$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/B4F165084F1F11EFA3B1F709C4F9AE02.roa File: B4F165084F1F11EFA3B1F709C4F9AE02.roa (raw, json) Hash identifier: 6g7DJTli/YH5hSeeCwQn1OlBs7GZnC1wNbHw8krPxSQ= Subject key identifier: 94:C1:FF:2F:D1:AF:69:9E:13:17:FE:89:3F:8E:31:39:39:4B:63:30 Certificate issuer: /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Certificate serial: CB Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/B4F165084F1F11EFA3B1F709C4F9AE02.roa Signing time: Sat 21 Jun 2025 05:14:50 +0000 ROA not before: Sat 21 Jun 2025 05:14:50 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 63526 IP address blocks: 160.22.20.0/23 maxlen: 23 160.22.20.0/24 maxlen: 24 160.22.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 203 (0xcb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A, serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Validity Not Before: Jun 21 05:14:50 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68563fca-8d47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:88:36:ae:71:7e:24:14:8b:f7:ff:42:ce:2b: 77:20:00:56:84:f9:00:8f:44:40:87:e6:dd:54:6a: f7:01:ff:d2:44:9e:73:f0:c1:c3:36:32:da:32:92: 2f:cf:54:3f:7a:85:32:e5:9a:b0:3c:52:92:41:2a: 69:01:c3:81:6d:7b:10:1d:d5:e2:e5:46:de:6c:05: 8c:4b:b1:a6:34:e6:e5:bc:3f:3c:f2:3e:f3:4b:72: 5f:2a:00:6d:6c:54:06:0f:4f:22:03:a2:23:09:a9: 76:45:90:10:a1:b6:dc:41:cd:be:cd:87:32:13:5b: 57:1d:3e:5f:37:39:13:f3:b7:03:9c:6f:e6:69:20: 1d:04:94:00:49:12:f1:2e:f2:49:32:46:4a:12:b3: 98:ba:67:31:d3:64:e9:bc:ae:be:28:f3:00:4b:6f: 5e:b3:2e:e8:0d:46:e7:7f:5f:9b:44:81:26:2d:eb: aa:52:42:06:18:31:e3:c4:59:90:f3:11:7b:fe:72: 07:fd:19:a0:e6:ad:3b:ef:5a:a0:09:ea:d6:f3:90: ec:a8:56:d8:3e:97:6e:89:2b:97:c7:1a:ba:aa:88: d2:89:c6:7d:9c:4d:35:84:da:6a:a2:32:26:71:e7: 81:ad:6a:92:07:d1:b6:6f:75:77:34:0e:c8:1b:a5: 85:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C1:FF:2F:D1:AF:69:9E:13:17:FE:89:3F:8E:31:39:39:4B:63:30 X509v3 Authority Key Identifier: keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/B4F165084F1F11EFA3B1F709C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.20.0/23 Signature Algorithm: sha256WithRSAEncryption 4a:17:9a:5d:ac:b0:90:b0:39:a2:2c:be:ac:47:e5:a0:86:a2: d3:a5:af:e1:3d:4a:e1:68:47:ad:8f:22:50:39:cd:4a:01:5c: 90:66:f2:da:ad:d5:ae:2d:7b:4b:6f:6a:6e:bd:b7:10:46:77: af:ba:e1:f3:f4:31:56:46:6f:56:cf:e3:92:2e:bd:86:e1:13: 92:d7:2f:87:03:f7:94:25:f9:56:b3:82:2f:d2:f5:4e:26:5a: d1:3a:a6:78:bb:98:a6:85:b1:99:90:b0:85:3f:72:c0:53:03: 87:e1:8a:13:c9:ec:a2:c5:25:01:80:a0:96:c6:b1:42:19:de: 19:37:6a:a7:27:18:67:d7:2b:4d:a5:fe:cf:ad:0a:46:a4:ed: f8:9d:f8:f0:ec:9e:af:3d:61:ac:92:5a:df:19:9c:7e:e1:d7: 37:aa:16:a0:f8:c4:79:bf:15:b3:3c:a8:72:9f:41:76:28:5c: 4d:46:a9:1a:59:9d:0b:8a:0d:3d:36:18:59:67:9c:cd:50:40: 96:85:de:78:ae:f9:51:b1:84:c0:33:c2:88:0d:a0:d9:40:28: 3b:2f:63:9c:7a:a8:e2:1c:30:96:9d:03:2c:40:fb:5b:7a:4b: 28:f6:66:17:dd:d6:aa:6a:b2:c4:ce:82:6f:30:11:a2:29:b6: 7a:49:c4:51 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxN0ExMTAvBgNVBAUTKEIzRUZBN0Q2QUUxOTlEMTQ1ODJERDRFQ0I5MTYzQTND OUQ4NDE3NTkwHhcNMjUwNjIxMDUxNDUwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODU2M2ZjYS04ZDQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApog2rnF+JBSL9/9Czit3IABWhPkAj0RAh+bdVGr3Af/SRJ5z8MHDNjLaMpIv z1Q/eoUy5ZqwPFKSQSppAcOBbXsQHdXi5UbebAWMS7GmNOblvD888j7zS3JfKgBt bFQGD08iA6IjCal2RZAQobbcQc2+zYcyE1tXHT5fNzkT87cDnG/maSAdBJQASRLx LvJJMkZKErOYumcx02TpvK6+KPMAS29esy7oDUbnf1+bRIEmLeuqUkIGGDHjxFmQ 8xF7/nIH/Rmg5q0771qgCerW85DsqFbYPpduiSuXxxq6qojSicZ9nE01hNpqojIm ceeBrWqSB9G2b3V3NA7IG6WF1wIDAQABo4IClTCCApEwHQYDVR0OBBYEFJTB/y/R r2meExf+iT+OMTk5S2MwMB8GA1UdIwQYMBaAFLPvp9auGZ0UWC3U7LkWOjydhBdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83NEJCMjREMjNG NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi9zLS1uMXE0Wm5SUllMZFRzdVJZNlBKMkVG MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3MtLW4xcTRablJSWUxkVHN1Ulk2UEoyRUYxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUYxN0EvNzRCQjI0RDIzRjVEMTFFRjhCRjc4NjBFQzRGOUFFMDIvQjRGMTY1MDg0 RjFGMTFFRkEzQjFGNzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFhQwDQYJKoZIhvcNAQELBQADggEBAEoXml2ssJCwOaIs vqxH5aCGotOlr+E9SuFoR62PIlA5zUoBXJBm8tqt1a4te0tvam69txBGd6+64fP0 MVZGb1bP45IuvYbhE5LXL4cD95Ql+Vazgi/S9U4mWtE6pni7mKaFsZmQsIU/csBT A4fhihPJ7KLFJQGAoJbGsUIZ3hk3aqcnGGfXK02l/s+tCkak7fid+PDsnq89YayS Wt8ZnH7h1zeqFqD4xHm/FbM8qHKfQXYoXE1GqRpZnQuKDT02GFlnnM1QQJaF3niu +VGxhMAzwogNoNlAKDsvY5x6qOIcMJadAyxA+1t6Syj2Zhfd1qpqssTOgm8wEaIp tnpJxFE= -----END CERTIFICATE-----Generated at Fri Jul 4 18:43:54 2025 by rpki-client