$ rpki-client -vvf rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/76C6B0C8105511EC92580578C4F9AE02.roa File: 76C6B0C8105511EC92580578C4F9AE02.roa (raw, json) Hash identifier: KNKr/vdFsPG2efndOU9YZL51hqgeR7tCPKBLWlsA/Vo= Subject key identifier: 28:B3:D0:2B:98:16:62:3F:E3:7C:8E:CC:00:A4:0D:DF:10:77:BD:B4 Certificate issuer: /CN=A91E7561/serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Certificate serial: 0644 Authority key identifier: 25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/76C6B0C8105511EC92580578C4F9AE02.roa Signing time: Wed 27 Aug 2025 00:04:44 +0000 ROA not before: Wed 27 Aug 2025 00:04:44 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 138524 IP address blocks: 27.130.248.0/24 maxlen: 24 27.130.249.0/24 maxlen: 24 27.130.252.0/24 maxlen: 24 103.170.130.0/23 maxlen: 23 180.183.0.0/24 maxlen: 24 180.183.1.0/24 maxlen: 24 183.88.0.0/17 maxlen: 17 183.89.0.0/17 maxlen: 17 2407:b1c0::/32 maxlen: 32 2407:b1c0:b00::/48 maxlen: 48 2407:b1c0:d00::/48 maxlen: 48 2407:b1c0:d10::/44 maxlen: 44 2407:b1c0:d20::/44 maxlen: 44 2407:b1c0:4d10::/44 maxlen: 44 2407:b1c0:4d20::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 15 Sep 2025 23:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1604 (0x644) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E7561, serialNumber=25BC7D4DE77BD01B3D191587696E5AFDD8CECD04 Validity Not Before: Aug 27 00:04:44 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68ae4b9c-90e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:51:29:20:80:2b:12:43:b3:17:84:6a:59:75: 22:63:b3:1d:68:97:17:7e:c9:95:b0:20:c7:0c:ef: f7:e9:a8:71:9a:ad:b8:ec:bf:13:99:2d:e3:5a:7e: df:a1:89:52:1d:e0:98:e2:2a:e7:33:7f:31:71:d8: 58:a2:47:bb:42:6d:71:18:70:c0:2a:77:70:8f:02: 3b:0b:27:49:45:b6:49:d6:58:ab:3d:bc:08:3d:74: a5:17:92:b2:0e:fa:ad:f3:9c:ca:d7:cd:72:87:c0: 06:ba:13:16:49:c6:d3:f6:4f:bb:53:52:43:a3:e5: 55:ac:21:61:1e:73:6a:c1:fc:bc:8b:81:71:a3:ff: 29:05:25:b8:84:70:fc:14:da:9e:78:22:26:bc:7f: a4:bb:0d:ad:14:c3:72:84:3e:e8:5f:cf:1d:26:0d: 82:44:95:e4:d8:d9:8c:9e:70:c9:a0:ce:ff:d3:f3: b1:15:1b:c0:f6:f1:b6:49:8e:0f:9c:b1:71:72:39: 94:4b:2b:0a:5e:5b:46:b0:c9:48:ef:6b:25:c5:53: 53:50:f1:fe:de:86:98:8b:79:6f:e4:66:4f:66:b6: 23:76:90:9c:a5:44:5b:02:72:f3:29:d4:3a:c0:d9: c6:25:14:bd:ab:11:23:3e:43:25:ad:80:98:fa:51: ca:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:B3:D0:2B:98:16:62:3F:E3:7C:8E:CC:00:A4:0D:DF:10:77:BD:B4 X509v3 Authority Key Identifier: keyid:25:BC:7D:4D:E7:7B:D0:1B:3D:19:15:87:69:6E:5A:FD:D8:CE:CD:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Jbx9Ted70Bs9GRWHaW5a_djOzQQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E7561/A26E06E0054C11ECBDB4FE46C4F9AE02/76C6B0C8105511EC92580578C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.130.248.0/23 27.130.252.0/24 103.170.130.0/23 180.183.0.0/23 183.88.0.0/17 183.89.0.0/17 IPv6: 2407:b1c0::/32 Signature Algorithm: sha256WithRSAEncryption 27:3e:cd:85:5a:d7:57:c6:3c:26:f3:d3:50:c5:33:28:e1:28: 5a:ea:bf:9b:5f:32:71:be:1f:70:7c:91:41:7a:d0:cf:9d:05: a0:9c:5e:13:b0:12:c8:17:6c:b5:5a:5e:a1:2e:40:62:04:36: 58:09:cd:4a:64:9d:f0:a3:38:7e:9b:f0:2c:67:56:3b:ad:d6: 3d:c7:16:30:5d:e2:e6:f7:ee:95:c7:19:e2:32:f7:fe:64:65: 2d:3d:bb:c9:04:7d:df:30:27:b3:23:2b:01:62:3d:b8:a4:2c: ee:2e:24:dd:61:bc:4e:a2:72:ea:fc:54:dd:77:66:76:d7:5a: 2c:e8:01:79:69:02:62:bc:4d:75:00:69:73:95:25:f6:d0:18: ed:65:24:d7:89:5c:c1:ee:b2:3e:ac:26:fd:3f:e6:7c:aa:06: 7f:21:47:63:e2:c2:ed:ea:31:9f:ab:58:70:6c:3c:b3:fd:6c: 16:3a:49:ae:c3:92:68:ea:2a:31:dd:63:ed:3f:e2:c4:34:0b: 3a:27:e7:d6:48:3d:97:25:15:27:0e:1f:51:94:7a:2d:4d:bf: f8:6f:b7:76:72:6b:a1:23:43:81:76:37:98:49:c9:1e:da:9a: b4:47:34:8f:34:b5:5e:1c:de:7a:ce:ae:84:90:ec:01:1a:93: 33:fb:b8:7f -----BEGIN CERTIFICATE----- MIIFnjCCBIagAwIBAgICBkQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTc1NjExMTAvBgNVBAUTKDI1QkM3RDRERTc3QkQwMUIzRDE5MTU4NzY5NkU1QUZE RDhDRUNEMDQwHhcNMjUwODI3MDAwNDQ0WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGFlNGI5Yy05MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw1EpIIArEkOzF4RqWXUiY7MdaJcXfsmVsCDHDO/36ahxmq247L8TmS3jWn7f oYlSHeCY4irnM38xcdhYoke7Qm1xGHDAKndwjwI7CydJRbZJ1lirPbwIPXSlF5Ky Dvqt85zK181yh8AGuhMWScbT9k+7U1JDo+VVrCFhHnNqwfy8i4Fxo/8pBSW4hHD8 FNqeeCImvH+kuw2tFMNyhD7oX88dJg2CRJXk2NmMnnDJoM7/0/OxFRvA9vG2SY4P nLFxcjmUSysKXltGsMlI72slxVNTUPH+3oaYi3lv5GZPZrYjdpCcpURbAnLzKdQ6 wNnGJRS9qxEjPkMlrYCY+lHKywIDAQABo4ICwjCCAr4wHQYDVR0OBBYEFCiz0CuY FmI/43yOzACkDd8Qd720MB8GA1UdIwQYMBaAFCW8fU3ne9AbPRkVh2luWv3Yzs0E MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzU2MS9BMjZFMDZFMDA1 NEMxMUVDQkRCNEZFNDZDNEY5QUUwMi9KYng5VGVkNzBCczlHUldIYVc1YV9kak96 UVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pieDlUZWQ3MEJzOUdSV0hhVzVhX2RqT3pRUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTc1NjEvQTI2RTA2RTAwNTRDMTFFQ0JEQjRGRTQ2QzRGOUFFMDIvNzZDNkIwQzgx MDU1MTFFQzkyNTgwNTc4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTAYIKwYBBQUHAQcBAf8E PTA7MCoEAgABMCQDBAEbgvgDBAAbgvwDBAFnqoIDBAG0twADBAe3WAADBAe3WQAw DQQCAAIwBwMFACQHscAwDQYJKoZIhvcNAQELBQADggEBACc+zYVa11fGPCbz01DF MyjhKFrqv5tfMnG+H3B8kUF60M+dBaCcXhOwEsgXbLVaXqEuQGIENlgJzUpknfCj OH6b8CxnVjut1j3HFjBd4ub37pXHGeIy9/5kZS09u8kEfd8wJ7MjKwFiPbikLO4u JN1hvE6icur8VN13ZnbXWizoAXlpAmK8TXUAaXOVJfbQGO1lJNeJXMHusj6sJv0/ 5nyqBn8hR2Piwu3qMZ+rWHBsPLP9bBY6Sa7DkmjqKjHdY+0/4sQ0Czon59ZIPZcl FScOH1GUei1Nv/hvt3Zya6EjQ4F2N5hJyR7amrRHNI80tV4c3nrOroSQ7AEakzP7 uH8= -----END CERTIFICATE-----Generated at Wed Sep 10 13:35:14 2025 by rpki-client