$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/92AEE092378211EFAEB6B36DC4F9AE02.roa File: 92AEE092378211EFAEB6B36DC4F9AE02.roa (raw, json) Hash identifier: vof6OG8sAX0uHAvhetFYEpdSjwUJhtpp1UkP8lk0Gm0= Subject key identifier: 94:ED:BD:2E:6B:4C:C4:12:AC:6B:3B:D2:14:92:79:C5:BB:0C:23:57 Certificate issuer: /CN=A919EAF3/serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Certificate serial: 19AE Authority key identifier: 29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/92AEE092378211EFAEB6B36DC4F9AE02.roa Signing time: Thu 31 Jul 2025 16:54:53 +0000 ROA not before: Thu 31 Jul 2025 16:54:53 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 9234 IP address blocks: 168.245.188.0/22 maxlen: 22 168.245.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 16:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6574 (0x19ae) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919EAF3, serialNumber=29B6A8702A4AD644A871064B6407ADE493E63A8D Validity Not Before: Jul 31 16:54:53 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688b9fdd-1716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:18:a0:a6:d3:d2:32:b6:f9:50:3b:1d:99:74: 04:26:0c:bb:63:6d:a6:69:42:82:b4:56:9d:5b:1a: 5f:9c:7e:85:43:c1:6d:d7:07:80:7d:2b:14:80:75: 34:48:fb:ea:db:e0:fd:33:c5:24:8c:d9:85:25:60: 6d:89:ea:04:e4:81:28:a8:ed:14:df:ef:d4:c6:9e: 5e:18:0e:eb:55:a0:7e:f0:c1:00:dc:c0:5d:12:5f: 83:8f:51:6c:c4:1b:50:e4:f6:93:72:cf:61:eb:f7: e4:92:34:99:8b:4b:5c:30:4a:4a:d4:f2:f2:f5:42: 4d:9f:33:08:da:4e:e4:66:b8:b6:5e:06:30:df:2d: 15:7c:16:a7:ba:c6:44:df:d4:df:6a:f5:1e:83:68: b2:4e:6e:2d:b3:8e:b2:bf:6e:6a:14:fe:6e:48:05: e5:a1:2b:a9:da:37:54:17:74:11:2c:e5:07:3b:de: 7e:a5:98:7d:f4:f5:2e:8a:a3:b4:e6:79:c5:00:ad: 52:7d:ee:f0:42:fe:c8:42:6c:e6:e7:0c:3b:86:8c: e1:8f:f6:d0:d0:76:9a:ea:c6:7b:6a:98:b3:74:38: f1:8a:1f:61:48:83:7f:77:4a:e2:8d:4e:29:03:b5: d6:f2:e5:f8:8f:e6:db:df:7f:fd:bc:f4:5f:19:10: 76:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:ED:BD:2E:6B:4C:C4:12:AC:6B:3B:D2:14:92:79:C5:BB:0C:23:57 X509v3 Authority Key Identifier: keyid:29:B6:A8:70:2A:4A:D6:44:A8:71:06:4B:64:07:AD:E4:93:E6:3A:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/KbaocCpK1kSocQZLZAet5JPmOo0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/KbaocCpK1kSocQZLZAet5JPmOo0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAF3/93BB502E6D1811E7A815DA80C4F9AE02/92AEE092378211EFAEB6B36DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 168.245.188.0/22 Signature Algorithm: sha256WithRSAEncryption 9b:a2:f6:dc:36:bf:34:33:b1:80:89:20:91:06:a7:5b:0a:6c: 61:13:02:c1:15:de:fd:06:43:e2:58:a2:a8:cf:ab:62:23:a9: b0:46:26:0b:1e:84:f6:c1:99:3d:f3:0a:91:b6:dd:03:2d:66: 3e:80:89:b8:75:2c:49:52:5e:b8:b7:b9:24:7a:19:d1:9d:21: 98:9e:78:22:3d:12:24:33:7f:e0:85:3f:db:ce:f2:ed:a7:9b: aa:9a:10:f6:03:d2:66:1d:3d:0d:05:14:f0:64:79:d6:c4:4f: 06:7e:c7:d4:b3:3a:68:64:74:08:a5:21:ec:7a:8c:49:08:e4: f5:cd:e6:26:6c:82:d9:af:23:0f:61:c7:1d:b7:b7:fc:f6:40: fc:b2:af:a1:13:07:23:3a:9d:bb:66:53:23:72:b9:f4:f7:d2: a3:e4:6f:7c:46:1b:ae:58:06:84:8b:e6:de:f0:0a:fd:96:d0: 8e:28:0b:f7:26:7e:b5:f7:9e:fe:05:78:33:ed:e2:16:53:7e: da:92:ad:04:2c:96:b8:22:12:39:9f:e6:0e:48:18:b3:25:2f: 0a:4c:4e:3e:9b:97:36:23:6b:e2:64:e2:e3:df:2a:f1:0c:60: 62:8e:26:9a:f6:d5:da:de:bd:63:bc:61:50:fe:bc:a2:85:a8: dd:98:8c:f1 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICGa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUVBRjMxMTAvBgNVBAUTKDI5QjZBODcwMkE0QUQ2NDRBODcxMDY0QjY0MDdBREU0 OTNFNjNBOEQwHhcNMjUwNzMxMTY1NDUzWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhiOWZkZC0xNzE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArBigptPSMrb5UDsdmXQEJgy7Y22maUKCtFadWxpfnH6FQ8Ft1weAfSsUgHU0 SPvq2+D9M8UkjNmFJWBtieoE5IEoqO0U3+/Uxp5eGA7rVaB+8MEA3MBdEl+Dj1Fs xBtQ5PaTcs9h6/fkkjSZi0tcMEpK1PLy9UJNnzMI2k7kZri2XgYw3y0VfBanusZE 39TfavUeg2iyTm4ts46yv25qFP5uSAXloSup2jdUF3QRLOUHO95+pZh99PUuiqO0 5nnFAK1Sfe7wQv7IQmzm5ww7hozhj/bQ0Haa6sZ7apizdDjxih9hSIN/d0rijU4p A7XW8uX4j+bb33/9vPRfGRB2nwIDAQABo4IClTCCApEwHQYDVR0OBBYEFJTtvS5r TMQSrGs70hSSecW7DCNXMB8GA1UdIwQYMBaAFCm2qHAqStZEqHEGS2QHreST5jqN MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFGMy85M0JCNTAyRTZE MTgxMUU3QTgxNURBODBDNEY5QUUwMi9LYmFvY0NwSzFrU29jUVpMWkFldDVKUG1P bzAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL0tiYW9jQ3BLMWtTb2NRWkxaQWV0NUpQbU9vMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUVBRjMvOTNCQjUwMkU2RDE4MTFFN0E4MTVEQTgwQzRGOUFFMDIvOTJBRUUwOTIz NzgyMTFFRkFFQjZCMzZEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKo9bwwDQYJKoZIhvcNAQELBQADggEBAJui9tw2vzQzsYCJ IJEGp1sKbGETAsEV3v0GQ+JYoqjPq2IjqbBGJgsehPbBmT3zCpG23QMtZj6Aibh1 LElSXri3uSR6GdGdIZieeCI9EiQzf+CFP9vO8u2nm6qaEPYD0mYdPQ0FFPBkedbE TwZ+x9SzOmhkdAilIex6jEkI5PXN5iZsgtmvIw9hxx23t/z2QPyyr6ETByM6nbtm UyNyufT30qPkb3xGG65YBoSL5t7wCv2W0I4oC/cmfrX3nv4FeDPt4hZTftqSrQQs lrgiEjmf5g5IGLMlLwpMTj6blzYja+Jk4uPfKvEMYGKOJpr21drevWO8YVD+vKKF qN2YjPE= -----END CERTIFICATE-----Generated at Wed Aug 13 02:17:24 2025 by rpki-client