$ rpki-client -vvf rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/4F9ACB7461F511F0A6467D40C4F9AE02.roa File: 4F9ACB7461F511F0A6467D40C4F9AE02.roa (raw, json) Hash identifier: nLXw8xHgVCwgAvRtHZxNQ9V3CXfxyMaz7CQisoDfvuU= Subject key identifier: BE:B7:21:66:39:FC:51:85:9B:CD:AC:13:74:95:06:A9:4C:B5:5C:0D Certificate issuer: /CN=A91C31A2/serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Certificate serial: 0250 Authority key identifier: 40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/4F9ACB7461F511F0A6467D40C4F9AE02.roa Signing time: Wed 16 Jul 2025 03:31:08 +0000 ROA not before: Wed 16 Jul 2025 03:31:08 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 13335 IP address blocks: 164.52.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 02:21:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 592 (0x250) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C31A2, serialNumber=40E58263972B9E24142BAA9B5AFA053481A3719E Validity Not Before: Jul 16 03:31:08 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68771cfc-06d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:8a:32:53:35:55:b9:d7:44:82:c3:62:9c: 2d:89:13:e3:31:0f:70:10:eb:39:89:d1:f5:cc:84: d2:e5:f5:0a:11:0f:e9:66:b3:4e:ee:ef:f0:5d:e5: 6a:f0:70:1a:46:78:6c:20:1b:a1:f7:5e:7e:75:40: b2:51:4a:3a:53:a3:ad:22:10:ad:67:c0:57:52:56: 3e:1d:c9:d8:86:62:84:a9:b2:16:87:29:d1:01:77: cb:13:64:43:a2:cc:65:6d:5f:f4:4b:34:1b:ba:f9: 93:c6:e9:f6:4e:c2:e8:72:b6:5b:7a:ab:21:2a:b2: c9:ef:89:f5:d9:c0:e3:77:5d:72:97:89:f8:84:60: 7a:8b:ad:8d:42:1c:35:9f:a6:ca:19:c8:5f:4d:fb: fb:d0:dd:45:58:17:50:b7:b9:a4:88:cf:e4:a2:17: 04:af:6a:03:c0:0e:6b:26:53:0c:80:0f:f5:fc:4f: fe:09:18:69:f4:b3:db:ed:67:f4:f1:d5:9e:43:fd: f5:6c:64:c5:fa:1c:30:b8:29:27:f3:7f:07:ac:d6: e8:0c:73:36:46:67:0a:5f:c9:67:89:87:5d:27:eb: 47:d2:44:1d:14:1b:08:85:4d:cc:a8:18:1d:1a:98: 0b:34:f2:02:a6:ce:bd:cc:eb:5a:71:53:78:84:86: 4a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:B7:21:66:39:FC:51:85:9B:CD:AC:13:74:95:06:A9:4C:B5:5C:0D X509v3 Authority Key Identifier: keyid:40:E5:82:63:97:2B:9E:24:14:2B:AA:9B:5A:FA:05:34:81:A3:71:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/QOWCY5crniQUK6qbWvoFNIGjcZ4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QOWCY5crniQUK6qbWvoFNIGjcZ4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C31A2/D476ED76357211EDAE977839C4F9AE02/4F9ACB7461F511F0A6467D40C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.52.62.0/23 Signature Algorithm: sha256WithRSAEncryption 83:9f:06:91:df:42:8d:bb:39:83:16:ab:75:a6:0c:88:2d:91: 85:ff:80:39:b5:62:bc:a1:3a:7d:d2:8c:46:2d:22:e1:06:fa: 96:dc:05:03:38:5d:9a:fe:4b:2e:2d:c8:59:d2:e2:5a:03:76: 83:6f:be:54:67:6c:ee:ef:d4:5c:ef:eb:94:13:43:ef:41:a5: 3c:6e:ba:c0:40:72:2b:b2:3c:3a:16:be:18:dd:09:5b:e7:13: e4:e1:fb:9f:30:39:8b:3c:14:74:44:45:15:11:27:70:c1:41: 12:ab:53:5f:ea:d2:ba:b9:a5:45:5f:1f:27:b3:e5:40:87:6e: c2:23:1f:89:f9:c6:b3:49:81:1c:29:f1:8d:f7:e5:08:bc:30: 4a:04:4f:e2:26:ec:a0:0a:96:02:07:2b:c9:42:fd:c4:9e:07: 67:70:64:22:52:0a:7f:b8:17:c9:94:37:ed:09:e9:4a:00:02: 7d:55:b1:8c:d7:a5:74:79:53:46:5b:1a:7b:f6:8f:cb:b4:0b: 75:dd:ab:48:1a:36:18:d5:e9:fc:f3:44:cb:6a:74:70:b4:27: af:b2:8a:0f:d9:ff:23:77:cd:1d:a2:af:ca:a3:0f:ab:8c:45: 0b:cf:88:32:f9:f1:96:66:1f:8e:de:eb:b2:bb:8f:83:35:09: 4f:34:58:3d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMxQTIxMTAvBgNVBAUTKDQwRTU4MjYzOTcyQjlFMjQxNDJCQUE5QjVBRkEwNTM0 ODFBMzcxOUUwHhcNMjUwNzE2MDMzMTA4WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODc3MWNmYy0wNmQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtLOKMlM1VbnXRILDYpwtiRPjMQ9wEOs5idH1zITS5fUKEQ/pZrNO7u/wXeVq 8HAaRnhsIBuh915+dUCyUUo6U6OtIhCtZ8BXUlY+HcnYhmKEqbIWhynRAXfLE2RD osxlbV/0SzQbuvmTxun2TsLocrZbeqshKrLJ74n12cDjd11yl4n4hGB6i62NQhw1 n6bKGchfTfv70N1FWBdQt7mkiM/kohcEr2oDwA5rJlMMgA/1/E/+CRhp9LPb7Wf0 8dWeQ/31bGTF+hwwuCkn838HrNboDHM2RmcKX8lniYddJ+tH0kQdFBsIhU3MqBgd GpgLNPICps69zOtacVN4hIZKUwIDAQABo4IClTCCApEwHQYDVR0OBBYEFL63IWY5 /FGFm82sE3SVBqlMtVwNMB8GA1UdIwQYMBaAFEDlgmOXK54kFCuqm1r6BTSBo3Ge MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzFBMi9ENDc2RUQ3NjM1 NzIxMUVEQUU5Nzc4MzlDNEY5QUUwMi9RT1dDWTVjcm5pUVVLNnFiV3ZvRk5JR2pj WjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1FPV0NZNWNybmlRVUs2cWJXdm9GTklHamNaNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMxQTIvRDQ3NkVENzYzNTcyMTFFREFFOTc3ODM5QzRGOUFFMDIvNEY5QUNCNzQ2 MUY1MTFGMEE2NDY3RDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGkND4wDQYJKoZIhvcNAQELBQADggEBAIOfBpHfQo27OYMW q3WmDIgtkYX/gDm1YryhOn3SjEYtIuEG+pbcBQM4XZr+Sy4tyFnS4loDdoNvvlRn bO7v1Fzv65QTQ+9BpTxuusBAciuyPDoWvhjdCVvnE+Th+58wOYs8FHRERRURJ3DB QRKrU1/q0rq5pUVfHyez5UCHbsIjH4n5xrNJgRwp8Y335Qi8MEoET+Im7KAKlgIH K8lC/cSeB2dwZCJSCn+4F8mUN+0J6UoAAn1VsYzXpXR5U0ZbGnv2j8u0C3Xdq0ga NhjV6fzzRMtqdHC0J6+yig/Z/yN3zR2ir8qjD6uMRQvPiDL58ZZmH47e67K7j4M1 CU80WD0= -----END CERTIFICATE-----Generated at Sun Jul 20 12:31:46 2025 by rpki-client