$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/3066E80A5B7C11EDAAFAB831C4F9AE02.roa File: 3066E80A5B7C11EDAAFAB831C4F9AE02.roa (raw, json) Hash identifier: SYChnCFDXmbiMMIWGfC0umDJGm3jePYzq4pHvcNe8VM= Subject key identifier: 20:FF:21:A4:56:40:F3:25:1D:02:CE:DC:7B:ED:D4:CE:02:77:BF:1B Certificate issuer: /CN=A91ADB98/serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Certificate serial: 026D Authority key identifier: 66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/3066E80A5B7C11EDAAFAB831C4F9AE02.roa Signing time: Tue 01 Jul 2025 03:09:00 +0000 ROA not before: Tue 01 Jul 2025 03:09:00 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 65512 IP address blocks: 140.168.128.0/19 maxlen: 19 140.168.135.0/24 maxlen: 24 140.168.160.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 03:09:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 621 (0x26d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADB98, serialNumber=661C64E293B87F473AF61D89DE48FC4538570157 Validity Not Before: Jul 1 03:09:00 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=6863514c-b444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c8:d8:20:07:5f:2c:3c:90:36:2a:cb:cf:cb: d4:f6:a5:3b:87:fb:d0:42:7f:ca:6b:48:3c:17:da: df:9e:f7:e7:40:5c:0f:ce:48:90:54:e5:13:2a:ee: df:d0:a7:f0:24:da:51:7f:a5:b3:41:8e:c9:c0:8f: d4:07:e7:5f:c8:36:09:03:1d:39:a4:d0:60:04:0a: 72:52:39:36:d4:7b:86:b4:62:c6:53:97:5f:22:34: 14:f6:79:25:87:95:ef:e5:13:4f:1b:e3:15:11:56: a7:68:4e:4f:d8:92:d1:5d:4a:bb:49:1b:52:93:3b: a0:55:50:df:0e:f6:be:be:ff:44:ec:ee:bf:91:b7: 24:32:7f:5b:91:84:fc:c5:6f:d3:54:da:ee:eb:6a: 22:20:f8:78:82:7c:67:8e:9b:95:eb:53:b8:ec:c0: 9b:f4:17:07:cd:4d:b3:fa:84:8d:ab:d0:02:5f:b2: 60:de:6d:31:8c:5f:06:fe:97:c7:da:dd:34:5b:e7: 69:ce:26:86:3a:47:26:1d:c5:4d:9c:15:67:97:01: ac:54:26:7e:c7:58:22:95:87:08:86:06:ed:d9:3b: 3c:0d:22:49:05:fc:7a:fa:dd:ec:1e:48:44:06:5a: b5:49:1e:67:b2:ed:86:e8:02:90:96:b2:8b:0d:7d: 7d:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FF:21:A4:56:40:F3:25:1D:02:CE:DC:7B:ED:D4:CE:02:77:BF:1B X509v3 Authority Key Identifier: keyid:66:1C:64:E2:93:B8:7F:47:3A:F6:1D:89:DE:48:FC:45:38:57:01:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/Zhxk4pO4f0c69h2J3kj8RThXAVc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Zhxk4pO4f0c69h2J3kj8RThXAVc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADB98/D93E93DC492111EDABD59C53C4F9AE02/3066E80A5B7C11EDAAFAB831C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 140.168.128.0/18 Signature Algorithm: sha256WithRSAEncryption 7c:52:39:cb:be:d5:01:2d:7d:94:10:b7:f5:a2:bf:84:ac:d3: 9b:25:de:48:48:95:81:e1:37:3b:8b:6d:6a:f4:4a:9a:5b:f5: 42:99:9a:55:14:8b:f6:ae:23:98:36:6c:25:17:d2:df:48:87: 73:b8:e1:8a:4d:cc:3d:d0:95:dd:38:1a:9f:57:0b:3f:14:61: 3d:28:ec:ee:99:2e:71:69:91:b1:9d:27:0c:8d:90:69:cc:d9: 66:f5:63:6f:77:b7:a1:53:96:0a:49:1c:f3:06:d8:32:4a:99: 0f:10:00:9c:d7:72:4b:5b:a8:f5:d8:19:6b:40:8c:04:dc:88: 24:a0:e5:72:e0:f2:a1:36:ee:20:52:1a:13:11:28:5d:27:ff: b0:1d:a8:7c:8f:a9:87:c4:83:fb:4e:12:cd:79:15:bc:68:30: 27:30:d5:cd:14:5f:4c:bf:fa:a2:4f:12:a1:bc:03:47:db:7c: c6:25:e9:80:ec:cc:30:d0:7e:cc:ab:90:91:c5:0f:7e:a5:f6: fc:3b:1a:76:4f:43:85:3e:5c:c0:40:fe:46:7e:e2:04:75:85: af:5c:39:53:73:31:a1:51:74:8c:df:26:fc:11:45:bf:19:97: 77:a1:ab:f0:73:7e:c7:68:ca:5a:87:3a:48:43:34:be:15:82: 13:8f:90:61 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAm0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURCOTgxMTAvBgNVBAUTKDY2MUM2NEUyOTNCODdGNDczQUY2MUQ4OURFNDhGQzQ1 Mzg1NzAxNTcwHhcNMjUwNzAxMDMwOTAwWhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzNTE0Yy1iNDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxcjYIAdfLDyQNirLz8vU9qU7h/vQQn/Ka0g8F9rfnvfnQFwPzkiQVOUTKu7f 0KfwJNpRf6WzQY7JwI/UB+dfyDYJAx05pNBgBApyUjk21HuGtGLGU5dfIjQU9nkl h5Xv5RNPG+MVEVanaE5P2JLRXUq7SRtSkzugVVDfDva+vv9E7O6/kbckMn9bkYT8 xW/TVNru62oiIPh4gnxnjpuV61O47MCb9BcHzU2z+oSNq9ACX7Jg3m0xjF8G/pfH 2t00W+dpziaGOkcmHcVNnBVnlwGsVCZ+x1gilYcIhgbt2Ts8DSJJBfx6+t3sHkhE Blq1SR5nsu2G6AKQlrKLDX19yQIDAQABo4IClTCCApEwHQYDVR0OBBYEFCD/IaRW QPMlHQLO3Hvt1M4Cd78bMB8GA1UdIwQYMBaAFGYcZOKTuH9HOvYdid5I/EU4VwFX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREI5OC9EOTNFOTNEQzQ5 MjExMUVEQUJENTlDNTNDNEY5QUUwMi9aaHhrNHBPNGYwYzY5aDJKM2tqOFJUaFhB VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL1poeGs0cE80ZjBjNjloMkoza2o4UlRoWEFWYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURCOTgvRDkzRTkzREM0OTIxMTFFREFCRDU5QzUzQzRGOUFFMDIvMzA2NkU4MEE1 QjdDMTFFREFBRkFCODMxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAaMqIAwDQYJKoZIhvcNAQELBQADggEBAHxSOcu+1QEtfZQQ t/Wiv4Ss05sl3khIlYHhNzuLbWr0Sppb9UKZmlUUi/auI5g2bCUX0t9Ih3O44YpN zD3Qld04Gp9XCz8UYT0o7O6ZLnFpkbGdJwyNkGnM2Wb1Y293t6FTlgpJHPMG2DJK mQ8QAJzXcktbqPXYGWtAjATciCSg5XLg8qE27iBSGhMRKF0n/7AdqHyPqYfEg/tO Es15FbxoMCcw1c0UX0y/+qJPEqG8A0fbfMYl6YDszDDQfsyrkJHFD36l9vw7GnZP Q4U+XMBA/kZ+4gR1ha9cOVNzMaFRdIzfJvwRRb8Zl3ehq/BzfsdoylqHOkhDNL4V ghOPkGE= -----END CERTIFICATE-----Generated at Thu Jul 3 02:59:26 2025 by rpki-client