$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/76C6B0C8105511EC92580578C4F9AE02.roa File: 76C6B0C8105511EC92580578C4F9AE02.roa (raw, json) Hash identifier: nImh0chjNnNupjUcXmy5flybgVwGuOBY4DzsaxQpkSU= Subject key identifier: B4:29:FA:F5:4E:9F:D1:A9:25:92:87:22:30:7A:45:BB:AC:5D:3B:AB Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 061A Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/76C6B0C8105511EC92580578C4F9AE02.roa Signing time: Wed 09 Jul 2025 07:36:31 +0000 ROA not before: Wed 09 Jul 2025 07:36:31 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 138524 IP address blocks: 27.130.248.0/24 maxlen: 24 27.130.249.0/24 maxlen: 24 27.130.252.0/24 maxlen: 24 103.170.130.0/23 maxlen: 23 180.183.0.0/24 maxlen: 24 180.183.1.0/24 maxlen: 24 2407:b1c0::/32 maxlen: 32 2407:b1c0:b00::/48 maxlen: 48 2407:b1c0:d00::/48 maxlen: 48 2407:b1c0:d10::/44 maxlen: 44 2407:b1c0:d20::/44 maxlen: 44 2407:b1c0:4d10::/44 maxlen: 44 2407:b1c0:4d20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 23:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1562 (0x61a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: Jul 9 07:36:31 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=686e1bff-c6d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:22:15:8a:00:4e:45:b0:da:8c:38:bc:41:d9: 15:a7:a8:4e:3e:75:54:d6:e2:b5:13:7f:9d:60:3a: ec:27:ff:75:ac:43:85:a3:72:e3:bd:76:9b:e3:00: 22:03:5e:9f:a1:a0:4f:3c:8e:54:26:d9:aa:e0:b0: f0:cc:53:46:1a:f5:df:1e:a0:12:75:47:9e:d6:d4: 7f:4e:19:88:7f:88:8a:ea:d5:1c:72:86:9f:f7:ec: e5:84:ed:ca:d5:5d:96:ec:38:4a:d8:2f:6e:cf:dc: 00:28:34:77:30:ed:07:2b:5e:ee:e6:e5:d5:7a:47: ee:b3:ee:d1:5b:d3:c5:43:f7:eb:b0:7d:76:2b:b8: 40:e2:21:51:6f:ce:ab:bf:51:8b:09:f6:2a:dd:b0: 8d:99:ff:08:7b:a1:ad:6f:99:bb:c0:51:4e:d9:4b: 60:89:26:34:cb:fa:e1:78:2d:fc:fe:9e:94:ce:e1: aa:89:d8:84:d6:37:7a:70:03:9d:6d:0d:b9:5a:cc: 46:01:0e:85:04:62:83:30:ff:b1:22:e5:71:83:39: e0:5c:1e:70:bb:c0:07:ad:40:a2:e0:70:ab:6e:f7: 13:3e:e3:1a:09:6c:be:b9:c7:bf:67:42:79:3f:15: 6e:53:b3:ef:07:fa:ab:12:0e:16:7c:b4:6c:0d:53: 47:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:29:FA:F5:4E:9F:D1:A9:25:92:87:22:30:7A:45:BB:AC:5D:3B:AB X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/76C6B0C8105511EC92580578C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.130.248.0/23 27.130.252.0/24 103.170.130.0/23 180.183.0.0/23 IPv6: 2407:b1c0::/32 Signature Algorithm: sha256WithRSAEncryption 63:ce:18:7a:82:bf:b9:e3:a7:c4:cf:65:da:d5:19:a5:14:23: b2:bb:2b:d3:9e:d4:2a:b2:8e:f0:fe:e6:38:cb:29:cf:cc:f1: ad:06:5c:d3:05:bb:5c:b8:e4:bc:84:c4:98:7e:ff:0a:60:2b: 47:42:2a:3a:50:e7:18:1d:2a:0e:b0:28:11:1c:0c:f0:0e:82: 27:dd:59:12:14:2c:cf:ef:e8:4a:4d:59:cc:a5:e1:9d:13:23: 6e:41:31:8e:c5:f7:31:76:64:5b:7a:eb:46:dc:e1:4f:72:af: b1:7f:80:22:29:05:01:de:c7:f3:18:c7:ab:57:a1:07:3a:02: 13:ed:94:39:17:d2:fd:1c:28:a3:6a:3a:5e:07:34:fa:37:02: fc:6e:37:1b:83:70:fa:49:f6:cd:d9:d0:ef:47:46:92:98:81: cb:29:e0:60:90:c9:a2:6c:ba:ef:c0:5e:a7:27:d3:68:31:9b: df:14:0f:f1:71:25:f0:51:3d:f3:ad:88:43:b4:d3:98:ef:c8: 6e:9c:98:7e:37:5c:80:68:87:1e:5b:31:dc:17:80:ff:5c:26: 86:88:21:22:86:77:c9:5d:c7:66:3f:0f:27:b3:73:44:fb:e6: e6:f9:b9:f6:0e:0e:a9:05:2e:5c:e1:21:05:73:f1:c7:28:8b: 8e:fa:c8:d8 -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICBhowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjUwNzA5MDczNjMxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODZlMWJmZi1jNmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6yIVigBORbDajDi8QdkVp6hOPnVU1uK1E3+dYDrsJ/91rEOFo3LjvXab4wAi A16foaBPPI5UJtmq4LDwzFNGGvXfHqASdUee1tR/ThmIf4iK6tUccoaf9+zlhO3K 1V2W7DhK2C9uz9wAKDR3MO0HK17u5uXVekfus+7RW9PFQ/frsH12K7hA4iFRb86r v1GLCfYq3bCNmf8Ie6Gtb5m7wFFO2UtgiSY0y/rheC38/p6UzuGqidiE1jd6cAOd bQ25WsxGAQ6FBGKDMP+xIuVxgzngXB5wu8AHrUCi4HCrbvcTPuMaCWy+uce/Z0J5 PxVuU7PvB/qrEg4WfLRsDVNHbwIDAQABo4ICtjCCArIwHQYDVR0OBBYEFLQp+vVO n9GpJZKHIjB6RbusXTurMB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvNzZDNkIwQzgx MDU1MTFFQzkyNTgwNTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAEbgvgDBAAbgvwDBAFnqoIDBAG0twAwDQQCAAIwBwMFACQH scAwDQYJKoZIhvcNAQELBQADggEBAGPOGHqCv7njp8TPZdrVGaUUI7K7K9Oe1Cqy jvD+5jjLKc/M8a0GXNMFu1y45LyExJh+/wpgK0dCKjpQ5xgdKg6wKBEcDPAOgifd WRIULM/v6EpNWcyl4Z0TI25BMY7F9zF2ZFt660bc4U9yr7F/gCIpBQHex/MYx6tX oQc6AhPtlDkX0v0cKKNqOl4HNPo3AvxuNxuDcPpJ9s3Z0O9HRpKYgcsp4GCQyaJs uu/AXqcn02gxm98UD/FxJfBRPfOtiEO005jvyG6cmH43XIBohx5bMdwXgP9cJoaI ISKGd8ldx2Y/Dyezc0T75ub5ufYODqkFLlzhIQVz8ccoi476yNg= -----END CERTIFICATE-----Generated at Sun Jul 20 07:52:03 2025 by rpki-client