$ rpki-client -vvf rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/097951DC271E11EFA1884C2EC4F9AE02.roa File: 097951DC271E11EFA1884C2EC4F9AE02.roa (raw, json) Hash identifier: Ha/cGz3EuqzsAq4mNf1LJHzYtP6EU2XABOfv8TEGk30= Subject key identifier: 20:40:30:A7:9D:32:5A:93:03:24:C8:EF:F2:26:D9:00:3E:AF:C5:84 Certificate issuer: /CN=A91F83DC/serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Certificate serial: CD Authority key identifier: 22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/097951DC271E11EFA1884C2EC4F9AE02.roa Signing time: Wed 25 Jun 2025 05:39:28 +0000 ROA not before: Wed 25 Jun 2025 05:39:28 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 152906 IP address blocks: 160.22.104.0/23 maxlen: 23 160.22.104.0/24 maxlen: 24 160.22.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F83DC, serialNumber=224E668F405601CADC3391383FCA96DF9468D95A Validity Not Before: Jun 25 05:39:28 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685b8b90-d203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:11:ec:dd:0a:e9:47:31:ee:17:6f:f1:3a:33: 29:25:f5:47:17:3a:9a:dc:3b:fc:3a:c7:80:34:b5: a0:46:a0:5f:1c:10:ec:54:ab:db:e1:06:6a:c4:da: 24:07:1e:76:6a:38:01:1a:3c:11:6e:15:79:4f:41: 43:b2:b4:ab:54:1c:3e:43:22:21:9f:b0:67:43:d3: cd:1e:72:58:11:29:47:7f:e0:f1:ce:c6:66:41:ff: 1d:cd:19:c2:cf:38:6f:f3:30:9b:16:38:97:0e:31: a4:cb:8f:6e:52:46:77:69:c5:72:bf:59:77:5a:94: 56:6e:15:f0:37:8a:c4:f8:ae:5d:12:6c:f8:22:1c: 73:a8:7c:82:6f:8a:b3:df:3a:f7:86:e0:11:6e:22: 2a:61:ae:a0:1b:80:9b:d0:83:5a:3a:4c:99:63:2d: 18:c1:9f:84:4d:55:06:5d:be:da:93:6a:36:5d:d0: 46:63:e2:bb:38:4e:04:e2:04:34:e6:08:12:a4:a7: 16:27:74:79:f7:b5:e6:7b:aa:32:f6:bd:96:cb:f1: ae:9d:7d:67:f2:82:c8:e8:8c:fb:55:c7:e4:af:ec: 1e:28:07:0e:43:a7:f3:34:c1:47:8f:95:25:8c:f2: e0:79:5f:fd:3f:d8:ba:9c:23:40:a4:f1:27:32:75: 50:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:40:30:A7:9D:32:5A:93:03:24:C8:EF:F2:26:D9:00:3E:AF:C5:84 X509v3 Authority Key Identifier: keyid:22:4E:66:8F:40:56:01:CA:DC:33:91:38:3F:CA:96:DF:94:68:D9:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ik5mj0BWAcrcM5E4P8qW35Ro2Vo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F83DC/99C7488826ED11EFB4C9BA28C4F9AE02/097951DC271E11EFA1884C2EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.104.0/23 Signature Algorithm: sha256WithRSAEncryption b3:32:b6:be:27:77:1c:bf:ae:78:af:f0:94:ed:cb:3d:34:38: ea:e8:c9:5c:02:f4:2c:22:73:19:57:a8:ee:f6:3f:e1:4d:9e: ca:a6:7c:ac:40:51:7e:1b:6e:3d:8e:46:12:c7:c9:d3:71:bd: bf:2b:d2:94:94:c7:2b:af:8d:0d:8b:a0:8f:f5:c7:21:1d:5e: 66:0d:df:df:46:2e:39:d2:1f:a0:7b:3b:b0:d1:a3:17:cd:4a: 65:b1:99:33:08:0b:bb:65:8f:a1:30:32:a9:66:72:9e:7c:7c: 60:c0:75:b3:64:54:97:eb:ae:1a:f1:19:c4:78:32:d3:14:52: 37:52:b2:65:18:7c:7d:b7:da:1a:b3:e5:74:23:54:35:99:a4: ca:48:15:cc:29:1e:94:64:27:f5:ea:32:0c:20:17:38:0d:6d: 08:9f:9d:45:e9:26:a6:0b:98:e1:21:05:4f:d8:23:74:a0:27: 64:3f:53:e7:0b:85:4e:31:6d:72:b6:c9:11:f9:7d:f2:9a:96: 1f:aa:d3:89:7a:d7:ae:d6:40:88:7b:18:8b:cb:56:30:83:1a: a9:24:fe:13:80:fc:e8:1a:3f:b7:d9:b7:98:f9:51:a9:98:20: 5c:e5:08:05:22:25:58:3a:37:13:fd:d9:7d:f0:69:53:c0:14: f7:ad:9e:c2 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjgzREMxMTAvBgNVBAUTKDIyNEU2NjhGNDA1NjAxQ0FEQzMzOTEzODNGQ0E5NkRG OTQ2OEQ5NUEwHhcNMjUwNjI1MDUzOTI4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViOGI5MC1kMjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8BHs3QrpRzHuF2/xOjMpJfVHFzqa3Dv8OseANLWgRqBfHBDsVKvb4QZqxNok Bx52ajgBGjwRbhV5T0FDsrSrVBw+QyIhn7BnQ9PNHnJYESlHf+DxzsZmQf8dzRnC zzhv8zCbFjiXDjGky49uUkZ3acVyv1l3WpRWbhXwN4rE+K5dEmz4IhxzqHyCb4qz 3zr3huARbiIqYa6gG4Cb0INaOkyZYy0YwZ+ETVUGXb7ak2o2XdBGY+K7OE4E4gQ0 5ggSpKcWJ3R597Xme6oy9r2Wy/GunX1n8oLI6Iz7Vcfkr+weKAcOQ6fzNMFHj5Ul jPLgeV/9P9i6nCNApPEnMnVQwwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCBAMKed MlqTAyTI7/Im2QA+r8WEMB8GA1UdIwQYMBaAFCJOZo9AVgHK3DOROD/Klt+UaNla MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGODNEQy85OUM3NDg4ODI2 RUQxMUVGQjRDOUJBMjhDNEY5QUUwMi9JazVtajBCV0FjcmNNNUU0UDhxVzM1Um8y Vm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0lrNW1qMEJXQWNyY001RTRQOHFXMzVSbzJWby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjgzREMvOTlDNzQ4ODgyNkVEMTFFRkI0QzlCQTI4QzRGOUFFMDIvMDk3OTUxREMy NzFFMTFFRkExODg0QzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFmgwDQYJKoZIhvcNAQELBQADggEBALMytr4ndxy/rniv 8JTtyz00OOroyVwC9CwicxlXqO72P+FNnsqmfKxAUX4bbj2ORhLHydNxvb8r0pSU xyuvjQ2LoI/1xyEdXmYN399GLjnSH6B7O7DRoxfNSmWxmTMIC7tlj6EwMqlmcp58 fGDAdbNkVJfrrhrxGcR4MtMUUjdSsmUYfH232hqz5XQjVDWZpMpIFcwpHpRkJ/Xq MgwgFzgNbQifnUXpJqYLmOEhBU/YI3SgJ2Q/U+cLhU4xbXK2yRH5ffKalh+q04l6 167WQIh7GIvLVjCDGqkk/hOA/OgaP7fZt5j5UamYIFzlCAUiJVg6NxP92X3waVPA FPetnsI= -----END CERTIFICATE-----Generated at Fri Jul 4 17:48:55 2025 by rpki-client