$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa File: FF233C70E62111EFACA87766C4F9AE02.roa (raw, json) Hash identifier: 0dsUVKxnnglNpZZhhpBErhWI1oXUDVFF4BUubObFWiM= Subject key identifier: 13:31:E9:BC:F6:28:25:61:A5:DB:DB:3D:6A:61:5C:70:CF:1E:FF:DE Certificate issuer: /CN=A91CEAE0/serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Certificate serial: 0114 Authority key identifier: 9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa Signing time: Fri 01 Aug 2025 07:11:53 +0000 ROA not before: Fri 01 Aug 2025 07:11:53 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 214189 IP address blocks: 160.22.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 08:35:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 276 (0x114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CEAE0, serialNumber=9DF4FEDFF92A9E7F6E02BFC054AD339853D9DD32 Validity Not Before: Aug 1 07:11:53 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=688c68b9-3e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:67:79:72:6f:0e:5c:91:36:7e:10:5a:38:6c: 94:62:a4:16:4e:e9:de:1a:24:02:7d:ef:a8:98:ed: c4:40:ca:60:a2:b8:88:b1:6c:86:88:ee:ae:1c:5e: 21:40:72:6a:e6:c0:a7:2c:45:b1:48:e2:d0:d2:fb: b9:cc:9f:38:82:c7:22:91:64:85:6c:b5:64:23:18: 8c:92:da:6f:1d:0a:6d:35:f1:e9:0c:9b:45:6a:51: ca:50:1a:a1:8b:33:2f:82:2e:0b:81:13:46:1d:5f: 8b:cb:7a:fe:41:d5:43:8a:4b:3c:ba:2e:0d:51:de: 14:df:32:8f:3f:96:81:68:2a:16:58:69:e3:ef:5c: ab:46:cd:be:fe:0b:97:f3:d0:b5:e2:3c:4c:00:d7: 6f:33:89:7c:52:a7:5e:c6:c0:86:13:b4:73:2d:72: 89:6a:9c:49:06:c7:4d:27:4d:f2:c5:5a:e9:10:eb: 0c:57:cf:39:a5:60:97:b3:46:43:08:9a:68:51:36: 95:fc:d8:75:72:fd:14:a0:2f:ca:41:0e:9d:bc:a8: 3f:4c:03:84:02:55:95:20:67:2c:f3:30:63:1a:ab: 83:83:23:09:6f:8f:95:03:e2:87:cc:2d:19:dd:c8: 65:0a:5a:d2:95:fa:59:26:3e:6e:8a:09:70:05:91: af:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:31:E9:BC:F6:28:25:61:A5:DB:DB:3D:6A:61:5C:70:CF:1E:FF:DE X509v3 Authority Key Identifier: keyid:9D:F4:FE:DF:F9:2A:9E:7F:6E:02:BF:C0:54:AD:33:98:53:D9:DD:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nfT-3_kqnn9uAr_AVK0zmFPZ3TI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEAE0/AEF63760196811EF8FF7BE6FC4F9AE02/FF233C70E62111EFACA87766C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.155.0/24 Signature Algorithm: sha256WithRSAEncryption 59:5a:9f:dc:a8:db:9b:e4:74:6b:07:d1:df:e4:65:e1:2d:f8: 51:46:e7:41:ea:08:bf:f4:7e:dc:db:36:b0:1e:d7:37:63:76: 0a:1c:67:5e:3d:d6:70:f8:66:16:10:27:97:51:c8:fa:e2:ff: 0d:5a:fc:70:e2:e5:42:cf:3c:66:a6:8a:d7:8e:11:39:20:32: be:e3:15:3e:2c:6a:86:e8:1f:9b:a4:ae:f6:28:32:33:30:c2: ce:9f:ce:4f:d6:21:4f:9a:b4:5e:ca:a7:ea:a6:ba:b8:68:81: ea:ee:23:cd:35:d0:8b:85:30:89:5f:75:69:4c:43:fb:6a:b1: d2:f0:51:f0:f0:67:95:04:f1:ce:33:33:10:6e:d8:70:81:e2: 32:21:84:f2:76:df:28:36:9a:a8:8a:ab:31:a1:bb:a7:e6:ee: 97:91:97:33:e2:6f:c3:df:f0:82:34:61:94:f0:3a:76:7d:63: e2:df:b7:20:d1:a2:9c:4d:a7:51:48:f2:f6:57:98:e6:c6:8a: 66:77:80:68:ee:ba:b0:5f:b1:7a:86:95:16:4f:b8:d4:18:40: 76:13:db:59:83:48:4f:4f:0a:42:5a:67:a2:ba:04:54:b3:e9: c3:fe:e9:5d:9a:69:83:43:04:db:a8:e2:e0:d6:90:5f:7a:3a: 54:51:94:09 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0VBRTAxMTAvBgNVBAUTKDlERjRGRURGRjkyQTlFN0Y2RTAyQkZDMDU0QUQzMzk4 NTNEOUREMzIwHhcNMjUwODAxMDcxMTUzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjNjhiOS0zZTZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwWd5cm8OXJE2fhBaOGyUYqQWTuneGiQCfe+omO3EQMpgoriIsWyGiO6uHF4h QHJq5sCnLEWxSOLQ0vu5zJ84gscikWSFbLVkIxiMktpvHQptNfHpDJtFalHKUBqh izMvgi4LgRNGHV+Ly3r+QdVDiks8ui4NUd4U3zKPP5aBaCoWWGnj71yrRs2+/guX 89C14jxMANdvM4l8UqdexsCGE7RzLXKJapxJBsdNJ03yxVrpEOsMV885pWCXs0ZD CJpoUTaV/Nh1cv0UoC/KQQ6dvKg/TAOEAlWVIGcs8zBjGquDgyMJb4+VA+KHzC0Z 3chlClrSlfpZJj5uiglwBZGvZwIDAQABo4IClTCCApEwHQYDVR0OBBYEFBMx6bz2 KCVhpdvbPWphXHDPHv/eMB8GA1UdIwQYMBaAFJ30/t/5Kp5/bgK/wFStM5hT2d0y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRUFFMC9BRUY2Mzc2MDE5 NjgxMUVGOEZGN0JFNkZDNEY5QUUwMi9uZlQtM19rcW5uOXVBcl9BVkswem1GUFoz VEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25mVC0zX2txbm45dUFyX0FWSzB6bUZQWjNUSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0VBRTAvQUVGNjM3NjAxOTY4MTFFRjhGRjdCRTZGQzRGOUFFMDIvRkYyMzNDNzBF NjIxMTFFRkFDQTg3NzY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFpswDQYJKoZIhvcNAQELBQADggEBAFlan9yo25vkdGsH 0d/kZeEt+FFG50HqCL/0ftzbNrAe1zdjdgocZ1491nD4ZhYQJ5dRyPri/w1a/HDi 5ULPPGamiteOETkgMr7jFT4saoboH5ukrvYoMjMwws6fzk/WIU+atF7Kp+qmurho geruI8010IuFMIlfdWlMQ/tqsdLwUfDwZ5UE8c4zMxBu2HCB4jIhhPJ23yg2mqiK qzGhu6fm7peRlzPib8Pf8II0YZTwOnZ9Y+LftyDRopxNp1FI8vZXmObGimZ3gGju urBfsXqGlRZPuNQYQHYT21mDSE9PCkJaZ6K6BFSz6cP+6V2aaYNDBNuo4uDWkF96 OlRRlAk= -----END CERTIFICATE-----Generated at Sat Oct 25 11:35:59 2025 by rpki-client