$ rpki-client -vvf rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/F74324B0464511EFA4CCFA6DC4F9AE02.roa File: F74324B0464511EFA4CCFA6DC4F9AE02.roa (raw, json) Hash identifier: reDFQAq+wjuHSjSgpYxauoEHpUtogIXvvCLXEGX4Ni8= Subject key identifier: 1E:A9:17:41:9A:3B:87:48:92:32:8A:73:04:37:87:4D:DB:D8:29:45 Certificate issuer: /CN=A91CF064/serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913 Certificate serial: DD Authority key identifier: AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/F74324B0464511EFA4CCFA6DC4F9AE02.roa Signing time: Fri 05 Sep 2025 06:46:17 +0000 ROA not before: Fri 05 Sep 2025 06:46:17 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 141455 IP address blocks: 160.20.126.0/23 maxlen: 23 160.20.126.0/24 maxlen: 24 160.20.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 07:12:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 221 (0xdd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CF064, serialNumber=AD4332038272C2DB3215DDA3ADFB015354156913 Validity Not Before: Sep 5 06:46:17 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68ba8739-5881 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:67:f4:a3:0f:c5:05:36:47:72:55:0a:d7: cf:95:10:09:f8:12:9d:22:94:dd:53:f5:89:64:3b: 3e:01:88:95:b6:92:c5:d8:6d:c2:d0:20:1a:da:ab: 1a:28:e3:42:4f:91:f8:4d:b9:3b:bc:53:a3:f2:60: 53:74:e2:d6:8f:6e:e0:f1:c9:3f:90:9c:c6:4b:06: 48:1a:9b:81:df:52:38:98:d3:7a:ba:5a:b5:9f:a9: 86:ff:a2:dc:11:96:d0:b2:da:46:0a:15:7c:3b:6c: b8:a0:4e:1f:5a:fd:8e:1f:1b:b1:e3:14:c2:a8:fc: d6:31:a5:43:7c:0a:2c:ad:ba:8e:fc:f5:fd:c2:99: 54:63:41:5c:f7:75:61:a3:0b:87:de:e5:fb:2a:0f: 0b:95:af:e1:16:15:db:79:27:bd:5f:91:64:af:08: 12:7e:fa:e4:a1:20:c1:0a:b9:5c:8c:8b:73:2f:a2: 39:80:25:88:fc:28:aa:da:ec:6c:be:fe:b0:3a:07: 83:b1:0e:de:f5:06:eb:f7:7c:63:b3:39:e1:bf:1c: 1b:74:d7:8c:3d:70:a7:8a:b6:a4:cd:a2:19:1d:e1: d5:8c:36:fa:80:40:f7:32:84:82:cc:9b:8c:fb:9c: 86:e6:08:03:30:d0:aa:ef:59:9b:8e:d9:49:4b:ca: 61:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:A9:17:41:9A:3B:87:48:92:32:8A:73:04:37:87:4D:DB:D8:29:45 X509v3 Authority Key Identifier: keyid:AD:43:32:03:82:72:C2:DB:32:15:DD:A3:AD:FB:01:53:54:15:69:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/rUMyA4JywtsyFd2jrfsBU1QVaRM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rUMyA4JywtsyFd2jrfsBU1QVaRM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CF064/F3CA617244E211EFB13F2214C4F9AE02/F74324B0464511EFA4CCFA6DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.20.126.0/23 Signature Algorithm: sha256WithRSAEncryption 18:4c:7f:1f:8a:9a:55:82:9b:bb:c9:4b:58:af:3c:d0:ec:52: 1e:8e:e5:68:93:54:e9:8c:6c:26:60:05:55:7b:f0:41:61:aa: 4d:cd:4d:76:31:a0:0a:03:fb:a0:22:1d:81:62:94:18:f6:0d: cd:31:0e:82:55:1c:6c:b3:69:3a:a2:41:18:f4:82:42:75:24: dc:f7:4e:1f:29:f2:f2:10:bd:68:20:0c:39:09:f9:26:e6:7f: a9:6a:2e:02:43:7c:5e:ae:19:28:e1:b2:18:38:a0:d7:91:2a: 02:f5:81:47:34:bf:85:bf:c4:fe:8c:79:9f:f5:83:d4:5f:3e: a0:a3:67:a2:c7:76:8e:ba:5e:b7:c2:c7:aa:d3:8f:0b:7e:c4: 04:f7:bb:2b:bf:eb:52:c8:bb:d4:6b:a2:1d:b4:13:09:2d:03: 75:e7:fc:be:f8:64:41:7e:d7:ff:f6:8b:d8:4c:69:84:ab:ea: 2f:47:86:8c:74:c8:b5:58:0b:b9:c5:a5:91:6e:df:32:09:ef: c3:b2:07:48:9b:45:c5:0a:67:8f:5b:94:22:49:ec:e1:90:9f: 35:a7:bb:87:5a:98:6a:62:96:6d:57:76:c1:b1:04:c5:bd:11: ae:51:2d:17:af:33:80:d2:74:13:a7:b2:69:2d:06:1b:b4:87: c3:a9:93:5d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAN0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0YwNjQxMTAvBgNVBAUTKEFENDMzMjAzODI3MkMyREIzMjE1RERBM0FERkIwMTUz NTQxNTY5MTMwHhcNMjUwOTA1MDY0NjE3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJhODczOS01ODgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuT9n9KMPxQU2R3JVCtfPlRAJ+BKdIpTdU/WJZDs+AYiVtpLF2G3C0CAa2qsa KONCT5H4Tbk7vFOj8mBTdOLWj27g8ck/kJzGSwZIGpuB31I4mNN6ulq1n6mG/6Lc EZbQstpGChV8O2y4oE4fWv2OHxux4xTCqPzWMaVDfAosrbqO/PX9wplUY0Fc93Vh owuH3uX7Kg8Lla/hFhXbeSe9X5FkrwgSfvrkoSDBCrlcjItzL6I5gCWI/Ciq2uxs vv6wOgeDsQ7e9Qbr93xjsznhvxwbdNeMPXCnirakzaIZHeHVjDb6gED3MoSCzJuM +5yG5ggDMNCq71mbjtlJS8phxwIDAQABo4IClTCCApEwHQYDVR0OBBYEFB6pF0Ga O4dIkjKKcwQ3h03b2ClFMB8GA1UdIwQYMBaAFK1DMgOCcsLbMhXdo637AVNUFWkT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRjA2NC9GM0NBNjE3MjQ0 RTIxMUVGQjEzRjIyMTRDNEY5QUUwMi9yVU15QTRKeXd0c3lGZDJqcmZzQlUxUVZh Uk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3JVTXlBNEp5d3RzeUZkMmpyZnNCVTFRVmFSTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0YwNjQvRjNDQTYxNzI0NEUyMTFFRkIxM0YyMjE0QzRGOUFFMDIvRjc0MzI0QjA0 NjQ1MTFFRkE0Q0NGQTZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFH4wDQYJKoZIhvcNAQELBQADggEBABhMfx+KmlWCm7vJ S1ivPNDsUh6O5WiTVOmMbCZgBVV78EFhqk3NTXYxoAoD+6AiHYFilBj2Dc0xDoJV HGyzaTqiQRj0gkJ1JNz3Th8p8vIQvWggDDkJ+Sbmf6lqLgJDfF6uGSjhshg4oNeR KgL1gUc0v4W/xP6MeZ/1g9RfPqCjZ6LHdo66XrfCx6rTjwt+xAT3uyu/61LIu9Rr oh20EwktA3Xn/L74ZEF+1//2i9hMaYSr6i9Hhox0yLVYC7nFpZFu3zIJ78OyB0ib RcUKZ49blCJJ7OGQnzWnu4damGpilm1XdsGxBMW9Ea5RLRevM4DSdBOnsmktBhu0 h8Opk10= -----END CERTIFICATE-----Generated at Sun Sep 7 00:31:10 2025 by rpki-client