$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/22B4D1705AF911F09FF3D30BC4F9AE02.roa File: 22B4D1705AF911F09FF3D30BC4F9AE02.roa (raw, json) Hash identifier: HitZiMXiwNMvF13mhcDQf6XM4HwHI8hyTa9V9MVcrDg= Subject key identifier: B3:36:84:9A:40:EB:A0:BA:B1:92:31:A0:FE:20:B9:00:9B:F1:95:25 Certificate issuer: /CN=A91DA898/serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Certificate serial: 59 Authority key identifier: FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/22B4D1705AF911F09FF3D30BC4F9AE02.roa Signing time: Mon 07 Jul 2025 06:10:53 +0000 ROA not before: Mon 07 Jul 2025 06:10:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 56194 IP address blocks: 161.248.252.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 14:37:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 89 (0x59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DA898, serialNumber=FDE74CD1656D4ECAF2B0E6BBC3135D4EB840782B Validity Not Before: Jul 7 06:10:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686b64ec-5338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ee:e2:b5:ef:b2:bc:e4:4e:a1:1b:41:54:83: 7a:31:98:c9:20:f3:76:89:e3:8e:d0:bc:2d:f6:77: d3:dc:ac:4f:ec:85:1c:2b:76:c6:1d:f3:f8:66:b4: f5:13:fc:de:b1:ad:f4:19:2e:d6:90:54:c3:0e:63: 81:45:a7:bb:a1:37:0d:86:e6:01:4d:c5:bd:56:20: 7f:9b:91:37:b4:fe:46:5a:5b:cc:83:28:af:07:a8: 76:cf:e2:f9:9e:11:ea:d5:46:b1:b2:32:74:a3:b3: df:7c:bd:09:9c:6b:2c:73:2d:7b:15:87:8e:ad:b1: 8a:ca:4e:18:56:89:c7:2a:7c:5e:90:0f:10:58:24: 1a:5d:0d:4b:1f:0a:c1:6a:bb:a8:76:a1:05:82:ac: c9:69:a4:62:3b:a9:38:5c:a4:c2:66:48:d5:3d:c7: 3e:62:e5:09:a6:2e:75:9a:1d:02:62:1a:f6:40:44: e0:6b:8f:e5:49:a6:2d:fb:46:c4:a9:92:77:d4:16: 2a:cf:e1:b2:0f:95:ea:fc:02:b3:97:c6:19:46:e9: 45:51:17:d4:bb:e3:b9:b1:74:2d:7f:5a:4c:e1:91: 61:98:43:d6:d1:32:a0:5e:22:be:b3:a3:48:7d:61: b3:08:e9:ae:6c:bf:92:8e:b2:93:0b:0c:18:54:95: 29:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:36:84:9A:40:EB:A0:BA:B1:92:31:A0:FE:20:B9:00:9B:F1:95:25 X509v3 Authority Key Identifier: keyid:FD:E7:4C:D1:65:6D:4E:CA:F2:B0:E6:BB:C3:13:5D:4E:B8:40:78:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/_edM0WVtTsrysOa7wxNdTrhAeCs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_edM0WVtTsrysOa7wxNdTrhAeCs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA898/407A25EAD87F11EF91CC5346C4F9AE02/22B4D1705AF911F09FF3D30BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.252.0/23 Signature Algorithm: sha256WithRSAEncryption 0a:de:a0:a3:3a:0a:fa:f6:53:bf:d2:9d:8b:3e:47:1f:d0:17: b9:74:db:60:ed:61:9d:f8:f6:06:21:e1:1f:20:14:b9:50:78: 71:c7:21:e8:4e:04:f8:e1:1e:4e:2f:1f:91:e1:bd:44:4a:67: 68:66:50:86:d9:6a:1b:36:e9:1f:33:77:1b:6b:a7:89:32:76: 34:41:b3:8c:4f:1b:bc:7c:56:0b:1c:d6:25:46:56:34:d0:54: 54:34:fb:8e:83:d6:cf:61:34:87:96:e1:ae:2c:3e:ff:c6:70: 0d:3e:95:c2:f5:0b:e0:72:55:41:f7:d9:04:49:d2:3d:0e:5b: f4:b3:15:4a:de:91:3c:9a:98:f7:4d:ec:50:8d:f3:76:bd:cd: d6:f7:75:5a:26:6a:fb:38:90:be:6a:be:67:23:d5:06:7d:39: ce:72:e3:16:7a:ae:f8:99:1a:7d:bd:61:51:5a:44:52:6e:1a: 4d:f2:3b:fb:9c:c5:34:c8:8e:35:a5:0d:9a:d8:f3:8b:de:5f: 39:d9:ad:7d:61:f9:35:8a:93:5a:df:d6:a8:ed:06:ed:ef:09: e8:00:7a:67:34:88:98:56:7d:eb:3c:26:3e:72:0e:c1:7a:4d: 21:1c:49:68:11:b0:e7:73:9d:e7:d6:39:cf:8b:87:da:b3:82: cb:3f:4a:68 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBWTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE QTg5ODExMC8GA1UEBRMoRkRFNzRDRDE2NTZENEVDQUYyQjBFNkJCQzMxMzVENEVC ODQwNzgyQjAeFw0yNTA3MDcwNjEwNTNaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NmI2NGVjLTUzMzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC57uK177K85E6hG0FUg3oxmMkg83aJ447QvC32d9PcrE/shRwrdsYd8/hmtPUT /N6xrfQZLtaQVMMOY4FFp7uhNw2G5gFNxb1WIH+bkTe0/kZaW8yDKK8HqHbP4vme EerVRrGyMnSjs998vQmcayxzLXsVh46tsYrKThhWiccqfF6QDxBYJBpdDUsfCsFq u6h2oQWCrMlppGI7qThcpMJmSNU9xz5i5QmmLnWaHQJiGvZAROBrj+VJpi37RsSp knfUFirP4bIPler8ArOXxhlG6UVRF9S747mxdC1/WkzhkWGYQ9bRMqBeIr6zo0h9 YbMI6a5sv5KOspMLDBhUlSlxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUszaEmkDr oLqxkjGg/iC5AJvxlSUwHwYDVR0jBBgwFoAU/edM0WVtTsrysOa7wxNdTrhAeCsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURBODk4LzQwN0EyNUVBRDg3 RjExRUY5MUNDNTM0NkM0RjlBRTAyL19lZE0wV1Z0VHNyeXNPYTd3eE5kVHJoQWVD cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvX2VkTTBXVnRUc3J5c09hN3d4TmRUcmhBZUNzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE QTg5OC80MDdBMjVFQUQ4N0YxMUVGOTFDQzUzNDZDNEY5QUUwMi8yMkI0RDE3MDVB RjkxMUYwOUZGM0QzMEJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH4/DANBgkqhkiG9w0BAQsFAAOCAQEACt6gozoK+vZTv9Kd iz5HH9AXuXTbYO1hnfj2BiHhHyAUuVB4ccch6E4E+OEeTi8fkeG9REpnaGZQhtlq GzbpHzN3G2uniTJ2NEGzjE8bvHxWCxzWJUZWNNBUVDT7joPWz2E0h5bhriw+/8Zw DT6VwvUL4HJVQffZBEnSPQ5b9LMVSt6RPJqY903sUI3zdr3N1vd1WiZq+ziQvmq+ ZyPVBn05znLjFnqu+Jkafb1hUVpEUm4aTfI7+5zFNMiONaUNmtjzi95fOdmtfWH5 NYqTWt/WqO0G7e8J6AB6ZzSImFZ96zwmPnIOwXpNIRxJaBGw53Od59Y5z4uH2rOC yz9KaA== -----END CERTIFICATE-----Generated at Mon Jul 21 03:05:29 2025 by rpki-client