$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/A173B894112711F0845DF16FC4F9AE02.roa File: A173B894112711F0845DF16FC4F9AE02.roa (raw, json) Hash identifier: 3CENOgG8lzvvc7h19xhkGA0RtKWssC6nuSD3IRmHv+U= Subject key identifier: 22:B1:D6:03:BF:5B:C4:96:4D:75:7C:9E:45:62:76:0B:AA:5E:E3:EA Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 10FD Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/A173B894112711F0845DF16FC4F9AE02.roa Signing time: Mon 02 Jun 2025 21:06:59 +0000 ROA not before: Mon 02 Jun 2025 21:06:59 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 5089 IP address blocks: 139.190.224.0/21 maxlen: 21 139.190.232.0/24 maxlen: 24 139.190.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 21:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4349 (0x10fd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Jun 2 21:06:59 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683e1273-a29d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6f:79:17:66:d0:43:70:9c:a8:d8:ab:5b:99: 11:9c:e8:d1:a7:34:80:b7:1d:93:bd:f4:3d:9f:78: 07:17:8a:15:fd:54:7c:d6:2b:eb:45:50:00:1b:c9: ec:7a:b4:c1:e6:56:75:41:2b:82:eb:62:75:92:3b: ab:a8:ac:d5:6d:4a:b6:61:f2:b1:f5:ab:38:21:8c: 43:33:8e:38:bb:a0:0c:51:51:e8:c2:b7:de:4a:b7: 01:91:e3:74:c3:f7:a3:6a:a3:f8:0b:7d:4f:3b:e0: c4:f2:59:fa:79:13:8a:a5:d6:a8:12:48:fd:7e:49: e5:d5:b7:59:cf:42:56:46:cd:7e:cb:30:55:99:b1: 9c:c3:2c:31:a6:b1:1b:30:a6:9e:4d:e9:c3:06:2e: c6:40:0c:87:74:ba:b1:ca:82:59:3f:00:b9:da:fb: b9:ef:d5:fc:45:48:01:f3:98:98:bf:e6:7f:52:45: f0:40:7d:7d:d0:d6:40:8b:12:a2:52:0a:e9:89:f6: 83:1c:48:ea:0e:d9:73:50:86:3d:a0:56:b2:90:25: c8:95:f4:40:71:bb:17:8b:d9:7d:62:01:0c:ad:88: 52:e6:cb:5f:8f:d7:ce:ed:87:84:a1:fd:61:3c:07: 42:78:94:90:49:e3:03:c9:5e:ba:e9:3f:0e:24:9e: d7:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B1:D6:03:BF:5B:C4:96:4D:75:7C:9E:45:62:76:0B:AA:5E:E3:EA X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/A173B894112711F0845DF16FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.224.0-139.190.233.255 Signature Algorithm: sha256WithRSAEncryption 99:09:1f:4a:10:e9:e7:a0:5c:8d:15:11:95:d9:78:ed:b4:59: dc:25:df:bb:d0:68:85:45:2a:d8:5a:26:22:15:69:c2:40:2b: 50:12:8a:74:c3:04:e0:51:4d:e5:24:6f:53:80:0b:c8:49:ea: 19:98:38:24:a7:66:05:f1:2d:0b:5f:8f:75:69:ef:34:7e:36: db:91:97:44:c3:0d:7b:c5:24:73:af:fd:69:e7:3c:fd:c7:b0: 5d:7e:8d:72:2b:d4:d6:f1:f2:d6:1d:ef:c6:b1:0d:b6:ff:39: e1:69:85:58:8c:04:0c:b0:9f:b4:65:07:d6:62:89:c3:03:bb: c8:70:70:04:c1:f3:cf:f4:ea:fc:c2:b3:09:e7:7a:e1:eb:a9: 84:3d:95:50:33:0b:4c:67:8f:24:e4:bf:7d:35:c6:fe:b5:9f: d2:b1:5e:ba:70:99:2e:06:b9:0b:22:12:7e:fd:49:c7:41:4a: 47:d0:77:dc:41:a9:26:b0:c0:b3:48:36:c1:c3:2e:6c:71:91: 81:d1:b0:29:d0:8d:31:d8:38:b1:ea:ba:54:2e:9a:c5:66:68: 91:2a:9d:07:c3:b5:19:44:a4:59:68:3a:e4:5e:4c:42:91:27: 67:a2:18:ee:dc:a5:69:48:14:e4:a8:91:4a:75:99:14:fa:7a: 5b:dc:37:57 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICEP0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUwNjAyMjEwNjU5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlMTI3My1hMjlkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwG95F2bQQ3CcqNirW5kRnOjRpzSAtx2TvfQ9n3gHF4oV/VR81ivrRVAAG8ns erTB5lZ1QSuC62J1kjurqKzVbUq2YfKx9as4IYxDM444u6AMUVHowrfeSrcBkeN0 w/ejaqP4C31PO+DE8ln6eROKpdaoEkj9fknl1bdZz0JWRs1+yzBVmbGcwywxprEb MKaeTenDBi7GQAyHdLqxyoJZPwC52vu579X8RUgB85iYv+Z/UkXwQH190NZAixKi UgrpifaDHEjqDtlzUIY9oFaykCXIlfRAcbsXi9l9YgEMrYhS5stfj9fO7YeEof1h PAdCeJSQSeMDyV666T8OJJ7X8QIDAQABo4ICnTCCApkwHQYDVR0OBBYEFCKx1gO/ W8SWTXV8nkVidguqXuPqMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQTE3M0I4OTQx MTI3MTFGMDg0NURGMTZGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEBYu+4AMEAYu+6DANBgkqhkiG9w0BAQsFAAOCAQEAmQkf ShDp56BcjRURldl47bRZ3CXfu9BohUUq2FomIhVpwkArUBKKdMME4FFN5SRvU4AL yEnqGZg4JKdmBfEtC1+PdWnvNH4225GXRMMNe8Ukc6/9aec8/cewXX6NcivU1vHy 1h3vxrENtv854WmFWIwEDLCftGUH1mKJwwO7yHBwBMHzz/Tq/MKzCed64euphD2V UDMLTGePJOS/fTXG/rWf0rFeunCZLga5CyISfv1Jx0FKR9B33EGpJrDAs0g2wcMu bHGRgdGwKdCNMdg4seq6VC6axWZokSqdB8O1GUSkWWg65F5MQpEnZ6IY7tylaUgU 5KiRSnWZFPp6W9w3Vw== -----END CERTIFICATE-----Generated at Mon Oct 27 17:40:02 2025 by rpki-client