$ rpki-client -vvf rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/22D3C2B23B9E11F096AB407FC4F9AE02.roa File: 22D3C2B23B9E11F096AB407FC4F9AE02.roa (raw, json) Hash identifier: WjrCPyYv6DM2gew7P6NYlYVGnvxscnLkNnUQla2eJOg= Subject key identifier: 27:E6:A3:A8:9C:AD:EA:0E:EE:9C:85:08:DE:F3:48:D4:F8:01:6D:BF Certificate issuer: /CN=A91583E2/serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Certificate serial: 04 Authority key identifier: 5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/22D3C2B23B9E11F096AB407FC4F9AE02.roa Signing time: Wed 28 May 2025 08:31:22 +0000 ROA not before: Wed 28 May 2025 08:31:22 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 399861 IP address blocks: 160.191.102.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91583E2, serialNumber=5D6F267B7AA3CC3647C9313B9EEC7D69A1673958 Validity Not Before: May 28 08:31:22 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6836c9da-ff27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f0:41:b7:d2:22:49:89:1a:9d:44:1d:4c:e3: 9c:1a:55:4c:92:2f:b8:c3:e1:80:d1:5b:1b:e4:e3: e8:e4:db:69:3e:45:90:2d:ce:47:b2:5a:2f:1f:ca: dc:45:02:5d:df:64:92:c2:55:d8:6d:0f:c8:c3:b0: b5:44:ee:64:6a:19:c2:d0:dc:5f:68:4b:db:3d:38: 78:25:f0:31:e4:b3:ba:b1:d6:45:54:67:96:40:28: 0c:d7:e2:23:56:5b:0a:6d:77:a5:ac:d6:fb:8f:c3: 49:9f:41:38:1b:1f:57:65:4e:c2:56:32:18:b6:62: 70:18:79:aa:d0:89:a6:2f:10:7f:ba:79:64:a5:20: 55:9b:9b:69:bb:9e:c3:dc:52:f3:0b:da:f5:e6:6e: 48:2d:7d:c7:45:2d:12:eb:8d:48:18:4b:f1:3f:84: 38:23:11:e8:83:5b:25:e0:b5:29:47:7f:8e:d5:b0: d0:40:65:9a:72:16:df:c6:cb:88:58:a8:6f:15:90: 8b:d2:59:07:51:c9:3d:e4:6b:21:9e:84:23:46:86: 93:9e:ce:63:c5:ed:c0:84:97:05:a5:b2:fd:00:9c: 7a:d1:06:59:86:1c:ae:b7:53:27:5b:8f:32:c8:5c: bd:8c:3b:00:e7:52:16:71:f7:47:97:f1:c2:64:be: 75:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E6:A3:A8:9C:AD:EA:0E:EE:9C:85:08:DE:F3:48:D4:F8:01:6D:BF X509v3 Authority Key Identifier: keyid:5D:6F:26:7B:7A:A3:CC:36:47:C9:31:3B:9E:EC:7D:69:A1:67:39:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/XW8me3qjzDZHyTE7nux9aaFnOVg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/XW8me3qjzDZHyTE7nux9aaFnOVg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91583E2/43FB787C3B9911F0A0CC5978C4F9AE02/22D3C2B23B9E11F096AB407FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.102.0/23 Signature Algorithm: sha256WithRSAEncryption 36:8a:f1:e8:7d:c8:d5:47:1b:08:29:b2:17:f2:54:03:bd:d5: 04:07:72:f3:9e:5f:65:39:50:17:95:2c:3c:c3:27:55:23:4b: 6d:d9:91:d6:d5:b6:3d:ae:de:c5:09:34:79:d7:30:16:04:58: 09:38:c9:0f:35:74:d1:0c:bd:a7:3b:2c:f1:c0:2a:4b:67:5d: e8:53:65:a3:ed:82:97:cf:47:d6:bf:fa:6a:e1:82:51:8e:48: 76:20:3a:9b:98:bf:fc:94:6d:f7:9b:f9:72:14:d6:84:6a:79: bf:08:32:91:1a:ba:c9:47:15:36:5c:ac:e3:83:47:51:5c:93: c5:15:7d:e6:8f:06:2b:2e:a0:d0:b0:8f:b0:11:51:b2:97:f1: 6b:ec:0b:57:97:44:6d:5d:da:ab:d5:67:aa:6d:a9:85:a0:65: de:7d:5f:d2:b2:cf:86:60:85:bb:13:a3:1b:86:37:09:78:04: 99:c2:71:f2:5b:75:c7:f1:c1:25:bb:c1:fa:73:85:5b:2c:a7: dc:76:80:d0:3f:c0:5d:d4:d8:a0:e3:da:d5:2b:2c:8d:67:97: 34:9d:4c:9a:f8:c7:89:ae:aa:61:13:96:e2:4d:6d:eb:ec:60: 17:48:93:0a:73:38:9a:2a:2f:f0:98:e2:9d:86:0c:f4:96:7b: db:ea:d5:61 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODNFMjExMC8GA1UEBRMoNUQ2RjI2N0I3QUEzQ0MzNjQ3QzkzMTNCOUVFQzdENjlB MTY3Mzk1ODAeFw0yNTA1MjgwODMxMjJaFw0yNjAxMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MzZjOWRhLWZmMjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCi8EG30iJJiRqdRB1M45waVUySL7jD4YDRWxvk4+jk22k+RZAtzkeyWi8fytxF Al3fZJLCVdhtD8jDsLVE7mRqGcLQ3F9oS9s9OHgl8DHks7qx1kVUZ5ZAKAzX4iNW Wwptd6Ws1vuPw0mfQTgbH1dlTsJWMhi2YnAYearQiaYvEH+6eWSlIFWbm2m7nsPc UvML2vXmbkgtfcdFLRLrjUgYS/E/hDgjEeiDWyXgtSlHf47VsNBAZZpyFt/Gy4hY qG8VkIvSWQdRyT3kayGehCNGhpOezmPF7cCElwWlsv0AnHrRBlmGHK63UydbjzLI XL2MOwDnUhZx90eX8cJkvnXLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUJ+ajqJyt 6g7unIUI3vNI1PgBbb8wHwYDVR0jBBgwFoAUXW8me3qjzDZHyTE7nux9aaFnOVgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4M0UyLzQzRkI3ODdDM0I5 OTExRjBBMENDNTk3OEM0RjlBRTAyL1hXOG1lM3FqekRaSHlURTdudXg5YWFGbk9W Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWFc4bWUzcWp6RFpIeVRFN251eDlhYUZuT1ZnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODNFMi80M0ZCNzg3QzNCOTkxMUYwQTBDQzU5NzhDNEY5QUUwMi8yMkQzQzJCMjNC OUUxMUYwOTZBQjQwN0ZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC/ZjANBgkqhkiG9w0BAQsFAAOCAQEANorx6H3I1UcbCCmy F/JUA73VBAdy855fZTlQF5UsPMMnVSNLbdmR1tW2Pa7exQk0edcwFgRYCTjJDzV0 0Qy9pzss8cAqS2dd6FNlo+2Cl89H1r/6auGCUY5IdiA6m5i//JRt95v5chTWhGp5 vwgykRq6yUcVNlys44NHUVyTxRV95o8GKy6g0LCPsBFRspfxa+wLV5dEbV3aq9Vn qm2phaBl3n1f0rLPhmCFuxOjG4Y3CXgEmcJx8lt1x/HBJbvB+nOFWyyn3HaA0D/A XdTYoOPa1SssjWeXNJ1MmvjHia6qYROW4k1t6+xgF0iTCnM4miov8JjinYYM9JZ7 2+rVYQ== -----END CERTIFICATE-----Generated at Mon Jul 21 06:54:20 2025 by rpki-client