$ rpki-client -vvf rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/CA226038692E11F0B07B731AC4F9AE02.roa File: CA226038692E11F0B07B731AC4F9AE02.roa (raw, json) Hash identifier: Jl0PXlGRVMz6VTGQ9JZnlXDKUJBJbG15PDPmjCjHDwo= Subject key identifier: 23:DE:BA:07:8C:93:64:FE:8E:4E:79:FB:88:FE:B1:CC:44:6B:CC:86 Certificate issuer: /CN=A9187D5B/serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8 Certificate serial: 02 Authority key identifier: 10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/CA226038692E11F0B07B731AC4F9AE02.roa Signing time: Fri 25 Jul 2025 08:10:13 +0000 ROA not before: Fri 25 Jul 2025 08:10:13 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 55720 IP address blocks: 160.250.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9187D5B, serialNumber=10AC63066E9ABC422AC5F45A22710D502EBE42C8 Validity Not Before: Jul 25 08:10:13 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68833be5-31a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:fd:3d:84:1c:2c:5a:65:9b:3d:8c:23:6f:04: 1a:85:2c:e8:f7:d9:9f:42:93:20:e0:74:cb:89:d7: 1a:8c:e0:a1:13:bb:00:1b:a8:e6:ff:e3:5c:7b:a9: e5:2e:37:33:8d:02:20:dd:2f:e4:7e:dd:a0:11:a4: f5:87:f3:86:70:ce:b0:04:3e:41:a5:5c:ff:bb:0d: e5:1d:39:4e:6e:62:dd:10:b8:e7:79:ad:9c:a0:22: 5a:ba:0d:28:a3:77:5b:ad:60:f5:ff:2c:08:22:f3: 60:a8:c9:63:80:e9:f3:68:6b:bc:c5:4c:2b:c4:2e: 14:43:5b:ea:43:15:f1:49:e3:fc:33:4a:4b:a6:26: 3b:2d:5f:0e:2f:2b:a0:1c:99:82:ad:f5:c5:cb:5e: e7:32:76:59:09:52:2d:0c:73:cf:8c:1a:5e:60:ec: 5f:3d:7f:a0:e3:19:62:ff:b0:a0:ab:9a:d0:3f:d2: 31:d1:2f:be:4a:1f:f1:d8:b2:fc:99:f3:9f:5c:b3: 00:ae:b2:6c:08:79:bc:8c:22:b8:3d:21:46:16:aa: 07:f1:2f:77:ca:c7:c2:e6:81:09:99:54:55:19:b6: d9:f2:07:cc:7a:a6:84:5e:79:cc:17:e2:07:99:47: 1a:33:0b:4d:fa:fa:3b:30:92:b8:47:2b:a0:1f:0f: 68:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DE:BA:07:8C:93:64:FE:8E:4E:79:FB:88:FE:B1:CC:44:6B:CC:86 X509v3 Authority Key Identifier: keyid:10:AC:63:06:6E:9A:BC:42:2A:C5:F4:5A:22:71:0D:50:2E:BE:42:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/EKxjBm6avEIqxfRaInENUC6-Qsg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/EKxjBm6avEIqxfRaInENUC6-Qsg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187D5B/7983385A692E11F0BD0F6819C4F9AE02/CA226038692E11F0B07B731AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.250.92.0/24 Signature Algorithm: sha256WithRSAEncryption 6c:df:26:11:d8:5d:6b:23:bd:3e:93:67:5d:81:f0:b0:03:33: 68:01:50:b8:95:5a:ac:c7:ec:a3:a4:af:07:77:c1:48:a0:69: ad:83:e4:5f:a7:9f:db:d0:92:83:73:cc:fa:d7:55:18:31:d6: 4e:d5:4e:31:7d:5c:44:d0:74:0d:08:40:1e:6a:e7:ac:94:20: e0:08:43:fa:6c:93:e0:30:5e:e0:64:0c:f7:3f:a4:73:c6:c5: f4:97:22:ba:b1:7c:d1:27:38:9f:6d:66:48:d9:f3:da:88:a7: 48:98:2f:e0:6a:3d:e3:f8:65:a6:b3:18:f9:f9:96:d9:ae:3b: 98:c3:15:54:83:72:09:01:b3:0d:2a:b3:95:88:46:7d:69:38: 27:48:26:48:2c:9c:ba:6c:b1:e7:0a:30:46:71:a2:5c:cb:53: 70:cf:c5:ca:bb:bf:9e:0c:73:9a:aa:b9:6f:a8:13:1f:8a:16: c5:88:dc:6c:45:90:2e:2c:3e:89:22:dd:39:29:ab:6e:85:0f: 56:38:82:48:e9:11:d4:97:aa:e9:53:c8:d1:0a:42:3f:25:56: 7f:d8:21:21:48:be:0e:ac:49:db:9a:2a:cf:91:0e:c0:6c:7b: fe:13:cb:d1:6f:d3:ba:56:0c:6f:49:08:4e:19:5f:ba:e2:21: 8a:8b:1c:e2 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 N0Q1QjExMC8GA1UEBRMoMTBBQzYzMDY2RTlBQkM0MjJBQzVGNDVBMjI3MTBENTAy RUJFNDJDODAeFw0yNTA3MjUwODEwMTNaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ODMzYmU1LTMxYTIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDi/T2EHCxaZZs9jCNvBBqFLOj32Z9CkyDgdMuJ1xqM4KETuwAbqOb/41x7qeUu NzONAiDdL+R+3aARpPWH84ZwzrAEPkGlXP+7DeUdOU5uYt0QuOd5rZygIlq6DSij d1utYPX/LAgi82CoyWOA6fNoa7zFTCvELhRDW+pDFfFJ4/wzSkumJjstXw4vK6Ac mYKt9cXLXucydlkJUi0Mc8+MGl5g7F89f6DjGWL/sKCrmtA/0jHRL75KH/HYsvyZ 859cswCusmwIebyMIrg9IUYWqgfxL3fKx8LmgQmZVFUZttnyB8x6poReecwX4geZ RxozC036+jswkrhHK6AfD2j1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUI966B4yT ZP6OTnn7iP6xzERrzIYwHwYDVR0jBBgwFoAUEKxjBm6avEIqxfRaInENUC6+Qsgw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTg3RDVCLzc5ODMzODVBNjky RTExRjBCRDBGNjgxOUM0RjlBRTAyL0VLeGpCbTZhdkVJcXhmUmFJbkVOVUM2LVFz Zy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRUt4akJtNmF2RUlxeGZSYUluRU5VQzYtUXNnLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 N0Q1Qi83OTgzMzg1QTY5MkUxMUYwQkQwRjY4MTlDNEY5QUUwMi9DQTIyNjAzODY5 MkUxMUYwQjA3QjczMUFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKD6XDANBgkqhkiG9w0BAQsFAAOCAQEAbN8mEdhdayO9PpNn XYHwsAMzaAFQuJVarMfso6SvB3fBSKBprYPkX6ef29CSg3PM+tdVGDHWTtVOMX1c RNB0DQhAHmrnrJQg4AhD+myT4DBe4GQM9z+kc8bF9JciurF80Sc4n21mSNnz2oin SJgv4Go94/hlprMY+fmW2a47mMMVVINyCQGzDSqzlYhGfWk4J0gmSCycumyx5wow RnGiXMtTcM/Fyru/ngxzmqq5b6gTH4oWxYjcbEWQLiw+iSLdOSmrboUPVjiCSOkR 1Jeq6VPI0QpCPyVWf9ghIUi+DqxJ25oqz5EOwGx7/hPL0W/TulYMb0kIThlfuuIh iosc4g== -----END CERTIFICATE-----Generated at Mon Aug 11 02:09:20 2025 by rpki-client