$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/C491ED725A7A11F083B3F885C4F9AE02.roa File: C491ED725A7A11F083B3F885C4F9AE02.roa (raw, json) Hash identifier: EaTt3iw3MzXPWI97iilJv7Qv6QDIZy/BFYmUeT7y7BY= Subject key identifier: 97:1A:CC:60:20:11:FB:22:0F:7D:FD:30:62:51:FC:20:56:17:D7:11 Certificate issuer: /CN=A91EAE0A/serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Certificate serial: 6E Authority key identifier: 67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/C491ED725A7A11F083B3F885C4F9AE02.roa Signing time: Sun 06 Jul 2025 15:06:18 +0000 ROA not before: Sun 06 Jul 2025 15:06:18 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 135374 IP address blocks: 160.250.196.0/23 maxlen: 23 160.250.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 110 (0x6e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EAE0A, serialNumber=670E3A06721684AB473BBBE5CC22CF05D024BF6D Validity Not Before: Jul 6 15:06:18 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=686a90ea-f662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:4c:ff:8f:60:ca:24:46:98:d0:ff:39:ff:af: 8a:81:35:0a:b6:a6:77:b2:a2:42:79:21:56:fc:0b: db:3e:ba:f1:ef:c5:4c:be:0c:5d:1b:db:ae:76:43: bc:23:bb:61:ed:e7:20:0e:33:f6:82:b2:1f:86:04: 54:b1:3a:9a:50:fe:37:8f:7c:6c:b1:32:0d:7a:35: 0b:dc:4b:62:4f:fe:92:6d:6e:5b:5d:1a:a4:ce:69: 53:1f:fd:3e:5f:25:a0:51:03:b2:ea:b5:c4:1b:51: 04:60:19:10:9b:5f:f1:30:ff:ce:97:e6:98:c4:b6: 95:8c:b7:32:9b:2c:98:15:ab:69:7f:54:db:34:d6: cc:3f:0d:b3:89:d5:5f:db:46:3e:fc:46:9a:06:40: 74:70:39:a3:4e:e3:96:16:7c:69:bb:86:96:38:d7: ec:e4:0c:3a:a2:25:d7:f2:3b:f0:4d:c7:b5:63:50: c5:4e:de:22:e0:ed:bd:63:38:c9:94:2d:48:37:8c: 15:68:a8:3f:66:95:4a:bb:e6:49:65:dd:2c:84:93: 27:c9:97:90:b3:fb:15:1b:08:1c:a9:f9:fa:1e:f5: d1:52:1e:d1:a6:9e:e7:b4:0c:39:71:a7:ca:62:29: 93:af:a1:38:53:f3:19:62:96:8f:69:39:3c:1e:ab: 11:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:1A:CC:60:20:11:FB:22:0F:7D:FD:30:62:51:FC:20:56:17:D7:11 X509v3 Authority Key Identifier: keyid:67:0E:3A:06:72:16:84:AB:47:3B:BB:E5:CC:22:CF:05:D0:24:BF:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/Zw46BnIWhKtHO7vlzCLPBdAkv20.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zw46BnIWhKtHO7vlzCLPBdAkv20.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE0A/DAF6D736B72211EFBC36A748C4F9AE02/C491ED725A7A11F083B3F885C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.196.0/23 Signature Algorithm: sha256WithRSAEncryption 80:54:bc:7b:3e:73:e9:2c:78:57:11:e2:f5:05:67:67:c3:e4: 6f:9f:e8:85:38:c2:aa:be:97:84:87:e6:e1:10:a1:cd:06:6f: bb:1a:3d:db:60:9a:0a:ed:c1:b0:db:36:86:bc:1f:f8:c7:09: 4f:ea:20:6e:9f:7e:f2:11:48:40:b7:8a:db:09:82:81:38:c2: 91:14:ef:27:50:ab:7b:5c:4e:6e:c7:ee:3f:ff:4a:4f:20:cd: 93:65:83:70:fa:75:06:68:87:7a:f5:c4:0f:92:cc:4e:77:5d: 3f:f3:2d:f3:0c:f5:f8:06:0d:8d:f5:24:fa:1d:46:b2:5e:2d: 02:d7:63:d3:c1:fc:0f:44:3d:65:b7:af:4b:b5:3d:16:54:c8: 86:0c:1d:3f:22:6f:da:ff:c7:0b:cc:9b:f0:c2:18:c1:70:9d: 6c:a7:6d:86:17:35:5e:0b:fc:f0:71:0b:83:69:9f:3e:e8:e4: 48:a6:65:b2:bb:73:b6:da:f4:b4:d7:5a:e0:cd:cf:4f:a2:71: 36:63:b6:3b:96:ec:e0:85:1e:3b:af:db:38:ae:03:1d:11:cf: 1e:23:ab:08:b5:d2:8c:52:f1:d7:55:20:f0:81:c8:a2:4e:a6: 2d:da:7c:5d:f6:35:8b:4e:25:b8:7c:a3:b0:b8:c4:58:50:84: 24:ac:51:a9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBbjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QUUwQTExMC8GA1UEBRMoNjcwRTNBMDY3MjE2ODRBQjQ3M0JCQkU1Q0MyMkNGMDVE MDI0QkY2RDAeFw0yNTA3MDYxNTA2MThaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NmE5MGVhLWY2NjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyTP+PYMokRpjQ/zn/r4qBNQq2pneyokJ5IVb8C9s+uvHvxUy+DF0b2652Q7wj u2Ht5yAOM/aCsh+GBFSxOppQ/jePfGyxMg16NQvcS2JP/pJtbltdGqTOaVMf/T5f JaBRA7LqtcQbUQRgGRCbX/Ew/86X5pjEtpWMtzKbLJgVq2l/VNs01sw/DbOJ1V/b Rj78RpoGQHRwOaNO45YWfGm7hpY41+zkDDqiJdfyO/BNx7VjUMVO3iLg7b1jOMmU LUg3jBVoqD9mlUq75kll3SyEkyfJl5Cz+xUbCByp+foe9dFSHtGmnue0DDlxp8pi KZOvoThT8xlilo9pOTweqxH3AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUlxrMYCAR +yIPff0wYlH8IFYX1xEwHwYDVR0jBBgwFoAUZw46BnIWhKtHO7vlzCLPBdAkv20w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBRTBBL0RBRjZENzM2Qjcy MjExRUZCQzM2QTc0OEM0RjlBRTAyL1p3NDZCbklXaEt0SE83dmx6Q0xQQmRBa3Yy MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvWnc0NkJuSVdoS3RITzd2bHpDTFBCZEFrdjIwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QUUwQS9EQUY2RDczNkI3MjIxMUVGQkMzNkE3NDhDNEY5QUUwMi9DNDkxRUQ3MjVB N0ExMUYwODNCM0Y4ODVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaD6xDANBgkqhkiG9w0BAQsFAAOCAQEAgFS8ez5z6Sx4VxHi 9QVnZ8Pkb5/ohTjCqr6XhIfm4RChzQZvuxo922CaCu3BsNs2hrwf+McJT+ogbp9+ 8hFIQLeK2wmCgTjCkRTvJ1Cre1xObsfuP/9KTyDNk2WDcPp1BmiHevXED5LMTndd P/Mt8wz1+AYNjfUk+h1Gsl4tAtdj08H8D0Q9ZbevS7U9FlTIhgwdPyJv2v/HC8yb 8MIYwXCdbKdthhc1Xgv88HELg2mfPujkSKZlsrtzttr0tNda4M3PT6JxNmO2O5bs 4IUeO6/bOK4DHRHPHiOrCLXSjFLx11Ug8IHIok6mLdp8XfY1i04luHyjsLjEWFCE JKxRqQ== -----END CERTIFICATE-----Generated at Mon Jul 21 18:31:41 2025 by rpki-client