$ rpki-client -vvf rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/7FC0801ED4EF11EC84AABC0CC4F9AE02.roa File: 7FC0801ED4EF11EC84AABC0CC4F9AE02.roa (raw, json) Hash identifier: KmGf8Zvcyufmo51iUasTSRX2HWDW8cDhuB6ClqAH62g= Subject key identifier: EC:68:A7:1F:AD:87:07:6A:C0:05:2A:DF:64:12:9C:B2:59:6D:87:A1 Certificate issuer: /CN=A91159B7/serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Certificate serial: 0D15 Authority key identifier: 21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/7FC0801ED4EF11EC84AABC0CC4F9AE02.roa Signing time: Tue 24 Jun 2025 18:31:25 +0000 ROA not before: Tue 24 Jun 2025 18:31:25 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 59378 IP address blocks: 150.129.220.0/22 maxlen: 22 150.129.220.0/24 maxlen: 24 150.129.221.0/24 maxlen: 24 150.129.222.0/23 maxlen: 24 2400:90e0::/32 maxlen: 32 2400:90e0:1::/48 maxlen: 48 2400:90e0:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 18:17:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3349 (0xd15) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91159B7, serialNumber=21F20227559DB1F863849AB643233C3E935776A6 Validity Not Before: Jun 24 18:31:25 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685aeefd-b7e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a7:2b:33:b7:66:0d:1f:d4:82:49:e6:e9:e9: f3:d7:c8:55:9d:6d:c4:15:d9:86:9a:6b:70:df:56: 93:15:4a:68:6d:53:3b:85:c3:37:96:d6:8b:9f:1a: fc:35:8a:6b:7e:8c:8a:80:6d:7e:30:b0:1e:28:b8: 8b:e7:70:96:c6:51:c8:82:bc:d7:68:81:72:be:f4: c1:4d:3e:36:8c:0a:be:4d:c7:90:da:a6:33:ae:1e: 62:7d:4c:d2:08:05:33:e8:9e:f0:83:e8:87:35:ed: 1a:96:c7:d9:6c:e9:65:ef:15:3b:11:da:3a:3f:2c: 8b:87:a8:93:e1:52:61:0b:f2:39:49:a8:15:3e:12: f6:6d:d7:69:d2:dd:3d:a0:e6:05:cb:6c:1d:4e:69: 58:a7:55:06:d9:04:04:e0:2c:3d:df:a1:99:8b:5c: 3a:33:9e:4c:ee:4e:d7:ad:a2:00:e7:a8:69:16:8d: ff:39:07:8c:ee:5e:09:e3:d4:f0:8f:7e:7c:d4:25: 25:34:10:8c:22:84:a5:ab:03:9a:fd:c7:71:5a:c6: fe:d4:00:c3:45:62:63:4e:98:dd:c9:03:ce:7e:4b: cc:16:08:bd:fe:66:38:e8:d7:58:18:38:62:ec:f5: c3:3f:d9:32:ac:d9:f9:85:44:bd:6d:7e:47:a2:80: 55:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:68:A7:1F:AD:87:07:6A:C0:05:2A:DF:64:12:9C:B2:59:6D:87:A1 X509v3 Authority Key Identifier: keyid:21:F2:02:27:55:9D:B1:F8:63:84:9A:B6:43:23:3C:3E:93:57:76:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/IfICJ1WdsfhjhJq2QyM8PpNXdqY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IfICJ1WdsfhjhJq2QyM8PpNXdqY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91159B7/A4EC53F6E2B011E99ABB8151C4F9AE02/7FC0801ED4EF11EC84AABC0CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 150.129.220.0/22 IPv6: 2400:90e0::/32 Signature Algorithm: sha256WithRSAEncryption 15:62:72:e1:b5:ce:9d:21:14:92:c6:84:56:9e:1f:da:d7:11: d5:2b:17:1b:9b:7a:7c:55:c8:2b:16:f4:34:12:c4:9a:36:22: 2a:c8:6c:f4:ff:db:7c:56:ab:d8:93:2a:58:23:49:b3:38:ca: 81:bb:51:d6:6f:86:99:9b:33:db:3e:8d:29:97:ed:2e:39:58: 29:d5:00:49:9b:1b:ac:58:a1:bf:f9:05:62:6f:2b:c5:9f:3c: 64:0e:38:85:f3:0d:9c:44:43:2a:92:3f:4d:90:8f:33:ef:70: d1:41:ba:12:96:37:c2:9e:c4:ab:f1:bd:e6:fd:35:b8:65:ec: 51:f3:2a:86:6c:e7:52:b2:ac:44:e9:7b:5e:e5:b5:92:b8:af: 41:9e:e3:31:db:bb:1d:09:83:03:7a:6f:93:13:7b:41:8e:6c: 99:2c:28:bc:0b:e0:95:cf:f8:40:19:b1:19:e0:45:be:26:2f: 48:bc:b8:57:87:ce:73:70:b5:d3:3f:32:50:c5:81:9b:5d:72: 28:6c:3f:80:1a:94:2b:33:4c:b3:1c:a5:0d:a3:ef:08:c0:c6: f6:63:a1:c7:d1:50:3d:86:fd:aa:a8:86:bb:a6:9e:ca:21:34: b0:db:a1:ea:eb:d1:95:ce:ed:d5:a2:81:99:5f:d5:66:fc:69: 59:24:1d:a0 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDRUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTU5QjcxMTAvBgNVBAUTKDIxRjIwMjI3NTU5REIxRjg2Mzg0OUFCNjQzMjMzQzNF OTM1Nzc2QTYwHhcNMjUwNjI0MTgzMTI1WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVhZWVmZC1iN2U4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAnqcrM7dmDR/Ugknm6enz18hVnW3EFdmGmmtw31aTFUpobVM7hcM3ltaLnxr8 NYprfoyKgG1+MLAeKLiL53CWxlHIgrzXaIFyvvTBTT42jAq+TceQ2qYzrh5ifUzS CAUz6J7wg+iHNe0alsfZbOll7xU7Edo6PyyLh6iT4VJhC/I5SagVPhL2bddp0t09 oOYFy2wdTmlYp1UG2QQE4Cw936GZi1w6M55M7k7XraIA56hpFo3/OQeM7l4J49Tw j3581CUlNBCMIoSlqwOa/cdxWsb+1ADDRWJjTpjdyQPOfkvMFgi9/mY46NdYGDhi 7PXDP9kyrNn5hUS9bX5HooBVfQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFOxopx+t hwdqwAUq32QSnLJZbYehMB8GA1UdIwQYMBaAFCHyAidVnbH4Y4SatkMjPD6TV3am MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNTlCNy9BNEVDNTNGNkUy QjAxMUU5OUFCQjgxNTFDNEY5QUUwMi9JZklDSjFXZHNmaGpoSnEyUXlNOFBwTlhk cVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmSUNKMVdkc2ZoamhKcTJReU04UHBOWGRxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTU5QjcvQTRFQzUzRjZFMkIwMTFFOTlBQkI4MTUxQzRGOUFFMDIvN0ZDMDgwMUVE NEVGMTFFQzg0QUFCQzBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAKWgdwwDQQCAAIwBwMFACQAkOAwDQYJKoZIhvcNAQELBQAD ggEBABVicuG1zp0hFJLGhFaeH9rXEdUrFxubenxVyCsW9DQSxJo2IirIbPT/23xW q9iTKlgjSbM4yoG7UdZvhpmbM9s+jSmX7S45WCnVAEmbG6xYob/5BWJvK8WfPGQO OIXzDZxEQyqSP02QjzPvcNFBuhKWN8KexKvxveb9Nbhl7FHzKoZs51KyrETpe17l tZK4r0Ge4zHbux0JgwN6b5MTe0GObJksKLwL4JXP+EAZsRngRb4mL0i8uFeHznNw tdM/MlDFgZtdcihsP4AalCszTLMcpQ2j7wjAxvZjocfRUD2G/aqohrumnsohNLDb oerr0ZXO7dWigZlf1Wb8aVkkHaA= -----END CERTIFICATE-----Generated at Thu Jul 3 13:33:34 2025 by rpki-client