$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/938766E6717B11EF8588F70CC4F9AE02.roa File: 938766E6717B11EF8588F70CC4F9AE02.roa (raw, json) Hash identifier: e7bkzF5hgKB9clrVs3RakcyTeW3VxPjoKV5Lz/a4p4A= Subject key identifier: 42:BA:5A:D7:37:5F:CE:44:F1:E4:59:16:3D:58:5F:1B:CE:DD:54:CF Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0698 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/938766E6717B11EF8588F70CC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:51:27 +0000 ROA not before: Thu 28 Aug 2025 14:51:27 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 152959 IP address blocks: 160.30.12.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1688 (0x698) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:27 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06cef-4f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:34:11:8b:c6:c4:e4:3f:a3:29:e5:cb:74:e9: 5f:f7:11:0a:b7:c8:96:a0:4c:37:0d:21:e7:6c:83: 15:32:62:33:b9:1b:22:ce:be:be:8f:73:6c:22:3d: e9:c9:ed:62:68:73:6b:d1:77:c4:98:bb:e2:29:c7: f0:c4:bc:a9:38:2d:9b:eb:a8:bd:6c:58:2d:fc:94: 45:c3:08:d8:e6:0a:0d:16:4b:a9:3f:96:a3:35:30: 54:12:0d:93:a4:1d:63:19:04:65:6c:e1:4b:d9:d4: bb:05:bc:3e:12:7c:d3:a2:1c:7e:58:40:82:3e:20: fc:06:9f:da:d6:54:01:9c:28:85:b8:2d:a7:bc:24: a7:52:7f:80:67:05:99:46:39:c5:b0:a0:f1:6e:bb: bb:e1:24:15:fe:6f:ad:66:28:14:7f:ae:b0:21:52: 03:1b:c1:db:bc:fa:04:84:0c:4c:fe:b2:ed:73:ca: ae:e3:41:13:e5:94:2b:c6:d1:92:ba:39:bf:bc:12: e3:a1:a8:d8:f6:66:a1:25:dc:0b:33:80:cd:34:d1: 87:c7:06:88:35:d9:4a:07:e8:31:57:23:bc:a0:22: 19:3d:38:fb:71:a5:6e:58:ac:a7:b2:2c:7a:aa:d5: f2:7e:26:12:03:8f:e0:4d:45:5f:96:a9:22:6c:05: 9c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:BA:5A:D7:37:5F:CE:44:F1:E4:59:16:3D:58:5F:1B:CE:DD:54:CF X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/938766E6717B11EF8588F70CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.30.12.0/23 Signature Algorithm: sha256WithRSAEncryption 5d:70:4a:8b:77:34:d9:17:b0:49:58:32:14:af:b4:3b:c7:ba: e4:75:c0:60:3b:cf:30:52:d8:3c:1c:99:f1:a9:0a:71:87:37: 0a:46:a6:3c:9b:16:7c:24:f1:7b:f5:b2:93:75:63:86:59:36: 77:e0:dc:05:19:34:1c:b8:39:31:db:63:e6:7d:f6:40:b9:20: 09:0c:f9:da:dd:19:27:ea:27:b0:34:1f:6d:87:65:64:76:e7: 9c:ff:78:b2:4e:ed:5b:7e:68:0d:bc:e8:c3:1a:0a:ea:9f:81: 68:2d:ec:ac:2b:f7:6b:22:a5:42:c7:ca:fc:8b:85:56:98:9e: 49:c7:00:70:83:34:77:dc:c4:bd:70:f4:e9:1f:05:59:7a:df: 4d:12:e9:2f:e3:99:56:a6:86:d0:a7:48:5e:bf:20:7e:7a:99: f1:bb:39:0f:7e:25:d9:88:b1:e5:ee:01:17:06:22:0c:4c:f1: 31:16:dd:33:4e:02:5f:f5:f1:a9:33:ae:a0:84:05:1c:ae:ba: a9:72:bc:ca:a8:a4:87:ff:19:e9:69:bb:fe:6b:8f:37:ec:1c: 53:f0:7c:4d:5c:d6:9e:38:1e:5c:e9:fd:b1:7f:89:93:03:cf: cf:1b:a1:ba:c6:7b:83:d8:e3:a5:9c:2f:c6:7f:bd:de:2d:30: be:7c:e0:ef -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBpgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTI3WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmNlZi00ZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0DQRi8bE5D+jKeXLdOlf9xEKt8iWoEw3DSHnbIMVMmIzuRsizr6+j3NsIj3p ye1iaHNr0XfEmLviKcfwxLypOC2b66i9bFgt/JRFwwjY5goNFkupP5ajNTBUEg2T pB1jGQRlbOFL2dS7Bbw+EnzTohx+WECCPiD8Bp/a1lQBnCiFuC2nvCSnUn+AZwWZ RjnFsKDxbru74SQV/m+tZigUf66wIVIDG8HbvPoEhAxM/rLtc8qu40ET5ZQrxtGS ujm/vBLjoajY9mahJdwLM4DNNNGHxwaINdlKB+gxVyO8oCIZPTj7caVuWKynsix6 qtXyfiYSA4/gTUVflqkibAWchwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEK6Wtc3 X85E8eRZFj1YXxvO3VTPMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvOTM4NzY2RTY3 MTdCMTFFRjg1ODhGNzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgHgwwDQYJKoZIhvcNAQELBQADggEBAF1wSot3NNkXsElY MhSvtDvHuuR1wGA7zzBS2DwcmfGpCnGHNwpGpjybFnwk8Xv1spN1Y4ZZNnfg3AUZ NBy4OTHbY+Z99kC5IAkM+drdGSfqJ7A0H22HZWR255z/eLJO7Vt+aA286MMaCuqf gWgt7Kwr92sipULHyvyLhVaYnknHAHCDNHfcxL1w9OkfBVl6300S6S/jmVamhtCn SF6/IH56mfG7OQ9+JdmIseXuARcGIgxM8TEW3TNOAl/18akzrqCEBRyuuqlyvMqo pIf/Gelpu/5rjzfsHFPwfE1c1p44Hlzp/bF/iZMDz88bobrGe4PY46WcL8Z/vd4t ML584O8= -----END CERTIFICATE-----Generated at Sun Sep 7 00:35:03 2025 by rpki-client