$ rpki-client -vvf rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/8CF832322C6C11EFB50AD22EC4F9AE02.roa File: 8CF832322C6C11EFB50AD22EC4F9AE02.roa (raw, json) Hash identifier: 2CA+qteNBX78NJxTKhwS/FKIzkSLCeJanQWnrGhStgI= Subject key identifier: 4E:14:54:8A:D4:40:8D:E2:20:71:6E:51:9F:17:A4:6F:81:AF:92:9C Certificate issuer: /CN=A913AE23/serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE Certificate serial: F0 Authority key identifier: 41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/8CF832322C6C11EFB50AD22EC4F9AE02.roa Signing time: Tue 09 Sep 2025 05:42:19 +0000 ROA not before: Tue 09 Sep 2025 05:42:19 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 138933 IP address blocks: 160.22.164.0/23 maxlen: 23 160.22.164.0/24 maxlen: 24 160.22.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 05:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 240 (0xf0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913AE23, serialNumber=41E1EC17DE7BA70F8C12417769637702372519DE Validity Not Before: Sep 9 05:42:19 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68bfbe3b-2f8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1b:cd:8c:ad:22:ac:2b:0a:2d:71:f8:7e:21: 75:fd:da:98:d9:f8:13:14:f6:79:db:ed:22:ae:b6: b1:63:1b:f5:eb:4a:65:3b:bd:de:14:1f:b0:f7:dd: 6a:68:21:c2:67:82:d2:e2:06:80:7e:3c:0f:4d:36: 79:63:54:0e:05:88:e2:40:d7:30:9f:b7:e5:9f:78: cf:a6:7a:1c:e0:1e:22:84:07:7f:e8:57:17:2a:0d: d9:72:82:97:57:33:36:32:b7:9a:ee:90:a7:94:82: 8a:52:bc:3c:2e:50:da:65:4e:eb:c9:3b:a5:77:54: 68:59:dc:3e:ee:c1:aa:9a:da:af:a7:70:7b:27:bf: 33:a4:c2:9e:9a:13:75:88:b2:02:14:fb:d8:4b:b5: 74:df:b2:0c:ac:39:ad:5e:ee:ad:0f:ad:89:4c:12: 9d:96:52:b4:6c:3b:e2:a8:9e:59:c2:e4:5c:f7:83: 5e:38:86:21:29:72:b5:a5:1d:e9:fc:42:ef:e1:2e: 6f:d2:d7:3c:f2:64:d3:da:c2:54:c4:3e:51:bc:87: 4a:9f:26:a5:c1:44:6b:25:7a:63:2e:a7:18:e6:eb: b4:54:f4:61:20:af:92:a2:67:c0:8e:64:9e:3d:44: b9:63:24:85:0a:98:a7:14:a4:df:86:d3:90:33:3e: 88:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:14:54:8A:D4:40:8D:E2:20:71:6E:51:9F:17:A4:6F:81:AF:92:9C X509v3 Authority Key Identifier: keyid:41:E1:EC:17:DE:7B:A7:0F:8C:12:41:77:69:63:77:02:37:25:19:DE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/QeHsF957pw-MEkF3aWN3AjclGd4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QeHsF957pw-MEkF3aWN3AjclGd4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AE23/301A1E4A2C6C11EFA346942DC4F9AE02/8CF832322C6C11EFB50AD22EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.164.0/23 Signature Algorithm: sha256WithRSAEncryption 09:d6:16:b3:72:41:fe:c5:d3:2d:30:fe:cd:e2:4b:9f:d9:ac: ba:1c:2a:dc:95:ab:9f:d9:04:fc:ad:cb:85:66:bd:07:9f:cb: df:44:19:c6:ea:8f:f3:5f:07:ac:49:fa:4a:94:fd:da:d6:53: 20:43:fc:0e:da:45:69:3f:09:5d:e8:8c:14:6c:6a:5c:e2:06: ed:b7:e2:4f:13:39:81:3c:36:0e:50:ed:2a:cd:74:e7:f0:7e: af:ec:63:c6:d7:cb:40:25:4b:d3:a3:fe:ce:10:53:58:1f:46: 1b:8c:24:af:06:ae:44:e4:e8:b0:76:e9:1b:e0:9c:40:8f:b5: d1:67:09:07:6c:cc:01:9a:49:c4:41:58:6c:61:75:fe:be:85: d5:2f:e0:bc:ac:1f:b3:49:43:1f:03:66:3c:07:5d:26:c4:7f: 4b:c9:2f:ec:54:44:ff:e1:4a:cd:79:e7:c8:1b:2c:cb:7e:8b: 6e:3f:11:72:f3:01:43:61:5a:c5:b8:36:e0:12:a7:29:98:7b: 94:73:2f:6b:a0:54:e9:12:8d:2c:2f:dc:18:7e:01:4e:e6:4b: bd:92:d6:09:57:d5:c7:ce:a7:2b:b4:86:0a:07:f1:73:f0:e2: f7:2c:cc:71:b8:a8:27:9f:17:29:c1:31:1d:cf:18:e6:6d:f9: 0d:1c:29:56 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0FFMjMxMTAvBgNVBAUTKDQxRTFFQzE3REU3QkE3MEY4QzEyNDE3NzY5NjM3NzAy MzcyNTE5REUwHhcNMjUwOTA5MDU0MjE5WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJmYmUzYi0yZjhlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvBvNjK0irCsKLXH4fiF1/dqY2fgTFPZ52+0irraxYxv160plO73eFB+w991q aCHCZ4LS4gaAfjwPTTZ5Y1QOBYjiQNcwn7fln3jPpnoc4B4ihAd/6FcXKg3ZcoKX VzM2Mrea7pCnlIKKUrw8LlDaZU7ryTuld1RoWdw+7sGqmtqvp3B7J78zpMKemhN1 iLICFPvYS7V037IMrDmtXu6tD62JTBKdllK0bDviqJ5ZwuRc94NeOIYhKXK1pR3p /ELv4S5v0tc88mTT2sJUxD5RvIdKnyalwURrJXpjLqcY5uu0VPRhIK+SomfAjmSe PUS5YySFCpinFKTfhtOQMz6IEQIDAQABo4IClTCCApEwHQYDVR0OBBYEFE4UVIrU QI3iIHFuUZ8XpG+Br5KcMB8GA1UdIwQYMBaAFEHh7Bfee6cPjBJBd2ljdwI3JRne MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUUyMy8zMDFBMUU0QTJD NkMxMUVGQTM0Njk0MkRDNEY5QUUwMi9RZUhzRjk1N3B3LU1Fa0YzYVdOM0FqY2xH ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FlSHNGOTU3cHctTUVrRjNhV04zQWpjbEdkNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0FFMjMvMzAxQTFFNEEyQzZDMTFFRkEzNDY5NDJEQzRGOUFFMDIvOENGODMyMzIy QzZDMTFFRkI1MEFEMjJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFqQwDQYJKoZIhvcNAQELBQADggEBAAnWFrNyQf7F0y0w /s3iS5/ZrLocKtyVq5/ZBPyty4VmvQefy99EGcbqj/NfB6xJ+kqU/drWUyBD/A7a RWk/CV3ojBRsalziBu234k8TOYE8Ng5Q7SrNdOfwfq/sY8bXy0AlS9Oj/s4QU1gf RhuMJK8GrkTk6LB26RvgnECPtdFnCQdszAGaScRBWGxhdf6+hdUv4LysH7NJQx8D ZjwHXSbEf0vJL+xURP/hSs1558gbLMt+i24/EXLzAUNhWsW4NuASpymYe5RzL2ug VOkSjSwv3Bh+AU7mS72S1glX1cfOpyu0hgoH8XPw4vcszHG4qCefFynBMR3PGOZt +Q0cKVY= -----END CERTIFICATE-----Generated at Wed Nov 5 05:15:07 2025 by rpki-client