$ rpki-client -vvf rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/BE9BADE02B4011F0BA1FF282C4F9AE02.roa File: BE9BADE02B4011F0BA1FF282C4F9AE02.roa (raw, json) Hash identifier: JIxsUWoaA8dqs4H846TBR0QXM7ZNHktOJjX2Kny5hR4= Subject key identifier: 48:51:A4:7C:B4:4F:CC:A1:DE:C0:9C:33:E7:0E:C1:DD:3A:44:08:BE Certificate issuer: /CN=A9186214/serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Certificate serial: 2B01 Authority key identifier: 3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/BE9BADE02B4011F0BA1FF282C4F9AE02.roa Signing time: Sat 02 Aug 2025 15:52:38 +0000 ROA not before: Sat 02 Aug 2025 15:52:38 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 152842 IP address blocks: 160.22.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 15:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11009 (0x2b01) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9186214, serialNumber=3FB18D89FAF3188DCE590F7C489077961F82A957 Validity Not Before: Aug 2 15:52:38 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=688e3446-5539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:f1:f2:cf:09:03:7f:8c:1a:50:f0:e1:13: b5:b4:8f:f3:90:61:56:74:bf:30:03:23:c5:e7:89: 2b:51:0b:71:37:fc:fe:4b:fb:a0:e9:04:e6:e1:76: 39:72:b7:a8:3e:f0:04:f8:dc:e0:47:a1:5e:0a:64: f0:47:fb:18:2b:e0:c4:d1:69:92:87:d3:54:93:fc: 9e:00:d6:f5:37:2e:f8:09:0a:04:5a:61:b5:a8:e2: e0:39:b6:f2:4d:93:23:93:f0:a4:f9:bd:3d:36:0d: 84:e1:94:a0:9d:06:bc:f2:9d:f0:ba:4f:96:69:d2: 4d:38:e2:07:be:cc:aa:f9:44:76:d5:41:be:75:f5: a0:6a:c8:bd:b2:75:f6:2b:da:da:1f:e1:a3:db:7c: 7c:ec:32:40:c0:f8:20:21:43:9c:d5:11:e9:d8:47: b6:10:92:e6:9a:d1:b5:91:6f:81:6b:a2:9f:72:08: 8f:df:35:d1:ce:d2:fd:30:70:18:9e:c1:c5:9a:fb: 29:70:38:8f:4f:00:ad:6a:c6:51:32:4a:4c:00:b0: 95:51:bc:2a:19:4b:eb:d7:59:bd:1e:85:be:14:68: 3a:70:84:ed:32:e8:0b:6c:ee:15:22:65:9b:a7:71: af:a8:38:2f:eb:58:4d:46:07:0c:e3:98:ac:b1:60: 78:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:51:A4:7C:B4:4F:CC:A1:DE:C0:9C:33:E7:0E:C1:DD:3A:44:08:BE X509v3 Authority Key Identifier: keyid:3F:B1:8D:89:FA:F3:18:8D:CE:59:0F:7C:48:90:77:96:1F:82:A9:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/P7GNifrzGI3OWQ98SJB3lh-CqVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/P7GNifrzGI3OWQ98SJB3lh-CqVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186214/B7F81958331A11E4AF2AB37CC4F9AE02/BE9BADE02B4011F0BA1FF282C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.238.0/23 Signature Algorithm: sha256WithRSAEncryption 1b:68:0f:7e:1f:35:73:3a:2f:33:d5:a6:3b:2f:ec:e3:be:f4: 4f:70:5d:a2:d8:2f:d0:69:ff:0e:6e:2f:c3:82:dc:1c:0b:39: 08:70:51:c5:63:38:85:65:7d:32:1a:d1:9b:e0:86:f9:0e:4d: 83:64:5d:d3:fa:a6:5e:d5:fd:04:a3:07:b5:fb:97:5b:f1:4d: 6f:cc:d0:35:20:3d:9a:34:fd:52:80:7f:9a:f0:56:6e:51:d7: 82:fd:c4:db:1f:f5:1e:67:a8:b9:bb:b5:85:a2:34:14:97:6f: dc:7c:41:67:b0:01:91:51:18:f8:cf:32:3d:ad:f0:a9:d8:bf: 75:e9:b2:b2:05:0b:51:2e:92:09:f7:a5:12:2c:a5:97:33:d4: cf:bb:68:28:55:de:62:9c:ce:a4:97:ab:e8:c2:4c:15:da:19: 9a:77:b4:40:bb:70:36:91:e6:1c:2e:43:1a:45:c2:44:00:cb: 97:45:b2:86:b5:7f:31:eb:e6:43:34:54:44:99:81:3b:54:f1: 30:92:8f:0e:85:cc:72:cc:4b:8e:63:d1:56:df:5c:47:15:a8: 64:f7:1b:2e:9a:40:e0:81:4a:4e:87:21:f7:54:0d:6a:c4:d7: f0:ec:0d:98:7b:60:bd:13:f4:61:9d:34:de:da:c7:31:28:e2: b6:ee:bc:bb -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKwEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODYyMTQxMTAvBgNVBAUTKDNGQjE4RDg5RkFGMzE4OERDRTU5MEY3QzQ4OTA3Nzk2 MUY4MkE5NTcwHhcNMjUwODAyMTU1MjM4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhlMzQ0Ni01NTM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NXx8s8JA3+MGlDw4RO1tI/zkGFWdL8wAyPF54krUQtxN/z+S/ug6QTm4XY5 creoPvAE+NzgR6FeCmTwR/sYK+DE0WmSh9NUk/yeANb1Ny74CQoEWmG1qOLgObby TZMjk/Ck+b09Ng2E4ZSgnQa88p3wuk+WadJNOOIHvsyq+UR21UG+dfWgasi9snX2 K9raH+Gj23x87DJAwPggIUOc1RHp2Ee2EJLmmtG1kW+Ba6KfcgiP3zXRztL9MHAY nsHFmvspcDiPTwCtasZRMkpMALCVUbwqGUvr11m9HoW+FGg6cITtMugLbO4VImWb p3GvqDgv61hNRgcM45issWB4DwIDAQABo4IClTCCApEwHQYDVR0OBBYEFEhRpHy0 T8yh3sCcM+cOwd06RAi+MB8GA1UdIwQYMBaAFD+xjYn68xiNzlkPfEiQd5YfgqlX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NjIxNC9CN0Y4MTk1ODMz MUExMUU0QUYyQUIzN0NDNEY5QUUwMi9QN0dOaWZyekdJM09XUTk4U0pCM2xoLUNx VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1A3R05pZnJ6R0kzT1dROThTSkIzbGgtQ3FWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODYyMTQvQjdGODE5NTgzMzFBMTFFNEFGMkFCMzdDQzRGOUFFMDIvQkU5QkFERTAy QjQwMTFGMEJBMUZGMjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGgFu4wDQYJKoZIhvcNAQELBQADggEBABtoD34fNXM6LzPV pjsv7OO+9E9wXaLYL9Bp/w5uL8OC3BwLOQhwUcVjOIVlfTIa0ZvghvkOTYNkXdP6 pl7V/QSjB7X7l1vxTW/M0DUgPZo0/VKAf5rwVm5R14L9xNsf9R5nqLm7tYWiNBSX b9x8QWewAZFRGPjPMj2t8KnYv3XpsrIFC1Eukgn3pRIspZcz1M+7aChV3mKczqSX q+jCTBXaGZp3tEC7cDaR5hwuQxpFwkQAy5dFsoa1fzHr5kM0VESZgTtU8TCSjw6F zHLMS45j0VbfXEcVqGT3Gy6aQOCBSk6HIfdUDWrE1/DsDZh7YL0T9GGdNN7axzEo 4rbuvLs= -----END CERTIFICATE-----Generated at Fri Aug 8 00:10:49 2025 by rpki-client