$ rpki-client -vvf rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/CCC81F9A703F11F0AD014F1AC4F9AE02.roa File: CCC81F9A703F11F0AD014F1AC4F9AE02.roa (raw, json) Hash identifier: 5E8RDsoVjXmI/w7ZZOkVeITuRBDxCdB14YXNUGb/6bY= Subject key identifier: 95:84:AF:9A:93:81:C5:66:93:AD:64:0B:A7:B0:3D:FC:E0:FD:AF:C8 Certificate issuer: /CN=A919A909/serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A Certificate serial: E2 Authority key identifier: D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/CCC81F9A703F11F0AD014F1AC4F9AE02.roa Signing time: Sun 03 Aug 2025 07:59:37 +0000 ROA not before: Sun 03 Aug 2025 07:59:37 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 51847 IP address blocks: 160.22.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 226 (0xe2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919A909, serialNumber=D7210B6E99424A9E82A4D45002736F6483AA279A Validity Not Before: Aug 3 07:59:37 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688f16e9-efcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:73:98:00:b2:2f:b0:b0:4a:a4:ae:71:fb:b4: a8:bf:17:66:c7:90:58:c5:58:19:16:86:67:53:2e: 8e:1c:95:f1:5d:25:c7:c2:86:b3:85:c9:64:a8:76: 26:90:a1:81:d5:5a:38:86:6c:25:fd:b0:37:30:10: 2b:14:d8:2b:a3:45:ad:b9:f2:af:5d:89:ea:d3:4c: f3:f2:1e:22:e5:73:26:69:78:cb:4c:dc:56:19:21: b5:cb:93:11:3b:58:c5:57:67:a5:5c:48:98:72:3e: 60:53:94:65:46:ce:58:8e:96:a4:64:30:f2:bb:f4: 19:b1:f1:81:6e:f9:37:08:38:bb:f8:78:54:f4:b0: 46:94:5b:c9:33:32:df:0e:7f:ec:50:43:2f:73:58: e0:1c:66:f4:1f:f9:92:62:e8:9f:02:e4:2e:8b:02: 8c:d3:37:2b:2c:18:1c:5f:09:c5:5a:ea:c0:41:6b: 73:ea:73:af:a9:9f:e3:32:bc:44:ec:58:76:7f:26: b1:f6:22:34:a2:84:74:28:97:36:a5:d9:e3:34:61: b5:56:e3:8f:86:d3:0f:fb:ae:07:30:1b:a8:6c:fe: fc:34:34:b7:59:6c:88:41:f5:98:23:48:98:ec:66: bd:97:03:6b:19:0b:0e:73:05:60:44:8a:e6:1f:9c: 33:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:84:AF:9A:93:81:C5:66:93:AD:64:0B:A7:B0:3D:FC:E0:FD:AF:C8 X509v3 Authority Key Identifier: keyid:D7:21:0B:6E:99:42:4A:9E:82:A4:D4:50:02:73:6F:64:83:AA:27:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/1yELbplCSp6CpNRQAnNvZIOqJ5o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1yELbplCSp6CpNRQAnNvZIOqJ5o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919A909/166E747C2A3311EFBE9AA859C4F9AE02/CCC81F9A703F11F0AD014F1AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.156.0/24 Signature Algorithm: sha256WithRSAEncryption a4:8a:2d:31:01:69:2f:00:7b:b5:f8:ab:14:9c:8c:c9:fc:e5: 71:fb:e1:a5:5b:f4:a9:6b:73:cc:64:ec:76:c5:90:81:c8:02: ec:c3:34:2e:24:0b:49:e0:be:0b:b7:10:a2:df:75:84:33:e5: 69:f5:45:a4:86:06:91:d3:a8:e9:84:f0:85:eb:91:0a:6c:5f: 84:30:70:46:aa:6c:5a:3b:6f:8a:c4:0d:f2:8f:02:cf:d6:a6: 33:78:a1:c3:62:b1:06:67:fa:92:84:2e:d4:8f:4f:71:ae:f7: 35:01:da:8d:52:5a:5f:43:fd:a4:87:dd:c1:8c:0a:6c:c5:b3: 9a:31:55:7f:55:09:ea:b0:de:1f:1b:42:d3:ab:64:07:32:1a: 31:3a:dc:87:bf:ef:9d:1a:a9:ea:c6:fb:63:25:2b:83:16:f9: bd:e0:f0:6b:c3:6c:63:f3:7a:85:df:57:70:83:35:d3:ec:49: d4:ba:48:f8:97:c3:b2:9a:08:79:33:03:aa:2f:29:89:50:f2: ee:e5:9a:4d:cd:66:65:8d:10:ea:c8:68:c0:a0:fc:70:fc:8f: ff:4a:50:b7:b1:ed:c0:15:83:81:c4:de:de:25:8a:33:98:d2: 77:b2:c2:4a:cd:ef:74:a2:c3:05:5a:46:20:f8:5b:2b:7a:f4: 5c:59:d4:2a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUE5MDkxMTAvBgNVBAUTKEQ3MjEwQjZFOTk0MjRBOUU4MkE0RDQ1MDAyNzM2RjY0 ODNBQTI3OUEwHhcNMjUwODAzMDc1OTM3WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhmMTZlOS1lZmNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2HOYALIvsLBKpK5x+7Sovxdmx5BYxVgZFoZnUy6OHJXxXSXHwoazhclkqHYm kKGB1Vo4hmwl/bA3MBArFNgro0WtufKvXYnq00zz8h4i5XMmaXjLTNxWGSG1y5MR O1jFV2elXEiYcj5gU5RlRs5YjpakZDDyu/QZsfGBbvk3CDi7+HhU9LBGlFvJMzLf Dn/sUEMvc1jgHGb0H/mSYuifAuQuiwKM0zcrLBgcXwnFWurAQWtz6nOvqZ/jMrxE 7Fh2fyax9iI0ooR0KJc2pdnjNGG1VuOPhtMP+64HMBuobP78NDS3WWyIQfWYI0iY 7Ga9lwNrGQsOcwVgRIrmH5wzlQIDAQABo4IClTCCApEwHQYDVR0OBBYEFJWEr5qT gcVmk61kC6ewPfzg/a/IMB8GA1UdIwQYMBaAFNchC26ZQkqegqTUUAJzb2SDqiea MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QTkwOS8xNjZFNzQ3QzJB MzMxMUVGQkU5QUE4NTlDNEY5QUUwMi8xeUVMYnBsQ1NwNkNwTlJRQW5OdlpJT3FK NW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzF5RUxicGxDU3A2Q3BOUlFBbk52WklPcUo1by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUE5MDkvMTY2RTc0N0MyQTMzMTFFRkJFOUFBODU5QzRGOUFFMDIvQ0NDODFGOUE3 MDNGMTFGMEFEMDE0RjFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFpwwDQYJKoZIhvcNAQELBQADggEBAKSKLTEBaS8Ae7X4 qxScjMn85XH74aVb9Klrc8xk7HbFkIHIAuzDNC4kC0ngvgu3EKLfdYQz5Wn1RaSG BpHTqOmE8IXrkQpsX4QwcEaqbFo7b4rEDfKPAs/WpjN4ocNisQZn+pKELtSPT3Gu 9zUB2o1SWl9D/aSH3cGMCmzFs5oxVX9VCeqw3h8bQtOrZAcyGjE63Ie/750aqerG +2MlK4MW+b3g8GvDbGPzeoXfV3CDNdPsSdS6SPiXw7KaCHkzA6ovKYlQ8u7lmk3N ZmWNEOrIaMCg/HD8j/9KULex7cAVg4HE3t4lijOY0neywkrN73SiwwVaRiD4Wyt6 9FxZ1Co= -----END CERTIFICATE-----Generated at Sun Aug 10 04:54:54 2025 by rpki-client