$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/919A58CE73AB11F095EAEF5CC4F9AE02.roa File: 919A58CE73AB11F095EAEF5CC4F9AE02.roa (raw, json) Hash identifier: oR//crRJWy0s5AwpVDDuxgfQQw2jKWuXVibvkrEFUh4= Subject key identifier: BB:30:31:38:EC:21:39:AC:0C:68:88:F1:EC:B4:A7:BF:38:3D:15:70 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4C60 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/919A58CE73AB11F095EAEF5CC4F9AE02.roa Signing time: Thu 14 Aug 2025 17:49:15 +0000 ROA not before: Thu 14 Aug 2025 17:49:15 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 38731 IP address blocks: 27.64.0.0/12 maxlen: 24 117.0.0.0/13 maxlen: 24 125.234.0.0/17 maxlen: 24 125.234.128.0/19 maxlen: 24 125.234.176.0/20 maxlen: 24 125.234.192.0/18 maxlen: 24 125.235.0.0/16 maxlen: 24 171.224.0.0/11 maxlen: 24 220.231.64.0/18 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 15:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19552 (0x4c60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Aug 14 17:49:15 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=689e219a-2849 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:c9:4e:fa:f4:32:38:a9:13:55:e3:64:48: cd:15:43:43:fd:cc:2f:82:b3:53:9b:b0:56:8c:b5: f5:ff:dd:8f:5d:de:9f:27:a9:97:fd:e4:c7:a5:5c: ea:2b:4d:67:e2:fb:27:59:66:33:1d:39:5c:80:9f: d5:6d:af:2c:ec:e1:cd:87:f6:ce:48:07:61:f0:8b: a3:7d:2e:ec:f1:26:5f:8a:e1:11:d8:7d:18:74:41: 3b:88:48:8e:03:d9:32:18:45:7f:06:a7:dd:9d:a7: 2a:56:80:e5:60:c8:00:d4:a6:5b:1b:41:3a:51:84: 6e:b3:30:1c:23:c7:b9:9f:03:de:aa:79:ba:f6:9f: 2c:7d:7e:9d:6f:8a:d1:fe:fb:29:77:22:ea:d4:49: bc:3e:18:48:e9:ce:cd:ae:9d:be:be:85:5e:e9:98: d0:0a:66:31:9d:72:b6:3f:7a:35:00:35:cb:da:c8: 44:cf:e8:7b:ac:0d:78:8c:a3:f0:a4:d3:74:39:d2: 89:6c:4a:cd:5d:1f:39:12:ac:6c:a8:bf:03:05:12: 10:ea:20:e0:02:2b:76:a1:5b:b1:03:b1:fe:5f:5f: a0:54:87:2b:81:c8:a5:85:19:8d:db:fc:7f:e3:3c: 9c:38:4b:87:54:7c:dd:05:a6:08:bd:b2:0b:70:9b: 0d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:30:31:38:EC:21:39:AC:0C:68:88:F1:EC:B4:A7:BF:38:3D:15:70 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/919A58CE73AB11F095EAEF5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.64.0.0/12 117.0.0.0/13 125.234.0.0-125.234.159.255 125.234.176.0-125.235.255.255 171.224.0.0/11 220.231.64.0/18 Signature Algorithm: sha256WithRSAEncryption 40:c2:8d:8d:de:b1:e1:b5:56:97:15:c4:78:72:84:2b:ab:51: 53:8d:e9:19:97:a9:8d:21:90:e8:eb:8f:23:01:ae:f7:5e:cb: 12:57:87:97:4c:69:7c:63:38:0b:c6:ac:7f:28:98:ae:65:58: 2c:75:8a:76:9b:ba:2e:ee:06:d3:77:e4:a8:95:ff:52:59:bd: ca:2b:86:35:20:5c:27:61:3c:8d:9d:41:4a:8d:1e:2d:e6:2a: 8c:4b:25:a6:ac:bd:02:96:95:19:af:53:54:a4:5b:8d:45:a2: d2:91:ef:05:bc:36:85:e8:d6:3e:28:66:40:84:2d:fe:51:4e: 93:03:5a:2f:65:c1:dc:cb:7e:dc:04:df:b9:78:7f:96:b5:59: b2:c9:ec:ac:d5:9e:8f:48:d9:2b:5a:d9:f9:d8:99:02:58:80: fc:99:d1:85:bb:1e:af:85:d8:28:09:7b:81:81:58:ad:01:6f: 80:05:c3:72:b2:81:59:57:1e:95:d0:3b:f8:c2:72:59:79:18: dc:5c:d7:ce:3e:a0:47:01:16:e1:e7:3e:ad:de:51:03:11:ec: d7:2c:b0:93:39:9e:1a:c8:ca:3e:0f:ae:93:05:1f:37:67:e8: 49:a0:ee:52:ea:7a:a1:46:fe:4f:15:0d:ff:c1:bb:42:97:4a: 2c:f7:04:3e -----BEGIN CERTIFICATE----- MIIFmjCCBIKgAwIBAgICTGAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwODE0MTc0OTE1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODllMjE5YS0yODQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu9LJTvr0MjipE1XjZEjNFUND/cwvgrNTm7BWjLX1/92PXd6fJ6mX/eTHpVzq K01n4vsnWWYzHTlcgJ/Vba8s7OHNh/bOSAdh8IujfS7s8SZfiuER2H0YdEE7iEiO A9kyGEV/BqfdnacqVoDlYMgA1KZbG0E6UYRuszAcI8e5nwPeqnm69p8sfX6db4rR /vspdyLq1Em8PhhI6c7Nrp2+voVe6ZjQCmYxnXK2P3o1ADXL2shEz+h7rA14jKPw pNN0OdKJbErNXR85EqxsqL8DBRIQ6iDgAit2oVuxA7H+X1+gVIcrgcilhRmN2/x/ 4zycOEuHVHzdBaYIvbILcJsNYwIDAQABo4ICvjCCArowHQYDVR0OBBYEFLswMTjs ITmsDGiI8ey0p784PRVwMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvOTE5QTU4Q0U3 M0FCMTFGMDk1RUFFRjVDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSAYIKwYBBQUHAQcBAf8E OTA3MDUEAgABMC8DAwQbQAMDA3UAMAsDAwF96gMEBX3qgDALAwQEfeqwAwMCfegD AwWr4AMEBtznQDANBgkqhkiG9w0BAQsFAAOCAQEAQMKNjd6x4bVWlxXEeHKEK6tR U43pGZepjSGQ6OuPIwGu917LEleHl0xpfGM4C8asfyiYrmVYLHWKdpu6Lu4G03fk qJX/Ulm9yiuGNSBcJ2E8jZ1BSo0eLeYqjEslpqy9ApaVGa9TVKRbjUWi0pHvBbw2 hejWPihmQIQt/lFOkwNaL2XB3Mt+3ATfuXh/lrVZssnsrNWej0jZK1rZ+diZAliA /JnRhbser4XYKAl7gYFYrQFvgAXDcrKBWVceldA7+MJyWXkY3FzXzj6gRwEW4ec+ rd5RAxHs1yywkzmeGsjKPg+ukwUfN2foSaDuUup6oUb+TxUN/8G7QpdKLPcEPg== -----END CERTIFICATE-----Generated at Sat Aug 23 18:35:09 2025 by rpki-client