$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/682B76C05BB211E9BF474F16C4F9AE02.roa File: 682B76C05BB211E9BF474F16C4F9AE02.roa (raw, json) Hash identifier: vKLtsTjRDQmvaoDy2+JZ+X/edFfE0cROOj6FdGkYWZw= Subject key identifier: 22:8E:63:48:BB:92:3E:49:1F:75:A8:F1:E8:75:67:05:7B:61:6C:F6 Certificate issuer: /CN=A91AAE16/serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Certificate serial: 0FA2 Authority key identifier: D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/682B76C05BB211E9BF474F16C4F9AE02.roa Signing time: Tue 06 May 2025 17:56:35 +0000 ROA not before: Tue 06 May 2025 17:56:35 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 1828 IP address blocks: 69.94.96.0/24 maxlen: 24 69.94.97.0/24 maxlen: 24 69.94.98.0/24 maxlen: 24 69.94.99.0/24 maxlen: 24 69.94.100.0/22 maxlen: 24 69.94.104.0/22 maxlen: 24 69.94.108.0/22 maxlen: 24 207.189.168.0/24 maxlen: 24 207.189.169.0/24 maxlen: 24 207.189.170.0/24 maxlen: 24 207.189.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Oct 2025 18:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4002 (0xfa2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AAE16, serialNumber=D680BF3A796A355B125A602C7466B9A56D344254 Validity Not Before: May 6 17:56:35 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=681a4d52-9772 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8b:4d:10:ef:0a:06:69:ba:1a:a0:9f:7b:e5: 71:f7:28:1e:c1:cb:94:e5:9b:f8:b4:5c:0f:7c:6b: b7:14:f9:8a:58:db:fb:c8:86:42:d7:c4:17:1c:52: e2:8b:8d:3f:b3:ad:1e:10:8d:17:18:3c:50:d6:69: 01:f4:20:f3:b0:be:55:b3:a9:d6:4d:0d:e9:fc:4e: 26:20:21:b2:39:fd:87:ba:b9:f7:66:27:0b:7f:92: 52:66:ac:f6:0f:15:30:e4:04:d7:59:c0:ee:27:28: 28:4d:3b:20:fa:77:8b:3f:37:76:24:94:b5:de:b3: 4e:bb:cd:91:87:0a:75:a1:53:f2:57:7e:85:11:7a: c1:1d:fa:1c:f3:0a:12:4b:1c:a2:41:5b:4c:86:e6: 77:43:da:01:a4:78:83:19:02:48:e1:24:d3:f5:c7: 26:b3:45:56:57:3f:ef:a1:00:3e:d5:78:b5:35:ce: 59:c4:20:36:20:bb:03:dd:7c:39:b3:f5:33:62:84: 1a:ab:e2:d8:e0:dc:99:b9:ee:22:23:d8:3f:31:e3: 1a:9f:6a:bc:83:fa:4c:ed:16:5c:3c:14:c9:c8:68: 3c:49:2b:94:07:c8:cd:d1:02:21:a1:d8:ff:f0:a6: 4e:7e:8d:a6:99:5b:aa:30:ca:98:09:ce:ca:81:1a: f2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:8E:63:48:BB:92:3E:49:1F:75:A8:F1:E8:75:67:05:7B:61:6C:F6 X509v3 Authority Key Identifier: keyid:D6:80:BF:3A:79:6A:35:5B:12:5A:60:2C:74:66:B9:A5:6D:34:42:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/1oC_OnlqNVsSWmAsdGa5pW00QlQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1oC_OnlqNVsSWmAsdGa5pW00QlQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAE16/0EACF82C5BB111E98B103B13C4F9AE02/682B76C05BB211E9BF474F16C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 69.94.96.0/20 207.189.168.0/22 Signature Algorithm: sha256WithRSAEncryption b6:8c:d0:35:9f:12:15:28:e9:5a:e4:b7:a5:88:8f:2e:4d:4c: ee:c8:fe:04:23:32:a3:c3:39:2c:b1:37:71:70:ae:26:23:7f: 48:c6:3d:6c:04:d8:b8:7f:91:a7:1e:7d:18:35:45:46:06:cd: 08:30:d1:58:5d:e0:fb:5f:39:aa:af:84:bb:44:b5:ce:a4:ce: ba:b0:8a:9a:ac:70:06:75:15:65:c0:a2:13:fb:ae:e7:c4:e4: 3e:08:ed:74:92:cc:f2:d7:05:a9:1c:4e:86:64:94:4b:75:eb: b0:1a:d7:9f:3b:73:ce:49:78:2b:e0:a7:53:81:2e:55:39:a3: 94:a9:d2:56:9b:35:9f:9a:c9:ac:48:98:00:59:53:d5:6d:df: 8e:e2:62:58:39:24:9c:a6:c6:ec:42:10:36:37:fe:b8:7c:53: 2a:ef:c6:91:80:09:c6:0d:db:35:68:d3:b7:37:36:43:24:15: 42:99:81:42:5f:e2:bc:c5:cc:a1:96:c6:2a:0d:16:ff:61:0e: d4:08:39:62:ad:b7:bb:29:a1:cc:2c:85:a8:35:86:90:3e:46: 44:57:99:52:b3:7d:74:34:78:2d:e3:5a:e6:92:a7:66:0d:b5: d7:1f:fd:8f:1a:5e:90:90:8b:a2:50:99:7c:a9:7f:47:83:ff: 76:a5:05:7c -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICD6IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUFFMTYxMTAvBgNVBAUTKEQ2ODBCRjNBNzk2QTM1NUIxMjVBNjAyQzc0NjZCOUE1 NkQzNDQyNTQwHhcNMjUwNTA2MTc1NjM1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhNGQ1Mi05NzcyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2YtNEO8KBmm6GqCfe+Vx9ygewcuU5Zv4tFwPfGu3FPmKWNv7yIZC18QXHFLi i40/s60eEI0XGDxQ1mkB9CDzsL5Vs6nWTQ3p/E4mICGyOf2Hurn3ZicLf5JSZqz2 DxUw5ATXWcDuJygoTTsg+neLPzd2JJS13rNOu82Rhwp1oVPyV36FEXrBHfoc8woS SxyiQVtMhuZ3Q9oBpHiDGQJI4STT9ccms0VWVz/voQA+1Xi1Nc5ZxCA2ILsD3Xw5 s/UzYoQaq+LY4NyZue4iI9g/MeMan2q8g/pM7RZcPBTJyGg8SSuUB8jN0QIhodj/ 8KZOfo2mmVuqMMqYCc7KgRryOwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFCKOY0i7 kj5JH3Wo8eh1ZwV7YWz2MB8GA1UdIwQYMBaAFNaAvzp5ajVbElpgLHRmuaVtNEJU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQUUxNi8wRUFDRjgyQzVC QjExMUU5OEIxMDNCMTNDNEY5QUUwMi8xb0NfT25scU5Wc1NXbUFzZEdhNXBXMDBR bFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyLzFvQ19PbmxxTlZzU1dtQXNkR2E1cFcwMFFsUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUFFMTYvMEVBQ0Y4MkM1QkIxMTFFOThCMTAzQjEzQzRGOUFFMDIvNjgyQjc2QzA1 QkIyMTFFOUJGNDc0RjE2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBARFXmADBALPvagwDQYJKoZIhvcNAQELBQADggEBALaM0DWf EhUo6Vrkt6WIjy5NTO7I/gQjMqPDOSyxN3FwriYjf0jGPWwE2Lh/kacefRg1RUYG zQgw0Vhd4PtfOaqvhLtEtc6kzrqwipqscAZ1FWXAohP7rufE5D4I7XSSzPLXBakc ToZklEt167Aa1587c85JeCvgp1OBLlU5o5Sp0labNZ+ayaxImABZU9Vt347iYlg5 JJymxuxCEDY3/rh8UyrvxpGACcYN2zVo07c3NkMkFUKZgUJf4rzFzKGWxioNFv9h DtQIOWKtt7spocwshag1hpA+RkRXmVKzfXQ0eC3jWuaSp2YNtdcf/Y8aXpCQi6JQ mXypf0eD/3alBXw= -----END CERTIFICATE-----Generated at Mon Oct 20 19:13:29 2025 by rpki-client