$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/5740BDF8370111F094BF7862C4F9AE02.roa File: 5740BDF8370111F094BF7862C4F9AE02.roa (raw, json) Hash identifier: cSZNA9xFMjtULJTWhj5iUzlZdi4hLGYSAlp+qRF7bTw= Subject key identifier: 57:D8:3D:87:95:12:A2:86:C7:69:6A:A6:4E:A2:00:33:E4:48:55:6E Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: 0101 Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/5740BDF8370111F094BF7862C4F9AE02.roa Signing time: Mon 15 Sep 2025 13:55:54 +0000 ROA not before: Mon 15 Sep 2025 13:55:54 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 132384 IP address blocks: 167.219.49.0/24 maxlen: 24 167.219.50.0/23 maxlen: 24 167.219.52.0/23 maxlen: 24 167.219.54.0/24 maxlen: 24 167.219.55.0/24 maxlen: 24 167.219.56.0/23 maxlen: 24 167.219.58.0/23 maxlen: 24 167.219.60.0/23 maxlen: 24 167.219.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 26 Sep 2025 05:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 257 (0x101) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: Sep 15 13:55:54 2025 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=68c81aea-8b51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6c:ac:d3:89:c9:66:b9:d0:1d:84:c4:98:e9: a5:ec:19:1a:5c:61:76:aa:09:d9:b5:8f:f5:06:06: 65:39:71:7a:ae:62:43:cf:50:d3:3d:3d:60:51:e0: cd:46:60:c0:09:1d:b6:07:72:02:44:76:b4:5d:61: d7:3c:8d:c5:91:9c:aa:51:e1:eb:1f:03:30:3a:7b: a3:6f:11:e1:55:63:db:c4:71:60:6f:fb:30:1d:6e: 13:8a:80:65:32:6e:0f:be:60:e8:27:67:5d:0c:da: 9d:8d:27:57:80:fd:8a:f7:8a:16:f5:b4:23:94:a3: fd:69:77:ef:d8:d0:8d:b1:be:b5:06:f3:23:17:e0: c8:8a:e5:46:cb:dd:b0:36:f6:96:7d:39:88:02:6a: 85:c1:aa:34:45:8b:b5:b7:e0:84:01:95:74:10:46: 99:89:00:11:ae:9d:5e:d5:74:72:5b:a1:18:6f:99: 65:df:b3:24:50:b3:2f:6e:93:a0:b3:0a:39:39:85: 62:cf:4a:eb:d8:f6:dd:05:00:60:9f:be:b1:9f:3f: 37:45:00:63:57:c5:d8:e4:e2:a4:2d:b4:bd:cb:36: 0d:fa:a6:a3:11:f7:27:b5:17:f2:2c:01:8f:96:8b: 43:d8:f3:02:02:00:e6:c0:4b:b2:3a:cb:f7:09:f6: 8e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D8:3D:87:95:12:A2:86:C7:69:6A:A6:4E:A2:00:33:E4:48:55:6E X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/5740BDF8370111F094BF7862C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.219.49.0-167.219.63.255 Signature Algorithm: sha256WithRSAEncryption 24:48:08:47:12:37:e7:71:8f:71:6c:4d:ec:6f:c9:cc:cf:0d: 24:7b:a3:ba:4b:96:85:cb:fb:41:a8:6b:64:f5:8f:1f:88:38: 96:2e:9e:c2:8d:92:ce:76:0d:a8:e8:98:f3:6f:da:ae:2f:13: 0e:a1:08:a6:c1:2d:22:12:cf:1f:fe:1d:ae:e7:95:ea:dc:b7: e8:79:cf:f9:fe:2f:97:0f:c7:ee:1a:b8:34:fa:0b:80:d9:ed: e5:19:39:e3:eb:88:97:46:61:59:02:ef:6f:83:ed:6b:f5:65: 1a:c2:7e:52:a7:a2:cd:15:56:c4:28:6a:99:42:5d:04:3b:87: 08:df:de:a0:16:61:65:94:5c:47:ae:ec:76:9e:8c:22:83:85: 9d:10:89:c9:44:86:60:41:e4:ce:47:2e:f6:05:2c:1b:37:3e: dd:a8:1b:8d:38:a9:81:ab:b4:8d:16:4f:40:5f:5c:7b:ce:fd: 28:28:a1:e2:d7:dd:63:8c:73:3c:23:34:1c:c6:3d:8e:da:4f: 7e:09:ee:41:a7:28:57:c0:03:c8:c5:5c:f4:df:8f:f3:e3:04: c5:e0:61:c6:fe:58:bf:40:a8:ca:2c:d6:a0:85:4e:88:8b:20: 2e:18:38:4c:e2:c0:16:b8:fa:8d:17:e5:1d:39:14:ae:e7:56: d8:70:79:33 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICAQEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy NUEwMEJGMUIwHhcNMjUwOTE1MTM1NTU0WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGM4MWFlYS04YjUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8Wys04nJZrnQHYTEmOml7BkaXGF2qgnZtY/1BgZlOXF6rmJDz1DTPT1gUeDN RmDACR22B3ICRHa0XWHXPI3FkZyqUeHrHwMwOnujbxHhVWPbxHFgb/swHW4TioBl Mm4PvmDoJ2ddDNqdjSdXgP2K94oW9bQjlKP9aXfv2NCNsb61BvMjF+DIiuVGy92w NvaWfTmIAmqFwao0RYu1t+CEAZV0EEaZiQARrp1e1XRyW6EYb5ll37MkULMvbpOg swo5OYViz0rr2PbdBQBgn76xnz83RQBjV8XY5OKkLbS9yzYN+qajEfcntRfyLAGP lotD2PMCAgDmwEuyOsv3CfaOGQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFFfYPYeV EqKGx2lqpk6iADPkSFVuMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURENjQvNEVCMkI0MjgxMzRCMTFFRjk0NDI0RDNEQzRGOUFFMDIvNTc0MEJERjgz NzAxMTFGMDk0QkY3ODYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEAKfbMQMEBqfbADANBgkqhkiG9w0BAQsFAAOCAQEAJEgI RxI353GPcWxN7G/JzM8NJHujukuWhcv7QahrZPWPH4g4li6ewo2SznYNqOiY82/a ri8TDqEIpsEtIhLPH/4drueV6ty36HnP+f4vlw/H7hq4NPoLgNnt5Rk54+uIl0Zh WQLvb4Pta/VlGsJ+UqeizRVWxChqmUJdBDuHCN/eoBZhZZRcR67sdp6MIoOFnRCJ yUSGYEHkzkcu9gUsGzc+3agbjTipgau0jRZPQF9ce879KCih4tfdY4xzPCM0HMY9 jtpPfgnuQacoV8ADyMVc9N+P8+MExeBhxv5Yv0CoyizWoIVOiIsgLhg4TOLAFrj6 jRflHTkUrudW2HB5Mw== -----END CERTIFICATE-----Generated at Sat Sep 20 00:07:16 2025 by rpki-client