$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/4776F9120CCE11F0A08AA749C4F9AE02.roa File: 4776F9120CCE11F0A08AA749C4F9AE02.roa (raw, json) Hash identifier: VlGCrM3drX5CqJ0PsOFfcqqGKkwf8UbZCTA7SKqIpGI= Subject key identifier: 1C:4A:1C:F5:2E:10:3A:55:1C:2C:86:40:97:49:7F:37:92:A4:66:5D Certificate issuer: /CN=A91FBEFA/serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Certificate serial: 3A Authority key identifier: 17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/4776F9120CCE11F0A08AA749C4F9AE02.roa Signing time: Wed 09 Jul 2025 08:44:12 +0000 ROA not before: Wed 09 Jul 2025 08:44:12 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 152901 IP address blocks: 160.22.76.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 07:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58 (0x3a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FBEFA, serialNumber=173C26A086E85B8FDB917AA8D911E1C00AB6A3A1 Validity Not Before: Jul 9 08:44:12 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=686e2bdc-d157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d5:46:92:9e:bc:0c:ff:44:c5:6c:62:ef:f5: 89:5f:df:66:34:2e:64:a9:25:0d:ad:14:4b:fc:e1: 21:b4:cc:be:45:22:27:91:44:a7:71:68:1e:49:71: 4e:c2:a7:e9:90:46:e7:52:8b:ae:21:95:a0:53:71: c9:38:94:8f:48:4c:32:8f:e1:5d:c5:65:64:a2:df: d3:0e:a6:dc:13:11:9e:92:be:58:9e:17:04:de:ff: 4d:76:37:87:86:65:ca:39:5d:f5:e5:8d:d9:59:19: 23:fc:fc:6a:62:e1:d1:64:8c:4c:1d:6d:d5:cb:e0: 49:57:54:47:1f:28:1b:ed:8b:b8:d8:20:9a:77:0f: 8f:f7:11:e6:43:39:23:ba:2f:25:6c:b3:5e:78:cb: 4c:d8:de:60:75:bb:55:80:64:86:a0:f8:63:1e:32: ac:0e:db:77:51:21:da:23:8a:80:0b:6f:93:cf:98: 9b:44:bd:d7:ef:be:03:5c:2e:05:f9:eb:46:cc:50: 6a:a1:3c:9c:54:73:f2:3f:e5:81:11:b5:d3:f8:9b: 85:58:c3:ac:db:4a:00:12:9e:87:6e:b7:2b:09:e8: 6e:d9:ee:af:71:61:cf:33:8b:73:02:da:a4:63:b2: 0a:9f:b7:a4:a2:78:96:b1:92:13:dc:71:69:53:1b: 2c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4A:1C:F5:2E:10:3A:55:1C:2C:86:40:97:49:7F:37:92:A4:66:5D X509v3 Authority Key Identifier: keyid:17:3C:26:A0:86:E8:5B:8F:DB:91:7A:A8:D9:11:E1:C0:0A:B6:A3:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/FzwmoIboW4_bkXqo2RHhwAq2o6E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/FzwmoIboW4_bkXqo2RHhwAq2o6E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBEFA/0DA506CC0B3711F08C239863C4F9AE02/4776F9120CCE11F0A08AA749C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.76.0/23 Signature Algorithm: sha256WithRSAEncryption 58:4c:03:94:03:46:5a:cc:11:f5:27:8d:c3:5e:f4:c8:68:d4: de:8b:51:5a:41:5b:8d:87:cc:bb:4a:1c:06:ec:80:3a:7d:20: 1e:04:e8:59:92:fd:dc:af:62:8b:0a:bf:2b:8c:45:f7:4c:8c: 34:a4:d7:06:92:89:c4:ec:3a:75:16:e6:4b:9a:08:e0:46:70: 9c:7d:1c:3b:18:32:6d:65:cb:b3:1a:9d:cc:18:c3:58:3d:46: a9:ae:98:47:00:32:21:df:19:ce:fb:1b:57:61:58:6a:44:08: 57:f5:3f:68:bc:78:92:c8:6e:47:2f:e9:e2:19:8d:ba:16:f8: 54:af:f2:d6:b8:20:21:bc:0c:dc:98:da:0b:77:91:4a:19:f4: 03:ac:64:30:7f:a9:ae:08:42:25:4b:71:14:0e:9c:22:7f:77: b2:da:c4:61:e5:ec:b5:c5:87:16:22:c0:45:6a:40:a3:2e:e2: 67:29:1d:75:74:08:72:45:5b:9e:bb:69:5d:1a:20:a6:bb:91: 05:15:7e:93:50:91:b1:d9:b8:18:4d:9a:ef:27:a9:35:6d:29: 18:66:86:57:5e:ab:55:4d:f4:7b:5c:dd:55:9b:3f:48:33:32: 3c:9d:6f:72:0c:6c:1c:bf:c1:ad:71:49:41:21:98:3c:29:8d: 72:ad:f7:50 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBOjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG QkVGQTExMC8GA1UEBRMoMTczQzI2QTA4NkU4NUI4RkRCOTE3QUE4RDkxMUUxQzAw QUI2QTNBMTAeFw0yNTA3MDkwODQ0MTJaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NmUyYmRjLWQxNTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDk1UaSnrwM/0TFbGLv9Ylf32Y0LmSpJQ2tFEv84SG0zL5FIieRRKdxaB5JcU7C p+mQRudSi64hlaBTcck4lI9ITDKP4V3FZWSi39MOptwTEZ6SvlieFwTe/012N4eG Zco5XfXljdlZGSP8/Gpi4dFkjEwdbdXL4ElXVEcfKBvti7jYIJp3D4/3EeZDOSO6 LyVss154y0zY3mB1u1WAZIag+GMeMqwO23dRIdojioALb5PPmJtEvdfvvgNcLgX5 60bMUGqhPJxUc/I/5YERtdP4m4VYw6zbSgASnodutysJ6G7Z7q9xYc8zi3MC2qRj sgqft6SieJaxkhPccWlTGyxNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUHEoc9S4Q OlUcLIZAl0l/N5KkZl0wHwYDVR0jBBgwFoAUFzwmoIboW4/bkXqo2RHhwAq2o6Ew DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZCRUZBLzBEQTUwNkNDMEIz NzExRjA4QzIzOTg2M0M0RjlBRTAyL0Z6d21vSWJvVzRfYmtYcW8yUkhod0FxMm82 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRnp3bW9JYm9XNF9ia1hxbzJSSGh3QXEybzZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG QkVGQS8wREE1MDZDQzBCMzcxMUYwOEMyMzk4NjNDNEY5QUUwMi80Nzc2RjkxMjBD Q0UxMUYwQTA4QUE3NDlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaAWTDANBgkqhkiG9w0BAQsFAAOCAQEAWEwDlANGWswR9SeN w170yGjU3otRWkFbjYfMu0ocBuyAOn0gHgToWZL93K9iiwq/K4xF90yMNKTXBpKJ xOw6dRbmS5oI4EZwnH0cOxgybWXLsxqdzBjDWD1Gqa6YRwAyId8ZzvsbV2FYakQI V/U/aLx4kshuRy/p4hmNuhb4VK/y1rggIbwM3JjaC3eRShn0A6xkMH+prghCJUtx FA6cIn93strEYeXstcWHFiLARWpAoy7iZykddXQIckVbnrtpXRogpruRBRV+k1CR sdm4GE2a7yepNW0pGGaGV16rVU30e1zdVZs/SDMyPJ1vcgxsHL/BrXFJQSGYPCmN cq33UA== -----END CERTIFICATE-----Generated at Mon Jul 21 12:54:50 2025 by rpki-client