$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/8CF832322C6C11EFB50AD22EC4F9AE02.roa File: 8CF832322C6C11EFB50AD22EC4F9AE02.roa (raw, json) Hash identifier: xbXyHpLgHt9b+54jlb0N3LzfXI2w4v845p/L4pO7oxk= Subject key identifier: A2:EC:4F:CE:51:2E:58:3B:B0:57:FA:44:DE:D4:91:26:7D:2A:15:9C Certificate issuer: /CN=A913AE23/serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE Certificate serial: 014F Authority key identifier: 41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/8CF832322C6C11EFB50AD22EC4F9AE02.roa Signing time: Mon 02 Mar 2026 14:42:21 +0000 ROA not before: Tue 09 Sep 2025 05:42:19 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138933 IP address blocks: 160.22.164.0/23 maxlen: 23 160.22.164.0/24 maxlen: 24 160.22.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 04:51:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 335 (0x14f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE23, serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE Validity Not Before: Sep 9 05:42:19 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=69a5a1cd-cb02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f9:02:9b:3f:90:54:d8:1e:31:ff:90:e1:d4: f2:6e:c8:10:9a:08:48:3d:8d:ab:bf:c9:f6:a2:bd: 7c:db:d3:84:af:2a:3b:22:6f:eb:e0:ea:da:65:99: 96:2a:02:81:c1:88:b1:05:1e:66:e6:f9:c9:bf:4b: f9:da:b7:6b:cd:dd:c8:25:5e:a0:19:d2:df:1d:31: ce:09:0b:f4:59:e0:ee:c2:35:ba:1c:a3:6c:cb:6d: be:a8:b8:87:77:2f:61:53:4a:91:80:7f:31:5f:1b: d3:82:1d:00:fe:dc:7e:01:e5:28:61:bf:dd:ef:0b: e7:85:7e:52:e9:90:59:d7:fb:a8:06:d1:c5:97:48: 6d:b3:f7:19:6c:12:a0:75:b1:4c:5d:fc:12:fa:f9: 56:5b:e5:14:9a:dd:49:0e:4a:bf:0c:49:a4:c7:e6: c0:2c:8d:7d:b9:30:ca:09:e0:b2:bc:a0:c5:dd:45: 7c:cc:26:85:e2:25:26:1a:76:bc:98:68:45:e1:c1: 51:d0:31:ab:e5:48:90:d2:69:25:73:76:85:3b:51: 6f:20:80:81:df:2f:13:7d:06:50:d6:54:a7:08:fe: cc:31:11:c4:34:49:42:f9:18:d1:86:05:87:cd:85: ef:9d:21:b0:12:d2:04:9a:23:1f:20:57:62:36:53: 4f:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:EC:4F:CE:51:2E:58:3B:B0:57:FA:44:DE:D4:91:26:7D:2A:15:9C X509v3 Authority Key Identifier: keyid:41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/8CF832322C6C11EFB50AD22EC4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.22.164.0/23 Signature Algorithm: sha256WithRSAEncryption 16:7d:eb:70:3d:a8:4f:98:7a:a1:1a:09:2a:75:9a:24:13:b6: 97:e4:b1:7b:63:84:92:fe:23:57:34:b7:20:1c:f1:20:62:d6: d6:38:4c:cb:73:6a:e7:42:2a:b3:3d:c4:48:84:30:8e:39:5e: 4e:e0:45:6a:c4:30:9a:b0:ea:fd:d5:51:f4:aa:2d:da:02:a0: 47:f9:0c:36:1c:6d:23:ca:bc:8c:54:a2:53:2a:a6:22:b8:4f: 44:aa:9b:8a:ed:09:79:15:c7:40:87:08:78:9f:61:a0:65:c2: c3:fe:c1:80:66:03:29:d6:c8:0c:3f:47:a2:5e:06:6b:89:d0: ea:a9:81:c2:b3:74:7c:d1:ea:c0:a7:05:ea:3f:37:34:74:b5: d1:90:78:3b:94:d8:28:1b:dc:48:74:3a:27:4e:61:b1:ee:8c: d2:ba:3f:f8:ca:dc:c7:37:2f:42:01:46:9b:69:5a:60:3f:2d: dc:72:e3:e7:dc:5c:35:1b:fb:fe:f1:a9:b8:28:51:e3:8d:35: 8a:ac:25:cc:b5:4a:de:8f:83:03:e5:2b:46:16:a2:d0:3f:c7: 2f:4f:1b:8c:b1:7c:b5:4a:7a:b6:66:1a:1f:16:86:47:4c:82: 01:0a:fb:08:a6:5d:8f:7f:03:e7:3b:93:05:b3:d2:00:93:23: c7:75:b2:49 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAU8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMjMxMTAvBgNVBAUTKDQxRTFFQzE3REU3QkE3MEY4QzEyNDE3NzY5NjM3NzAy MzcyNTE5REUwHhcNMjUwOTA5MDU0MjE5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1YTFjZC1jYjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAj/kCmz+QVNgeMf+Q4dTybsgQmghIPY2rv8n2or1829OEryo7Im/r4OraZZmW KgKBwYixBR5m5vnJv0v52rdrzd3IJV6gGdLfHTHOCQv0WeDuwjW6HKNsy22+qLiH dy9hU0qRgH8xXxvTgh0A/tx+AeUoYb/d7wvnhX5S6ZBZ1/uoBtHFl0hts/cZbBKg dbFMXfwS+vlWW+UUmt1JDkq/DEmkx+bALI19uTDKCeCyvKDF3UV8zCaF4iUmGna8 mGhF4cFR0DGr5UiQ0mklc3aFO1FvIICB3y8TfQZQ1lSnCP7MMRHENElC+RjRhgWH zYXvnSGwEtIEmiMfIFdiNlNP4wIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFKLsT85R Llg7sFf6RN7UkSZ9KhWcMB8GA1UdIwQYMBaAFEHh7Bfee6cPjBJBd2ljdwI3JRne MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUyMy8zMDFBMUU0QTJD NkMxMUVGQTM0Njk0MkRDNEY5QUUwMi9RZUhzRjk1N3B3LU1Fa0YzYVdOM0FqY2xH ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FlSHNGOTU3cHctTUVrRjNhV04zQWpjbEdkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFMjMvMzAxQTFFNEEyQzZDMTFFRkEzNDY5NDJEQzRGOUFFMDIvOENGODMyMzIy QzZDMTFFRkI1MEFEMjJFQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBakMA0GCSqGSIb3DQEBCwUAA4IBAQAWfetwPahPmHqhGgkqdZok E7aX5LF7Y4SS/iNXNLcgHPEgYtbWOEzLc2rnQiqzPcRIhDCOOV5O4EVqxDCasOr9 1VH0qi3aAqBH+Qw2HG0jyryMVKJTKqYiuE9EqpuK7Ql5FcdAhwh4n2GgZcLD/sGA ZgMp1sgMP0eiXgZridDqqYHCs3R80erApwXqPzc0dLXRkHg7lNgoG9xIdDonTmGx 7ozSuj/4ytzHNy9CAUabaVpgPy3ccuPn3Fw1G/v+8am4KFHjjTWKrCXMtUrej4MD 5StGFqLQP8cvTxuMsXy1Snq2ZhofFoZHTIIBCvsIpl2PfwPnO5MFs9IAkyPHdbJJ -----END CERTIFICATE-----Generated at Wed Mar 4 09:55:37 2026 by rpki-client