$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/0C2077B6D1B511EF944F205DC4F9AE02.roa File: 0C2077B6D1B511EF944F205DC4F9AE02.roa (raw, json) Hash identifier: O2sOyXmqjvHQRFXHDN9/2VaFE/Jt3cl3xRc7QIeiwA4= Subject key identifier: 64:F2:18:CE:08:7F:93:B6:1A:EA:3F:BF:1D:60:C5:65:45:64:54:12 Certificate issuer: /CN=A91A9083/serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Certificate serial: 7D Authority key identifier: E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/0C2077B6D1B511EF944F205DC4F9AE02.roa Signing time: Mon 11 Aug 2025 12:13:07 +0000 ROA not before: Mon 11 Aug 2025 12:13:07 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134351 IP address blocks: 23.81.40.0/21 maxlen: 21 23.106.224.0/21 maxlen: 21 142.91.104.0/23 maxlen: 23 142.91.106.0/23 maxlen: 23 142.91.108.0/22 maxlen: 22 173.234.64.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 07:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 125 (0x7d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A9083, serialNumber=E8CF22A08E4391CAD150FA31B44DC93C8AB825EA Validity Not Before: Aug 11 12:13:07 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6899de53-8999 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:98:db:02:fa:fd:69:d4:01:c9:8f:e2:c0:bf: be:e3:17:0e:f2:b3:a7:36:a2:3a:d1:75:07:98:ec: f8:ff:7b:63:06:3b:24:74:b3:f7:f1:52:52:14:29: fc:25:23:cd:50:d5:50:9d:04:73:26:9e:a8:e8:0c: c2:d2:ef:2b:11:02:5d:dc:ee:0e:e0:05:9b:ec:92: 19:4b:54:4a:84:c4:a9:1a:00:38:59:ec:dd:65:1b: 25:e2:9c:3e:bd:d1:54:a9:ae:b5:ec:fd:67:bc:c1: 55:be:61:3b:43:ac:60:5a:d7:9b:f1:cc:bc:cf:6d: 4e:e4:e7:c6:94:2c:31:07:19:3c:fb:a9:60:18:37: d4:d7:8a:9c:ed:29:ae:37:a9:02:25:16:9f:a5:e3: 7c:28:8f:f9:72:fc:0f:96:5f:4f:68:df:c4:7a:97: 3f:75:af:bb:30:3e:70:f1:69:a2:a5:c7:75:99:10: ae:7c:26:73:d7:c7:73:01:68:35:97:93:f4:20:a4: 82:c6:df:ca:6a:66:ac:8c:fc:71:d1:d5:9d:11:1e: 49:62:fb:5e:24:8e:8f:af:30:6e:c8:d1:fd:91:1d: ef:43:b0:b9:1d:12:d4:c8:2a:04:d8:ff:51:d9:16: fc:66:eb:40:da:11:d5:09:ff:88:0b:6d:cb:c4:34: 92:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:F2:18:CE:08:7F:93:B6:1A:EA:3F:BF:1D:60:C5:65:45:64:54:12 X509v3 Authority Key Identifier: keyid:E8:CF:22:A0:8E:43:91:CA:D1:50:FA:31:B4:4D:C9:3C:8A:B8:25:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/6M8ioI5DkcrRUPoxtE3JPIq4Jeo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C06F2E42D1B011EF8833C933C4F9AE02/0C2077B6D1B511EF944F205DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 23.81.40.0/21 23.106.224.0/21 142.91.104.0/21 173.234.64.0/22 Signature Algorithm: sha256WithRSAEncryption a7:74:e8:05:1d:bd:fc:fc:03:63:fe:20:c1:84:26:52:9f:94: a9:58:10:0f:aa:a1:a3:00:d7:c5:93:b3:bc:b3:19:da:56:b6: 8f:38:2e:cf:28:17:45:fa:53:db:0e:a5:37:57:ab:fa:7d:67: 36:7a:ef:99:1f:30:9b:f8:49:4c:9c:a0:f2:df:eb:44:73:dc: c3:72:0d:30:42:fb:ae:0c:3e:d8:d7:9b:f9:67:a3:52:48:fa: 3c:06:ce:5e:3c:eb:b6:84:a5:71:3c:ec:24:ea:c6:cf:f5:88: cf:bb:c9:b1:97:6a:4d:19:5a:4c:cd:a4:bf:20:fa:16:b0:ff: 2c:61:17:b3:8e:08:95:89:6b:11:64:f2:17:f6:e9:38:89:ff: 54:b8:3b:54:c7:ed:e6:ce:a7:9f:7d:d8:72:88:71:a4:36:ec: 04:3b:54:3a:73:fa:e4:02:01:40:b7:9c:b3:fb:de:16:f6:2d: 03:f7:c8:6d:06:15:82:77:3e:b1:1d:8e:02:26:2a:4c:87:25: a5:79:51:f4:c1:cc:05:4e:4d:1e:28:4e:0c:86:39:27:1c:2a: 6f:7d:77:ea:87:b0:17:66:fd:af:bc:05:84:05:f8:31:85:cc: 98:68:32:7f:08:33:f3:82:c6:90:31:9e:71:a1:72:63:6d:80: de:5c:34:92 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgIBfTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB OTA4MzExMC8GA1UEBRMoRThDRjIyQTA4RTQzOTFDQUQxNTBGQTMxQjQ0REM5M0M4 QUI4MjVFQTAeFw0yNTA4MTExMjEzMDdaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4OTlkZTUzLTg5OTkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDEmNsC+v1p1AHJj+LAv77jFw7ys6c2ojrRdQeY7Pj/e2MGOyR0s/fxUlIUKfwl I81Q1VCdBHMmnqjoDMLS7ysRAl3c7g7gBZvskhlLVEqExKkaADhZ7N1lGyXinD69 0VSprrXs/We8wVW+YTtDrGBa15vxzLzPbU7k58aULDEHGTz7qWAYN9TXipztKa43 qQIlFp+l43woj/ly/A+WX09o38R6lz91r7swPnDxaaKlx3WZEK58JnPXx3MBaDWX k/QgpILG38pqZqyM/HHR1Z0RHkli+14kjo+vMG7I0f2RHe9DsLkdEtTIKgTY/1HZ Fvxm60DaEdUJ/4gLbcvENJKDAgMBAAGjggKnMIICozAdBgNVHQ4EFgQUZPIYzgh/ k7Ya6j+/HWDFZUVkVBIwHwYDVR0jBBgwFoAU6M8ioI5DkcrRUPoxtE3JPIq4Jeow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE5MDgzL0MwNkYyRTQyRDFC MDExRUY4ODMzQzkzM0M0RjlBRTAyLzZNOGlvSTVEa2NyUlVQb3h0RTNKUElxNEpl by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNk04aW9JNURrY3JSVVBveHRFM0pQSXE0SmVvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB OTA4My9DMDZGMkU0MkQxQjAxMUVGODgzM0M5MzNDNEY5QUUwMi8wQzIwNzdCNkQx QjUxMUVGOTQ0RjIwNURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAxBggrBgEFBQcBBwEB/wQi MCAwHgQCAAEwGAMEAxdRKAMEAxdq4AMEA45baAMEAq3qQDANBgkqhkiG9w0BAQsF AAOCAQEAp3ToBR29/PwDY/4gwYQmUp+UqVgQD6qhowDXxZOzvLMZ2la2jzguzygX RfpT2w6lN1er+n1nNnrvmR8wm/hJTJyg8t/rRHPcw3INMEL7rgw+2Neb+WejUkj6 PAbOXjzrtoSlcTzsJOrGz/WIz7vJsZdqTRlaTM2kvyD6FrD/LGEXs44IlYlrEWTy F/bpOIn/VLg7VMft5s6nn33YcohxpDbsBDtUOnP65AIBQLecs/veFvYtA/fIbQYV gnc+sR2OAiYqTIclpXlR9MHMBU5NHihODIY5Jxwqb3136oewF2b9r7wFhAX4MYXM mGgyfwgz84LGkDGecaFyY22A3lw0kg== -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:38 2025 by rpki-client