$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/8D5442E28A4011F093E0F94DC4F9AE02.roa File: 8D5442E28A4011F093E0F94DC4F9AE02.roa (raw, json) Hash identifier: gKM4RcuYJ3WOjsFaGVW261ymQPFBOzXDnV5oh7hrxpU= Subject key identifier: 75:A1:5A:04:38:34:50:10:36:65:98:CF:2F:7D:40:70:B6:81:68:C1 Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 08EA Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/8D5442E28A4011F093E0F94DC4F9AE02.roa Signing time: Fri 05 Sep 2025 10:10:30 +0000 ROA not before: Fri 05 Sep 2025 10:10:30 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 21859 IP address blocks: 164.90.73.0/24 maxlen: 24 164.90.97.0/24 maxlen: 24 164.90.104.0/24 maxlen: 24 164.90.123.0/24 maxlen: 24 164.90.124.0/24 maxlen: 24 202.63.36.0/24 maxlen: 24 202.63.39.0/24 maxlen: 24 202.63.40.0/24 maxlen: 24 202.168.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 20:49:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2282 (0x8ea) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Sep 5 10:10:30 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68bab716-4304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:89:d4:1a:c9:4f:b6:c6:4d:25:55:e3:23:0a: c4:a1:1e:38:00:73:e4:fc:3b:b2:a9:0a:8f:62:fa: ea:14:a2:53:f5:12:a3:8f:4f:32:68:d1:41:5f:fa: 46:b0:4f:a7:5f:8f:55:79:64:0b:bd:d1:1c:97:58: 2d:6e:eb:43:1d:77:50:ac:c8:1c:42:a7:76:64:e6: 66:65:00:3e:f2:29:ed:9b:2b:ec:58:af:3d:86:db: 5a:97:14:c6:47:cb:17:d1:85:ca:f0:3b:da:46:7e: 1d:d1:94:5e:48:64:77:5d:61:53:d7:85:ee:69:72: bd:8e:d6:ae:1b:f8:fd:b3:37:71:94:53:e4:d8:d4: 65:55:2a:09:ec:aa:f1:86:ab:37:07:81:dc:00:f5: f4:fd:58:12:cf:c6:44:a1:97:cd:b3:06:56:f2:f9: 7a:53:9a:9d:9b:69:23:5f:4b:3e:f9:d5:27:33:04: 34:d1:76:75:74:7b:2b:31:9b:31:4b:b4:3a:46:1d: 23:c8:f2:7b:82:6d:a2:64:cc:67:8c:0e:8b:64:ca: 6f:54:bf:05:3e:0f:57:32:a3:2e:47:c9:78:4c:6d: dc:d2:77:46:b2:a2:a7:83:04:8a:c6:ba:c1:89:79: a2:a1:60:51:89:df:ca:28:ca:a4:c8:42:d3:7b:6d: 96:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:A1:5A:04:38:34:50:10:36:65:98:CF:2F:7D:40:70:B6:81:68:C1 X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/8D5442E28A4011F093E0F94DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.90.73.0/24 164.90.97.0/24 164.90.104.0/24 164.90.123.0-164.90.124.255 202.63.36.0/24 202.63.39.0-202.63.40.255 202.168.111.0/24 Signature Algorithm: sha256WithRSAEncryption b6:34:ef:54:1c:e9:be:9b:8c:32:3e:f0:e5:90:97:ba:3a:b3: b8:41:7e:47:57:7a:14:aa:ed:45:4b:84:65:ca:9c:f5:cb:01: b6:ea:45:6d:99:fa:aa:e7:63:22:b2:36:eb:eb:8d:3c:ee:16: e0:2a:53:fb:50:5f:d8:cd:5a:d9:cc:ef:74:82:87:93:4c:75: a0:3a:54:28:5a:86:19:f0:64:a4:9f:76:c5:98:13:23:a3:4a: 28:1d:e6:67:56:f5:1d:ad:89:5d:2b:d4:45:1a:36:f3:9c:af: a9:8d:6f:0e:e9:60:00:fb:e1:5c:a5:b8:9f:1c:44:63:88:c4: e1:23:39:3a:16:09:44:e8:15:2c:67:a2:28:85:88:3e:8e:55: ea:51:3c:c5:b7:5a:06:90:61:51:a4:ba:79:3e:89:a3:16:fb: df:62:b9:cc:4c:f2:7c:d3:9b:aa:ba:7a:29:9a:7b:79:8e:a3: b5:36:03:be:38:fe:4d:26:f7:49:f2:13:88:fa:ce:a7:96:e0: 00:93:f6:46:46:2b:01:12:59:f0:fb:23:95:1d:a7:2d:ac:a1: ff:fa:75:63:f5:67:9a:63:20:3d:5d:d8:5e:12:4b:52:87:c1: e5:92:6f:04:1f:25:6e:ba:7b:34:15:e6:0c:07:46:4f:5a:bb: 43:92:74:17 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgICCOowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjUwOTA1MTAxMDMwWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGJhYjcxNi00MzA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyYnUGslPtsZNJVXjIwrEoR44AHPk/DuyqQqPYvrqFKJT9RKjj08yaNFBX/pG sE+nX49VeWQLvdEcl1gtbutDHXdQrMgcQqd2ZOZmZQA+8intmyvsWK89httalxTG R8sX0YXK8DvaRn4d0ZReSGR3XWFT14XuaXK9jtauG/j9szdxlFPk2NRlVSoJ7Krx hqs3B4HcAPX0/VgSz8ZEoZfNswZW8vl6U5qdm2kjX0s++dUnMwQ00XZ1dHsrMZsx S7Q6Rh0jyPJ7gm2iZMxnjA6LZMpvVL8FPg9XMqMuR8l4TG3c0ndGsqKngwSKxrrB iXmioWBRid/KKMqkyELTe22WNQIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFHWhWgQ4 NFAQNmWYzy99QHC2gWjBMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY5M0EvRkY1MUU1OUVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvOEQ1NDQyRTI4 QTQwMTFGMDkzRTBGOTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUwYIKwYBBQUHAQcBAf8E RDBCMEAEAgABMDoDBACkWkkDBACkWmEDBACkWmgwDAMEAKRaewMEAKRafAMEAMo/ JDAMAwQAyj8nAwQAyj8oAwQAyqhvMA0GCSqGSIb3DQEBCwUAA4IBAQC2NO9UHOm+ m4wyPvDlkJe6OrO4QX5HV3oUqu1FS4Rlypz1ywG26kVtmfqq52Misjbr64087hbg KlP7UF/YzVrZzO90goeTTHWgOlQoWoYZ8GSkn3bFmBMjo0ooHeZnVvUdrYldK9RF GjbznK+pjW8O6WAA++FcpbifHERjiMThIzk6FglE6BUsZ6IohYg+jlXqUTzFt1oG kGFRpLp5PomjFvvfYrnMTPJ805uqunopmnt5jqO1NgO+OP5NJvdJ8hOI+s6nluAA k/ZGRisBElnw+yOVHactrKH/+nVj9WeaYyA9XdheEktSh8Hlkm8EHyVuuns0FeYM B0ZPWrtDknQX -----END CERTIFICATE-----Generated at Tue Sep 9 21:10:31 2025 by rpki-client