$ rpki-client -vvf rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/817FDF1EB46511EF86BEAC6BC4F9AE02.roa File: 817FDF1EB46511EF86BEAC6BC4F9AE02.roa (raw, json) Hash identifier: k7rH1FXyr6kI4qM4Y34KT+7MpF/68ClavEu5cICvIzc= Subject key identifier: 5E:5D:4F:1B:AF:8D:CE:B2:B7:C3:D0:4E:19:A3:5C:1D:D1:FD:5E:EC Certificate issuer: /CN=A917FACB/serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Certificate serial: 7D Authority key identifier: 40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/817FDF1EB46511EF86BEAC6BC4F9AE02.roa Signing time: Fri 01 Aug 2025 08:46:39 +0000 ROA not before: Fri 01 Aug 2025 08:46:39 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 139020 IP address blocks: 160.250.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A917FACB, serialNumber=402D1D0BD91F43802C7A0D70736188BEBA0A0812 Validity Not Before: Aug 1 08:46:39 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=688c7eef-6db5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:3a:12:82:d4:8c:c9:04:d0:9c:64:25:c6: 70:b1:ca:70:25:e3:53:13:0d:8e:b3:87:46:7a:50: 53:9a:aa:63:83:ef:42:35:3c:e1:85:70:2f:16:6d: 4c:c6:0b:b1:cb:08:74:ba:d2:79:72:42:35:5a:6e: a7:32:02:05:17:d3:99:28:59:3f:aa:cc:5e:f3:87: 6f:6b:28:56:85:21:a2:3d:53:b3:66:67:3f:10:11: 81:ac:50:e5:8e:14:3c:7d:d7:37:df:62:97:fe:0e: bc:21:9f:5b:67:e3:c3:ec:ac:fa:34:ca:68:06:ac: f7:f4:7a:96:84:95:43:2e:2e:b2:55:e4:b2:4d:a2: fd:85:bc:ad:e8:63:59:99:d8:06:f3:b8:23:99:34: 2b:92:9e:2d:7a:60:eb:4c:e2:6d:eb:13:92:de:ae: c6:ef:f9:a0:d5:a9:f3:26:4b:25:c0:16:b0:54:9b: 2e:74:6a:ad:1a:26:18:49:c4:98:be:10:5a:46:d4: 7f:a8:2d:e4:e6:5d:6d:2b:ef:1f:2f:5f:a5:77:43: 50:15:46:94:1a:a3:81:cc:36:4b:09:47:4f:9c:c5: c8:f9:5d:c6:d4:47:d9:98:0b:0e:d3:ce:ee:a9:51: 25:8b:92:70:01:9a:13:a4:1d:88:db:ec:fd:83:8d: 0c:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5D:4F:1B:AF:8D:CE:B2:B7:C3:D0:4E:19:A3:5C:1D:D1:FD:5E:EC X509v3 Authority Key Identifier: keyid:40:2D:1D:0B:D9:1F:43:80:2C:7A:0D:70:73:61:88:BE:BA:0A:08:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/QC0dC9kfQ4Aseg1wc2GIvroKCBI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QC0dC9kfQ4Aseg1wc2GIvroKCBI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FACB/1C946AF2B46511EF9BFBAA67C4F9AE02/817FDF1EB46511EF86BEAC6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.138.0/23 Signature Algorithm: sha256WithRSAEncryption bb:c4:43:cf:46:bd:3e:17:17:16:88:52:b4:be:fc:a4:1d:cb: 91:bb:b3:f5:f5:63:be:58:67:57:29:66:00:ab:22:f4:96:af: 0c:5f:50:56:d8:6b:e9:c5:71:29:bc:86:eb:e4:7d:88:31:3a: 9a:d6:ce:15:cc:5a:03:47:c4:67:81:d7:8b:07:49:fd:63:d7: 0d:c7:ce:1d:fa:36:19:53:63:28:a0:35:52:d5:f4:d0:e3:58: 9e:00:cf:94:f0:21:89:77:3d:b9:80:b7:18:59:9d:de:da:bc: d8:4d:95:32:cc:72:3a:ac:3b:6d:f3:78:95:ec:ec:f9:37:52: b7:4f:ca:4a:ab:22:66:18:d2:2f:6a:1a:b6:5b:c4:e1:a4:88: 2c:58:cd:58:13:ee:56:30:b0:34:50:01:86:74:21:b4:0e:9a: ff:ca:a3:69:05:39:c0:71:27:d7:07:4a:f7:70:c5:66:42:09: 3c:cb:2a:0b:de:d7:37:b0:a4:4b:f9:eb:90:03:d9:7d:52:75: 43:f8:b2:58:f1:71:ba:89:05:36:9a:48:40:58:00:0f:83:59: 94:d2:23:76:aa:bb:b2:c0:c2:08:c2:92:39:12:c9:f3:fc:01: f1:bb:38:65:95:ce:77:ac:ae:4d:7c:91:a5:2c:44:84:bf:b5: 59:e8:d7:e0 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 RkFDQjExMC8GA1UEBRMoNDAyRDFEMEJEOTFGNDM4MDJDN0EwRDcwNzM2MTg4QkVC QTBBMDgxMjAeFw0yNTA4MDEwODQ2MzlaFw0yNTEyMDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4OGM3ZWVmLTZkYjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCrJjoSgtSMyQTQnGQlxnCxynAl41MTDY6zh0Z6UFOaqmOD70I1POGFcC8WbUzG C7HLCHS60nlyQjVabqcyAgUX05koWT+qzF7zh29rKFaFIaI9U7NmZz8QEYGsUOWO FDx91zffYpf+Drwhn1tn48PsrPo0ymgGrPf0epaElUMuLrJV5LJNov2FvK3oY1mZ 2AbzuCOZNCuSni16YOtM4m3rE5Lersbv+aDVqfMmSyXAFrBUmy50aq0aJhhJxJi+ EFpG1H+oLeTmXW0r7x8vX6V3Q1AVRpQao4HMNksJR0+cxcj5XcbUR9mYCw7Tzu6p USWLknABmhOkHYjb7P2DjQxhAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUXl1PG6+N zrK3w9BOGaNcHdH9XuwwHwYDVR0jBBgwFoAUQC0dC9kfQ4Aseg1wc2GIvroKCBIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTdGQUNCLzFDOTQ2QUYyQjQ2 NTExRUY5QkZCQUE2N0M0RjlBRTAyL1FDMGRDOWtmUTRBc2VnMXdjMkdJdnJvS0NC SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUUMwZEM5a2ZRNEFzZWcxd2MyR0l2cm9LQ0JJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 RkFDQi8xQzk0NkFGMkI0NjUxMUVGOUJGQkFBNjdDNEY5QUUwMi84MTdGREYxRUI0 NjUxMUVGODZCRUFDNkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaD6ijANBgkqhkiG9w0BAQsFAAOCAQEAu8RDz0a9PhcXFohS tL78pB3Lkbuz9fVjvlhnVylmAKsi9JavDF9QVthr6cVxKbyG6+R9iDE6mtbOFcxa A0fEZ4HXiwdJ/WPXDcfOHfo2GVNjKKA1UtX00ONYngDPlPAhiXc9uYC3GFmd3tq8 2E2VMsxyOqw7bfN4lezs+TdSt0/KSqsiZhjSL2oatlvE4aSILFjNWBPuVjCwNFAB hnQhtA6a/8qjaQU5wHEn1wdK93DFZkIJPMsqC97XN7CkS/nrkAPZfVJ1Q/iyWPFx uokFNppIQFgAD4NZlNIjdqq7ssDCCMKSORLJ8/wB8bs4ZZXOd6yuTXyRpSxEhL+1 WejX4A== -----END CERTIFICATE-----Generated at Sat Aug 9 23:21:31 2025 by rpki-client