$ rpki-client -vvf rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/5895821AB62611ECB410C81DC4F9AE02.roa File: 5895821AB62611ECB410C81DC4F9AE02.roa (raw, json) Hash identifier: hC/jX3h+m4kRJTL+3r4qE/OapWO5r8a4N2e8hzVBff0= Subject key identifier: 4C:CB:98:D2:26:DF:1D:1C:90:06:B1:CB:7B:95:BB:40:1E:38:7C:95 Certificate issuer: /CN=A917ACF1/serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Certificate serial: 0372 Authority key identifier: EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/5895821AB62611ECB410C81DC4F9AE02.roa Signing time: Wed 19 Mar 2025 01:16:45 +0000 ROA not before: Wed 19 Mar 2025 01:16:45 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 7582 IP address blocks: 161.64.0.0/16 maxlen: 17 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 00:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 882 (0x372) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917ACF1, serialNumber=EC84D60F796BF416F8F81D18BADA2FFF87C15F26 Validity Not Before: Mar 19 01:16:45 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67da1afd-c933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a5:bd:0e:ad:d1:1f:d5:b3:d4:3a:c1:7e:47: 0c:b8:2d:e9:a5:53:04:e9:9e:05:ee:9c:05:ad:7e: 09:73:93:df:25:1e:4c:5e:e0:c7:12:85:69:7f:64: ed:f9:06:4d:53:26:5f:28:dd:2c:5e:27:08:9b:bd: 01:d5:c2:4c:ea:79:95:34:1b:f1:1b:77:52:da:34: 27:93:6c:8c:34:92:57:e1:fa:50:eb:40:49:31:a7: 7f:1b:ef:1f:64:cc:a9:ab:92:dc:e3:c1:fb:03:a6: 38:bf:57:b9:d4:f6:7c:aa:e5:8d:6c:8b:ca:90:c4: 33:ca:28:c1:db:88:0d:96:47:b0:74:bd:80:09:0f: fb:b1:c6:75:7c:92:7b:08:23:f6:70:25:1a:64:3a: 55:2f:70:5d:27:b2:00:79:af:73:4e:dd:66:92:80: 91:4a:47:27:a7:3f:91:0d:92:16:f1:e5:7a:79:d7: 46:94:04:07:df:1f:2c:47:16:35:eb:a0:a9:87:6a: f6:c0:e1:f8:62:dc:aa:78:d1:be:73:66:c8:60:c0: 7f:18:2f:45:2d:86:b9:9a:38:52:21:b9:41:6f:d5: 71:3f:0f:44:63:13:3d:39:a6:4c:7e:ac:81:9b:ab: e3:0b:70:30:5b:5d:1d:aa:7e:7d:59:9a:d9:8c:a4: f6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:CB:98:D2:26:DF:1D:1C:90:06:B1:CB:7B:95:BB:40:1E:38:7C:95 X509v3 Authority Key Identifier: keyid:EC:84:D6:0F:79:6B:F4:16:F8:F8:1D:18:BA:DA:2F:FF:87:C1:5F:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/7ITWD3lr9Bb4-B0Yutov_4fBXyY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/7ITWD3lr9Bb4-B0Yutov_4fBXyY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ACF1/86835506A03911EC8A1F1C23C4F9AE02/5895821AB62611ECB410C81DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.64.0.0/16 Signature Algorithm: sha256WithRSAEncryption 89:4d:0e:a3:77:4e:ac:a2:98:ec:8f:97:84:e7:47:f0:6e:5a: 47:cc:72:86:90:e3:e9:81:8e:5a:a1:b5:66:d9:08:39:5c:20: 04:f5:96:ad:f6:59:21:11:4e:4b:53:28:4d:4b:45:c3:aa:15: 62:95:1d:4a:72:f3:78:eb:8a:85:bb:f4:01:8c:ce:91:be:c8: 0c:87:74:28:15:01:52:20:32:87:d2:2f:87:32:e7:f7:20:b6: a7:26:3c:15:04:9d:5c:88:ba:86:eb:a3:2f:78:af:d6:7c:1c: 88:9d:b7:2b:64:2b:c4:b6:ed:59:d5:55:c0:27:50:96:12:02: d0:71:50:5d:60:70:59:ff:5c:56:f5:c6:b3:b6:88:3a:7a:8d: 46:55:25:d8:6b:2e:1b:86:58:af:11:15:26:36:a5:b4:62:7f: 40:22:2d:5a:d1:f1:ad:56:fe:3e:76:c1:c9:b3:b7:e6:56:42: 04:51:69:51:ea:50:50:28:63:08:03:d5:93:71:cd:cd:a6:83: 88:33:15:78:fb:d3:96:a5:b6:cd:3f:38:49:2e:84:2e:05:1f: 22:34:49:d8:10:aa:0a:3d:a5:4f:c8:3d:5d:3d:36:94:9c:2c: 6e:09:30:f3:95:c2:02:68:4c:ce:44:81:aa:d7:ac:54:8c:2b: 05:4a:dc:ae -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICA3IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx N0FDRjExMTAvBgNVBAUTKEVDODRENjBGNzk2QkY0MTZGOEY4MUQxOEJBREEyRkZG ODdDMTVGMjYwHhcNMjUwMzE5MDExNjQ1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RhMWFmZC1jOTMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwqW9Dq3RH9Wz1DrBfkcMuC3ppVME6Z4F7pwFrX4Jc5PfJR5MXuDHEoVpf2Tt +QZNUyZfKN0sXicIm70B1cJM6nmVNBvxG3dS2jQnk2yMNJJX4fpQ60BJMad/G+8f ZMypq5Lc48H7A6Y4v1e51PZ8quWNbIvKkMQzyijB24gNlkewdL2ACQ/7scZ1fJJ7 CCP2cCUaZDpVL3BdJ7IAea9zTt1mkoCRSkcnpz+RDZIW8eV6eddGlAQH3x8sRxY1 66Cph2r2wOH4YtyqeNG+c2bIYMB/GC9FLYa5mjhSIblBb9VxPw9EYxM9OaZMfqyB m6vjC3AwW10dqn59WZrZjKT25wIDAQABo4IClDCCApAwHQYDVR0OBBYEFEzLmNIm 3x0ckAaxy3uVu0AeOHyVMB8GA1UdIwQYMBaAFOyE1g95a/QW+PgdGLraL/+HwV8m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3QUNGMS84NjgzNTUwNkEw MzkxMUVDOEExRjFDMjNDNEY5QUUwMi83SVRXRDNscjlCYjQtQjBZdXRvdl80ZkJY eVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzdJVFdEM2xyOUJiNC1CMFl1dG92XzRmQlh5WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx N0FDRjEvODY4MzU1MDZBMDM5MTFFQzhBMUYxQzIzQzRGOUFFMDIvNTg5NTgyMUFC NjI2MTFFQ0I0MTBDODFEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwChQDANBgkqhkiG9w0BAQsFAAOCAQEAiU0Oo3dOrKKY7I+X hOdH8G5aR8xyhpDj6YGOWqG1ZtkIOVwgBPWWrfZZIRFOS1MoTUtFw6oVYpUdSnLz eOuKhbv0AYzOkb7IDId0KBUBUiAyh9IvhzLn9yC2pyY8FQSdXIi6huujL3iv1nwc iJ23K2QrxLbtWdVVwCdQlhIC0HFQXWBwWf9cVvXGs7aIOnqNRlUl2GsuG4ZYrxEV JjaltGJ/QCItWtHxrVb+PnbBybO35lZCBFFpUepQUChjCAPVk3HNzaaDiDMVePvT lqW2zT84SS6ELgUfIjRJ2BCqCj2lT8g9XT02lJwsbgkw85XCAmhMzkSBqtesVIwr BUrcrg== -----END CERTIFICATE-----Generated at Tue Nov 4 21:35:10 2025 by rpki-client