$ rpki-client -vvf rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa File: B91F8BF69EE211EF883C7D14C4F9AE02.roa (raw, json) Hash identifier: ktGluBKIh2Rp7UBZDgAlpgXw47O0jvC7bf19ruPPTeI= Subject key identifier: 88:5F:25:40:11:F8:C6:58:BE:E9:6C:26:50:E2:8F:31:C7:D5:49:13 Certificate issuer: /CN=A9190818/serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A Certificate serial: A0 Authority key identifier: 54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa Signing time: Mon 30 Jun 2025 16:28:38 +0000 ROA not before: Mon 30 Jun 2025 16:28:38 +0000 ROA not after: Sat 31 Jan 2026 00:00:00 +0000 asID: 153371 IP address blocks: 2401:ce20::/48 maxlen: 48 2401:ce20:1::/48 maxlen: 48 2401:ce20:2::/48 maxlen: 48 2401:ce20:3::/48 maxlen: 48 2401:ce20:4::/48 maxlen: 48 2401:ce20:5::/48 maxlen: 48 2401:ce20:6::/48 maxlen: 48 2401:ce20:10::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 160 (0xa0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9190818, serialNumber=548430EAB88E4E378FB5005AFAE5CAB9C0007A1A Validity Not Before: Jun 30 16:28:38 2025 GMT Not After : Jan 31 00:00:00 2026 GMT Subject: CN=6862bb36-1ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:8e:df:93:d6:04:34:a3:8f:1e:71:4c:be:9e: f2:b7:83:56:e1:2f:ca:48:f2:9f:d9:5c:07:5c:5c: 62:22:2d:08:6d:3b:90:38:99:c1:01:78:ba:9f:87: d4:94:f9:31:cf:c4:2e:67:a7:fa:32:b6:35:2f:ad: be:c6:07:47:56:c1:39:14:a7:2d:ea:2e:8f:ad:15: 48:f4:02:65:2d:fd:a6:63:5d:5a:31:63:70:a8:78: 65:8c:ba:13:82:65:83:0c:47:a2:1a:45:76:30:36: ac:b3:d3:6a:1f:99:91:f3:05:8f:34:0d:61:a8:c1: 0b:fd:9f:fc:32:2f:fa:ba:76:20:e3:33:9e:9b:36: 2d:bf:5f:ff:25:c3:52:56:3a:4f:97:a0:6d:bd:7e: 20:73:6b:b3:be:90:f3:c5:11:06:9e:2a:61:73:dc: 16:c2:68:1e:09:d2:8d:0b:c8:f4:94:f4:4e:ae:e9: 69:be:2c:6d:88:af:0b:1a:7a:8b:94:66:92:a3:1b: 14:32:51:ed:98:19:a4:7f:2c:3f:b4:17:68:04:05: 29:83:47:7f:7d:44:4d:d1:3b:41:b6:bb:0c:04:39: b5:60:e8:dd:25:36:da:46:4b:c9:92:88:6e:c5:53: d6:44:97:65:a2:35:c8:69:20:7f:96:b3:7d:e3:1a: 7d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:5F:25:40:11:F8:C6:58:BE:E9:6C:26:50:E2:8F:31:C7:D5:49:13 X509v3 Authority Key Identifier: keyid:54:84:30:EA:B8:8E:4E:37:8F:B5:00:5A:FA:E5:CA:B9:C0:00:7A:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/VIQw6riOTjePtQBa-uXKucAAeho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VIQw6riOTjePtQBa-uXKucAAeho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190818/7E1F6AE2909D11EF9717F650C4F9AE02/B91F8BF69EE211EF883C7D14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2401:ce20::-2401:ce20:6:ffff:ffff:ffff:ffff:ffff 2401:ce20:10::/44 Signature Algorithm: sha256WithRSAEncryption 1e:a0:e7:87:50:2f:5b:c4:4d:3b:06:9d:2f:17:16:65:67:9d: 6e:d9:7d:67:56:cb:f8:f4:f1:1c:e8:af:eb:70:8a:15:81:47: 1f:bc:e1:77:af:f7:c3:86:c5:48:11:79:f0:2f:5a:fd:46:ae: 2a:6f:ea:14:a5:20:71:54:5c:fc:49:5b:61:28:22:84:4d:59: 7e:fd:61:94:c5:cb:79:c8:d5:31:86:dd:a0:a8:a7:83:7a:a4: 2a:5c:17:e6:29:fc:91:f2:ca:c5:d5:08:d1:94:68:46:2e:ba: d9:89:f5:90:8f:08:c5:22:9a:0d:f2:84:30:4e:c8:4a:b8:a1: 63:4d:35:e0:ae:99:46:43:16:17:cd:c8:2e:ec:ec:24:41:e9: fd:da:05:89:52:d4:c1:60:de:ff:5c:80:32:17:3b:91:93:2b: ad:0d:fb:66:e0:91:60:51:dd:18:71:1a:c3:db:18:b3:24:34: 14:33:84:7d:b8:e5:2c:fb:5a:30:c2:69:47:c8:bb:69:11:a6: 4e:e5:1d:9d:e2:1d:bc:e3:05:ec:1a:3a:be:4c:54:8a:36:0f: 8d:26:45:bf:f7:76:22:06:d2:7a:b9:0d:eb:f5:6c:76:48:48: 8e:b5:4b:fa:26:1f:b5:84:ee:5f:fe:93:05:9a:80:ab:89:fb: d8:1a:ad:58 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTA4MTgxMTAvBgNVBAUTKDU0ODQzMEVBQjg4RTRFMzc4RkI1MDA1QUZBRTVDQUI5 QzAwMDdBMUEwHhcNMjUwNjMwMTYyODM4WhcNMjYwMTMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYyYmIzNi0xZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwo7fk9YENKOPHnFMvp7yt4NW4S/KSPKf2VwHXFxiIi0IbTuQOJnBAXi6n4fU lPkxz8QuZ6f6MrY1L62+xgdHVsE5FKct6i6PrRVI9AJlLf2mY11aMWNwqHhljLoT gmWDDEeiGkV2MDass9NqH5mR8wWPNA1hqMEL/Z/8Mi/6unYg4zOemzYtv1//JcNS VjpPl6BtvX4gc2uzvpDzxREGniphc9wWwmgeCdKNC8j0lPROrulpvixtiK8LGnqL lGaSoxsUMlHtmBmkfyw/tBdoBAUpg0d/fURN0TtBtrsMBDm1YOjdJTbaRkvJkohu xVPWRJdlojXIaSB/lrN94xp9YQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFIhfJUAR +MZYvulsJlDijzHH1UkTMB8GA1UdIwQYMBaAFFSEMOq4jk43j7UAWvrlyrnAAHoa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5MDgxOC83RTFGNkFFMjkw OUQxMUVGOTcxN0Y2NTBDNEY5QUUwMi9WSVF3NnJpT1RqZVB0UUJhLXVYS3VjQUFl aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZJUXc2cmlPVGplUHRRQmEtdVhLdWNBQWVoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTA4MTgvN0UxRjZBRTI5MDlEMTFFRjk3MTdGNjUwQzRGOUFFMDIvQjkxRjhCRjY5 RUUyMTFFRjg4M0M3RDE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMCEEAgACMBswEAMFBSQBziADBwAkAc4gAAYDBwQkAc4gABAwDQYJKoZIhvcN AQELBQADggEBAB6g54dQL1vETTsGnS8XFmVnnW7ZfWdWy/j08Rzor+twihWBRx+8 4Xev98OGxUgRefAvWv1Gripv6hSlIHFUXPxJW2EoIoRNWX79YZTFy3nI1TGG3aCo p4N6pCpcF+Yp/JHyysXVCNGUaEYuutmJ9ZCPCMUimg3yhDBOyEq4oWNNNeCumUZD FhfNyC7s7CRB6f3aBYlS1MFg3v9cgDIXO5GTK60N+2bgkWBR3RhxGsPbGLMkNBQz hH245Sz7WjDCaUfIu2kRpk7lHZ3iHbzjBewaOr5MVIo2D40mRb/3diIG0nq5Dev1 bHZISI61S/omH7WE7l/+kwWagKuJ+9garVg= -----END CERTIFICATE-----Generated at Sat Jul 5 02:29:18 2025 by rpki-client