$ rpki-client -vvf rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/91CA6CBC740111EFB5E97021C4F9AE02.roa File: 91CA6CBC740111EFB5E97021C4F9AE02.roa (raw, json) Hash identifier: YgDfwoJsux34uSaM5jXKcO0HoCC5yHWaw8GBRqOn1lo= Subject key identifier: AA:95:6B:5C:F0:B6:A9:5D:63:F3:6E:0F:B7:BB:1C:9D:DB:24:71:5D Certificate issuer: /CN=A915F89C/serialNumber=466F112442C5D02E60F24699193AE215195B3BA9 Certificate serial: 0DC5 Authority key identifier: 46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/91CA6CBC740111EFB5E97021C4F9AE02.roa Signing time: Mon 18 Aug 2025 14:50:35 +0000 ROA not before: Mon 18 Aug 2025 14:50:35 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 9255 IP address blocks: 151.192.0.0/21 maxlen: 21 151.192.8.0/21 maxlen: 21 151.192.16.0/21 maxlen: 21 151.192.24.0/21 maxlen: 21 151.192.32.0/21 maxlen: 21 151.192.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 14:22:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3525 (0xdc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A915F89C, serialNumber=466F112442C5D02E60F24699193AE215195B3BA9 Validity Not Before: Aug 18 14:50:35 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a33dbb-55e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ec:86:48:9d:91:61:22:97:59:f9:b1:7b:f7: ac:a3:e1:62:b5:a0:94:b6:d5:a7:28:8c:44:16:ec: 0f:a9:53:f8:85:a4:b0:1c:71:73:29:07:15:09:45: be:9b:39:b7:fc:7f:09:f9:45:56:9f:99:6d:fd:0a: 94:e9:c9:99:26:0d:9d:5e:18:16:d2:90:2f:85:2c: 83:95:34:e2:98:2a:83:6b:8b:21:15:c0:ec:c8:93: fe:bb:31:a2:b6:f1:b6:1d:9b:8c:3a:c3:27:4c:bf: 16:40:6e:47:48:17:7b:04:1b:7e:57:5f:fa:df:1e: 2f:c9:f7:66:2d:62:a0:ea:e1:3b:b0:1b:19:a3:d6: 62:1c:0f:5d:40:af:77:c6:e8:b2:f0:10:9c:3d:89: 6e:ec:8f:29:86:f9:3f:f5:6f:31:9f:78:1a:ac:9a: c1:2a:5d:5e:f8:3c:83:50:19:91:ab:58:de:9c:62: b9:d2:37:9b:ad:19:29:e9:ba:02:50:af:83:dd:51: ea:71:4d:e0:80:c7:3d:47:a9:2b:76:b7:d3:65:e2: 58:d1:e8:16:e2:f6:2a:48:b1:4a:89:c3:1d:35:2e: 16:50:ba:4c:3c:97:21:ae:e3:19:b4:57:a5:46:e7: 12:a6:55:4b:1b:8c:76:ae:cc:2f:20:a5:f3:07:37: 0f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:95:6B:5C:F0:B6:A9:5D:63:F3:6E:0F:B7:BB:1C:9D:DB:24:71:5D X509v3 Authority Key Identifier: keyid:46:6F:11:24:42:C5:D0:2E:60:F2:46:99:19:3A:E2:15:19:5B:3B:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/Rm8RJELF0C5g8kaZGTriFRlbO6k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Rm8RJELF0C5g8kaZGTriFRlbO6k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F89C/01B069F6CEBB11E99B1F7D3EC4F9AE02/91CA6CBC740111EFB5E97021C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 151.192.0.0-151.192.39.255 151.192.48.0/24 Signature Algorithm: sha256WithRSAEncryption 33:79:66:46:58:b6:5e:52:f3:28:3c:66:52:62:05:ad:bf:95: 0a:40:78:5a:05:24:7d:e4:63:6b:94:25:d2:ca:26:8c:a3:17: f6:ba:82:e3:ad:f8:ec:ad:1b:8a:93:25:ad:70:c0:55:9e:90: a3:2c:e6:fe:64:68:76:4c:29:19:27:20:d1:ef:10:23:3d:a6: 3f:9d:c1:33:94:d4:f7:ef:d4:c6:0b:cf:fb:9e:5f:6d:46:a5: 53:3c:f1:16:4e:d1:99:af:55:50:ba:78:d5:f4:61:57:c0:a6: 26:b1:34:4c:05:e4:21:ea:ae:6d:05:ac:e2:63:ae:a1:51:27: 7a:09:e8:e6:21:57:06:0a:49:8c:31:4c:61:46:7a:44:2c:18: e4:a9:28:81:49:39:26:6c:3b:76:de:cd:bb:36:95:78:6e:89: e9:60:fa:b9:84:28:ac:91:8c:e3:50:4a:b3:70:da:0d:d8:2f: 11:28:39:ad:26:47:03:51:85:e2:b8:88:dd:5e:68:41:b5:c6: ef:4b:e7:e5:3a:f1:c5:3b:f2:08:72:81:a9:c6:91:88:4e:a4: 30:47:6b:01:89:2a:93:33:77:3e:03:31:16:a0:f1:8c:11:dc: 00:39:5c:4c:84:15:da:e2:26:e9:26:fd:85:9e:bd:02:92:e5: 37:2a:f1:4b -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgICDcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NUY4OUMxMTAvBgNVBAUTKDQ2NkYxMTI0NDJDNUQwMkU2MEYyNDY5OTE5M0FFMjE1 MTk1QjNCQTkwHhcNMjUwODE4MTQ1MDM1WhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzM2RiYi01NWU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4+yGSJ2RYSKXWfmxe/eso+FitaCUttWnKIxEFuwPqVP4haSwHHFzKQcVCUW+ mzm3/H8J+UVWn5lt/QqU6cmZJg2dXhgW0pAvhSyDlTTimCqDa4shFcDsyJP+uzGi tvG2HZuMOsMnTL8WQG5HSBd7BBt+V1/63x4vyfdmLWKg6uE7sBsZo9ZiHA9dQK93 xuiy8BCcPYlu7I8phvk/9W8xn3garJrBKl1e+DyDUBmRq1jenGK50jebrRkp6boC UK+D3VHqcU3ggMc9R6krdrfTZeJY0egW4vYqSLFKicMdNS4WULpMPJchruMZtFel RucSplVLG4x2rswvIKXzBzcPhwIDAQABo4ICojCCAp4wHQYDVR0OBBYEFKqVa1zw tqldY/NuD7e7HJ3bJHFdMB8GA1UdIwQYMBaAFEZvESRCxdAuYPJGmRk64hUZWzup MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1Rjg5Qy8wMUIwNjlGNkNF QkIxMUU5OUIxRjdEM0VDNEY5QUUwMi9SbThSSkVMRjBDNWc4a2FaR1RyaUZSbGJP NmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL1JtOFJKRUxGMEM1ZzhrYVpHVHJpRlJsYk82ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NUY4OUMvMDFCMDY5RjZDRUJCMTFFOTlCMUY3RDNFQzRGOUFFMDIvOTFDQTZDQkM3 NDAxMTFFRkI1RTk3MDIxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLAYIKwYBBQUHAQcBAf8E HTAbMBkEAgABMBMwCwMDBpfAAwQDl8AgAwQAl8AwMA0GCSqGSIb3DQEBCwUAA4IB AQAzeWZGWLZeUvMoPGZSYgWtv5UKQHhaBSR95GNrlCXSyiaMoxf2uoLjrfjsrRuK kyWtcMBVnpCjLOb+ZGh2TCkZJyDR7xAjPaY/ncEzlNT379TGC8/7nl9tRqVTPPEW TtGZr1VQunjV9GFXwKYmsTRMBeQh6q5tBaziY66hUSd6CejmIVcGCkmMMUxhRnpE LBjkqSiBSTkmbDt23s27NpV4bonpYPq5hCiskYzjUEqzcNoN2C8RKDmtJkcDUYXi uIjdXmhBtcbvS+flOvHFO/IIcoGpxpGITqQwR2sBiSqTM3c+AzEWoPGMEdwAOVxM hBXa4ibpJv2Fnr0CkuU3KvFL -----END CERTIFICATE-----Generated at Sun Aug 24 02:55:33 2025 by rpki-client