$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/151DF27C622811F0B73BE516C4F9AE02.roa File: 151DF27C622811F0B73BE516C4F9AE02.roa (raw, json) Hash identifier: ryWZk4WLGGcXKcudFMNiB3yA26BHUntG7BSh+vyHPp8= Subject key identifier: 1A:00:02:C5:57:C8:59:80:12:E5:DF:7B:0B:D9:3C:A7:CE:51:1A:17 Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Certificate serial: 56 Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/151DF27C622811F0B73BE516C4F9AE02.roa Signing time: Wed 16 Jul 2025 10:51:47 +0000 ROA not before: Wed 16 Jul 2025 10:51:47 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 4826 IP address blocks: 203.2.221.0/24 maxlen: 24 203.2.222.0/24 maxlen: 24 203.2.223.0/24 maxlen: 24 203.28.214.0/24 maxlen: 24 203.28.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 07:54:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 86 (0x56) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Validity Not Before: Jul 16 10:51:47 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68778443-d478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d1:34:77:42:a6:2e:57:83:12:3e:99:75:eb: 44:ac:93:99:1b:77:66:cc:24:1e:9d:d6:fd:b8:5d: bb:3e:9d:0d:c9:84:03:85:b1:91:3b:81:70:58:6d: a3:d0:a9:11:df:28:63:85:11:36:48:38:13:3e:62: 0f:53:6c:6d:be:44:13:43:18:34:03:49:74:9a:a0: 25:d5:bc:35:0f:13:1f:96:f3:50:86:63:e3:8a:50: 5d:5d:70:12:26:96:c9:48:db:0b:69:02:26:8f:23: b1:de:d2:c9:21:27:55:d0:a3:41:37:ac:53:d6:39: 40:14:da:9a:af:5d:01:47:24:f9:a1:0d:12:d2:61: 03:cf:f8:5f:0e:c1:54:f8:29:54:49:75:81:71:82: ae:97:0d:5d:7c:43:3c:ce:bf:c4:59:bb:0c:2a:a4: 89:2a:e4:17:97:55:77:05:49:0a:3d:f9:a5:5d:75: 15:d9:b2:e6:41:ac:6e:2a:01:81:16:da:e5:57:bd: 0b:b6:64:91:8c:da:5f:20:24:95:f4:0e:9f:e6:23: c8:41:35:3c:ac:28:dd:ae:9d:f0:fa:e8:8c:8f:cb: c2:6d:8b:ac:04:15:30:20:ba:05:67:1d:fd:13:49: 26:e2:a4:8d:14:b6:ff:10:5b:fe:f0:2c:30:a3:6d: c7:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:00:02:C5:57:C8:59:80:12:E5:DF:7B:0B:D9:3C:A7:CE:51:1A:17 X509v3 Authority Key Identifier: keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/151DF27C622811F0B73BE516C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.2.221.0-203.2.223.255 203.28.214.0/23 Signature Algorithm: sha256WithRSAEncryption 38:ec:12:8c:e9:d2:4b:48:26:ea:0d:bb:3c:f5:6b:fc:7c:74: 08:b8:d8:be:ca:5d:34:5a:5f:48:c0:e4:27:9d:88:3e:c9:b8: b4:02:dd:47:a2:93:2a:19:14:ca:b5:f0:b5:0f:9f:01:81:8c: cc:c7:cf:62:e4:90:db:51:46:78:cc:5f:8f:7e:8b:cb:db:09: 96:45:66:00:c5:43:e2:19:a6:ec:29:e0:36:c1:86:45:e7:f1: d1:9c:bb:40:f1:03:10:91:96:5b:5b:f4:1e:00:d7:b3:90:a3: a7:80:65:be:02:8d:65:01:9a:62:b4:30:5b:ad:18:e6:8e:71: 28:9d:79:75:e1:5d:25:5c:5d:4f:9f:c7:41:48:ae:16:a2:b8: 77:45:9c:5a:79:9b:eb:2e:00:36:31:68:72:5e:16:f5:e7:17: 3b:a7:7f:52:4c:95:d2:96:e9:5d:a4:a9:90:bf:43:e8:8a:e5: 32:7d:91:6e:30:4f:fa:90:d6:36:d9:f4:49:4e:56:3c:7d:37: 76:54:4d:28:c3:bf:5b:f1:56:f5:01:e4:bf:1d:de:26:b2:0e: 38:18:1c:75:5e:a3:8e:21:81:1b:20:91:ef:db:85:20:0a:f9: 3e:6a:7b:15:4e:dd:92:36:e8:eb:52:ac:ff:fc:f1:be:15:30: 59:60:c8:51 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIBVjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0FBNTExMC8GA1UEBRMoRjcyNjdFODBCRTgxN0YwNDNEMjhGQjdFNzMwNUY0QzQ4 OEE4MzkxQTAeFw0yNTA3MTYxMDUxNDdaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4Nzc4NDQzLWQ0NzgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCz0TR3QqYuV4MSPpl160Ssk5kbd2bMJB6d1v24Xbs+nQ3JhAOFsZE7gXBYbaPQ qRHfKGOFETZIOBM+Yg9TbG2+RBNDGDQDSXSaoCXVvDUPEx+W81CGY+OKUF1dcBIm lslI2wtpAiaPI7He0skhJ1XQo0E3rFPWOUAU2pqvXQFHJPmhDRLSYQPP+F8OwVT4 KVRJdYFxgq6XDV18QzzOv8RZuwwqpIkq5BeXVXcFSQo9+aVddRXZsuZBrG4qAYEW 2uVXvQu2ZJGM2l8gJJX0Dp/mI8hBNTysKN2unfD66IyPy8Jti6wEFTAgugVnHf0T SSbipI0Utv8QW/7wLDCjbceHAgMBAAGjggKjMIICnzAdBgNVHQ4EFgQUGgACxVfI WYAS5d97C9k8p85RGhcwHwYDVR0jBBgwFoAU9yZ+gL6BfwQ9KPt+cwX0xIioORow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3QUE1L0JBRkIzNTc0MTVC QjExRjBCRkQ1NDg4MUM0RjlBRTAyLzl5Wi1nTDZCZndROUtQdC1jd1gweElpb09S by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXlaLWdMNkJmd1E5S1B0LWN3WDB4SWlvT1JvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0FBNS9CQUZCMzU3NDE1QkIxMUYwQkZENTQ4ODFDNEY5QUUwMi8xNTFERjI3QzYy MjgxMUYwQjczQkU1MTZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQe MBwwGgQCAAEwFDAMAwQAywLdAwQFywLAAwQByxzWMA0GCSqGSIb3DQEBCwUAA4IB AQA47BKM6dJLSCbqDbs89Wv8fHQIuNi+yl00Wl9IwOQnnYg+ybi0At1HopMqGRTK tfC1D58BgYzMx89i5JDbUUZ4zF+PfovL2wmWRWYAxUPiGabsKeA2wYZF5/HRnLtA 8QMQkZZbW/QeANezkKOngGW+Ao1lAZpitDBbrRjmjnEonXl14V0lXF1Pn8dBSK4W orh3RZxaeZvrLgA2MWhyXhb15xc7p39STJXSluldpKmQv0PoiuUyfZFuME/6kNY2 2fRJTlY8fTd2VE0ow79b8Vb1AeS/Hd4msg44GBx1XqOOIYEbIJHv24UgCvk+ansV Tt2SNujrUqz//PG+FTBZYMhR -----END CERTIFICATE-----Generated at Sun Jul 20 14:26:46 2025 by rpki-client