$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/E8DBB35C615F11F0B2AE1244C4F9AE02.roa File: E8DBB35C615F11F0B2AE1244C4F9AE02.roa (raw, json) Hash identifier: /hZynVVcCoYiSo/yM15U2/UgGWDNoECIR42N7gRavEo= Subject key identifier: 32:DC:25:78:3B:35:31:1F:FD:60:E8:60:75:81:43:A6:CB:F4:C1:F9 Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Certificate serial: 12 Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/E8DBB35C615F11F0B2AE1244C4F9AE02.roa Signing time: Tue 15 Jul 2025 09:41:40 +0000 ROA not before: Tue 15 Jul 2025 09:41:40 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 38264 IP address blocks: 165.99.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:18:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18 (0x12) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Validity Not Before: Jul 15 09:41:40 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68762254-2017 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:21:37:a3:da:43:88:8c:84:1a:07:6b:92:7b: 51:c0:59:21:05:50:b0:f7:c8:01:65:7b:cf:98:fa: 08:65:8e:a1:cb:00:41:10:8c:28:9b:26:78:a8:96: 5a:a7:f7:b4:24:59:44:c9:73:36:7d:bc:0f:b2:96: 0d:91:5a:9a:c0:c7:4c:87:03:a8:eb:ac:89:e2:c7: fa:24:cd:1d:37:24:c4:60:6c:81:c4:e3:ae:03:32: 55:60:df:4f:bc:7c:f4:e5:80:f4:b4:8c:d9:2e:ad: 68:6a:8d:ca:ee:81:df:47:27:a5:8d:57:b5:27:12: 1a:45:07:62:c5:13:20:4e:65:ac:9f:49:2c:64:df: 06:e9:2a:20:1e:9d:10:be:38:be:34:1c:46:66:e6: 0b:32:c9:29:33:a6:95:06:f4:47:f6:9b:97:eb:4c: fd:b4:b9:a8:58:2e:cf:5f:fb:39:40:f9:b6:02:10: b3:26:36:2c:5f:33:1d:81:9d:6e:89:52:cb:67:13: 1a:38:c2:16:58:0c:4d:1c:6c:77:1c:15:5d:52:84: 89:a4:76:af:aa:d5:a8:88:5d:23:77:67:fd:64:5a: d7:39:46:a4:21:4f:a4:75:ea:89:99:93:a8:c7:67: b0:9f:5b:90:84:40:6e:5f:82:03:a1:41:10:f1:0a: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DC:25:78:3B:35:31:1F:FD:60:E8:60:75:81:43:A6:CB:F4:C1:F9 X509v3 Authority Key Identifier: keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/E8DBB35C615F11F0B2AE1244C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.191.0/24 Signature Algorithm: sha256WithRSAEncryption c8:45:c2:5a:7e:a1:1c:c2:e8:fb:c7:e5:43:f7:c0:28:c7:3a: d2:df:ce:3f:02:2b:4a:50:62:a1:0b:85:b5:7a:ae:8d:0a:0a: 79:0c:a5:d9:92:c8:ba:5e:13:06:19:31:17:a0:7b:6f:a8:78: 2b:14:54:5a:d0:92:e7:b5:02:0e:1d:e6:fa:90:0f:ec:3b:24: 35:ea:bb:c3:ff:c6:67:e7:b8:f9:e1:4a:05:18:9e:2d:7e:48: a4:56:1d:7d:86:0a:77:0e:dc:fc:bc:d8:dc:ea:ab:13:96:56: 72:65:28:ec:19:a1:d6:a2:73:ae:ce:11:cb:42:39:76:38:68: 66:36:a8:ab:89:5e:fe:f1:db:7f:fb:c9:c7:c8:a4:08:91:aa: bf:6c:ae:ba:4e:ea:19:0b:fb:e4:c1:32:3e:44:a2:5f:69:ef: 76:52:88:44:42:8c:0c:cc:3f:4a:9f:3e:cd:33:52:b6:31:bc: fc:51:39:90:93:b0:1f:8d:6c:c3:00:82:52:d1:dc:b1:60:08: a1:46:c2:aa:57:21:ef:56:15:1e:92:c3:14:25:b9:2e:2e:5c: f5:7c:90:5c:ed:7d:7d:eb:b9:d4:50:23:22:8c:7b:ab:9d:0b: 02:1b:d2:a3:6f:b7:06:09:5a:8c:84:3f:00:cf:04:e2:76:ce: b5:4b:c9:46 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBEjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUE4QjExMC8GA1UEBRMoNDFDNzU3MTQyOTlBNTc4REQxOTBGRDFGNzMwOTU1QjFG RDlBQzFGNDAeFw0yNTA3MTUwOTQxNDBaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NzYyMjU0LTIwMTcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCUITej2kOIjIQaB2uSe1HAWSEFULD3yAFle8+Y+ghljqHLAEEQjCibJniollqn 97QkWUTJczZ9vA+ylg2RWprAx0yHA6jrrInix/okzR03JMRgbIHE464DMlVg30+8 fPTlgPS0jNkurWhqjcrugd9HJ6WNV7UnEhpFB2LFEyBOZayfSSxk3wbpKiAenRC+ OL40HEZm5gsyySkzppUG9Ef2m5frTP20uahYLs9f+zlA+bYCELMmNixfMx2BnW6J UstnExo4whZYDE0cbHccFV1ShImkdq+q1aiIXSN3Z/1kWtc5RqQhT6R16omZk6jH Z7CfW5CEQG5fggOhQRDxCk0tAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUMtwleDs1 MR/9YOhgdYFDpsv0wfkwHwYDVR0jBBgwFoAUQcdXFCmaV43RkP0fcwlVsf2awfQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQThCL0JBMDhBQTQyNEI4 MTExRjA4RjY1NTA3RUM0RjlBRTAyL1FjZFhGQ21hVjQzUmtQMGZjd2xWc2YyYXdm US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUWNkWEZDbWFWNDNSa1AwZmN3bFZzZjJhd2ZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUE4Qi9CQTA4QUE0MjRCODExMUYwOEY2NTUwN0VDNEY5QUUwMi9FOERCQjM1QzYx NUYxMUYwQjJBRTEyNDRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVjvzANBgkqhkiG9w0BAQsFAAOCAQEAyEXCWn6hHMLo+8fl Q/fAKMc60t/OPwIrSlBioQuFtXqujQoKeQyl2ZLIul4TBhkxF6B7b6h4KxRUWtCS 57UCDh3m+pAP7DskNeq7w//GZ+e4+eFKBRieLX5IpFYdfYYKdw7c/LzY3OqrE5ZW cmUo7Bmh1qJzrs4Ry0I5djhoZjaoq4le/vHbf/vJx8ikCJGqv2yuuk7qGQv75MEy PkSiX2nvdlKIREKMDMw/Sp8+zTNStjG8/FE5kJOwH41swwCCUtHcsWAIoUbCqlch 71YVHpLDFCW5Li5c9XyQXO19feu51FAjIox7q50LAhvSo2+3BglajIQ/AM8E4nbO tUvJRg== -----END CERTIFICATE-----Generated at Sun Jul 20 14:15:00 2025 by rpki-client