$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/DB8B5E7AAB0A11EFA1D4470FC4F9AE02.roa File: DB8B5E7AAB0A11EFA1D4470FC4F9AE02.roa (raw, json) Hash identifier: z3JOsPz0/w2Ak+IL/ZZptBzv4yXpNjkJapg0CWC/aLU= Subject key identifier: 77:35:DF:70:84:CB:FD:35:4A:4C:7B:5F:0D:ED:C0:2C:D2:15:DD:2C Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 06B0 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/DB8B5E7AAB0A11EFA1D4470FC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:51:46 +0000 ROA not before: Thu 28 Aug 2025 14:51:46 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 153407 IP address blocks: 160.191.220.0/23 maxlen: 23 160.191.220.0/24 maxlen: 24 160.191.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1712 (0x6b0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:46 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06d02-674e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:de:20:8c:44:21:e7:6c:5f:e8:2f:91:74: 73:62:15:1b:fa:b4:bc:23:df:91:75:b4:ab:48:9b: 62:89:af:91:a5:ad:35:f5:9b:1a:00:21:e7:f9:d1: 6f:31:a6:90:19:19:db:7a:77:da:39:d2:00:26:92: 41:61:14:e9:f1:84:1d:13:9e:5f:8a:a0:d5:49:1c: ab:87:2f:12:83:38:36:72:ea:aa:05:6a:a5:66:be: 40:d7:38:bc:e3:13:da:c0:64:69:9f:ef:bb:b6:9c: 50:50:e0:55:16:68:7b:29:c7:f4:e2:39:09:f7:29: c7:90:e9:f7:fa:87:b8:11:99:63:5e:ed:70:d1:26: 55:7e:ed:bc:d4:06:61:21:2f:85:85:0f:2a:ee:48: b3:ea:bc:45:4f:6d:30:4b:c5:a3:f9:7d:d8:e0:a4: 82:39:ee:1c:36:bc:36:06:e2:c3:ae:da:15:36:5e: 27:c4:37:0a:93:28:29:d3:74:f2:8d:8f:ca:a7:45: 62:4b:2f:fb:fc:09:58:d5:e7:87:e8:15:8d:10:57: 18:35:85:60:d1:3a:5e:3d:93:ee:f6:aa:2a:f3:42: 41:89:52:9d:45:52:07:40:2d:fc:49:a3:1b:2f:41: 82:09:dc:c0:6b:fe:bc:9d:4e:5a:be:0c:29:e7:d0: 24:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:35:DF:70:84:CB:FD:35:4A:4C:7B:5F:0D:ED:C0:2C:D2:15:DD:2C X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/DB8B5E7AAB0A11EFA1D4470FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.191.220.0/23 Signature Algorithm: sha256WithRSAEncryption 13:73:12:9b:12:f5:72:f8:93:46:7f:42:b0:97:cb:d1:80:63: be:75:bb:bd:73:f1:29:28:ac:17:21:1d:86:1d:53:d4:a6:d8: 46:4a:7b:cb:73:49:d9:15:fd:ad:d7:d8:fa:80:7f:a3:93:4d: 44:4d:18:26:70:fb:4e:ce:a9:08:9a:0c:47:1a:bd:02:7b:ea: d8:71:fc:25:40:03:9c:cf:61:65:47:49:07:f9:98:cf:c7:fd: d7:6e:42:b5:5c:ec:eb:6d:04:c9:d2:f6:9c:35:b5:ba:5b:63: 6a:49:05:60:1f:ad:92:fe:6e:07:82:dc:d2:de:54:8e:b7:60: a1:57:93:0e:14:14:4f:ce:b7:b5:cd:2b:ca:38:85:b2:da:10: 09:73:65:7e:dd:65:01:82:11:8a:fd:ff:47:90:bc:49:84:39: 13:a4:c7:6c:8d:04:bc:66:0d:f8:bc:9f:b2:ff:fb:b7:19:99: fa:a0:0c:2a:d9:5a:60:74:61:20:20:30:2f:dc:52:02:e3:52: 5d:a0:1e:90:f2:98:03:60:55:17:a3:7e:5c:26:45:d6:24:ae: 1f:11:46:4c:27:ef:b2:ae:2d:ce:b5:64:7b:e4:52:c8:01:a2: f2:95:7b:4f:c6:1c:91:44:cb:04:7f:53:78:f2:9b:2d:1a:7d: aa:7f:56:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBrAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTQ2WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmQwMi02NzRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXveIIxEIedsX+gvkXRzYhUb+rS8I9+RdbSrSJtiia+Rpa019ZsaACHn+dFv MaaQGRnbenfaOdIAJpJBYRTp8YQdE55fiqDVSRyrhy8Sgzg2cuqqBWqlZr5A1zi8 4xPawGRpn++7tpxQUOBVFmh7Kcf04jkJ9ynHkOn3+oe4EZljXu1w0SZVfu281AZh IS+FhQ8q7kiz6rxFT20wS8Wj+X3Y4KSCOe4cNrw2BuLDrtoVNl4nxDcKkygp03Ty jY/Kp0ViSy/7/AlY1eeH6BWNEFcYNYVg0TpePZPu9qoq80JBiVKdRVIHQC38SaMb L0GCCdzAa/68nU5avgwp59AkpwIDAQABo4IClTCCApEwHQYDVR0OBBYEFHc133CE y/01Skx7Xw3twCzSFd0sMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvREI4QjVFN0FB QjBBMTFFRkExRDQ0NzBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgv9wwDQYJKoZIhvcNAQELBQADggEBABNzEpsS9XL4k0Z/ QrCXy9GAY751u71z8SkorBchHYYdU9Sm2EZKe8tzSdkV/a3X2PqAf6OTTURNGCZw +07OqQiaDEcavQJ76thx/CVAA5zPYWVHSQf5mM/H/dduQrVc7OttBMnS9pw1tbpb Y2pJBWAfrZL+bgeC3NLeVI63YKFXkw4UFE/Ot7XNK8o4hbLaEAlzZX7dZQGCEYr9 /0eQvEmEOROkx2yNBLxmDfi8n7L/+7cZmfqgDCrZWmB0YSAgMC/cUgLjUl2gHpDy mANgVRejflwmRdYkrh8RRkwn77KuLc61ZHvkUsgBovKVe0/GHJFEywR/U3jymy0a fap/VlY= -----END CERTIFICATE-----Generated at Sun Sep 7 00:28:02 2025 by rpki-client