$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa File: 64B67878AE7711EA98E12731C4F9AE02.roa (raw, json) Hash identifier: od3A6kHPsKQb/WA2j5c2wSIgSUJ4UzMllV3CZbEVjw8= Subject key identifier: 96:82:CE:49:B1:7E:4D:F3:2E:94:7F:73:CE:38:8E:D2:45:5C:3F:C6 Certificate issuer: /CN=A91304A9/serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Certificate serial: 0B8D Authority key identifier: 58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa Signing time: Thu 28 Aug 2025 19:40:48 +0000 ROA not before: Thu 28 Aug 2025 19:40:48 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 7262 IP address blocks: 116.66.218.0/24 maxlen: 24 116.66.219.0/24 maxlen: 24 2400:8800:1e82::/48 maxlen: 48 2400:8800:1e8f::/48 maxlen: 48 2400:8800:9e11::/48 maxlen: 48 2400:8800:9e12::/48 maxlen: 48 2400:8800:9e13::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 19:53:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2957 (0xb8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91304A9, serialNumber=580553B883DEC3DDB24F688E6C2D1BFA93C263AA Validity Not Before: Aug 28 19:40:48 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68b0b0c0-6203 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:50:32:9f:96:0d:ec:2c:35:e9:a4:8c:a6:20: 9d:de:73:9f:95:63:be:cb:e7:26:11:00:50:77:6a: b1:00:67:62:bf:8d:52:05:cd:c3:bf:89:f0:0c:8e: 65:f7:3b:64:82:63:fd:c4:30:13:ae:ae:26:80:ff: d9:38:85:f8:17:9f:3e:53:98:7e:1c:7a:e6:9e:9e: 34:cb:08:67:a7:29:08:4c:a0:0c:3e:49:28:7d:c1: d5:9a:c2:60:9c:72:2b:ff:6c:56:fe:06:67:02:24: 8a:f7:2c:d7:7a:05:fd:64:df:a5:15:11:a3:8e:94: 89:d6:01:47:25:01:93:ed:25:c9:3c:8d:ed:ce:3f: 39:ff:a0:6e:e0:3b:3a:04:06:00:f3:a9:03:0a:fd: d9:57:e7:c5:7a:2a:60:39:3d:ca:6d:65:47:df:85: 5c:0c:3b:b5:09:1f:38:42:5e:ad:9e:4d:d1:b4:cd: b7:b8:f4:85:35:c8:84:31:c3:c2:d0:06:34:8e:2b: 04:92:a0:02:10:c8:27:9d:9f:51:7d:31:63:b4:cb: 10:f5:f5:2d:51:e8:b3:2d:ff:f9:24:f8:d1:3a:3d: d9:e1:eb:95:26:0c:04:1d:80:ec:d2:99:45:b1:21: 0a:a4:6a:fe:7c:2b:3b:e6:a8:5d:bc:81:f9:9c:f7: f3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:82:CE:49:B1:7E:4D:F3:2E:94:7F:73:CE:38:8E:D2:45:5C:3F:C6 X509v3 Authority Key Identifier: keyid:58:05:53:B8:83:DE:C3:DD:B2:4F:68:8E:6C:2D:1B:FA:93:C2:63:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/WAVTuIPew92yT2iObC0b-pPCY6o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WAVTuIPew92yT2iObC0b-pPCY6o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/A374A1B6467111EA81ABB25FC4F9AE02/64B67878AE7711EA98E12731C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.66.218.0/23 IPv6: 2400:8800:1e82::/48 2400:8800:1e8f::/48 2400:8800:9e11::-2400:8800:9e13:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 4c:17:8a:9c:0b:21:e5:dc:52:d5:07:c2:ec:b4:ec:26:0a:89: f9:30:42:21:ee:3e:c8:05:f0:b2:1f:d9:e0:f1:1e:4b:06:63: a2:10:5a:d4:43:b3:a8:8f:10:e9:33:7b:1b:fa:6e:9d:22:b7: 71:9b:65:c8:21:58:b9:c6:ad:c7:bd:06:09:b1:dc:af:ca:9a: cb:28:15:38:b4:b7:fe:78:81:57:c0:ba:9c:ef:a8:79:d1:58: 25:1d:13:7c:32:cc:b7:88:34:26:c2:06:9a:59:89:0c:f2:d9: de:18:b4:94:50:fc:b4:85:f0:71:42:a4:0d:52:43:b3:ff:f5: 09:a1:43:23:a0:87:52:db:44:e9:f7:eb:49:f1:4a:1f:ff:84: f7:d9:82:70:2f:6a:e5:12:9c:9d:72:70:44:f9:af:56:fe:26: 4c:f4:1b:80:fe:3a:f9:20:03:1f:6b:88:a0:95:b9:0b:81:e3: 5d:c1:7f:03:ea:52:c9:72:d8:1f:aa:28:c6:d6:f4:f8:d4:b4: cd:0c:ab:ba:6a:9d:0e:e8:cb:62:1d:a5:2e:2d:b5:73:19:a3: 69:50:96:af:06:a1:fb:2b:82:27:bb:76:4d:78:ea:ca:97:7d: 8e:7b:a9:35:45:3f:1f:5a:09:fa:3f:32:37:53:55:f8:15:b9: 61:da:9a:a5 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgICC40wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzA0QTkxMTAvBgNVBAUTKDU4MDU1M0I4ODNERUMzRERCMjRGNjg4RTZDMkQxQkZB OTNDMjYzQUEwHhcNMjUwODI4MTk0MDQ4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwYjBjMC02MjAzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlFAyn5YN7Cw16aSMpiCd3nOflWO+y+cmEQBQd2qxAGdiv41SBc3Dv4nwDI5l 9ztkgmP9xDATrq4mgP/ZOIX4F58+U5h+HHrmnp40ywhnpykITKAMPkkofcHVmsJg nHIr/2xW/gZnAiSK9yzXegX9ZN+lFRGjjpSJ1gFHJQGT7SXJPI3tzj85/6Bu4Ds6 BAYA86kDCv3ZV+fFeipgOT3KbWVH34VcDDu1CR84Ql6tnk3RtM23uPSFNciEMcPC 0AY0jisEkqACEMgnnZ9RfTFjtMsQ9fUtUeizLf/5JPjROj3Z4euVJgwEHYDs0plF sSEKpGr+fCs75qhdvIH5nPfzLwIDAQABo4ICwzCCAr8wHQYDVR0OBBYEFJaCzkmx fk3zLpR/c844jtJFXD/GMB8GA1UdIwQYMBaAFFgFU7iD3sPdsk9ojmwtG/qTwmOq MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMDRBOS9BMzc0QTFCNjQ2 NzExMUVBODFBQkIyNUZDNEY5QUUwMi9XQVZUdUlQZXc5MnlUMmlPYkMwYi1wUENZ Nm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1dBVlR1SVBldzkyeVQyaU9iQzBiLXBQQ1k2by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzA0QTkvQTM3NEExQjY0NjcxMTFFQTgxQUJCMjVGQzRGOUFFMDIvNjRCNjc4NzhB RTc3MTFFQTk4RTEyNzMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTQYIKwYBBQUHAQcBAf8E PjA8MAwEAgABMAYDBAF0QtowLAQCAAIwJgMHACQAiAAeggMHACQAiAAejzASAwcA JACIAJ4RAwcCJACIAJ4QMA0GCSqGSIb3DQEBCwUAA4IBAQBMF4qcCyHl3FLVB8Ls tOwmCon5MEIh7j7IBfCyH9ng8R5LBmOiEFrUQ7OojxDpM3sb+m6dIrdxm2XIIVi5 xq3HvQYJsdyvyprLKBU4tLf+eIFXwLqc76h50VglHRN8Msy3iDQmwgaaWYkM8tne GLSUUPy0hfBxQqQNUkOz//UJoUMjoIdS20Tp9+tJ8Uof/4T32YJwL2rlEpydcnBE +a9W/iZM9BuA/jr5IAMfa4iglbkLgeNdwX8D6lLJctgfqijG1vT41LTNDKu6ap0O 6MtiHaUuLbVzGaNpUJavBqH7K4Inu3ZNeOrKl32Oe6k1RT8fWgn6PzI3U1X4Fblh 2pql -----END CERTIFICATE-----Generated at Sat Oct 25 11:28:25 2025 by rpki-client