$ rpki-client -vvf rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/8166BCA00DDE11F08B418913C4F9AE02.roa File: 8166BCA00DDE11F08B418913C4F9AE02.roa (raw, json) Hash identifier: Xd4XVCgGXpnGCjRPBoizNX4J7SO3Da0H5CJ+z1vlOTY= Subject key identifier: 3C:C5:7F:51:63:24:D8:DB:D8:AD:53:3B:C0:F7:74:76:33:39:F3:4B Certificate issuer: /CN=A9134B4A/serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B Certificate serial: 9B Authority key identifier: 3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/8166BCA00DDE11F08B418913C4F9AE02.roa Signing time: Mon 31 Mar 2025 03:16:16 +0000 ROA not before: Mon 31 Mar 2025 03:16:15 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 23470 IP address blocks: 160.22.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:13:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 155 (0x9b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134B4A, serialNumber=3C3587DC3AF2E937ECDB65A83892759A41C8850B Validity Not Before: Mar 31 03:16:15 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67ea08ff-c56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:55:53:d6:c8:18:cf:dc:38:6d:a6:16:1d:97: 0b:91:9b:11:73:25:14:13:ff:20:26:5d:de:65:4b: 54:f0:d9:e3:c9:da:ad:59:ea:27:65:62:c6:10:c7: 22:00:a9:50:a2:9d:bb:bc:8d:1d:f8:aa:c6:0f:44: eb:c1:02:83:3e:24:18:9e:bf:e1:d8:1c:6f:58:4e: 6d:38:f7:be:39:c4:4a:06:69:91:58:e4:74:d4:7b: 13:2a:25:f8:fe:57:33:91:16:26:64:4c:f3:f8:73: 6b:47:43:51:5a:8b:18:e8:15:ed:f2:9e:6b:11:d9: d1:61:17:c0:12:79:ac:3f:05:27:1f:a2:d2:d5:44: 21:61:b0:59:74:ad:31:89:0e:31:35:03:78:52:d0: fb:26:36:e3:76:97:e8:2f:a8:ae:fe:b5:ce:86:37: 4f:d6:40:d4:f1:2b:82:92:e8:6b:96:a6:22:bb:8e: ff:1d:e6:ee:d6:1f:65:a0:c7:c3:7e:ef:48:87:1a: 63:bf:14:1f:29:e7:1b:27:e3:48:25:42:2d:16:ed: 11:a5:e9:21:c8:78:56:d3:23:57:10:bc:b8:96:ae: 35:51:ee:b1:cd:d4:b8:64:12:ef:9e:66:5d:eb:8d: f2:23:1f:e5:0c:bd:b8:76:37:e7:9c:e4:a8:9f:77: 67:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:C5:7F:51:63:24:D8:DB:D8:AD:53:3B:C0:F7:74:76:33:39:F3:4B X509v3 Authority Key Identifier: keyid:3C:35:87:DC:3A:F2:E9:37:EC:DB:65:A8:38:92:75:9A:41:C8:85:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PDWH3Dry6Tfs22WoOJJ1mkHIhQs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134B4A/E26499A22F8911EFA3D04A6BC4F9AE02/8166BCA00DDE11F08B418913C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.143.0/24 Signature Algorithm: sha256WithRSAEncryption 5f:1b:44:34:0b:c7:fd:10:c7:30:79:6d:2f:4d:7b:0c:87:fa: 14:c9:36:5d:22:ee:2d:95:8f:da:0c:8c:ce:15:0b:8e:02:44: 8f:de:c9:67:5a:ad:ec:2f:1b:e5:10:3a:52:e6:29:aa:c6:80: 79:c5:bd:5c:cd:11:51:00:c6:52:0c:1c:5a:57:e9:2d:db:7a: 71:67:bc:a6:06:b1:ba:88:b2:e2:c6:50:96:b3:16:0b:6f:c4: 1f:c5:d6:34:a6:49:5f:28:58:28:76:d4:99:b7:2d:e2:4d:70: c1:ec:87:76:a7:f7:ee:bb:26:81:73:8f:7b:8f:1f:1b:a7:be: 02:7d:83:6b:33:59:0f:54:c9:2d:d3:9c:74:18:e6:2d:6f:f5: 9f:1d:c9:bd:39:68:12:55:db:94:24:60:84:f3:01:b8:d5:2c: f1:17:d7:a1:dd:03:6b:f3:2a:6a:50:fb:0b:f3:9e:87:ca:b4: 3f:2e:f9:9f:5c:c3:66:95:29:10:b8:4b:7f:5a:28:7c:2b:1d: 63:28:c7:ff:51:8f:9f:88:3d:8a:ac:7b:5d:12:ba:fa:1f:14: d9:54:99:93:a3:cc:f1:8c:c9:76:79:bc:4d:9c:82:c2:18:36: be:f7:05:2c:76:f8:ae:25:1b:0b:ac:5d:9d:d4:59:5a:0a:52: 11:ae:ee:b6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAJswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRCNEExMTAvBgNVBAUTKDNDMzU4N0RDM0FGMkU5MzdFQ0RCNjVBODM4OTI3NTlB NDFDODg1MEIwHhcNMjUwMzMxMDMxNjE1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhMDhmZi1jNTZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVVT1sgYz9w4baYWHZcLkZsRcyUUE/8gJl3eZUtU8NnjydqtWeonZWLGEMci AKlQop27vI0d+KrGD0TrwQKDPiQYnr/h2BxvWE5tOPe+OcRKBmmRWOR01HsTKiX4 /lczkRYmZEzz+HNrR0NRWosY6BXt8p5rEdnRYRfAEnmsPwUnH6LS1UQhYbBZdK0x iQ4xNQN4UtD7JjbjdpfoL6iu/rXOhjdP1kDU8SuCkuhrlqYiu47/Hebu1h9loMfD fu9IhxpjvxQfKecbJ+NIJUItFu0RpekhyHhW0yNXELy4lq41Ue6xzdS4ZBLvnmZd 643yIx/lDL24djfnnOSon3dnZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDzFf1Fj JNjb2K1TO8D3dHYzOfNLMB8GA1UdIwQYMBaAFDw1h9w68uk37NtlqDiSdZpByIUL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNEI0QS9FMjY0OTlBMjJG ODkxMUVGQTNEMDRBNkJDNEY5QUUwMi9QRFdIM0RyeTZUZnMyMldvT0pKMW1rSElo UXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1BEV0gzRHJ5NlRmczIyV29PSkoxbWtISWhRcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzRCNEEvRTI2NDk5QTIyRjg5MTFFRkEzRDA0QTZCQzRGOUFFMDIvODE2NkJDQTAw RERFMTFGMDhCNDE4OTEzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFo8wDQYJKoZIhvcNAQELBQADggEBAF8bRDQLx/0QxzB5 bS9NewyH+hTJNl0i7i2Vj9oMjM4VC44CRI/eyWdarewvG+UQOlLmKarGgHnFvVzN EVEAxlIMHFpX6S3benFnvKYGsbqIsuLGUJazFgtvxB/F1jSmSV8oWCh21Jm3LeJN cMHsh3an9+67JoFzj3uPHxunvgJ9g2szWQ9UyS3TnHQY5i1v9Z8dyb05aBJV25Qk YITzAbjVLPEX16HdA2vzKmpQ+wvznofKtD8u+Z9cw2aVKRC4S39aKHwrHWMox/9R j5+IPYqse10SuvofFNlUmZOjzPGMyXZ5vE2cgsIYNr73BSx2+K4lGwusXZ3UWVoK UhGu7rY= -----END CERTIFICATE-----Generated at Sat Apr 26 14:08:36 2025 by rpki-client