$ rpki-client -vvf rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/1F388278205F11F0A895DE1EC4F9AE02.roa File: 1F388278205F11F0A895DE1EC4F9AE02.roa (raw, json) Hash identifier: QotOqnglA46ODcG/lG9E8XyvCGo9HnekdR3etzUrE4c= Subject key identifier: 60:38:00:EB:6F:AA:ED:F2:57:2E:70:65:4F:FC:EC:85:80:36:CB:7E Certificate issuer: /CN=A91991D3/serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Certificate serial: 0187 Authority key identifier: 19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/1F388278205F11F0A895DE1EC4F9AE02.roa Signing time: Thu 12 Jun 2025 09:39:21 +0000 ROA not before: Thu 12 Jun 2025 09:39:21 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 40605 IP address blocks: 185.254.242.0/24 maxlen: 24 185.254.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 02:53:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 391 (0x187) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91991D3, serialNumber=19581338A9D63D95A96D1711623E2F660EB0FB17 Validity Not Before: Jun 12 09:39:21 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=684aa049-cf3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:12:98:e9:ab:9b:9a:b7:0f:50:d9:fd:1c:fb: 18:02:85:7e:4d:23:7b:f3:31:42:db:9f:42:e1:5f: 70:63:f2:30:c8:1f:17:2b:52:23:72:3a:3d:7e:62: b2:ed:73:45:0b:18:d7:c4:71:46:3f:3c:e3:d6:c3: 36:62:da:c6:1e:0c:d3:20:fb:f3:82:f3:8b:a1:c2: 2b:b1:fd:4c:ef:de:01:d2:d5:3c:55:92:be:c9:5b: 0e:f7:ab:cb:cc:bd:dc:b6:d8:ea:b6:99:0f:bb:a3: 5a:64:c0:df:7d:ea:51:b7:a2:58:4b:2b:ca:4c:01: c7:02:9b:8b:6e:29:ab:85:4a:81:e3:4e:03:d7:f2: d1:2a:44:c1:a6:31:ab:aa:69:30:82:4a:31:69:09: 37:62:0e:c6:7a:0f:52:ce:d5:98:ac:f7:61:48:50: 51:00:65:dd:57:c3:5b:8e:bb:bd:7f:a4:9c:aa:b3: f6:c9:7d:ec:2c:8b:a2:1c:d4:46:d5:0f:2f:4a:73: 76:f1:88:ff:f6:64:62:f3:bc:70:f5:57:83:be:1d: 6d:ea:1f:fc:a2:fc:ad:eb:55:d6:ac:61:fe:fc:a5: 2b:8c:2b:6c:bf:b2:39:1d:8b:85:d0:c9:ef:76:62: 2a:25:9d:28:41:b5:64:d0:66:20:70:7d:86:dd:ba: 94:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:38:00:EB:6F:AA:ED:F2:57:2E:70:65:4F:FC:EC:85:80:36:CB:7E X509v3 Authority Key Identifier: keyid:19:58:13:38:A9:D6:3D:95:A9:6D:17:11:62:3E:2F:66:0E:B0:FB:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/GVgTOKnWPZWpbRcRYj4vZg6w-xc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/GVgTOKnWPZWpbRcRYj4vZg6w-xc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91991D3/629E8B203B2311EEA43B0219C4F9AE02/1F388278205F11F0A895DE1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.254.242.0/23 Signature Algorithm: sha256WithRSAEncryption 31:08:58:b1:74:0b:12:56:90:88:44:10:d0:04:e3:57:b8:92: 41:4f:ff:0f:c3:f4:4c:fd:4e:c1:04:0f:e1:01:4a:25:ec:19: 62:61:ad:5e:d8:79:4b:47:69:ac:88:e1:6e:a1:ee:a9:07:f1: ae:b7:ef:88:a0:76:93:f1:ee:8e:5f:14:9d:8e:fb:d6:55:23: 8c:09:2c:83:ed:b3:46:3b:17:8f:81:f1:76:5a:fd:00:26:f0: 74:c3:a4:0a:1c:e2:06:49:e4:1a:7c:a4:9a:fa:46:46:2b:8e: 4d:02:91:88:3a:f7:46:c9:8e:38:01:0a:51:15:0b:54:9d:36: 44:9b:38:c2:c6:37:37:88:3c:e5:8b:e2:d5:d8:fe:ee:f0:4c: 26:83:d0:60:7b:58:f1:30:ac:bd:49:f4:26:1a:91:d2:d1:a3: 3b:61:03:ec:cb:3a:31:99:95:9f:e1:e3:88:c6:5e:e1:f0:bb: f3:88:d8:64:ff:c7:27:5b:69:6f:7c:0f:e0:67:7b:fd:dd:9f: d5:d3:41:b4:4f:be:8c:a4:e7:5c:62:5d:d4:07:6b:88:63:55: 9b:5e:60:5a:b4:3f:8a:c7:7f:fd:04:d4:ce:c7:22:4a:57:c0: 6e:5e:93:d3:cc:4e:0c:fc:44:f5:eb:93:46:33:97:bc:41:ae: f0:ab:78:dc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTkxRDMxMTAvBgNVBAUTKDE5NTgxMzM4QTlENjNEOTVBOTZEMTcxMTYyM0UyRjY2 MEVCMEZCMTcwHhcNMjUwNjEyMDkzOTIxWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODRhYTA0OS1jZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAohKY6aubmrcPUNn9HPsYAoV+TSN78zFC259C4V9wY/IwyB8XK1Ijcjo9fmKy 7XNFCxjXxHFGPzzj1sM2YtrGHgzTIPvzgvOLocIrsf1M794B0tU8VZK+yVsO96vL zL3cttjqtpkPu6NaZMDffepRt6JYSyvKTAHHApuLbimrhUqB404D1/LRKkTBpjGr qmkwgkoxaQk3Yg7Geg9SztWYrPdhSFBRAGXdV8Nbjru9f6ScqrP2yX3sLIuiHNRG 1Q8vSnN28Yj/9mRi87xw9VeDvh1t6h/8ovyt61XWrGH+/KUrjCtsv7I5HYuF0Mnv dmIqJZ0oQbVk0GYgcH2G3bqUMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFGA4AOtv qu3yVy5wZU/87IWANst+MB8GA1UdIwQYMBaAFBlYEzip1j2VqW0XEWI+L2YOsPsX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5OTFEMy82MjlFOEIyMDNC MjMxMUVFQTQzQjAyMTlDNEY5QUUwMi9HVmdUT0tuV1BaV3BiUmNSWWo0dlpnNnct eGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0dWZ1RPS25XUFpXcGJSY1JZajR2Wmc2dy14Yy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTkxRDMvNjI5RThCMjAzQjIzMTFFRUE0M0IwMjE5QzRGOUFFMDIvMUYzODgyNzgy MDVGMTFGMEE4OTVERTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAG5/vIwDQYJKoZIhvcNAQELBQADggEBADEIWLF0CxJWkIhE ENAE41e4kkFP/w/D9Ez9TsEED+EBSiXsGWJhrV7YeUtHaayI4W6h7qkH8a6374ig dpPx7o5fFJ2O+9ZVI4wJLIPts0Y7F4+B8XZa/QAm8HTDpAoc4gZJ5Bp8pJr6RkYr jk0CkYg690bJjjgBClEVC1SdNkSbOMLGNzeIPOWL4tXY/u7wTCaD0GB7WPEwrL1J 9CYakdLRozthA+zLOjGZlZ/h44jGXuHwu/OI2GT/xydbaW98D+Bne/3dn9XTQbRP voyk51xiXdQHa4hjVZteYFq0P4rHf/0E1M7HIkpXwG5ek9PMTgz8RPXrk0Yzl7xB rvCreNw= -----END CERTIFICATE-----Generated at Fri Jul 4 08:36:29 2025 by rpki-client