$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/B4F165084F1F11EFA3B1F709C4F9AE02.roa File: B4F165084F1F11EFA3B1F709C4F9AE02.roa (raw, json) Hash identifier: xO1XkrdPpnztC/DOvp1GxSfrdBEGr7OLmqMg43hzTY8= Subject key identifier: ED:2A:9D:F4:79:A1:01:56:02:02:02:42:E4:31:BD:9E:50:35:61:A1 Certificate issuer: /CN=A91EF17A/serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Certificate serial: 0153 Authority key identifier: B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/B4F165084F1F11EFA3B1F709C4F9AE02.roa Signing time: Mon 02 Mar 2026 13:45:26 +0000 ROA not before: Sat 21 Jun 2025 05:14:50 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 63526 IP address blocks: 160.22.20.0/23 maxlen: 23 160.22.20.0/24 maxlen: 24 160.22.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Mar 2026 05:01:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 339 (0x153) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF17A, serialNumber=B3EFA7D6AE199D14582DD4ECB9163A3C9D841759 Validity Not Before: Jun 21 05:14:50 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=69a59476-762f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5e:80:97:06:22:94:23:cd:4d:88:7f:6f:fb: aa:7b:dd:98:07:3f:da:03:59:f7:70:f8:aa:e8:05: 39:02:01:64:a0:b5:87:90:33:80:c3:de:b7:e6:6c: 11:78:7d:34:5b:d1:61:c1:94:05:ec:dd:fb:15:63: 83:16:f6:61:49:1b:80:78:56:2b:ab:ce:db:d2:8a: 6c:06:19:d6:04:2c:a6:ae:db:45:31:4d:9a:85:9f: 98:d0:f7:43:c3:b0:17:92:95:29:0b:fb:12:1c:83: 53:16:a2:f0:43:be:dd:40:38:64:6e:d4:a0:6f:f8: 1b:0e:43:d4:d2:35:d4:08:14:c9:9d:b1:91:86:64: 9b:05:c3:39:c4:7f:61:11:b3:a7:f1:fe:b7:fe:a1: 09:18:cc:6c:ad:8c:89:86:24:e3:28:23:48:ca:ee: 36:ba:f0:9c:8a:aa:60:c0:48:78:3e:6c:b6:8c:f1: d0:f1:0b:e7:5f:7d:ac:61:2b:9a:0b:9c:c3:85:4b: f9:4d:47:f3:5b:86:f6:e6:e3:00:ff:4d:b2:01:24: 9a:74:81:41:67:b0:a9:de:75:a9:43:5a:d8:65:87: 7c:c4:3f:af:d5:53:c5:ed:bf:f4:82:aa:e5:5d:a9: 32:e8:dc:12:ea:44:41:2b:c1:9b:27:17:99:69:75: af:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:2A:9D:F4:79:A1:01:56:02:02:02:42:E4:31:BD:9E:50:35:61:A1 X509v3 Authority Key Identifier: keyid:B3:EF:A7:D6:AE:19:9D:14:58:2D:D4:EC:B9:16:3A:3C:9D:84:17:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/s--n1q4ZnRRYLdTsuRY6PJ2EF1k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF17A/74BB24D23F5D11EF8BF7860EC4F9AE02/B4F165084F1F11EFA3B1F709C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 160.22.20.0/23 Signature Algorithm: sha256WithRSAEncryption ac:f9:98:04:09:87:a8:45:12:da:86:fe:41:56:32:84:15:9a: 0d:c7:15:16:b7:65:cc:ae:98:66:d4:82:dd:22:47:82:be:c2: 0b:2d:ec:c1:70:74:9c:75:c1:e2:bb:6a:9f:55:6e:b0:e1:8e: c5:ab:00:e8:19:fd:24:a1:93:34:5d:1e:c1:a4:55:29:68:c9: 4a:12:b1:4b:e5:b0:74:bc:12:7e:ef:3c:12:d2:3a:bc:2f:aa: 6f:af:4a:58:f3:de:62:da:8e:11:73:ca:28:83:69:a4:1d:5f: 27:12:4a:d8:ce:e0:60:2d:a7:5a:37:ab:14:19:f9:19:1a:f3: 98:14:d5:30:e5:c6:c1:b9:b3:a5:2f:3f:b9:0e:6f:26:2e:52: a1:d8:c4:42:d2:59:97:49:f0:db:51:f6:ca:c8:40:83:f9:ba: 89:fc:4b:7d:be:15:54:26:9d:0c:3c:04:10:b9:11:6d:94:c3: 0f:56:8f:ed:71:c5:c6:83:a9:7f:cc:75:29:cb:f0:d2:16:56: 50:d0:ec:aa:56:fd:8a:c2:08:4f:dd:82:d0:10:41:dc:52:21: d9:d5:99:f6:05:28:1c:ea:01:77:19:2c:8f:ad:ea:3f:34:17: f0:92:83:94:62:cf:27:11:f3:0f:45:b9:d4:61:19:1c:a3:36: 7c:8f:5f:71 -----BEGIN CERTIFICATE----- MIIFPDCCBCSgAwIBAgICAVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxN0ExMTAvBgNVBAUTKEIzRUZBN0Q2QUUxOTlEMTQ1ODJERDRFQ0I5MTYzQTND OUQ4NDE3NTkwHhcNMjUwNjIxMDUxNDUwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OWE1OTQ3Ni03NjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz16AlwYilCPNTYh/b/uqe92YBz/aA1n3cPiq6AU5AgFkoLWHkDOAw9635mwR eH00W9FhwZQF7N37FWODFvZhSRuAeFYrq87b0opsBhnWBCymrttFMU2ahZ+Y0PdD w7AXkpUpC/sSHINTFqLwQ77dQDhkbtSgb/gbDkPU0jXUCBTJnbGRhmSbBcM5xH9h EbOn8f63/qEJGMxsrYyJhiTjKCNIyu42uvCciqpgwEh4Pmy2jPHQ8QvnX32sYSua C5zDhUv5TUfzW4b25uMA/02yASSadIFBZ7Cp3nWpQ1rYZYd8xD+v1VPF7b/0gqrl Xaky6NwS6kRBK8GbJxeZaXWvVwIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFO0qnfR5 oQFWAgICQuQxvZ5QNWGhMB8GA1UdIwQYMBaAFLPvp9auGZ0UWC3U7LkWOjydhBdZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE3QS83NEJCMjREMjNG NUQxMUVGOEJGNzg2MEVDNEY5QUUwMi9zLS1uMXE0Wm5SUllMZFRzdVJZNlBKMkVG MWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3MtLW4xcTRablJSWUxkVHN1Ulk2UEoyRUYxay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUYxN0EvNzRCQjI0RDIzRjVEMTFFRjhCRjc4NjBFQzRGOUFFMDIvQjRGMTY1MDg0 RjFGMTFFRkEzQjFGNzA5QzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM BAIAATAGAwQBoBYUMA0GCSqGSIb3DQEBCwUAA4IBAQCs+ZgECYeoRRLahv5BVjKE FZoNxxUWt2XMrphm1ILdIkeCvsILLezBcHScdcHiu2qfVW6w4Y7FqwDoGf0koZM0 XR7BpFUpaMlKErFL5bB0vBJ+7zwS0jq8L6pvr0pY895i2o4Rc8oog2mkHV8nEkrY zuBgLadaN6sUGfkZGvOYFNUw5cbBubOlLz+5Dm8mLlKh2MRC0lmXSfDbUfbKyECD +bqJ/Et9vhVUJp0MPAQQuRFtlMMPVo/tccXGg6l/zHUpy/DSFlZQ0OyqVv2KwghP 3YLQEEHcUiHZ1Zn2BSgc6gF3GSyPreo/NBfwkoOUYs8nEfMPRbnUYRkcozZ8j19x -----END CERTIFICATE-----Generated at Wed Mar 4 10:08:49 2026 by rpki-client