$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/D24370A6638211F087594469C4F9AE02.roa File: D24370A6638211F087594469C4F9AE02.roa (raw, json) Hash identifier: BC9hUQT1LjynnO8EIFYzWbutVI812gfFy3AK+b9ATvM= Subject key identifier: 6E:5F:5B:30:56:1E:73:6E:E8:B1:47:1F:52:9D:53:27:77:6A:35:0F Certificate issuer: /CN=A91C7EF2/serialNumber=9B9D39725B27D420281385163492FF75F15113DA Certificate serial: 02 Authority key identifier: 9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/D24370A6638211F087594469C4F9AE02.roa Signing time: Fri 18 Jul 2025 02:56:37 +0000 ROA not before: Fri 18 Jul 2025 02:56:37 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 135045 IP address blocks: 165.101.222.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 08:31:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7EF2, serialNumber=9B9D39725B27D420281385163492FF75F15113DA Validity Not Before: Jul 18 02:56:37 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6879b7e5-706d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d7:3b:8b:a6:da:6a:d6:a9:1f:59:e4:2b:7f: 40:f7:dd:cc:a3:2c:55:6e:5f:5a:36:d2:c0:48:50: 2d:c3:ea:9c:b7:a4:c7:e5:4a:1c:67:82:a8:15:4f: 00:dd:df:70:d4:0b:b6:6f:28:ee:42:3f:4c:c9:1a: a9:17:77:6b:e3:f5:8f:f2:26:3b:4d:b6:ea:b3:c6: 5b:61:30:12:bc:74:08:f6:e8:d0:98:fd:6e:a6:62: f5:50:9b:b3:f7:df:37:40:c8:c6:40:54:ba:98:fc: 6d:71:bd:7e:23:0a:4b:1f:a3:9f:c2:5e:14:f4:08: 52:e3:58:1d:67:9b:3e:de:9d:0b:fe:eb:c4:9e:ff: 6b:23:e3:79:a7:09:38:f9:99:a0:dc:74:de:9c:f2: 19:07:6c:98:3e:42:a4:2a:51:b4:5e:53:cf:46:44: cf:92:a5:77:2d:dc:8c:5d:2c:7a:ff:e6:6c:68:1e: e6:36:c4:a3:ec:7d:f2:f9:c4:4b:8d:6e:9a:9b:85: a2:78:5e:d3:f3:f4:5d:29:11:06:92:cf:7f:5b:c4: 06:a3:32:98:d4:55:4b:51:de:ca:59:5b:56:09:09: 04:4f:99:e1:30:e4:dd:e9:49:db:ef:44:18:dc:ba: 46:1b:2b:ba:1c:20:0a:94:77:36:bc:42:74:f2:62: 5d:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:5F:5B:30:56:1E:73:6E:E8:B1:47:1F:52:9D:53:27:77:6A:35:0F X509v3 Authority Key Identifier: keyid:9B:9D:39:72:5B:27:D4:20:28:13:85:16:34:92:FF:75:F1:51:13:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/m505clsn1CAoE4UWNJL_dfFRE9o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/m505clsn1CAoE4UWNJL_dfFRE9o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7EF2/6226C936638111F0A33D2364C4F9AE02/D24370A6638211F087594469C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.222.0/23 Signature Algorithm: sha256WithRSAEncryption 9f:ed:3d:d3:67:77:0e:72:31:58:64:a8:21:82:ff:1c:c4:c0: e8:33:f5:eb:c0:28:be:f0:fe:bf:c7:30:49:dd:f2:f0:c4:5d: a4:80:98:61:7f:1a:a9:94:3d:97:ef:47:21:45:0f:88:a4:09: 5b:5c:3b:b8:ba:27:3a:44:f7:38:30:e9:9c:98:fa:0c:d4:08: 34:6c:4d:82:3d:b2:a9:cb:18:b2:16:49:63:9d:49:54:26:ce: 9e:9b:82:1a:ef:11:29:29:9f:9b:b0:38:b1:cf:65:11:0c:3f: 63:01:11:b6:28:95:2a:92:0c:1c:5c:d0:b8:1d:00:52:17:57: 25:72:0f:83:d2:cd:de:29:45:a8:7c:fd:8f:52:b0:82:68:47: 07:30:d0:ca:c0:77:78:56:4e:e9:38:2e:79:1e:fc:26:ee:b2: 79:39:54:da:96:e5:cf:5e:a8:2c:d9:71:2b:98:24:af:3c:a6: 0f:30:2c:15:5d:6d:af:31:3b:28:1b:68:4c:a0:55:1f:a4:82: fd:7b:b6:94:2a:ce:38:07:a0:50:5a:33:58:f4:31:6a:4d:87: 0b:a6:1d:a3:0f:2b:4d:50:c9:f4:54:03:c1:51:43:ec:7b:f1: b9:33:05:b1:77:ce:8f:0a:fa:11:dc:f4:68:e8:38:47:18:0a: 9e:2b:da:b9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0VGMjExMC8GA1UEBRMoOUI5RDM5NzI1QjI3RDQyMDI4MTM4NTE2MzQ5MkZGNzVG MTUxMTNEQTAeFw0yNTA3MTgwMjU2MzdaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NzliN2U1LTcwNmQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCy1zuLptpq1qkfWeQrf0D33cyjLFVuX1o20sBIUC3D6py3pMflShxngqgVTwDd 33DUC7ZvKO5CP0zJGqkXd2vj9Y/yJjtNtuqzxlthMBK8dAj26NCY/W6mYvVQm7P3 3zdAyMZAVLqY/G1xvX4jCksfo5/CXhT0CFLjWB1nmz7enQv+68Se/2sj43mnCTj5 maDcdN6c8hkHbJg+QqQqUbReU89GRM+SpXct3IxdLHr/5mxoHuY2xKPsffL5xEuN bpqbhaJ4XtPz9F0pEQaSz39bxAajMpjUVUtR3spZW1YJCQRPmeEw5N3pSdvvRBjc ukYbK7ocIAqUdza8QnTyYl0HAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUbl9bMFYe c27osUcfUp1TJ3dqNQ8wHwYDVR0jBBgwFoAUm505clsn1CAoE4UWNJL/dfFRE9ow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3RUYyLzYyMjZDOTM2NjM4 MTExRjBBMzNEMjM2NEM0RjlBRTAyL201MDVjbHNuMUNBb0U0VVdOSkxfZGZGUkU5 by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbTUwNWNsc24xQ0FvRTRVV05KTF9kZkZSRTlvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0VGMi82MjI2QzkzNjYzODExMUYwQTMzRDIzNjRDNEY5QUUwMi9EMjQzNzBBNjYz ODIxMUYwODc1OTQ0NjlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVl3jANBgkqhkiG9w0BAQsFAAOCAQEAn+0902d3DnIxWGSo IYL/HMTA6DP168AovvD+v8cwSd3y8MRdpICYYX8aqZQ9l+9HIUUPiKQJW1w7uLon OkT3ODDpnJj6DNQINGxNgj2yqcsYshZJY51JVCbOnpuCGu8RKSmfm7A4sc9lEQw/ YwERtiiVKpIMHFzQuB0AUhdXJXIPg9LN3ilFqHz9j1KwgmhHBzDQysB3eFZO6Tgu eR78Ju6yeTlU2pblz16oLNlxK5gkrzymDzAsFV1trzE7KBtoTKBVH6SC/Xu2lCrO OAegUFozWPQxak2HC6Ydow8rTVDJ9FQDwVFD7HvxuTMFsXfOjwr6Edz0aOg4RxgK nivauQ== -----END CERTIFICATE-----Generated at Mon Jul 21 09:08:31 2025 by rpki-client