$ rpki-client -vvf rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/25BD1CFA3D6311F0AF2C2257C4F9AE02.roa File: 25BD1CFA3D6311F0AF2C2257C4F9AE02.roa (raw, json) Hash identifier: aRkI7tQEQCwESW+AVm8WUWidr8skaQZ/Cucm3ddKBWM= Subject key identifier: 83:EA:BC:AD:C1:A0:78:48:68:A1:BF:46:10:B8:E1:48:10:E0:F4:8E Certificate issuer: /CN=A91B165F/serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Certificate serial: 73 Authority key identifier: 5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/25BD1CFA3D6311F0AF2C2257C4F9AE02.roa Signing time: Sat 31 May 2025 08:18:43 +0000 ROA not before: Sat 31 May 2025 08:18:43 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 140219 IP address blocks: 160.187.158.0/24 maxlen: 24 160.187.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 06:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 115 (0x73) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B165F, serialNumber=5A56C4DE9423B9E2B800AB7E040DCA3E09F23475 Validity Not Before: May 31 08:18:43 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=683abb63-47c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:16:b0:79:6e:d4:43:55:f1:98:ba:a0:5f:e6: 5d:33:8f:fd:e8:8a:04:da:99:8d:1c:72:3e:8b:d4: fc:c6:84:e7:f1:18:40:8e:30:b8:76:81:44:87:68: d0:42:46:e2:cd:4d:76:dc:eb:3d:70:7c:2c:67:92: 23:3a:91:e1:a5:c2:d3:39:00:5b:39:b0:d3:71:2f: 88:ce:cb:9d:7d:96:c2:ae:c9:6b:86:4a:03:15:e8: 00:87:cb:4a:63:03:9f:fd:eb:cf:c2:7e:02:d1:d2: 76:bc:91:cf:af:62:1d:a4:ef:8e:8f:e1:fd:0d:85: 7e:20:34:b8:03:f1:ae:19:7c:84:9a:a6:55:e5:a2: d5:2c:0c:e1:0a:63:ca:84:99:40:36:15:73:82:be: fa:23:23:8b:b4:ea:c1:43:17:d8:66:4d:d0:75:b9: 47:96:db:02:08:f1:4c:a4:28:af:df:fd:03:55:81: 18:0c:f7:f5:28:0c:41:ea:73:44:07:19:d5:54:5c: 7a:d2:7a:32:45:3d:cd:ab:94:ec:b3:d7:03:8a:f5: a7:16:39:48:7a:1b:78:4b:65:f5:0e:3e:82:52:10: 0c:59:4b:7f:4a:ca:50:2b:ba:79:f0:5e:31:6c:42: 80:5f:8e:72:ed:aa:98:6f:1d:a6:4d:cd:6d:89:89: b4:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:EA:BC:AD:C1:A0:78:48:68:A1:BF:46:10:B8:E1:48:10:E0:F4:8E X509v3 Authority Key Identifier: keyid:5A:56:C4:DE:94:23:B9:E2:B8:00:AB:7E:04:0D:CA:3E:09:F2:34:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/WlbE3pQjueK4AKt-BA3KPgnyNHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/WlbE3pQjueK4AKt-BA3KPgnyNHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B165F/83FD6B2EA4B311EF889C7687C4F9AE02/25BD1CFA3D6311F0AF2C2257C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.187.158.0/23 Signature Algorithm: sha256WithRSAEncryption 0c:78:a5:24:9e:5f:a6:d9:f3:27:17:5c:e4:97:e5:67:05:ac: 05:13:f5:2e:b0:38:ea:a4:67:f9:d9:a1:69:e9:9e:ed:b7:40: 1d:64:a9:3a:48:8f:07:9d:2b:80:bf:4d:71:23:f5:91:19:73: 81:d8:91:0b:9a:27:65:b3:ea:95:2b:0b:03:f9:6d:12:6e:53: 24:53:cd:e6:e4:86:fd:08:db:02:49:56:42:e6:02:c0:35:d4: fc:52:00:bc:d1:0f:83:f7:1f:40:ee:36:32:fa:e4:ce:f8:ab: 9b:87:8b:26:0c:b2:93:e4:b0:6e:6e:34:d2:f0:b7:cf:bd:ca: bf:6a:61:0a:50:ea:d4:72:a5:d5:04:f5:9f:6f:ab:ad:ad:f2: 93:53:7e:e7:a7:75:2b:d8:e5:c9:bf:f8:1a:9e:8f:81:7d:5e: 9c:92:85:ba:ab:46:55:36:35:3c:d3:f1:fd:31:fc:d9:5f:18: 2d:85:8d:fe:b4:e8:bc:52:e5:52:7e:14:39:46:21:b8:8a:06: e0:a8:2d:cf:ca:45:be:2b:0e:c0:1c:41:f3:dd:60:25:3e:f0: f7:9f:8c:e6:2b:29:1b:07:34:5b:e2:22:3d:ed:6a:71:b0:08: 15:3b:e6:9c:63:a9:c8:40:be:b2:51:43:a8:0d:c1:9e:6a:73: 5d:22:60:12 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBczANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MTY1RjExMC8GA1UEBRMoNUE1NkM0REU5NDIzQjlFMkI4MDBBQjdFMDQwRENBM0Uw OUYyMzQ3NTAeFw0yNTA1MzEwODE4NDNaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4M2FiYjYzLTQ3YzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKFrB5btRDVfGYuqBf5l0zj/3oigTamY0ccj6L1PzGhOfxGECOMLh2gUSHaNBC RuLNTXbc6z1wfCxnkiM6keGlwtM5AFs5sNNxL4jOy519lsKuyWuGSgMV6ACHy0pj A5/968/CfgLR0na8kc+vYh2k746P4f0NhX4gNLgD8a4ZfISaplXlotUsDOEKY8qE mUA2FXOCvvojI4u06sFDF9hmTdB1uUeW2wII8UykKK/f/QNVgRgM9/UoDEHqc0QH GdVUXHrSejJFPc2rlOyz1wOK9acWOUh6G3hLZfUOPoJSEAxZS39KylArunnwXjFs QoBfjnLtqphvHaZNzW2JibRHAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUg+q8rcGg eEhoob9GELjhSBDg9I4wHwYDVR0jBBgwFoAUWlbE3pQjueK4AKt+BA3KPgnyNHUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIxNjVGLzgzRkQ2QjJFQTRC MzExRUY4ODlDNzY4N0M0RjlBRTAyL1dsYkUzcFFqdWVLNEFLdC1CQTNLUGdueU5I VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvV2xiRTNwUWp1ZUs0QUt0LUJBM0tQZ255TkhVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC MTY1Ri84M0ZENkIyRUE0QjMxMUVGODg5Qzc2ODdDNEY5QUUwMi8yNUJEMUNGQTNE NjMxMUYwQUYyQzIyNTdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaC7njANBgkqhkiG9w0BAQsFAAOCAQEADHilJJ5fptnzJxdc 5JflZwWsBRP1LrA46qRn+dmhaeme7bdAHWSpOkiPB50rgL9NcSP1kRlzgdiRC5on ZbPqlSsLA/ltEm5TJFPN5uSG/QjbAklWQuYCwDXU/FIAvNEPg/cfQO42Mvrkzvir m4eLJgyyk+Swbm400vC3z73Kv2phClDq1HKl1QT1n2+rra3yk1N+56d1K9jlyb/4 Gp6PgX1enJKFuqtGVTY1PNPx/TH82V8YLYWN/rTovFLlUn4UOUYhuIoG4Kgtz8pF visOwBxB891gJT7w95+M5ispGwc0W+IiPe1qcbAIFTvmnGOpyEC+slFDqA3Bnmpz XSJgEg== -----END CERTIFICATE-----Generated at Wed Jun 4 12:30:22 2025 by rpki-client