetxMssLfsbcSTZQN+M7BIEWWAXcOE21w+Vibxboc0ubu8leF6b+mTGJPQxR9B2l iI/K0KQ+VG82ADDNw+bY3OrantZ++MGFVuWz1BQ7Vzo/LR+C3hPQPz29ZodJCJ0x 1XlO2m6havQo72WIjh1kVA0RDSE0R+66ZZs/PLyPCX9j7renbfRX5zG/jHyL5eZ/ VSuLyu4zjMCVG3Wpc7ll7wfyzw89EwUiBiKMLdwrmrG28psy330+IF+oSmH2ZnD2 QAeg2GFSymhGI2JujLX9/U/SAQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFA68qfE6 ++ahmD4ILOlmKoM1K1+iMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRjg0MEJCQkVD RDEwMTFFRkE2MjIzRDI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGg+kwDBAGlY8gwDQYJKoZIhvcNAQELBQADggEBABkJ2Ly4 G2EyDcnPgirqI7l1Dt81qq9sAx+0M/Mdzwng89swyRdsIw091saI4tsezPHLObGX QdpXpYhRpFfV4MttjBqfMFzPZ3KyjnTm7Blr/0FA57RmUdkmYtH8uHkWA7xuxOCp CuX28set/5dLT5tfKPYjKN25YmA0r8CAq5CR4vHcz4ACaHDq/GnfyrpsLhqqpNLT hwvW8gOdGFBjoQWgrBno5i29sxhiJsFQlamwPj7xucpaBVNGqU4AdC/w8dSzQCRb 7ZBoLKFfHIQnw+9+pGKasqYqmuqQmB8Vi8vQXu4PX8T4xM4rotJ4X3MrB0iYOsCF K9M26JoIHQGzhv8= -----END CERTIFICATE-----Generated at Thu Jul 3 11:01:33 2025 by rpki-client