$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/2C00BB1239EF11EFB6EE4687C4F9AE02.roa File: 2C00BB1239EF11EFB6EE4687C4F9AE02.roa (raw, json) Hash identifier: zJmy/7bWwOw3097+xOhmcdnCp+p0bjqozGeHRbB5Gck= Subject key identifier: 1E:E8:59:96:68:1F:DD:64:6E:4F:A9:1F:6C:09:EE:A8:DF:36:8E:60 Certificate issuer: /CN=A919BC3B/serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68 Certificate serial: B3 Authority key identifier: E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/2C00BB1239EF11EFB6EE4687C4F9AE02.roa Signing time: Sat 07 Jun 2025 05:54:59 +0000 ROA not before: Sat 07 Jun 2025 05:54:59 +0000 ROA not after: Thu 31 Aug 2028 00:00:00 +0000 asID: 152890 IP address blocks: 160.22.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 05:19:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 179 (0xb3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919BC3B, serialNumber=E8F755E71F5ED7F913452CFFCE3ED42088121A68 Validity Not Before: Jun 7 05:54:59 2025 GMT Not After : Aug 31 00:00:00 2028 GMT Subject: CN=6843d433-252b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:d2:21:8b:de:44:d1:4b:77:ab:b3:bf:17: 26:ce:b1:7a:e5:af:67:dc:c5:42:7f:5f:20:13:ee: c4:cc:2c:b9:96:1c:eb:ed:d4:eb:8c:8b:9c:b5:76: 7f:f9:f5:7c:60:ea:8f:3e:61:6c:72:d9:19:ba:e0: bf:2e:e1:9d:37:2e:c9:87:e2:f0:b7:b3:0b:3b:5d: f1:e4:3a:ff:e8:93:9d:db:fc:59:1f:14:7a:dc:6b: 07:7d:48:b8:3a:88:ba:46:ce:48:bc:65:e3:0e:f0: 76:e9:1c:c7:85:63:16:4e:7c:39:0b:4e:ff:e2:66: 58:0e:40:94:58:d8:f4:81:55:d4:3a:34:bb:3a:26: 83:df:36:de:ee:8c:c4:4c:50:31:9c:d4:64:e7:25: 57:12:11:45:97:b0:a3:29:f2:24:d9:82:e7:99:27: b2:64:07:a6:5b:35:bd:1f:e3:93:6b:a1:70:53:92: df:ae:df:b3:12:23:b1:32:a6:10:9b:f5:4b:2b:ad: 62:20:52:a1:a8:bf:2e:96:2f:ca:20:fc:b5:bc:6d: 79:37:15:de:0b:cc:28:52:37:83:74:95:d9:ba:92: eb:1a:b3:49:78:aa:ab:31:74:80:28:d9:38:e6:01: 04:81:da:ad:0e:82:78:4f:87:e3:42:27:45:15:7f: 4f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:E8:59:96:68:1F:DD:64:6E:4F:A9:1F:6C:09:EE:A8:DF:36:8E:60 X509v3 Authority Key Identifier: keyid:E8:F7:55:E7:1F:5E:D7:F9:13:45:2C:FF:CE:3E:D4:20:88:12:1A:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/6PdV5x9e1_kTRSz_zj7UIIgSGmg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6PdV5x9e1_kTRSz_zj7UIIgSGmg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/C6BD547C39EE11EFA43D6586C4F9AE02/2C00BB1239EF11EFB6EE4687C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 160.22.38.0/24 Signature Algorithm: sha256WithRSAEncryption ba:bd:a7:1f:98:77:cc:26:bd:79:ad:9c:94:84:d4:90:4d:f6: e1:c8:df:8d:53:e8:ef:76:6b:97:96:a0:d6:85:c9:36:be:a1: 63:08:ba:47:32:9b:e2:a9:1a:2f:de:68:7c:e4:35:87:6f:00: 5c:b6:ca:7f:c7:c0:af:c9:e6:30:f3:20:4d:04:72:d9:fb:b3: db:a2:0a:99:37:eb:57:12:8f:1b:8e:dd:ec:7f:6f:ea:bb:91: 84:41:c4:84:6c:e6:7f:79:eb:df:b1:03:67:cf:3c:2b:30:7e: e3:ac:1a:13:61:e5:4f:38:29:29:6d:76:fc:37:47:d9:bb:73: 7e:92:81:46:45:1f:b2:39:a6:b4:b9:3b:5c:95:e1:d0:3c:81: 9f:05:d7:6e:d8:26:3c:47:be:5f:ad:4c:cc:8c:56:d2:65:3c: 52:00:90:9f:0e:26:e8:49:0c:0f:d3:92:06:60:5a:76:6e:f2: 6d:d2:1c:fb:5f:46:5b:14:cf:50:07:6e:6d:72:c3:0c:6d:96: cc:be:e6:6f:f3:ae:87:c3:d7:53:f0:61:7c:07:9c:53:2e:33: ab:96:5e:a6:76:9f:f0:f6:6f:c7:1a:93:30:dc:42:4f:56:8a: ec:5b:0c:1d:d6:d8:97:9a:20:82:f7:ce:34:d2:ba:eb:90:1f: 89:c4:aa:8a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICALMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUJDM0IxMTAvBgNVBAUTKEU4Rjc1NUU3MUY1RUQ3RjkxMzQ1MkNGRkNFM0VENDIw ODgxMjFBNjgwHhcNMjUwNjA3MDU1NDU5WhcNMjgwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQzZDQzMy0yNTJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtznSIYveRNFLd6uzvxcmzrF65a9n3MVCf18gE+7EzCy5lhzr7dTrjIuctXZ/ +fV8YOqPPmFsctkZuuC/LuGdNy7Jh+Lwt7MLO13x5Dr/6JOd2/xZHxR63GsHfUi4 Ooi6Rs5IvGXjDvB26RzHhWMWTnw5C07/4mZYDkCUWNj0gVXUOjS7OiaD3zbe7ozE TFAxnNRk5yVXEhFFl7CjKfIk2YLnmSeyZAemWzW9H+OTa6FwU5Lfrt+zEiOxMqYQ m/VLK61iIFKhqL8uli/KIPy1vG15NxXeC8woUjeDdJXZupLrGrNJeKqrMXSAKNk4 5gEEgdqtDoJ4T4fjQidFFX9PmQIDAQABo4IClTCCApEwHQYDVR0OBBYEFB7oWZZo H91kbk+pH2wJ7qjfNo5gMB8GA1UdIwQYMBaAFOj3VecfXtf5E0Us/84+1CCIEhpo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QkMzQi9DNkJENTQ3QzM5 RUUxMUVGQTQzRDY1ODZDNEY5QUUwMi82UGRWNXg5ZTFfa1RSU3pfemo3VUlJZ1NH bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzZQZFY1eDllMV9rVFJTel96ajdVSUlnU0dtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUJDM0IvQzZCRDU0N0MzOUVFMTFFRkE0M0Q2NTg2QzRGOUFFMDIvMkMwMEJCMTIz OUVGMTFFRkI2RUU0Njg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACgFiYwDQYJKoZIhvcNAQELBQADggEBALq9px+Yd8wmvXmt nJSE1JBN9uHI341T6O92a5eWoNaFyTa+oWMIukcym+KpGi/eaHzkNYdvAFy2yn/H wK/J5jDzIE0Ectn7s9uiCpk361cSjxuO3ex/b+q7kYRBxIRs5n9569+xA2fPPCsw fuOsGhNh5U84KSltdvw3R9m7c36SgUZFH7I5prS5O1yV4dA8gZ8F127YJjxHvl+t TMyMVtJlPFIAkJ8OJuhJDA/TkgZgWnZu8m3SHPtfRlsUz1AHbm1ywwxtlsy+5m/z rofD11PwYXwHnFMuM6uWXqZ2n/D2b8cakzDcQk9WiuxbDB3W2JeaIIL3zjTSuuuQ H4nEqoo= -----END CERTIFICATE-----Generated at Wed Nov 5 13:36:34 2025 by rpki-client