$ rpki-client -vvf rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/AC7759D2135511F092D0090CC4F9AE02.roa File: AC7759D2135511F092D0090CC4F9AE02.roa (raw, json) Hash identifier: P73GyQ+xRG30WPGNAHQCLDV4zJy6doRK0RrvTedfB+M= Subject key identifier: 5E:B0:ED:F2:E5:1B:2D:DE:07:44:94:53:79:CD:66:8B:A5:B2:09:D6 Certificate issuer: /CN=A9179672/serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Certificate serial: FB Authority key identifier: 91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/AC7759D2135511F092D0090CC4F9AE02.roa Signing time: Thu 09 Oct 2025 06:34:33 +0000 ROA not before: Thu 09 Oct 2025 06:34:33 +0000 ROA not after: Wed 30 Dec 2026 00:00:00 +0000 asID: 152657 IP address blocks: 192.206.152.0/24 maxlen: 24 192.206.153.0/24 maxlen: 24 192.206.154.0/24 maxlen: 24 192.206.155.0/24 maxlen: 24 192.206.156.0/24 maxlen: 24 192.206.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:35:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 251 (0xfb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9179672, serialNumber=91AA7783FB027819838C4A91C91C60D41FB3EEAB Validity Not Before: Oct 9 06:34:33 2025 GMT Not After : Dec 30 00:00:00 2026 GMT Subject: CN=68e75778-29f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:46:44:3e:49:c4:e3:ef:0f:d4:56:b8:21: c5:79:de:7a:4d:3c:e0:d9:69:ab:ac:04:98:2c:f5: 85:59:90:51:7a:b2:31:0e:92:6c:63:92:18:8e:b6: 60:96:f1:51:af:6b:80:43:8b:8a:da:48:ea:03:6a: dd:5a:8a:f8:de:70:e5:c4:75:f2:1d:75:3f:27:5c: e7:36:2e:1b:54:fe:00:c7:f4:27:51:ac:e7:78:ae: 19:35:ae:dc:e8:6a:92:cc:dd:d7:e4:0e:03:45:75: 41:13:c0:24:56:2f:e8:b1:8a:87:f2:a9:f7:a4:d9: 5c:17:74:fd:9d:79:55:3c:53:30:bb:15:5b:9b:8e: 56:70:0b:56:a1:f6:65:d0:ca:fe:9c:db:5f:b8:b3: d8:36:1e:58:51:04:a2:5b:5b:be:46:22:15:01:f8: f1:5e:3f:b9:74:32:1a:04:f3:f0:85:88:db:07:24: 75:a0:2f:e6:7a:12:d1:2e:4e:bf:37:2a:3f:49:aa: 56:80:be:26:9b:84:54:68:b3:52:24:06:f0:b2:58: 08:b7:da:83:21:0e:bf:37:23:fe:84:e8:3d:05:d0: 43:e2:75:3d:87:3b:ff:29:64:02:c0:b9:24:f8:3e: 80:07:3d:6a:8c:56:0d:c6:35:5d:19:36:b4:cb:dc: a1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:B0:ED:F2:E5:1B:2D:DE:07:44:94:53:79:CD:66:8B:A5:B2:09:D6 X509v3 Authority Key Identifier: keyid:91:AA:77:83:FB:02:78:19:83:8C:4A:91:C9:1C:60:D4:1F:B3:EE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/kap3g_sCeBmDjEqRyRxg1B-z7qs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/kap3g_sCeBmDjEqRyRxg1B-z7qs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9179672/E5F45AD05F5411EF8D18BE23C4F9AE02/AC7759D2135511F092D0090CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 192.206.152.0-192.206.157.255 Signature Algorithm: sha256WithRSAEncryption 01:cd:8e:f3:aa:dd:5d:f1:0b:c3:79:98:63:8f:d5:71:16:6c: 7d:8f:fd:c5:ce:55:6f:e8:c4:24:7c:2a:83:05:2a:6a:ae:30: e7:9d:6f:63:5b:e8:55:a9:cc:42:3e:b2:c9:06:6c:86:b3:b1: 1f:d4:bc:b5:db:9a:71:1e:40:48:23:e4:91:b2:cc:24:3f:fb: 8f:e9:f3:90:a2:f2:35:a7:d2:b7:e6:ca:60:e7:71:29:ef:d5: 30:0a:9b:37:84:c9:b8:d8:7c:aa:1b:41:bc:85:39:a5:8c:86: d1:b1:dd:f8:7a:02:fc:4d:67:2e:68:b5:09:fe:10:57:78:34: c5:4e:71:83:e3:45:26:ff:37:d9:31:7e:4a:4c:6c:90:57:ff: 8a:e2:e8:ca:a3:75:96:46:93:a7:bc:5b:3b:f7:d7:fe:70:cd: 85:46:96:78:5b:89:3d:db:53:3e:b1:f0:ac:20:1b:32:64:b5: 8b:5d:9b:d8:fd:04:e9:49:3f:e6:4a:7a:77:df:0c:13:ef:1d: c5:73:c2:9e:76:41:db:8b:17:13:ce:b7:ba:17:0a:e6:52:36: 3e:aa:29:44:b2:ac:2d:15:bb:61:fa:91:de:77:de:a9:62:23: b4:be:d4:9c:bb:ac:c8:44:5c:99:24:0e:fb:0f:80:f0:6e:fa: 01:11:3e:e3 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgICAPswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Nzk2NzIxMTAvBgNVBAUTKDkxQUE3NzgzRkIwMjc4MTk4MzhDNEE5MUM5MUM2MEQ0 MUZCM0VFQUIwHhcNMjUxMDA5MDYzNDMzWhcNMjYxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02OGU3NTc3OC0yOWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxUpGRD5JxOPvD9RWuCHFed56TTzg2WmrrASYLPWFWZBRerIxDpJsY5IYjrZg lvFRr2uAQ4uK2kjqA2rdWor43nDlxHXyHXU/J1znNi4bVP4Ax/QnUazneK4ZNa7c 6GqSzN3X5A4DRXVBE8AkVi/osYqH8qn3pNlcF3T9nXlVPFMwuxVbm45WcAtWofZl 0Mr+nNtfuLPYNh5YUQSiW1u+RiIVAfjxXj+5dDIaBPPwhYjbByR1oC/mehLRLk6/ Nyo/SapWgL4mm4RUaLNSJAbwslgIt9qDIQ6/NyP+hOg9BdBD4nU9hzv/KWQCwLkk +D6ABz1qjFYNxjVdGTa0y9yhiQIDAQABo4ICnTCCApkwHQYDVR0OBBYEFF6w7fLl Gy3eB0SUU3nNZoulsgnWMB8GA1UdIwQYMBaAFJGqd4P7AngZg4xKkckcYNQfs+6r MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3OTY3Mi9FNUY0NUFEMDVG NTQxMUVGOEQxOEJFMjNDNEY5QUUwMi9rYXAzZ19zQ2VCbURqRXFSeVJ4ZzFCLXo3 cXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2thcDNnX3NDZUJtRGpFcVJ5UnhnMUItejdxcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Nzk2NzIvRTVGNDVBRDA1RjU0MTFFRjhEMThCRTIzQzRGOUFFMDIvQUM3NzU5RDIx MzU1MTFGMDkyRDAwOTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJwYIKwYBBQUHAQcBAf8E GDAWMBQEAgABMA4wDAMEA8DOmAMEAcDOnDANBgkqhkiG9w0BAQsFAAOCAQEAAc2O 86rdXfELw3mYY4/VcRZsfY/9xc5Vb+jEJHwqgwUqaq4w551vY1voVanMQj6yyQZs hrOxH9S8tduacR5ASCPkkbLMJD/7j+nzkKLyNafSt+bKYOdxKe/VMAqbN4TJuNh8 qhtBvIU5pYyG0bHd+HoC/E1nLmi1Cf4QV3g0xU5xg+NFJv832TF+SkxskFf/iuLo yqN1lkaTp7xbO/fX/nDNhUaWeFuJPdtTPrHwrCAbMmS1i12b2P0E6Uk/5kp6d98M E+8dxXPCnnZB24sXE863uhcK5lI2PqopRLKsLRW7YfqR3nfeqWIjtL7UnLusyERc mSQO+w+A8G76ARE+4w== -----END CERTIFICATE-----Generated at Mon Oct 20 21:55:12 2025 by rpki-client