$ rpki-client -vvf rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/275CD490509D11F0977ED738C4F9AE02.roa File: 275CD490509D11F0977ED738C4F9AE02.roa (raw, json) Hash identifier: +DSv7iTs7gfRP37o+ltfeF9Fr9Q5pXetB1krCSNp1ZQ= Subject key identifier: B8:E0:77:C1:0D:78:09:F9:5B:F9:CF:77:45:6B:FC:3C:E4:CA:BD:AF Certificate issuer: /CN=A91731AD/serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69 Certificate serial: 02 Authority key identifier: C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/275CD490509D11F0977ED738C4F9AE02.roa Signing time: Tue 24 Jun 2025 01:47:15 +0000 ROA not before: Tue 24 Jun 2025 01:47:15 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 153930 IP address blocks: 165.99.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91731AD, serialNumber=C1597131EABC5BB332BC999D416E9D5E7FCC0A69 Validity Not Before: Jun 24 01:47:15 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685a03a3-6e74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:1c:9f:e7:e8:59:d2:60:2d:3d:83:96:c7:3b: ef:88:17:c3:27:59:f4:58:ba:fc:c7:92:90:14:0b: 0f:61:ee:4a:22:f3:78:e2:d3:28:ea:f6:f7:f5:11: b5:32:5c:f5:cb:db:59:11:4b:a5:71:92:e0:b4:8f: 86:9c:a1:d3:e7:16:0b:79:f7:02:17:6a:92:70:24: 63:e0:cc:3c:5c:22:1a:09:50:d7:e7:d4:76:a9:a4: 80:ad:6b:49:9c:21:90:91:9a:05:b3:bb:c1:68:a4: a6:02:56:cc:1a:3e:b8:4e:42:a7:1f:4e:81:11:d4: 97:7a:6e:5f:a9:00:7d:18:76:f8:2d:e4:62:cf:3e: e0:a7:92:a9:ff:b6:fb:a9:a0:f1:e7:3e:8e:c7:ab: cc:a2:56:61:c5:43:19:5d:8b:c9:0b:f9:b5:52:76: 7a:0a:97:92:8b:d7:c3:f8:3c:fe:db:77:54:d4:38: bf:10:be:d5:b6:d8:49:5b:e3:1b:97:29:f0:8e:5a: 56:e6:a7:a0:00:57:e7:8e:81:90:1f:77:e2:69:dc: 76:91:2b:9a:f1:bb:70:48:34:ff:20:7f:b8:7c:fe: d3:f8:03:49:fa:6f:58:03:84:0e:69:0e:fa:a5:fa: d2:4c:69:2c:99:33:03:57:7f:bc:85:6f:ad:85:ba: 7c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:E0:77:C1:0D:78:09:F9:5B:F9:CF:77:45:6B:FC:3C:E4:CA:BD:AF X509v3 Authority Key Identifier: keyid:C1:59:71:31:EA:BC:5B:B3:32:BC:99:9D:41:6E:9D:5E:7F:CC:0A:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/wVlxMeq8W7MyvJmdQW6dXn_MCmk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/wVlxMeq8W7MyvJmdQW6dXn_MCmk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91731AD/BC28AF00509C11F086D92D38C4F9AE02/275CD490509D11F0977ED738C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.144.0/23 Signature Algorithm: sha256WithRSAEncryption 95:6b:c6:80:a4:6b:5d:d4:80:96:70:b9:0a:3e:68:8a:d3:e8: dc:ca:b6:d1:d4:92:30:d4:17:0a:8f:7c:9d:23:89:4e:7f:0e: d8:a5:a0:f3:33:86:e6:b5:58:f9:40:24:9a:53:75:81:0d:cb: b3:54:e9:ec:dc:6a:a7:b4:d0:cf:91:5b:be:e7:18:93:10:29: 57:0b:af:87:9d:b1:db:4d:1d:09:56:1a:67:7f:9a:db:12:d3: 99:1e:95:8b:d7:ac:60:a3:f1:1f:08:79:05:ec:71:8c:b0:f1: 36:99:e4:8a:b8:c9:28:6e:01:db:f1:43:07:8b:a3:30:8e:df: ed:7b:c8:2d:32:a1:1a:3c:b2:62:97:e2:26:69:1e:1a:dc:3e: 90:9e:dd:7a:32:c5:1f:70:83:e2:b7:75:b6:1d:77:1d:e3:b1: 1b:2c:43:a1:30:cf:b0:a8:94:42:fb:60:b9:50:65:f9:6a:de: c6:59:37:1f:90:39:5d:de:45:c1:38:ff:88:17:80:3f:b2:7f: c2:2c:ff:32:9d:a4:2f:51:b5:4d:94:9b:76:f9:f9:26:76:5a: 52:2e:2b:76:2e:79:be:f9:72:9e:5b:5b:7e:52:94:4d:3d:c2: b3:86:03:26:61:d8:6f:92:e9:54:97:07:b4:7a:e8:fd:40:1e: 42:c5:41:76 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3 MzFBRDExMC8GA1UEBRMoQzE1OTcxMzFFQUJDNUJCMzMyQkM5OTlENDE2RTlENUU3 RkNDMEE2OTAeFw0yNTA2MjQwMTQ3MTVaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NWEwM2EzLTZlNzQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDKHJ/n6FnSYC09g5bHO++IF8MnWfRYuvzHkpAUCw9h7koi83ji0yjq9vf1EbUy XPXL21kRS6VxkuC0j4acodPnFgt59wIXapJwJGPgzDxcIhoJUNfn1HappICta0mc IZCRmgWzu8FopKYCVswaPrhOQqcfToER1Jd6bl+pAH0Ydvgt5GLPPuCnkqn/tvup oPHnPo7Hq8yiVmHFQxldi8kL+bVSdnoKl5KL18P4PP7bd1TUOL8QvtW22Elb4xuX KfCOWlbmp6AAV+eOgZAfd+Jp3HaRK5rxu3BINP8gf7h8/tP4A0n6b1gDhA5pDvql +tJMaSyZMwNXf7yFb62Funy7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUuOB3wQ14 Cflb+c93RWv8POTKva8wHwYDVR0jBBgwFoAUwVlxMeq8W7MyvJmdQW6dXn/MCmkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTczMUFEL0JDMjhBRjAwNTA5 QzExRjA4NkQ5MkQzOEM0RjlBRTAyL3dWbHhNZXE4VzdNeXZKbWRRVzZkWG5fTUNt ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvd1ZseE1lcThXN015dkptZFFXNmRYbl9NQ21rLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3 MzFBRC9CQzI4QUYwMDUwOUMxMUYwODZEOTJEMzhDNEY5QUUwMi8yNzVDRDQ5MDUw OUQxMUYwOTc3RUQ3MzhDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVjkDANBgkqhkiG9w0BAQsFAAOCAQEAlWvGgKRrXdSAlnC5 Cj5oitPo3Mq20dSSMNQXCo98nSOJTn8O2KWg8zOG5rVY+UAkmlN1gQ3Ls1Tp7Nxq p7TQz5FbvucYkxApVwuvh52x200dCVYaZ3+a2xLTmR6Vi9esYKPxHwh5BexxjLDx NpnkirjJKG4B2/FDB4ujMI7f7XvILTKhGjyyYpfiJmkeGtw+kJ7dejLFH3CD4rd1 th13HeOxGyxDoTDPsKiUQvtguVBl+Wrexlk3H5A5Xd5FwTj/iBeAP7J/wiz/Mp2k L1G1TZSbdvn5JnZaUi4rdi55vvlynltbflKUTT3Cs4YDJmHYb5LpVJcHtHro/UAe QsVBdg== -----END CERTIFICATE-----Generated at Tue Jul 1 13:21:48 2025 by rpki-client