$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa File: 742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa (raw, json) Hash identifier: SOIGSlOSfvWHcig+wsew3CQYZQa4/Foqm/Hg6AAymbA= Subject key identifier: 3A:F6:97:2B:19:BF:5F:CE:C4:3E:06:19:1E:1E:A5:47:B3:D5:63:4D Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 067F Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa Signing time: Thu 28 Aug 2025 14:51:04 +0000 ROA not before: Thu 28 Aug 2025 14:51:04 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 150895 IP address blocks: 157.66.48.0/23 maxlen: 23 157.66.222.0/23 maxlen: 23 157.66.224.0/23 maxlen: 23 160.22.120.0/23 maxlen: 23 160.25.72.0/23 maxlen: 23 160.30.50.0/23 maxlen: 23 160.30.136.0/23 maxlen: 23 160.191.214.0/23 maxlen: 23 160.250.4.0/23 maxlen: 23 160.250.128.0/23 maxlen: 23 160.250.132.0/23 maxlen: 23 160.250.186.0/23 maxlen: 24 161.248.4.0/23 maxlen: 23 161.248.178.0/23 maxlen: 23 161.248.238.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Sep 2025 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1663 (0x67f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Aug 28 14:51:04 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68b06cd8-5d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:90:0a:2a:5c:20:90:71:98:99:b3:57:68:fe: e0:55:cb:88:ec:49:1d:97:d4:3d:47:f1:9c:4b:ad: bf:4d:18:ae:ac:95:05:86:6e:a6:9a:e0:3c:a9:38: 03:f4:cb:5c:3f:79:0d:77:1d:3b:b1:bd:ed:7f:64: 51:e5:36:e0:43:7a:e9:3e:c4:d2:2a:9d:24:e2:51: 3d:39:72:ad:6b:53:1d:7f:18:bf:de:a1:33:81:ae: 7d:a6:f2:f7:18:23:57:41:dc:1f:2a:b5:87:f9:7a: cf:84:fb:96:75:27:4d:4b:53:b8:3a:eb:bd:0d:a4: 91:c6:3d:e8:30:43:8f:77:dd:9e:98:2e:f1:b1:1a: d1:6e:df:dd:ea:9d:fd:0c:bc:7d:b9:1c:09:9a:3a: 6f:c2:be:8f:53:70:21:56:b9:68:55:81:32:58:2d: 44:5f:e7:3b:e6:37:3e:c3:35:0b:dd:be:3c:87:f3: 4e:be:6c:6c:e8:1d:1e:29:fc:26:fe:20:47:08:56: 14:c4:b2:ca:1e:46:d6:69:95:8d:20:96:d9:23:31: d8:1b:5e:9b:bb:67:86:a7:19:22:9b:ae:09:0d:eb: 0c:1d:bf:f7:45:d1:63:30:b8:b8:75:96:bb:af:7c: 54:2d:9e:38:15:5f:21:16:20:33:76:73:b0:67:cd: 05:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F6:97:2B:19:BF:5F:CE:C4:3E:06:19:1E:1E:A5:47:B3:D5:63:4D X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/742C40C0AE0A11EF9B1A9B3FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.66.48.0/23 157.66.222.0-157.66.225.255 160.22.120.0/23 160.25.72.0/23 160.30.50.0/23 160.30.136.0/23 160.191.214.0/23 160.250.4.0/23 160.250.128.0/23 160.250.132.0/23 160.250.186.0/23 161.248.4.0/23 161.248.178.0/23 161.248.238.0/23 Signature Algorithm: sha256WithRSAEncryption 6a:e6:2f:dd:8b:65:3a:03:0c:c2:5c:54:84:9a:73:d3:cc:31: 5d:9f:61:2c:31:5d:37:30:94:72:a9:5c:5d:00:0c:e2:6e:1d: 40:e2:69:5c:63:79:88:c3:36:2e:be:50:ef:5e:77:0c:94:7a: 0d:bf:bc:92:c6:f7:ae:e0:16:ef:e9:04:5b:e4:b0:37:e5:dc: 69:65:23:28:43:a9:5d:7c:ed:e7:e6:84:3c:76:f5:ac:55:37: 9e:2d:a3:00:4b:35:5b:d5:c8:27:f4:7b:cc:77:cd:3d:b6:0a: 9a:46:98:4e:72:18:9f:07:d7:a4:41:1c:88:26:2a:7b:69:a3: e8:08:87:da:9a:a6:e7:a2:f1:a5:cb:66:bf:4f:0b:c5:33:64: fd:f5:3c:78:6b:8b:18:e0:97:86:43:8a:f7:f6:4a:18:69:d7: 5e:5e:f5:c6:1d:14:37:61:d2:5f:86:14:6c:6e:59:50:3e:42: c4:71:a3:df:0f:43:69:dd:eb:c0:22:0b:1b:c8:4a:d8:bb:61: eb:68:0f:1f:a1:cc:cc:99:f9:51:28:38:bd:c8:1f:e0:de:55: 2c:b5:22:79:f8:8d:6c:06:34:3f:5d:e0:45:19:2f:90:05:7e: f0:49:ff:92:e3:d4:37:be:87:23:be:58:09:64:d9:5c:de:72: d7:7e:96:e3 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgICBn8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwODI4MTQ1MTA0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGIwNmNkOC01ZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx5AKKlwgkHGYmbNXaP7gVcuI7Ekdl9Q9R/GcS62/TRiurJUFhm6mmuA8qTgD 9MtcP3kNdx07sb3tf2RR5TbgQ3rpPsTSKp0k4lE9OXKta1Mdfxi/3qEzga59pvL3 GCNXQdwfKrWH+XrPhPuWdSdNS1O4Ouu9DaSRxj3oMEOPd92emC7xsRrRbt/d6p39 DLx9uRwJmjpvwr6PU3AhVrloVYEyWC1EX+c75jc+wzUL3b48h/NOvmxs6B0eKfwm /iBHCFYUxLLKHkbWaZWNIJbZIzHYG16bu2eGpxkim64JDesMHb/3RdFjMLi4dZa7 r3xULZ44FV8hFiAzdnOwZ80F4QIDAQABo4IC6zCCAucwHQYDVR0OBBYEFDr2lysZ v1/OxD4GGR4epUez1WNNMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvNzQyQzQwQzBB RTBBMTFFRjlCMUE5QjNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwdQYIKwYBBQUHAQcBAf8E ZjBkMGIEAgABMFwDBAGdQjAwDAMEAZ1C3gMEAZ1C4AMEAaAWeAMEAaAZSAMEAaAe MgMEAaAeiAMEAaC/1gMEAaD6BAMEAaD6gAMEAaD6hAMEAaD6ugMEAaH4BAMEAaH4 sgMEAaH47jANBgkqhkiG9w0BAQsFAAOCAQEAauYv3YtlOgMMwlxUhJpz08wxXZ9h LDFdNzCUcqlcXQAM4m4dQOJpXGN5iMM2Lr5Q7153DJR6Db+8ksb3ruAW7+kEW+Sw N+XcaWUjKEOpXXzt5+aEPHb1rFU3ni2jAEs1W9XIJ/R7zHfNPbYKmkaYTnIYnwfX pEEciCYqe2mj6AiH2pqm56Lxpctmv08LxTNk/fU8eGuLGOCXhkOK9/ZKGGnXXl71 xh0UN2HSX4YUbG5ZUD5CxHGj3w9Dad3rwCILG8hK2Lth62gPH6HMzJn5USg4vcgf 4N5VLLUiefiNbAY0P13gRRkvkAV+8En/kuPUN76HI75YCWTZXN5y136W4w== -----END CERTIFICATE-----Generated at Sun Sep 7 00:37:17 2025 by rpki-client