$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/40310456D8D211EB97FF5586C4F9AE02.roa File: 40310456D8D211EB97FF5586C4F9AE02.roa (raw, json) Hash identifier: 4sD3HQWKjSm5VjpYk8vQ01ZycYjzVEzhHz6+9q9It7w= Subject key identifier: 28:B3:39:70:C6:4A:1D:43:AE:20:75:63:61:5F:9C:3B:B1:08:FA:85 Certificate issuer: /CN=A91E4D3D/serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F Certificate serial: 0569 Authority key identifier: 68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/40310456D8D211EB97FF5586C4F9AE02.roa Signing time: Tue 04 Feb 2025 23:13:01 +0000 ROA not before: Tue 04 Feb 2025 23:13:01 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 13150 IP address blocks: 140.82.192.0/24 maxlen: 24 140.82.193.0/24 maxlen: 24 140.82.194.0/24 maxlen: 24 140.82.195.0/24 maxlen: 24 140.82.196.0/24 maxlen: 24 140.82.198.0/24 maxlen: 24 140.82.199.0/24 maxlen: 24 140.82.200.0/24 maxlen: 24 140.82.201.0/24 maxlen: 24 140.82.202.0/24 maxlen: 24 140.82.203.0/24 maxlen: 24 140.82.204.0/24 maxlen: 24 140.82.205.0/24 maxlen: 24 140.82.206.0/24 maxlen: 24 140.82.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 09 Nov 2025 22:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1385 (0x569) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4D3D, serialNumber=686AF41BC33DAEF828FAB4AE4A3A0D587BAD0D3F Validity Not Before: Feb 4 23:13:01 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a29efd-0c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:49:84:73:19:49:20:a3:dd:6c:c0:8f:f6:7b: ef:99:19:19:a8:5f:70:a5:64:7f:0e:00:36:ed:2d: d9:13:a6:f9:e0:fa:3c:96:86:53:73:8a:ba:f6:8c: a1:fe:84:0a:bb:b3:8d:55:0b:3f:0f:11:00:1c:25: fb:41:68:15:21:56:91:7b:2d:5d:7b:14:40:1e:a9: 6c:4f:c2:ef:1b:7a:c1:bf:2a:66:f7:30:38:35:20: 9f:b0:4e:93:ef:af:1f:85:5a:d7:01:90:a3:78:17: 15:5b:a6:19:bc:b1:81:cc:af:86:f8:5a:d8:96:d6: 44:b4:55:67:87:c7:2a:81:4d:ab:8f:24:d0:7c:87: 34:3b:8b:af:d8:5e:ea:25:a4:4c:20:32:9c:57:07: 33:af:50:6b:a0:ab:0b:d1:03:96:a8:11:00:02:69: 94:ce:51:28:dc:99:77:96:c1:97:f5:b0:48:5a:a4: 19:8f:27:6b:f0:0f:9b:be:ac:57:49:6c:26:e3:85: 94:c7:d6:e2:d8:a7:e9:3a:70:92:f0:68:bd:82:1f: f2:36:27:f8:b6:8d:de:ed:5e:62:da:a7:93:b5:f5: e9:96:6c:14:8d:49:ca:94:89:d7:12:ac:dc:c8:01: a4:dc:1f:53:9c:ed:1d:14:36:ef:ce:ce:11:9d:bd: 48:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B3:39:70:C6:4A:1D:43:AE:20:75:63:61:5F:9C:3B:B1:08:FA:85 X509v3 Authority Key Identifier: keyid:68:6A:F4:1B:C3:3D:AE:F8:28:FA:B4:AE:4A:3A:0D:58:7B:AD:0D:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/aGr0G8M9rvgo-rSuSjoNWHutDT8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/aGr0G8M9rvgo-rSuSjoNWHutDT8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4D3D/A70A8FEED8B911EBABC1F485C4F9AE02/40310456D8D211EB97FF5586C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.82.192.0-140.82.196.255 140.82.198.0-140.82.207.255 Signature Algorithm: sha256WithRSAEncryption 8e:9b:fc:12:b4:29:5e:55:e8:cc:90:ae:b1:fd:ea:51:73:4f: 75:ba:db:66:80:a8:0b:6d:69:13:3c:a6:b6:23:d8:5c:b2:1d: 8d:e3:32:5a:cc:9a:72:94:e7:20:da:af:f3:36:0d:e5:60:da: bf:4e:b5:a7:b1:43:a6:cf:28:eb:58:a4:ca:a0:90:d9:b2:c1: 04:eb:9e:7e:08:6a:28:18:e5:55:0e:59:20:14:f7:8c:78:a6: 24:a5:45:6b:76:cd:66:00:5a:4b:d8:13:fd:a7:30:c1:a1:80: 72:58:bb:8a:8a:65:ee:0d:e3:4e:85:db:b4:b7:a4:06:55:9e: 24:dd:cd:88:f2:0f:53:35:ff:da:f0:e8:d0:6c:1c:63:d4:79: 78:78:d0:09:24:d7:e8:40:4d:e6:68:5e:b6:a8:cc:9b:f4:64: 2f:f9:45:68:f3:b7:31:60:81:42:b4:16:12:c4:b2:67:db:ab: cb:1b:7d:03:7c:f0:94:b5:0d:09:cc:27:cb:31:2b:a9:3c:a9: 7b:5c:c3:9e:2a:21:9c:33:db:ef:db:c3:3d:fc:17:29:dc:5d: 0b:76:97:36:58:c9:ab:b5:63:d7:a0:ed:1e:ce:ce:bd:4a:11: 19:72:25:cd:a9:18:a8:a1:65:08:7f:b5:24:f1:41:3e:2e:05: 3d:10:3a:47 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICBWkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTREM0QxMTAvBgNVBAUTKDY4NkFGNDFCQzMzREFFRjgyOEZBQjRBRTRBM0EwRDU4 N0JBRDBEM0YwHhcNMjUwMjA0MjMxMzAxWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2EyOWVmZC0wYzRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwUmEcxlJIKPdbMCP9nvvmRkZqF9wpWR/DgA27S3ZE6b54Po8loZTc4q69oyh /oQKu7ONVQs/DxEAHCX7QWgVIVaRey1dexRAHqlsT8LvG3rBvypm9zA4NSCfsE6T 768fhVrXAZCjeBcVW6YZvLGBzK+G+FrYltZEtFVnh8cqgU2rjyTQfIc0O4uv2F7q JaRMIDKcVwczr1BroKsL0QOWqBEAAmmUzlEo3Jl3lsGX9bBIWqQZjydr8A+bvqxX SWwm44WUx9bi2KfpOnCS8Gi9gh/yNif4to3e7V5i2qeTtfXplmwUjUnKlInXEqzc yAGk3B9TnO0dFDbvzs4Rnb1IOwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFCizOXDG Sh1DriB1Y2FfnDuxCPqFMB8GA1UdIwQYMBaAFGhq9BvDPa74KPq0rko6DVh7rQ0/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEQzRC9BNzBBOEZFRUQ4 QjkxMUVCQUJDMUY0ODVDNEY5QUUwMi9hR3IwRzhNOXJ2Z28tclN1U2pvTldIdXRE VDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2FHcjBHOE05cnZnby1yU3VTam9OV0h1dERUOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTREM0QvQTcwQThGRUVEOEI5MTFFQkFCQzFGNDg1QzRGOUFFMDIvNDAzMTA0NTZE OEQyMTFFQjk3RkY1NTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEBoxSwAMEAIxSxDAMAwQBjFLGAwQEjFLAMA0GCSqGSIb3 DQEBCwUAA4IBAQCOm/wStCleVejMkK6x/epRc091uttmgKgLbWkTPKa2I9hcsh2N 4zJazJpylOcg2q/zNg3lYNq/TrWnsUOmzyjrWKTKoJDZssEE655+CGooGOVVDlkg FPeMeKYkpUVrds1mAFpL2BP9pzDBoYByWLuKimXuDeNOhdu0t6QGVZ4k3c2I8g9T Nf/a8OjQbBxj1Hl4eNAJJNfoQE3maF62qMyb9GQv+UVo87cxYIFCtBYSxLJn26vL G30DfPCUtQ0JzCfLMSupPKl7XMOeKiGcM9vv28M9/Bcp3F0Ldpc2WMmrtWPXoO0e zs69ShEZciXNqRiooWUIf7Uk8UE+LgU9EDpH -----END CERTIFICATE-----Generated at Mon Nov 3 22:07:02 2025 by rpki-client