$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/BE7E4E9891F911EF86353E28C4F9AE02.roa File: BE7E4E9891F911EF86353E28C4F9AE02.roa (raw, json) Hash identifier: 0eKMiuybEL3RZ9M1FJ5oQARMsUnxdeLLyfCZMIEzPk8= Subject key identifier: A1:66:1E:3E:6D:BC:A2:62:23:82:12:E4:8E:F7:2D:F9:58:2C:4A:6D Certificate issuer: /CN=A91E6134/serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Certificate serial: 1100 Authority key identifier: 9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/BE7E4E9891F911EF86353E28C4F9AE02.roa Signing time: Mon 02 Jun 2025 21:07:02 +0000 ROA not before: Mon 02 Jun 2025 21:07:02 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 7018 IP address blocks: 139.190.64.0/22 maxlen: 22 139.190.72.0/21 maxlen: 21 139.190.96.0/20 maxlen: 20 139.190.112.0/21 maxlen: 21 139.190.120.0/22 maxlen: 22 139.190.192.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 20:34:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4352 (0x1100) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=9A73F1A919FBF46C872E38805B1650B5F88276D3 Validity Not Before: Jun 2 21:07:02 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683e1275-1f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:c7:4b:61:6f:40:7a:41:21:60:6b:ab:5d:b2: 43:c8:fb:18:e9:28:ad:8c:ef:8e:6f:30:7f:d4:d0: 74:65:c4:ef:e0:65:5e:bf:af:44:8e:39:8c:cf:1a: 70:4d:2d:31:b5:40:3d:aa:96:2e:47:dc:57:78:1f: 6f:d6:1b:7b:d8:c2:15:d4:4e:64:be:cc:5c:05:42: b9:91:ee:69:21:d7:15:08:10:57:9e:6b:40:ca:85: 39:c7:12:d4:7e:9e:86:6d:95:91:0b:30:57:6c:56: 9c:71:49:e0:56:0c:07:bc:e8:83:37:8a:13:5e:cc: ad:50:20:1d:0b:10:47:6f:7e:fd:27:f0:fd:f7:6f: 3f:b3:53:c1:40:37:f4:17:ee:d3:b8:a6:bc:9b:e2: 82:09:e6:8b:e3:26:37:94:b7:da:ec:2f:ae:2b:a9: 01:ab:e0:34:87:5a:04:c5:61:68:c9:f4:96:3f:26: 1e:0a:62:84:cb:d6:5a:7c:97:de:03:16:ac:74:8e: dd:2d:3b:1e:3a:ac:0d:fe:30:fe:ec:5c:4c:59:8f: 25:58:7c:f7:13:b9:b2:20:2b:c4:17:17:8d:7a:51: 4d:58:0c:10:b1:b5:96:c0:33:2b:87:cf:1a:10:4f: b4:f4:d2:b1:f5:0a:48:36:7c:f2:85:35:66:84:9c: 86:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:66:1E:3E:6D:BC:A2:62:23:82:12:E4:8E:F7:2D:F9:58:2C:4A:6D X509v3 Authority Key Identifier: keyid:9A:73:F1:A9:19:FB:F4:6C:87:2E:38:80:5B:16:50:B5:F8:82:76:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/mnPxqRn79GyHLjiAWxZQtfiCdtM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mnPxqRn79GyHLjiAWxZQtfiCdtM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/57B3E0BCC2A811EAA7918A2EC4F9AE02/BE7E4E9891F911EF86353E28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.190.64.0/22 139.190.72.0/21 139.190.96.0-139.190.123.255 139.190.192.0/19 Signature Algorithm: sha256WithRSAEncryption 0d:0d:13:c5:32:0c:93:88:81:55:42:8b:46:29:ab:f7:3d:01: b6:35:51:35:85:e7:86:89:7e:01:55:d6:bb:f5:95:08:a5:8f: 57:a9:84:3a:48:08:82:90:ef:28:7c:a7:1b:04:db:8a:50:a5: 13:cc:01:f9:da:ac:28:75:06:26:10:51:f3:3a:58:52:44:c2: d7:e8:e2:1a:6e:6e:cc:ca:2c:b9:32:00:b7:6f:58:49:08:1a: 0a:4e:68:f7:89:84:9f:a1:4b:dc:f0:c6:0a:73:20:78:38:32: 7f:80:b2:3d:13:e6:37:d0:32:f4:2e:12:bd:be:20:ce:ac:2d: 15:b6:20:18:11:72:0f:42:4c:a2:e3:c0:ca:69:e6:4b:20:25: 82:be:71:36:c8:24:b4:56:68:91:ce:4e:8d:5b:69:20:4d:1d: 17:71:08:57:9f:58:03:45:6b:71:6d:0e:bb:34:fc:3c:b3:46: 94:06:20:c6:73:08:11:14:c7:1b:f9:7a:44:4a:02:c6:34:e5: b8:d3:f5:19:2e:57:1b:7b:09:54:24:84:33:d0:93:90:ea:f4: a4:e2:0b:20:e4:c2:0c:4a:0f:38:94:95:31:d9:71:b9:09:cf: d2:25:1d:ac:43:9f:53:c5:69:fa:9c:c0:89:d6:20:b5:af:23: 60:3c:1a:a6 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICEQAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDlBNzNGMUE5MTlGQkY0NkM4NzJFMzg4MDVCMTY1MEI1 Rjg4Mjc2RDMwHhcNMjUwNjAyMjEwNzAyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlMTI3NS0xZjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9MdLYW9AekEhYGurXbJDyPsY6SitjO+ObzB/1NB0ZcTv4GVev69EjjmMzxpw TS0xtUA9qpYuR9xXeB9v1ht72MIV1E5kvsxcBUK5ke5pIdcVCBBXnmtAyoU5xxLU fp6GbZWRCzBXbFaccUngVgwHvOiDN4oTXsytUCAdCxBHb379J/D9928/s1PBQDf0 F+7TuKa8m+KCCeaL4yY3lLfa7C+uK6kBq+A0h1oExWFoyfSWPyYeCmKEy9ZafJfe AxasdI7dLTseOqwN/jD+7FxMWY8lWHz3E7myICvEFxeNelFNWAwQsbWWwDMrh88a EE+09NKx9QpINnzyhTVmhJyGHQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFKFmHj5t vKJiI4IS5I73LflYLEptMB8GA1UdIwQYMBaAFJpz8akZ+/Rshy44gFsWULX4gnbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81N0IzRTBCQ0My QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9tblB4cVJuNzlHeUhMamlBV3haUXRmaUNk dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL21uUHhxUm43OUd5SExqaUFXeFpRdGZpQ2R0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNTdCM0UwQkNDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQkU3RTRFOTg5 MUY5MTFFRjg2MzUzRTI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAKLvkADBAOLvkgwDAMEBYu+YAMEAou+eAMEBYu+wDANBgkq hkiG9w0BAQsFAAOCAQEADQ0TxTIMk4iBVUKLRimr9z0BtjVRNYXnhol+AVXWu/WV CKWPV6mEOkgIgpDvKHynGwTbilClE8wB+dqsKHUGJhBR8zpYUkTC1+jiGm5uzMos uTIAt29YSQgaCk5o94mEn6FL3PDGCnMgeDgyf4CyPRPmN9Ay9C4Svb4gzqwtFbYg GBFyD0JMouPAymnmSyAlgr5xNsgktFZokc5OjVtpIE0dF3EIV59YA0VrcW0OuzT8 PLNGlAYgxnMIERTHG/l6REoCxjTluNP1GS5XG3sJVCSEM9CTkOr0pOILIOTCDEoP OJSVMdlxuQnP0iUdrEOfU8Vp+pzAidYgta8jYDwapg== -----END CERTIFICATE-----Generated at Thu Jun 5 19:13:30 2025 by rpki-client