$ rpki-client -vvf rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/4282D1FE646E11F0B9817D36C4F9AE02.roa File: 4282D1FE646E11F0B9817D36C4F9AE02.roa (raw, json) Hash identifier: wD0psrpZ8N2yh6yYDhmlPC1nQhfBRq0VtHwYcpyvMJM= Subject key identifier: E4:E8:36:F3:26:9D:30:1D:EE:05:D9:96:52:AC:E1:02:7C:18:D0:04 Certificate issuer: /CN=A91585F0/serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42 Certificate serial: 0A Authority key identifier: AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/4282D1FE646E11F0B9817D36C4F9AE02.roa Signing time: Sat 19 Jul 2025 07:01:58 +0000 ROA not before: Sat 19 Jul 2025 07:01:58 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 151786 IP address blocks: 165.101.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 01 Nov 2025 11:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10 (0xa) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91585F0, serialNumber=AAD6A0BCC4DB057E1469F1DDB3019B165330CE42 Validity Not Before: Jul 19 07:01:58 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=687b42e5-0756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:f5:35:72:1b:46:60:ec:2a:da:57:e2:00:53: 41:fb:b3:43:bb:56:2e:36:04:09:01:03:0c:0f:76: db:13:b3:b2:24:d4:07:ac:94:f1:91:fd:39:c1:84: f7:f8:ed:11:ce:f8:41:57:de:0d:d2:75:8c:7f:2d: 1a:43:97:dc:e6:20:ca:b0:97:91:44:b4:31:b4:f6: 67:11:5b:6f:66:63:93:4d:8f:34:f6:aa:37:e3:17: a8:44:0c:d5:f5:db:bb:2b:4f:d3:b4:2d:9e:a8:c3: b4:1b:9d:ab:8a:26:ea:db:28:cf:83:11:ef:22:ed: 1c:ab:72:72:bb:db:03:b7:95:6f:ee:cd:c6:4d:32: 4b:ab:91:6f:3f:c7:70:a5:f1:7e:19:c7:ff:0c:a1: fa:a9:d8:e7:71:92:17:35:84:c6:5b:43:98:c3:3b: 05:bc:96:68:92:61:d8:9f:1c:f7:ae:15:84:a5:a1: 5a:a4:78:24:59:f5:05:5c:e3:bf:79:46:20:a1:0a: 9c:37:65:50:ef:ac:61:b8:69:ce:b9:1c:b0:13:2c: 77:0d:21:74:54:e0:b9:b1:2f:e8:92:2f:13:55:c8: d7:32:0b:c8:62:2f:b4:8e:09:bf:57:61:19:d8:8d: 4a:e7:fb:22:54:7c:b7:a7:e9:2d:9b:7b:2a:36:e1: 7c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E8:36:F3:26:9D:30:1D:EE:05:D9:96:52:AC:E1:02:7C:18:D0:04 X509v3 Authority Key Identifier: keyid:AA:D6:A0:BC:C4:DB:05:7E:14:69:F1:DD:B3:01:9B:16:53:30:CE:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/qtagvMTbBX4UafHdswGbFlMwzkI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qtagvMTbBX4UafHdswGbFlMwzkI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91585F0/4BE69D02640011F0B1A1D57EC4F9AE02/4282D1FE646E11F0B9817D36C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.227.0/24 Signature Algorithm: sha256WithRSAEncryption 24:7c:0b:93:7c:e9:19:0b:45:a7:83:54:25:bb:40:2f:df:69: 65:be:05:11:60:4a:ec:f8:59:be:14:c1:a8:c4:8c:d2:24:45: 8c:66:a5:fe:e5:98:fe:20:b0:0c:b6:8d:fd:6f:21:43:4e:ab: 08:9a:9f:86:0f:f8:74:30:b1:6c:2c:a8:fe:0c:cd:e6:5b:b4: a8:53:2f:26:2b:54:5e:4a:c7:64:28:23:e4:b5:4f:b3:d2:71: cf:4f:36:dc:7d:af:22:58:2d:79:89:14:1a:19:8a:97:06:39: 35:36:12:08:8b:5b:bb:c5:97:bd:af:ba:42:28:29:b0:22:31: a6:0e:8c:a5:24:99:6b:f5:f7:09:e9:a7:88:a5:5a:24:46:bf: f2:8d:db:bf:49:a2:82:49:16:b3:4a:ae:45:ed:22:00:a2:14: 73:95:8d:cf:8b:5e:fc:e5:60:51:28:95:b9:f8:8a:4b:5b:f5: 98:66:59:62:37:2e:aa:95:9f:2c:54:b6:fe:ed:44:40:c0:93: 55:a1:3b:e1:c6:67:40:a1:31:ac:8c:31:1e:e0:73:c7:a0:b2: 69:b1:e4:e6:06:f6:3a:4e:3b:53:74:2d:a4:eb:48:9d:1d:a5: fe:e0:c3:41:4d:93:b0:53:11:3d:18:32:e0:20:96:dd:fa:65: 13:6f:c9:0c -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1 ODVGMDExMC8GA1UEBRMoQUFENkEwQkNDNERCMDU3RTE0NjlGMUREQjMwMTlCMTY1 MzMwQ0U0MjAeFw0yNTA3MTkwNzAxNThaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4N2I0MmU1LTA3NTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC59TVyG0Zg7CraV+IAU0H7s0O7Vi42BAkBAwwPdtsTs7Ik1AeslPGR/TnBhPf4 7RHO+EFX3g3SdYx/LRpDl9zmIMqwl5FEtDG09mcRW29mY5NNjzT2qjfjF6hEDNX1 27srT9O0LZ6ow7QbnauKJurbKM+DEe8i7RyrcnK72wO3lW/uzcZNMkurkW8/x3Cl 8X4Zx/8Mofqp2Odxkhc1hMZbQ5jDOwW8lmiSYdifHPeuFYSloVqkeCRZ9QVc4795 RiChCpw3ZVDvrGG4ac65HLATLHcNIXRU4LmxL+iSLxNVyNcyC8hiL7SOCb9XYRnY jUrn+yJUfLen6S2beyo24XwpAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU5Og28yad MB3uBdmWUqzhAnwY0AQwHwYDVR0jBBgwFoAUqtagvMTbBX4UafHdswGbFlMwzkIw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4NUYwLzRCRTY5RDAyNjQw MDExRjBCMUExRDU3RUM0RjlBRTAyL3F0YWd2TVRiQlg0VWFmSGRzd0diRmxNd3pr SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcXRhZ3ZNVGJCWDRVYWZIZHN3R2JGbE13emtJLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1 ODVGMC80QkU2OUQwMjY0MDAxMUYwQjFBMUQ1N0VDNEY5QUUwMi80MjgyRDFGRTY0 NkUxMUYwQjk4MTdEMzZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVl4zANBgkqhkiG9w0BAQsFAAOCAQEAJHwLk3zpGQtFp4NU JbtAL99pZb4FEWBK7PhZvhTBqMSM0iRFjGal/uWY/iCwDLaN/W8hQ06rCJqfhg/4 dDCxbCyo/gzN5lu0qFMvJitUXkrHZCgj5LVPs9Jxz0823H2vIlgteYkUGhmKlwY5 NTYSCItbu8WXva+6QigpsCIxpg6MpSSZa/X3CemniKVaJEa/8o3bv0migkkWs0qu Re0iAKIUc5WNz4te/OVgUSiVufiKS1v1mGZZYjcuqpWfLFS2/u1EQMCTVaE74cZn QKExrIwxHuBzx6CyabHk5gb2Ok47U3QtpOtInR2l/uDDQU2TsFMRPRgy4CCW3fpl E2/JDA== -----END CERTIFICATE-----Generated at Sun Oct 26 03:37:26 2025 by rpki-client