$ rpki-client -vvf rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/6767E894A32311F0A8D9D520C4F9AE02.roa File: 6767E894A32311F0A8D9D520C4F9AE02.roa (raw, json) Hash identifier: qcRG/dop8kZF9v/2SljCJ8so+bQR2vG4pDOzpAMHKg4= Subject key identifier: 43:FB:30:91:65:DA:92:28:A6:EB:DA:13:73:46:41:87:DE:53:80:79 Certificate issuer: /CN=A91D94CD/serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Certificate serial: 05 Authority key identifier: E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/6767E894A32311F0A8D9D520C4F9AE02.roa Signing time: Tue 07 Oct 2025 02:14:50 +0000 ROA not before: Tue 07 Oct 2025 02:14:50 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 21859 IP address blocks: 165.84.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 11:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5 (0x5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D94CD, serialNumber=E706012A106BD094658E604C5603050F14DC3F4C Validity Not Before: Oct 7 02:14:50 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=68e4779a-f4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ba:1c:25:c2:7a:ec:3d:e8:d5:46:02:25:e9: 9e:ce:38:ff:56:72:11:3d:53:aa:9f:2c:31:48:bf: 32:27:b8:61:67:46:8d:92:4e:2c:00:33:6c:1d:c3: 7f:58:42:db:6c:90:ea:fd:5e:d5:f3:88:34:1e:6a: 7a:4f:1f:5a:f3:7a:ad:4c:ee:d0:5d:50:47:c9:21: a1:8f:77:1a:70:26:10:00:c6:ca:61:e5:5e:42:33: ab:e7:d5:b6:5e:ff:a9:3b:22:ed:03:a8:d8:87:d1: 35:d2:5e:c9:24:ef:d4:59:0b:e8:b5:3e:af:f4:63: 9b:58:34:d8:c2:86:87:3d:04:32:de:a3:37:0f:ff: 51:6c:1e:c4:1b:4a:8a:0c:12:3b:5c:95:ab:09:87: c1:d8:00:af:00:ac:65:29:d4:5a:3d:ba:01:47:50: 5e:70:ff:dd:1b:43:2f:8e:c8:da:8e:44:84:fb:b6: df:bf:ed:67:8c:f6:f2:ac:b5:7b:33:f9:ae:4a:e5: ce:5d:16:9a:b6:15:81:5e:f8:e4:3d:40:dd:77:4f: 9f:e8:4f:ba:e1:a6:76:8f:13:2a:14:07:b6:0b:89: aa:18:b9:ee:c6:09:98:5b:66:82:77:3b:d2:de:e0: 5a:ad:63:ab:b0:a0:0b:9b:9c:20:70:26:83:9b:8f: 12:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FB:30:91:65:DA:92:28:A6:EB:DA:13:73:46:41:87:DE:53:80:79 X509v3 Authority Key Identifier: keyid:E7:06:01:2A:10:6B:D0:94:65:8E:60:4C:56:03:05:0F:14:DC:3F:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/5wYBKhBr0JRljmBMVgMFDxTcP0w.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/5wYBKhBr0JRljmBMVgMFDxTcP0w.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D94CD/2CD7FD0E9EC811F08CD2AC7BC4F9AE02/6767E894A32311F0A8D9D520C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.84.245.0/24 Signature Algorithm: sha256WithRSAEncryption 74:f9:a2:8c:ab:f6:b6:e7:61:8b:b2:6b:de:53:3c:df:25:69: e6:93:b9:3c:1d:14:9a:31:8c:47:c7:ff:e3:4f:dc:7f:bd:8d: fd:de:46:24:2a:df:72:4d:7a:04:75:ed:f4:fa:9c:a7:dd:e1: 31:41:0c:85:ae:86:cb:a7:a6:64:88:eb:5e:ee:9e:0d:40:a4: a3:53:c3:55:4c:d2:58:ec:2f:e7:bc:4a:83:20:ed:cb:12:f1: c0:17:8b:86:a2:4d:b4:94:8b:bd:cb:b1:63:cd:63:5e:01:e1: a8:ca:1d:c6:a7:05:08:53:19:4d:4a:c5:c8:c9:55:24:0e:72: 21:1b:15:83:f0:c5:37:2d:75:4b:d7:d1:1f:d1:09:48:89:3b: 15:1e:c8:54:c1:2e:dd:d6:af:b5:4c:01:19:d2:49:5c:e6:73: d5:db:32:89:e6:a2:b7:28:f2:85:da:4e:16:ae:f2:e7:4f:91: 40:12:59:36:b5:07:9d:61:bb:97:40:2b:fc:70:1d:14:68:a0: 6c:68:f0:75:86:d4:24:22:06:3b:99:21:8c:65:e6:6c:97:09: 62:a4:fe:3f:83:66:0a:a7:35:b3:79:32:c4:8c:73:96:90:7a: 2d:69:9b:d1:06:3c:44:38:c8:87:f4:02:e4:ec:50:a3:3d:11: d7:09:ff:cd -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE OTRDRDExMC8GA1UEBRMoRTcwNjAxMkExMDZCRDA5NDY1OEU2MDRDNTYwMzA1MEYx NERDM0Y0QzAeFw0yNTEwMDcwMjE0NTBaFw0yNjAzMDIwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ZTQ3NzlhLWY0ZmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDMuhwlwnrsPejVRgIl6Z7OOP9WchE9U6qfLDFIvzInuGFnRo2STiwAM2wdw39Y QttskOr9XtXziDQeanpPH1rzeq1M7tBdUEfJIaGPdxpwJhAAxsph5V5CM6vn1bZe /6k7Iu0DqNiH0TXSXskk79RZC+i1Pq/0Y5tYNNjChoc9BDLeozcP/1FsHsQbSooM EjtclasJh8HYAK8ArGUp1Fo9ugFHUF5w/90bQy+OyNqORIT7tt+/7WeM9vKstXsz +a5K5c5dFpq2FYFe+OQ9QN13T5/oT7rhpnaPEyoUB7YLiaoYue7GCZhbZoJ3O9Le 4FqtY6uwoAubnCBwJoObjxKdAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUQ/swkWXa kiim69oTc0ZBh95TgHkwHwYDVR0jBBgwFoAU5wYBKhBr0JRljmBMVgMFDxTcP0ww DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ5NENELzJDRDdGRDBFOUVD ODExRjA4Q0QyQUM3QkM0RjlBRTAyLzV3WUJLaEJyMEpSbGptQk1WZ01GRHhUY1Aw dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvNXdZQktoQnIwSlJsam1CTVZnTUZEeFRjUDB3LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE OTRDRC8yQ0Q3RkQwRTlFQzgxMUYwOENEMkFDN0JDNEY5QUUwMi82NzY3RTg5NEEz MjMxMUYwQThEOUQ1MjBDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVU9TANBgkqhkiG9w0BAQsFAAOCAQEAdPmijKv2tudhi7Jr 3lM83yVp5pO5PB0UmjGMR8f/40/cf72N/d5GJCrfck16BHXt9Pqcp93hMUEMha6G y6emZIjrXu6eDUCko1PDVUzSWOwv57xKgyDtyxLxwBeLhqJNtJSLvcuxY81jXgHh qModxqcFCFMZTUrFyMlVJA5yIRsVg/DFNy11S9fRH9EJSIk7FR7IVMEu3davtUwB GdJJXOZz1dsyieaityjyhdpOFq7y50+RQBJZNrUHnWG7l0Ar/HAdFGigbGjwdYbU JCIGO5khjGXmbJcJYqT+P4NmCqc1s3kyxIxzlpB6LWmb0QY8RDjIh/QC5OxQoz0R 1wn/zQ== -----END CERTIFICATE-----Generated at Sun Oct 19 22:55:46 2025 by rpki-client