$ rpki-client -vvf rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/D2F65B3E2D3C11F089979B7CC4F9AE02.roa File: D2F65B3E2D3C11F089979B7CC4F9AE02.roa (raw, json) Hash identifier: 1jGCFzd/sHQM74sRPATE0G9+X7umf34cHsGsadOtRrc= Subject key identifier: AD:5B:35:96:4A:88:90:B2:EA:10:00:A1:F2:AF:4E:CD:60:9C:D5:F0 Certificate issuer: /CN=A9117CE3/serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Certificate serial: AB Authority key identifier: C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/D2F65B3E2D3C11F089979B7CC4F9AE02.roa Signing time: Fri 16 May 2025 02:03:22 +0000 ROA not before: Fri 16 May 2025 02:03:22 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 401371 IP address blocks: 160.25.20.0/23 maxlen: 23 160.25.20.0/24 maxlen: 24 160.25.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 05:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 171 (0xab) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9117CE3, serialNumber=C26F46FD9952B3AF3A7D715DE1BF3A61E25C798A Validity Not Before: May 16 02:03:22 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=68269cea-ed1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:05:bb:1a:1c:21:92:f6:7f:61:fc:4c:3b:cd: 83:b9:42:90:11:aa:30:76:c1:7f:76:ce:64:0f:22: c6:58:7d:50:7f:e5:8a:75:79:f0:53:b8:05:e7:ee: ab:a9:8e:09:60:f1:4e:79:6b:bb:5b:bc:0f:6f:46: 7d:62:8b:c4:ae:64:46:98:de:bd:a0:7b:3a:d1:7e: d2:52:0e:a0:74:c6:d4:c0:bb:ab:67:59:4a:ae:78: 5e:e0:c0:02:94:ba:44:8e:99:0e:90:96:f8:de:2e: 52:f8:b5:e7:7b:30:fe:06:d0:53:a6:28:82:c2:c9: b8:4b:18:4d:9e:26:93:f2:ea:52:21:df:f0:f0:0f: cd:e8:37:2f:39:4f:a0:b9:ca:b5:ce:24:82:84:da: fa:1e:8b:64:83:79:fd:58:f9:2a:96:82:63:c6:59: 99:f7:ec:ac:9f:e5:89:65:19:a7:5b:82:09:34:76: 1b:f5:42:2e:89:83:4a:7f:fe:54:21:e8:07:d2:d7: 60:17:7d:35:59:61:21:cb:e2:f0:ed:49:83:eb:fc: b1:9d:23:65:12:16:93:21:63:80:d8:8a:d1:07:37: d8:2c:9a:b6:b5:94:eb:a4:ea:61:bf:f8:c2:54:f2: 6c:bf:70:61:ec:86:41:3e:3a:8c:5c:75:1f:8a:c8: 7b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:5B:35:96:4A:88:90:B2:EA:10:00:A1:F2:AF:4E:CD:60:9C:D5:F0 X509v3 Authority Key Identifier: keyid:C2:6F:46:FD:99:52:B3:AF:3A:7D:71:5D:E1:BF:3A:61:E2:5C:79:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/wm9G_ZlSs686fXFd4b86YeJceYo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wm9G_ZlSs686fXFd4b86YeJceYo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9117CE3/A90CAFC4346511EFB9C0764FC4F9AE02/D2F65B3E2D3C11F089979B7CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.25.20.0/23 Signature Algorithm: sha256WithRSAEncryption 80:a1:7f:8a:ba:71:c8:30:a8:c2:e6:78:93:a7:a4:ca:27:50: 13:6f:8b:da:08:b0:8f:12:a8:81:43:5c:fd:26:30:8c:c9:81: 4c:e2:b7:b9:5a:3b:05:26:16:cf:c3:7e:6e:0b:27:83:15:b8: 7f:e3:c6:1e:1f:3e:00:74:d1:65:d4:95:a3:de:8f:de:1e:86: 2a:86:76:aa:1c:ef:df:82:e1:92:bd:a7:f4:0f:8e:92:dd:26: d2:77:53:cf:21:54:97:63:b3:00:84:73:08:6d:40:07:57:a6: 06:ed:b3:8d:af:45:64:d5:b0:63:d0:b4:33:02:96:ee:df:89: 75:9f:3d:59:98:b2:04:ee:6e:40:db:e9:55:86:bc:bd:60:21: 95:1c:43:23:13:09:72:c6:35:90:f4:b9:f4:ab:d2:2d:48:7f: 31:06:36:fa:1d:69:96:77:b2:b0:52:8e:ce:ea:87:13:8f:2d: 75:53:10:84:f1:5b:c8:aa:f1:8f:3e:85:c0:2a:2b:ff:1a:f6: 0e:35:d7:0d:00:83:5d:8c:2c:a9:51:37:82:7d:f0:38:af:80: 2e:5a:e8:55:43:9d:0e:34:c1:60:4f:24:b9:65:f2:54:7c:41: 6b:89:c9:bb:39:5e:a5:1a:24:e7:60:a2:af:ae:03:26:3f:3b: cb:13:2d:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAKswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTdDRTMxMTAvBgNVBAUTKEMyNkY0NkZEOTk1MkIzQUYzQTdENzE1REUxQkYzQTYx RTI1Qzc5OEEwHhcNMjUwNTE2MDIwMzIyWhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI2OWNlYS1lZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArQW7GhwhkvZ/YfxMO82DuUKQEaowdsF/ds5kDyLGWH1Qf+WKdXnwU7gF5+6r qY4JYPFOeWu7W7wPb0Z9YovErmRGmN69oHs60X7SUg6gdMbUwLurZ1lKrnhe4MAC lLpEjpkOkJb43i5S+LXnezD+BtBTpiiCwsm4SxhNniaT8upSId/w8A/N6DcvOU+g ucq1ziSChNr6Hotkg3n9WPkqloJjxlmZ9+ysn+WJZRmnW4IJNHYb9UIuiYNKf/5U IegH0tdgF301WWEhy+Lw7UmD6/yxnSNlEhaTIWOA2IrRBzfYLJq2tZTrpOphv/jC VPJsv3Bh7IZBPjqMXHUfish7pQIDAQABo4IClTCCApEwHQYDVR0OBBYEFK1bNZZK iJCy6hAAofKvTs1gnNXwMB8GA1UdIwQYMBaAFMJvRv2ZUrOvOn1xXeG/OmHiXHmK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExN0NFMy9BOTBDQUZDNDM0 NjUxMUVGQjlDMDc2NEZDNEY5QUUwMi93bTlHX1psU3M2ODZmWEZkNGI4NlllSmNl WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3dtOUdfWmxTczY4NmZYRmQ0Yjg2WWVKY2VZby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTdDRTMvQTkwQ0FGQzQzNDY1MTFFRkI5QzA3NjRGQzRGOUFFMDIvRDJGNjVCM0Uy RDNDMTFGMDg5OTc5QjdDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgGRQwDQYJKoZIhvcNAQELBQADggEBAIChf4q6ccgwqMLm eJOnpMonUBNvi9oIsI8SqIFDXP0mMIzJgUzit7laOwUmFs/Dfm4LJ4MVuH/jxh4f PgB00WXUlaPej94ehiqGdqoc79+C4ZK9p/QPjpLdJtJ3U88hVJdjswCEcwhtQAdX pgbts42vRWTVsGPQtDMClu7fiXWfPVmYsgTubkDb6VWGvL1gIZUcQyMTCXLGNZD0 ufSr0i1IfzEGNvodaZZ3srBSjs7qhxOPLXVTEITxW8iq8Y8+hcAqK/8a9g411w0A g12MLKlRN4J98DivgC5a6FVDnQ40wWBPJLll8lR8QWuJybs5XqUaJOdgoq+uAyY/ O8sTLTo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:37:02 2025 by rpki-client