$ rpki-client -vvf rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/C425CEE64B8211F0A94CFD82C4F9AE02.roa File: C425CEE64B8211F0A94CFD82C4F9AE02.roa (raw, json) Hash identifier: fil/oQotRM+MIGw/cNqLrz8OgmoOYQq+ywbG5ZxtQK8= Subject key identifier: 5B:FD:01:33:65:D5:41:47:7E:7B:85:F8:37:72:A7:6C:13:4F:B6:1E Certificate issuer: /CN=A91BEA8B/serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Certificate serial: 02 Authority key identifier: 41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/C425CEE64B8211F0A94CFD82C4F9AE02.roa Signing time: Tue 17 Jun 2025 13:55:46 +0000 ROA not before: Tue 17 Jun 2025 13:55:46 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 58895 IP address blocks: 165.99.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BEA8B, serialNumber=41C75714299A578DD190FD1F730955B1FD9AC1F4 Validity Not Before: Jun 17 13:55:46 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=685173e1-8755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:a0:74:ed:fa:3b:7a:02:12:33:e3:af:de: 16:91:f0:81:99:f3:22:79:ad:08:25:05:12:35:79: 1c:5a:ef:89:9b:f2:ee:c3:a1:32:6f:f9:8e:61:d8: de:2b:c7:b7:9a:5e:32:96:e8:47:0a:8e:f4:18:f4: 95:45:fb:ec:f7:ed:2f:fa:01:8c:45:6e:2d:9f:db: 77:08:d0:3f:d3:0d:25:79:27:2a:2c:e7:75:2f:e4: b1:34:19:30:83:d2:3f:d4:af:8f:0a:fb:c2:76:6d: 97:a2:25:8d:06:29:38:bd:53:85:a8:88:dd:6b:9a: 56:8a:08:cc:7a:0e:7e:6e:75:73:40:f4:25:65:a0: 05:37:97:ea:c1:ec:2d:be:90:e4:fa:9b:18:6b:16: 24:d1:52:b9:3e:d3:92:6e:62:d1:57:c1:d5:52:33: 79:a5:ea:87:e3:bd:54:bd:11:f3:b9:d4:93:b0:6d: 16:a0:cb:a9:25:2c:59:0b:5b:f6:e7:e3:ae:76:bf: 80:86:cf:b7:f5:6e:16:9d:8f:c2:6a:73:38:53:3c: 5f:a5:94:b5:fe:14:d5:9e:c0:df:90:24:fa:f1:56: ff:f4:c8:cb:1e:f3:49:03:84:d9:c8:1e:98:71:d8: ef:0f:3b:d5:5c:10:a6:8b:c2:75:82:34:7f:fb:4f: 3e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:FD:01:33:65:D5:41:47:7E:7B:85:F8:37:72:A7:6C:13:4F:B6:1E X509v3 Authority Key Identifier: keyid:41:C7:57:14:29:9A:57:8D:D1:90:FD:1F:73:09:55:B1:FD:9A:C1:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/QcdXFCmaV43RkP0fcwlVsf2awfQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/QcdXFCmaV43RkP0fcwlVsf2awfQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BEA8B/BA08AA424B8111F08F65507EC4F9AE02/C425CEE64B8211F0A94CFD82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.191.0/24 Signature Algorithm: sha256WithRSAEncryption c3:e9:41:b7:6f:6a:de:e8:f8:0a:7c:13:7c:e7:5e:dc:48:fc: 7a:9c:2e:fe:62:93:7a:43:40:08:b2:95:2e:85:01:42:f3:85: f6:a7:89:7c:ff:90:0b:1f:cd:2b:4d:07:bf:68:5f:07:15:d0: c3:8b:e2:57:0c:01:65:85:14:a3:fa:1d:71:c8:ad:2b:5f:a0: a8:25:87:99:cb:3a:44:b0:fb:23:d3:b2:43:19:ef:a3:34:79: 40:1b:0d:e1:6b:3a:8b:92:05:4e:2e:6e:24:ea:cf:4f:39:97: 67:8e:36:dd:02:3c:c6:03:4b:f9:19:2b:f7:67:3a:cc:6f:1a: 6b:3a:77:a4:34:18:63:e5:94:7d:dc:5d:f1:2f:93:dc:42:fe: d6:d4:7f:81:9d:9e:db:e7:71:f5:be:7f:fd:a5:2b:c1:18:5a: 73:fb:5a:36:7f:44:b8:c8:8b:12:7b:b7:70:46:17:6d:27:6b: 97:eb:2f:cf:74:73:8f:3c:cf:67:ff:0e:5b:1e:37:6f:ca:ca: 9d:f9:94:71:45:bc:bd:e6:84:4a:a1:b6:ee:83:6d:f8:41:01: 24:8b:16:94:50:ff:c9:f7:e6:68:51:ed:7d:77:16:36:76:8d: b4:e3:cf:df:a9:0c:3f:da:35:54:f5:25:e5:d5:10:0f:c0:95: 7e:46:b3:22 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC RUE4QjExMC8GA1UEBRMoNDFDNzU3MTQyOTlBNTc4REQxOTBGRDFGNzMwOTU1QjFG RDlBQzFGNDAeFw0yNTA2MTcxMzU1NDZaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NTE3M2UxLTg3NTUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDFuKB07fo7egISM+Ov3haR8IGZ8yJ5rQglBRI1eRxa74mb8u7DoTJv+Y5h2N4r x7eaXjKW6EcKjvQY9JVF++z37S/6AYxFbi2f23cI0D/TDSV5Jyos53Uv5LE0GTCD 0j/Ur48K+8J2bZeiJY0GKTi9U4WoiN1rmlaKCMx6Dn5udXNA9CVloAU3l+rB7C2+ kOT6mxhrFiTRUrk+05JuYtFXwdVSM3ml6ofjvVS9EfO51JOwbRagy6klLFkLW/bn 4652v4CGz7f1bhadj8JqczhTPF+llLX+FNWewN+QJPrxVv/0yMse80kDhNnIHphx 2O8PO9VcEKaLwnWCNH/7Tz6XAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUW/0BM2XV QUd+e4X4N3KnbBNPth4wHwYDVR0jBBgwFoAUQcdXFCmaV43RkP0fcwlVsf2awfQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJFQThCL0JBMDhBQTQyNEI4 MTExRjA4RjY1NTA3RUM0RjlBRTAyL1FjZFhGQ21hVjQzUmtQMGZjd2xWc2YyYXdm US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvUWNkWEZDbWFWNDNSa1AwZmN3bFZzZjJhd2ZRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC RUE4Qi9CQTA4QUE0MjRCODExMUYwOEY2NTUwN0VDNEY5QUUwMi9DNDI1Q0VFNjRC ODIxMUYwQTk0Q0ZEODJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVjvzANBgkqhkiG9w0BAQsFAAOCAQEAw+lBt29q3uj4CnwT fOde3Ej8epwu/mKTekNACLKVLoUBQvOF9qeJfP+QCx/NK00Hv2hfBxXQw4viVwwB ZYUUo/odccitK1+gqCWHmcs6RLD7I9OyQxnvozR5QBsN4Ws6i5IFTi5uJOrPTzmX Z4423QI8xgNL+Rkr92c6zG8aazp3pDQYY+WUfdxd8S+T3EL+1tR/gZ2e2+dx9b5/ /aUrwRhac/taNn9EuMiLEnu3cEYXbSdrl+svz3RzjzzPZ/8OWx43b8rKnfmUcUW8 veaESqG27oNt+EEBJIsWlFD/yffmaFHtfXcWNnaNtOPP36kMP9o1VPUl5dUQD8CV fkazIg== -----END CERTIFICATE-----Generated at Wed Jul 2 04:12:24 2025 by rpki-client