$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/427F70EA7F6C11F09DB47512C4F9AE02.roa File: 427F70EA7F6C11F09DB47512C4F9AE02.roa (raw, json) Hash identifier: 6007gqo3Xm2M59iWsAWk2cdRnPtMJjBsj/Zjthif0hU= Subject key identifier: 58:E6:AA:70:B1:F4:03:35:AA:88:32:97:5E:5C:3B:4B:F0:29:98:44 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4C74 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/427F70EA7F6C11F09DB47512C4F9AE02.roa Signing time: Fri 22 Aug 2025 15:25:41 +0000 ROA not before: Fri 22 Aug 2025 15:25:41 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 63733 IP address blocks: 137.59.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19572 (0x4c74) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 22 15:25:41 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68a88bf4-86c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:17:e3:52:ec:ee:93:1c:85:34:89:11:ac:d1: f0:fd:4e:56:13:0d:38:dc:98:30:b6:c2:99:52:17: 49:ce:e2:c3:6a:d4:b5:3a:72:83:37:fa:1c:37:03: c8:a1:05:9c:0e:6f:ab:57:3f:c8:0d:04:4a:16:3f: 0f:03:92:f6:ed:5c:7c:83:d2:34:ca:b9:ac:5b:0b: b6:b0:5c:82:4e:29:0e:f1:47:51:6c:c8:1f:2d:fa: 8c:f3:67:b3:77:d7:a8:31:cd:e7:df:3a:3a:f5:a8: 23:df:ec:6a:10:18:95:de:c3:cf:33:5e:18:e4:17: 6a:26:c8:8d:c2:bb:2e:b2:e9:70:0a:61:2a:7d:07: c0:1a:44:a0:93:15:96:ad:6d:71:16:99:c6:56:e1: 79:30:d0:4c:3b:ce:f1:7b:df:53:32:a4:f8:58:45: 05:a9:d0:53:dc:bb:74:06:aa:a2:16:b8:b0:da:a0: 2b:e0:4d:7c:43:86:63:79:2b:04:04:ee:67:4e:10: 3c:a4:be:a7:63:8e:99:21:05:c2:68:a1:60:c3:e3: bf:6d:4d:2c:ca:6c:b2:58:5c:1f:5a:3e:27:04:7c: 62:40:a7:51:71:62:78:45:5c:3d:a4:36:05:eb:0d: 9e:be:05:c7:9b:0f:d7:33:56:79:0b:7c:75:cb:66: b1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:E6:AA:70:B1:F4:03:35:AA:88:32:97:5E:5C:3B:4B:F0:29:98:44 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/427F70EA7F6C11F09DB47512C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 137.59.116.0/22 Signature Algorithm: sha256WithRSAEncryption 2f:6e:4e:f9:62:86:d1:37:ab:e7:98:6d:e1:d8:3c:2d:7a:b3: 4c:d2:5c:fd:a1:db:fb:45:4f:ef:6d:1a:a6:28:92:ad:61:f5: c6:af:aa:d2:65:45:fc:b0:0d:83:00:d9:6e:38:c3:18:76:09: f1:f2:90:ef:2f:69:17:16:5d:6e:9c:73:d6:f7:79:a1:87:71: 16:3d:5c:cc:8c:07:90:d8:ce:af:81:8b:7b:db:0b:d4:da:3d: f9:be:06:04:88:82:19:3a:d6:1a:fa:25:12:f8:8a:73:f7:05: 08:cf:c2:34:dc:8a:d4:d7:7c:0d:d9:cb:f7:3d:d5:b4:9c:e5: a1:f2:32:9d:8f:b0:89:c9:73:20:40:c1:56:5a:cc:d2:30:85: 45:9b:1d:46:5a:64:ed:90:52:e2:76:82:3b:dd:ca:b7:5b:f4: 92:a3:68:0f:5c:37:8d:11:71:79:97:17:d7:20:27:77:85:ea: c3:59:4d:cf:5a:99:69:d6:2a:d5:d2:6c:e5:a4:a7:25:68:76: d6:2d:c9:63:87:85:81:a3:50:02:d1:7a:f1:cc:cc:55:6a:53: 62:b2:1e:25:d8:1d:86:68:a8:d4:1e:c7:3b:9e:48:97:bf:cc: bd:12:64:67:3d:2a:f4:2a:28:78:1c:c0:98:c3:fc:35:5b:5a: c8:3e:9b:42 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICTHQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODIyMTUyNTQxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGE4OGJmNC04NmMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxxfjUuzukxyFNIkRrNHw/U5WEw043JgwtsKZUhdJzuLDatS1OnKDN/ocNwPI oQWcDm+rVz/IDQRKFj8PA5L27Vx8g9I0yrmsWwu2sFyCTikO8UdRbMgfLfqM82ez d9eoMc3n3zo69agj3+xqEBiV3sPPM14Y5BdqJsiNwrsusulwCmEqfQfAGkSgkxWW rW1xFpnGVuF5MNBMO87xe99TMqT4WEUFqdBT3Lt0BqqiFriw2qAr4E18Q4ZjeSsE BO5nThA8pL6nY46ZIQXCaKFgw+O/bU0symyyWFwfWj4nBHxiQKdRcWJ4RVw9pDYF 6w2evgXHmw/XM1Z5C3x1y2axdQIDAQABo4IClTCCApEwHQYDVR0OBBYEFFjmqnCx 9AM1qogyl15cO0vwKZhEMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDI3RjcwRUE3 RjZDMTFGMDlEQjQ3NTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAKJO3QwDQYJKoZIhvcNAQELBQADggEBAC9uTvlihtE3q+eY beHYPC16s0zSXP2h2/tFT+9tGqYokq1h9cavqtJlRfywDYMA2W44wxh2CfHykO8v aRcWXW6cc9b3eaGHcRY9XMyMB5DYzq+Bi3vbC9TaPfm+BgSIghk61hr6JRL4inP3 BQjPwjTcitTXfA3Zy/c91bSc5aHyMp2PsInJcyBAwVZazNIwhUWbHUZaZO2QUuJ2 gjvdyrdb9JKjaA9cN40RcXmXF9cgJ3eF6sNZTc9amWnWKtXSbOWkpyVodtYtyWOH hYGjUALRevHMzFVqU2KyHiXYHYZoqNQexzueSJe/zL0SZGc9KvQqKHgcwJjD/DVb Wsg+m0I= -----END CERTIFICATE-----Generated at Sat Aug 23 19:01:12 2025 by rpki-client