$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/901608029DA211EF97708810C4F9AE02.roa File: 901608029DA211EF97708810C4F9AE02.roa (raw, json) Hash identifier: 4k/t5Y7/NJhX1hYgVrJN0XyDpAfOahkDExSl6gVDE0c= Subject key identifier: 6D:F5:D1:67:C7:B5:49:1A:BA:4B:B7:4E:20:BE:7B:3C:2D:9D:71:06 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 06AE Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/901608029DA211EF97708810C4F9AE02.roa Signing time: Thu 28 Aug 2025 14:51:44 +0000 ROA not before: Thu 28 Aug 2025 14:51:44 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153032 IP address blocks: 160.191.146.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1710 (0x6ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:44 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d00-0fdf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3f:53:29:ba:aa:b6:38:68:c5:ae:f0:ef:01: e1:f3:a2:19:b8:13:8a:84:cf:e8:2a:85:84:1e:08: 31:7d:61:c1:1e:24:a4:2c:fa:84:bf:55:fd:68:d2: 8d:28:a7:2e:3b:b8:a5:0f:c8:ff:52:20:c3:d0:d4: 97:6a:08:ce:24:a4:14:58:ac:9d:de:82:1a:25:34: 57:95:d2:9a:16:d0:c2:a9:d7:bb:63:73:84:bc:f2: e3:22:7d:96:bf:3a:6f:98:d3:63:d4:c4:60:76:71: a3:54:ee:ce:09:b0:ce:b2:18:38:fa:36:36:f0:9c: 10:fc:fd:94:39:e1:ba:d6:f2:f1:ac:33:34:8a:c3: f2:ef:70:43:f2:de:02:e3:8f:bc:12:20:1e:54:3e: 33:57:ff:f1:a2:46:1b:a6:1c:f8:2d:6a:2d:28:88: 3c:ba:b8:ac:50:f7:d6:66:f2:32:82:4b:d8:9b:7d: b2:c5:66:d0:ef:ec:94:f4:ac:ef:f4:54:ac:87:0f: dd:f0:e8:fb:b2:54:53:df:37:e7:a1:d9:15:92:e5: dd:1c:39:db:be:df:77:61:f4:6a:64:cf:ca:8c:d5: 4a:82:38:fd:6a:cc:f5:4d:1d:0f:16:4e:6c:e3:66: b2:93:0e:de:fe:b9:79:09:ad:43:78:be:b3:f4:7a: 49:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:F5:D1:67:C7:B5:49:1A:BA:4B:B7:4E:20:BE:7B:3C:2D:9D:71:06 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/901608029DA211EF97708810C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.146.0/23 Signature Algorithm: sha256WithRSAEncryption 93:43:d4:8c:16:69:ba:41:34:d5:9b:22:84:d7:a6:e5:3c:b5: 51:86:bb:f9:a2:be:d1:b4:13:1d:12:03:f8:d8:4b:56:ee:f2: af:a6:9c:1b:13:02:b9:c8:3b:14:1c:81:36:26:62:a2:14:df: 5c:cd:2d:c3:b8:5b:a5:6d:4c:cd:fa:b8:0a:5a:ae:31:2f:12: 80:58:61:cd:7f:f5:39:90:b9:6e:b1:a6:f4:de:0f:e8:30:d8: f3:7f:34:1b:af:32:0a:79:8d:2d:20:6f:44:a9:77:95:05:19: 9a:53:c7:e3:3c:4c:ee:21:81:bd:b3:e0:fb:dd:c2:92:84:b8: 51:6b:c4:9b:33:13:f6:45:a4:44:3d:e5:0f:9a:65:1a:ba:c7: 94:81:4e:8f:92:cd:b3:1f:44:96:57:db:2c:af:13:7a:16:84: 34:2c:dd:70:e8:95:82:d1:29:63:b9:f1:e1:60:a9:48:cb:24: 97:d0:3e:5e:ad:18:d0:d3:56:54:0f:b2:93:07:0e:16:24:5e: 61:31:b6:e0:14:cb:b6:68:28:fa:72:57:d8:44:f4:c1:6e:08: 30:6b:28:f6:72:9b:cf:aa:03:31:a3:d9:41:a1:b9:63:0f:13: 63:5e:99:fe:fa:b4:4f:ff:ac:84:cc:be:00:d3:2d:07:80:1c: 64:ce:48:ca -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBq4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTQ0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQwMC0wZmRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyT9TKbqqtjhoxa7w7wHh86IZuBOKhM/oKoWEHggxfWHBHiSkLPqEv1X9aNKN KKcuO7ilD8j/UiDD0NSXagjOJKQUWKyd3oIaJTRXldKaFtDCqde7Y3OEvPLjIn2W vzpvmNNj1MRgdnGjVO7OCbDOshg4+jY28JwQ/P2UOeG61vLxrDM0isPy73BD8t4C 44+8EiAeVD4zV//xokYbphz4LWotKIg8urisUPfWZvIygkvYm32yxWbQ7+yU9Kzv 9FSshw/d8Oj7slRT3zfnodkVkuXdHDnbvt93YfRqZM/KjNVKgjj9asz1TR0PFk5s 42aykw7e/rl5Ca1DeL6z9HpJpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFG310WfH tUkauku3TiC+ezwtnXEGMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvOTAxNjA4MDI5 REEyMTFFRjk3NzA4ODEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv5IwDQYJKoZIhvcNAQELBQADggEBAJND1IwWabpBNNWb IoTXpuU8tVGGu/mivtG0Ex0SA/jYS1bu8q+mnBsTArnIOxQcgTYmYqIU31zNLcO4 W6VtTM36uAparjEvEoBYYc1/9TmQuW6xpvTeD+gw2PN/NBuvMgp5jS0gb0Spd5UF GZpTx+M8TO4hgb2z4PvdwpKEuFFrxJszE/ZFpEQ95Q+aZRq6x5SBTo+SzbMfRJZX 2yyvE3oWhDQs3XDolYLRKWO58eFgqUjLJJfQPl6tGNDTVlQPspMHDhYkXmExtuAU y7ZoKPpyV9hE9MFuCDBrKPZym8+qAzGj2UGhuWMPE2Nemf76tE//rITMvgDTLQeA HGTOSMo= -----END CERTIFICATE-----Generated at Sun Sep 7 00:37:19 2025 by rpki-client