$ rpki-client -vvf rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/1E110D7E1DA011EFBC90D55EC4F9AE02.roa File: 1E110D7E1DA011EFBC90D55EC4F9AE02.roa (raw, json) Hash identifier: YulPvT0hM25YZIDv5KjG+XciSXVC4OQirSgi0X2f6Hc= Subject key identifier: 40:F0:35:41:3B:F4:BD:D7:A5:BE:F2:F5:42:C4:FF:82:B1:F7:7A:B0 Certificate issuer: /CN=A91F4091/serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF Certificate serial: C0 Authority key identifier: 83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/1E110D7E1DA011EFBC90D55EC4F9AE02.roa Signing time: Tue 03 Jun 2025 06:05:21 +0000 ROA not before: Tue 03 Jun 2025 06:05:21 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152882 IP address blocks: 160.20.132.0/24 maxlen: 24 160.20.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 192 (0xc0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F4091, serialNumber=83C90151BE178214FC16758334D3B6D5277A3CBF Validity Not Before: Jun 3 06:05:21 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=683e90a1-4021 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6f:50:70:62:d2:9d:1b:5c:93:8e:3b:c7:49: 4d:6d:55:e7:89:10:4e:28:b1:41:23:89:d8:f1:46: 76:f2:18:ad:ee:40:d5:74:17:55:2e:4f:92:77:80: e1:f4:db:bb:a2:46:fa:54:ea:86:7f:7b:ff:04:cb: 84:a2:95:c5:97:e4:e1:0d:28:01:5f:77:b1:7d:ef: 2b:e8:96:4b:e6:71:e7:92:63:ba:ac:67:a3:6f:2a: 9b:92:e2:44:57:f8:e7:d1:4f:be:0a:b1:8f:92:66: 35:c4:51:62:55:a8:7c:4e:d7:e0:c0:70:9f:bd:cd: c2:a3:70:15:f1:d1:88:86:7d:ad:96:35:23:ff:a4: 05:46:ad:fa:8b:7d:9f:67:be:46:03:4d:6c:51:ef: 72:5d:36:cd:e6:91:6a:a7:d9:25:09:88:28:83:9d: dd:3c:d1:87:3d:72:b8:a9:bd:c3:b2:5a:1d:b5:1a: 12:6d:c4:b3:34:a6:71:47:95:b4:28:34:7c:e1:97: b3:9c:63:02:52:7b:c3:41:07:0b:04:9d:dc:f5:5d: 3b:9b:fa:34:5a:54:ff:4f:17:7b:ea:c3:68:7f:73: c9:87:ef:65:73:c8:14:d8:8a:2f:67:57:1f:2c:36: 42:a5:49:23:95:39:8f:2c:0c:c3:d6:fd:22:1e:27: cc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F0:35:41:3B:F4:BD:D7:A5:BE:F2:F5:42:C4:FF:82:B1:F7:7A:B0 X509v3 Authority Key Identifier: keyid:83:C9:01:51:BE:17:82:14:FC:16:75:83:34:D3:B6:D5:27:7A:3C:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/g8kBUb4XghT8FnWDNNO21Sd6PL8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/g8kBUb4XghT8FnWDNNO21Sd6PL8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F4091/5A116BAA1D9D11EFA10F2D3AC4F9AE02/1E110D7E1DA011EFBC90D55EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.20.132.0/23 Signature Algorithm: sha256WithRSAEncryption 5a:e9:0b:bb:94:c0:14:28:eb:06:84:96:11:1b:5c:46:93:5f: 5e:52:f3:6b:dd:f0:45:a6:a6:bd:0e:00:18:0e:7e:40:1f:23: 9b:ae:b3:56:a1:2b:b7:00:1a:3e:da:07:35:71:ec:15:80:cc: 20:00:b0:24:cc:9c:0f:72:0c:6f:70:b8:f5:fe:8f:d7:2f:1b: 35:2a:1b:b0:4a:64:b5:cb:22:03:5e:65:de:de:99:4b:c3:bf: 97:03:5a:73:a1:ee:d1:cc:08:c6:55:43:7d:34:b0:66:45:7f: 48:f2:65:fb:c9:5b:cb:83:28:a8:90:a3:ce:7f:3c:2a:73:75: e3:d8:8b:af:47:04:5b:76:db:59:76:b5:4b:79:7a:5c:9e:4d: 02:e1:08:e3:e4:78:c6:69:fa:e1:db:b9:0f:27:0f:bd:10:81: 9a:70:52:17:8a:9e:f5:1d:62:64:18:65:ea:f1:3c:8b:87:41: 12:21:17:50:fd:c3:c9:2c:81:f8:7b:f3:1c:a3:14:8c:87:46: 13:3f:2c:f8:f5:96:00:49:ac:2f:a0:6b:c9:be:89:df:6f:6f: 36:fb:08:ed:af:84:17:c6:a5:54:62:1e:f1:8c:c7:ae:fb:ab: 12:12:fe:2e:4f:41:2b:07:a2:f2:ea:09:68:63:ee:83:fd:f4: 21:45:76:9d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjQwOTExMTAvBgNVBAUTKDgzQzkwMTUxQkUxNzgyMTRGQzE2NzU4MzM0RDNCNkQ1 Mjc3QTNDQkYwHhcNMjUwNjAzMDYwNTIxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlOTBhMS00MDIxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq29QcGLSnRtck447x0lNbVXniRBOKLFBI4nY8UZ28hit7kDVdBdVLk+Sd4Dh 9Nu7okb6VOqGf3v/BMuEopXFl+ThDSgBX3exfe8r6JZL5nHnkmO6rGejbyqbkuJE V/jn0U++CrGPkmY1xFFiVah8TtfgwHCfvc3Co3AV8dGIhn2tljUj/6QFRq36i32f Z75GA01sUe9yXTbN5pFqp9klCYgog53dPNGHPXK4qb3DslodtRoSbcSzNKZxR5W0 KDR84ZeznGMCUnvDQQcLBJ3c9V07m/o0WlT/Txd76sNof3PJh+9lc8gU2IovZ1cf LDZCpUkjlTmPLAzD1v0iHifMrQIDAQABo4IClTCCApEwHQYDVR0OBBYEFEDwNUE7 9L3Xpb7y9ULE/4Kx93qwMB8GA1UdIwQYMBaAFIPJAVG+F4IU/BZ1gzTTttUnejy/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNDA5MS81QTExNkJBQTFE OUQxMUVGQTEwRjJEM0FDNEY5QUUwMi9nOGtCVWI0WGdoVDhGbldETk5PMjFTZDZQ TDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2c4a0JVYjRYZ2hUOEZuV0ROTk8yMVNkNlBMOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjQwOTEvNUExMTZCQUExRDlEMTFFRkExMEYyRDNBQzRGOUFFMDIvMUUxMTBEN0Ux REEwMTFFRkJDOTBENTVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFIQwDQYJKoZIhvcNAQELBQADggEBAFrpC7uUwBQo6waE lhEbXEaTX15S82vd8EWmpr0OABgOfkAfI5uus1ahK7cAGj7aBzVx7BWAzCAAsCTM nA9yDG9wuPX+j9cvGzUqG7BKZLXLIgNeZd7emUvDv5cDWnOh7tHMCMZVQ300sGZF f0jyZfvJW8uDKKiQo85/PCpzdePYi69HBFt221l2tUt5elyeTQLhCOPkeMZp+uHb uQ8nD70QgZpwUheKnvUdYmQYZerxPIuHQRIhF1D9w8ksgfh78xyjFIyHRhM/LPj1 lgBJrC+ga8m+id9vbzb7CO2vhBfGpVRiHvGMx677qxIS/i5PQSsHovLqCWhj7oP9 9CFFdp0= -----END CERTIFICATE-----Generated at Fri Jul 4 13:36:46 2025 by rpki-client