$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/E74C08AE4B1911F08F30867AC4F9AE02.roa File: E74C08AE4B1911F08F30867AC4F9AE02.roa (raw, json) Hash identifier: VjMHkd7lriK9g6kIHguoqiJ2Jl46NfCpNAa2oPwN2mg= Subject key identifier: 3A:6C:B0:8E:78:7A:EF:EC:36:E2:F6:7B:65:77:56:12:05:77:AF:9A Certificate issuer: /CN=A91B8A86/serialNumber=FB08769288795F5D504B940994057311668B6297 Certificate serial: 02 Authority key identifier: FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/E74C08AE4B1911F08F30867AC4F9AE02.roa Signing time: Tue 17 Jun 2025 01:25:08 +0000 ROA not before: Tue 17 Jun 2025 01:25:08 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 132372 IP address blocks: 165.99.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:56:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B8A86, serialNumber=FB08769288795F5D504B940994057311668B6297 Validity Not Before: Jun 17 01:25:08 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6850c3f3-5403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:31:7a:f3:eb:ff:c8:d4:49:23:eb:44:ca:75: 2a:8f:23:69:29:ae:b2:0e:67:4c:d1:40:42:32:c8: 0c:b9:75:47:e8:fa:bd:8d:73:0a:1e:d4:f9:ce:fa: 3a:2f:e6:7d:c5:92:a6:5f:ac:f7:eb:5f:e5:8f:04: e7:5c:3b:81:ad:c3:d7:ac:d4:66:1d:9e:d0:1b:48: 16:96:98:bf:5c:fc:88:95:61:88:c9:83:4e:11:2f: 43:ef:b7:85:0d:d6:60:00:9d:c3:30:cc:98:da:e4: 7f:48:9d:d0:cf:fa:90:3a:9c:a6:a2:50:0f:31:26: cd:a0:33:8c:15:a2:55:f3:82:7a:4b:7e:e7:c0:de: e8:b6:4a:32:e1:4e:d9:e5:b1:a8:45:d7:2d:e7:d5: 57:32:75:1e:2f:15:eb:f0:93:1a:18:c5:b6:7d:bc: 3b:fd:57:db:07:83:80:31:f8:b5:3f:0d:4f:e0:e7: 12:e6:e0:53:53:4f:a8:6b:cf:ae:4c:b7:df:03:47: 01:06:f9:aa:de:c5:d8:0a:63:73:e2:23:de:0e:2d: 90:71:29:21:8c:dc:ab:e7:6d:2a:f1:d5:2e:4e:3f: 36:89:ed:bb:6e:0c:ae:21:84:42:b4:3e:17:2a:a3: d7:6b:9d:af:5b:bc:d4:21:69:6d:e0:0d:df:ef:67: 9c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6C:B0:8E:78:7A:EF:EC:36:E2:F6:7B:65:77:56:12:05:77:AF:9A X509v3 Authority Key Identifier: keyid:FB:08:76:92:88:79:5F:5D:50:4B:94:09:94:05:73:11:66:8B:62:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/-wh2koh5X11QS5QJlAVzEWaLYpc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-wh2koh5X11QS5QJlAVzEWaLYpc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8A86/AC704C6C4B1511F0AC3AA248C4F9AE02/E74C08AE4B1911F08F30867AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.199.0/24 Signature Algorithm: sha256WithRSAEncryption b1:3f:5a:5c:aa:22:dd:e2:5c:78:69:14:f4:cf:41:2f:54:b0: c0:43:42:bd:0b:a7:2d:43:66:fe:c9:dc:71:6d:bc:90:b2:a4: a4:1a:df:cf:03:c6:b0:a6:f7:b3:6a:c5:8e:38:0f:29:6e:cd: 28:3b:9d:bb:fd:1b:4b:ea:ce:3c:7e:bb:d5:93:ca:0c:ef:6c: 9b:3d:49:41:4f:19:fd:86:c1:46:26:3e:6a:81:65:36:5c:92: 26:b6:33:71:f8:fc:24:6e:62:c6:6b:9a:20:22:7a:6a:f3:f7: 7f:25:df:85:5c:f1:87:cc:00:c7:1e:a4:4a:b1:d3:4e:95:0b: a9:ea:11:2a:94:29:75:04:75:32:42:81:b3:6f:e2:c1:8c:cf: 45:68:27:73:a2:29:07:85:67:0a:fc:83:f1:1d:25:77:1d:c6: 4f:aa:a9:3f:63:98:36:7b:10:76:0f:31:8f:22:d7:69:e8:b5: e2:38:86:4f:c4:25:c9:a5:e7:4d:b2:b1:72:00:b9:f8:df:dd: cc:74:e6:ba:28:a3:8a:5e:8a:63:c1:39:0a:17:9d:89:9b:d4: 38:84:82:8c:06:81:9e:71:63:12:73:6f:16:b6:0f:ea:1a:1a: 43:3c:23:42:e3:60:87:bc:c3:6f:b2:3e:26:cf:cc:e3:25:63: 66:ae:37:24 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC OEE4NjExMC8GA1UEBRMoRkIwODc2OTI4ODc5NUY1RDUwNEI5NDA5OTQwNTczMTE2 NjhCNjI5NzAeFw0yNTA2MTcwMTI1MDhaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NTBjM2YzLTU0MDMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfMXrz6//I1Ekj60TKdSqPI2kprrIOZ0zRQEIyyAy5dUfo+r2Ncwoe1PnO+jov 5n3FkqZfrPfrX+WPBOdcO4Gtw9es1GYdntAbSBaWmL9c/IiVYYjJg04RL0Pvt4UN 1mAAncMwzJja5H9IndDP+pA6nKaiUA8xJs2gM4wVolXzgnpLfufA3ui2SjLhTtnl sahF1y3n1VcydR4vFevwkxoYxbZ9vDv9V9sHg4Ax+LU/DU/g5xLm4FNTT6hrz65M t98DRwEG+arexdgKY3PiI94OLZBxKSGM3KvnbSrx1S5OPzaJ7btuDK4hhEK0Phcq o9drna9bvNQhaW3gDd/vZ5ynAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUOmywjnh6 7+w24vZ7ZXdWEgV3r5owHwYDVR0jBBgwFoAU+wh2koh5X11QS5QJlAVzEWaLYpcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUI4QTg2L0FDNzA0QzZDNEIx NTExRjBBQzNBQTI0OEM0RjlBRTAyLy13aDJrb2g1WDExUVM1UUpsQVZ6RVdhTFlw Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvLXdoMmtvaDVYMTFRUzVRSmxBVnpFV2FMWXBjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC OEE4Ni9BQzcwNEM2QzRCMTUxMUYwQUMzQUEyNDhDNEY5QUUwMi9FNzRDMDhBRTRC MTkxMUYwOEYzMDg2N0FDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVjxzANBgkqhkiG9w0BAQsFAAOCAQEAsT9aXKoi3eJceGkU 9M9BL1SwwENCvQunLUNm/snccW28kLKkpBrfzwPGsKb3s2rFjjgPKW7NKDudu/0b S+rOPH671ZPKDO9smz1JQU8Z/YbBRiY+aoFlNlySJrYzcfj8JG5ixmuaICJ6avP3 fyXfhVzxh8wAxx6kSrHTTpULqeoRKpQpdQR1MkKBs2/iwYzPRWgnc6IpB4VnCvyD 8R0ldx3GT6qpP2OYNnsQdg8xjyLXaei14jiGT8QlyaXnTbKxcgC5+N/dzHTmuiij il6KY8E5ChediZvUOISCjAaBnnFjEnNvFrYP6hoaQzwjQuNgh7zDb7I+Js/M4yVj Zq43JA== -----END CERTIFICATE-----Generated at Thu Jul 3 01:45:07 2025 by rpki-client