$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/7C76080E08D611EE82522448C4F9AE02.roa File: 7C76080E08D611EE82522448C4F9AE02.roa (raw, json) Hash identifier: k9frDxKJ4wpEb7uq/4jS+05SvZ2Ew23IDjuHbFB36uo= Subject key identifier: A6:C6:3C:60:33:97:56:74:00:BC:C0:01:B1:B8:A9:B0:97:DF:44:59 Certificate issuer: /CN=A91DBAF1/serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Certificate serial: 0780 Authority key identifier: 25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/7C76080E08D611EE82522448C4F9AE02.roa Signing time: Sat 10 May 2025 21:39:48 +0000 ROA not before: Sat 10 May 2025 21:39:48 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 15830 IP address blocks: 51.162.8.0/21 maxlen: 21 51.162.16.0/20 maxlen: 20 51.162.32.0/21 maxlen: 21 51.162.48.0/22 maxlen: 22 51.162.64.0/21 maxlen: 21 51.162.80.0/21 maxlen: 21 51.162.124.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 21:39:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1920 (0x780) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DBAF1, serialNumber=25F3D21688AB9381AA8B952BCE2641293542A7F2 Validity Not Before: May 10 21:39:48 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681fc7a3-778f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:31:da:ee:0c:fd:01:39:db:37:18:2d:a9:58: 0a:f6:91:45:77:e1:50:3f:3a:d3:b5:a0:33:9e:df: a8:7a:9d:4c:92:12:0c:cf:23:2d:84:b8:5c:36:87: c3:97:4d:c3:45:a9:94:62:1c:58:be:07:c1:01:ee: f8:56:f6:a9:06:8c:fd:9e:ae:36:23:b0:58:45:24: ff:72:c3:4e:ac:69:b1:02:f6:14:0a:c2:f8:81:bb: f0:cc:e0:56:2e:80:2b:b2:d5:fa:04:d0:19:68:b7: 24:a4:db:60:f7:28:fe:92:e6:5f:f0:31:1c:9b:6e: 19:fb:c0:94:c5:a9:95:71:2d:37:1c:78:98:9f:ff: b2:68:b4:3e:f8:d8:6e:1f:a4:eb:a1:c0:fd:f7:d5: df:73:22:d9:ab:6b:a7:ba:63:cb:a2:73:ed:8c:0a: 4d:aa:cf:4f:56:8e:b7:74:a0:20:9b:01:5b:03:59: db:ca:63:ec:2c:35:1a:40:50:c2:c9:81:da:92:dd: d1:c9:e2:4e:8f:fd:5c:5b:cc:d0:9e:9d:e9:44:d3: 0a:ef:b3:48:87:f5:7b:79:57:c0:97:f9:a0:0f:28: f5:0d:3b:74:e5:2b:6c:55:d5:d2:98:93:68:47:1f: 35:e4:8a:d0:22:62:f6:b9:e0:3a:7e:bc:89:75:b9: 29:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:C6:3C:60:33:97:56:74:00:BC:C0:01:B1:B8:A9:B0:97:DF:44:59 X509v3 Authority Key Identifier: keyid:25:F3:D2:16:88:AB:93:81:AA:8B:95:2B:CE:26:41:29:35:42:A7:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/JfPSFoirk4Gqi5UrziZBKTVCp_I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/JfPSFoirk4Gqi5UrziZBKTVCp_I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAF1/86DB2CCC248E11EBABEF2B2FC4F9AE02/7C76080E08D611EE82522448C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 51.162.8.0-51.162.39.255 51.162.48.0/22 51.162.64.0/21 51.162.80.0/21 51.162.124.0/22 Signature Algorithm: sha256WithRSAEncryption 48:c5:ed:1f:0b:b3:9a:ef:f2:d2:9c:f5:d6:c8:5d:27:54:7d: 25:b3:88:23:cb:37:92:65:98:04:4c:b7:58:a1:40:48:97:9f: a5:7d:79:c2:fb:9e:dc:dc:35:00:4b:e1:98:c5:55:bb:16:9d: 70:29:6e:22:7c:36:c7:55:1e:88:7b:55:dd:e4:33:02:f8:a7: ff:ed:43:9f:df:0e:44:3b:6d:d1:80:10:ee:ab:df:38:e7:42: 01:77:20:9c:e8:bc:71:c5:bc:1d:a9:a9:1f:cc:49:20:12:7c: 88:18:6f:a3:f1:41:39:46:99:f3:56:07:de:71:53:a0:fb:66: e0:03:e7:57:99:03:0c:2b:13:80:9e:8b:c1:56:4d:a3:b7:b2: dd:7b:86:76:d7:e6:ab:ac:22:46:b2:40:89:4d:23:f7:ff:60: 84:37:a5:06:42:81:bc:eb:7f:f1:02:37:48:80:b6:3a:4d:84: fa:cc:f5:69:8a:93:91:49:a3:32:ec:53:8e:6f:97:bf:86:21: af:7b:36:e7:03:da:9b:71:ce:5d:35:63:42:3c:4d:87:79:d5: 09:ff:48:e5:76:f9:62:80:a3:0e:55:98:40:ed:6b:11:5c:2d: 58:f4:a7:bd:b3:02:33:26:2f:e0:ad:65:64:3f:82:6e:f7:84: 3d:2f:24:ea -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICB4AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REJBRjExMTAvBgNVBAUTKDI1RjNEMjE2ODhBQjkzODFBQThCOTUyQkNFMjY0MTI5 MzU0MkE3RjIwHhcNMjUwNTEwMjEzOTQ4WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmYzdhMy03NzhmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArjHa7gz9ATnbNxgtqVgK9pFFd+FQPzrTtaAznt+oep1MkhIMzyMthLhcNofD l03DRamUYhxYvgfBAe74VvapBoz9nq42I7BYRST/csNOrGmxAvYUCsL4gbvwzOBW LoArstX6BNAZaLckpNtg9yj+kuZf8DEcm24Z+8CUxamVcS03HHiYn/+yaLQ++Nhu H6TrocD999XfcyLZq2unumPLonPtjApNqs9PVo63dKAgmwFbA1nbymPsLDUaQFDC yYHakt3RyeJOj/1cW8zQnp3pRNMK77NIh/V7eVfAl/mgDyj1DTt05StsVdXSmJNo Rx815IrQImL2ueA6fryJdbkpnwIDAQABo4ICtTCCArEwHQYDVR0OBBYEFKbGPGAz l1Z0ALzAAbG4qbCX30RZMB8GA1UdIwQYMBaAFCXz0haIq5OBqouVK84mQSk1Qqfy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQkFGMS84NkRCMkNDQzI0 OEUxMUVCQUJFRjJCMkZDNEY5QUUwMi9KZlBTRm9pcms0R3FpNVVyemlaQktUVkNw X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0pmUFNGb2lyazRHcWk1VXJ6aVpCS1RWQ3BfSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REJBRjEvODZEQjJDQ0MyNDhFMTFFQkFCRUYyQjJGQzRGOUFFMDIvN0M3NjA4MEUw OEQ2MTFFRTgyNTIyNDQ4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMCwEAgABMCYwDAMEAzOiCAMEAzOiIAMEAjOiMAMEAzOiQAMEAzOiUAMEAjOi fDANBgkqhkiG9w0BAQsFAAOCAQEASMXtHwuzmu/y0pz11shdJ1R9JbOII8s3kmWY BEy3WKFASJefpX15wvue3Nw1AEvhmMVVuxadcCluInw2x1UeiHtV3eQzAvin/+1D n98ORDtt0YAQ7qvfOOdCAXcgnOi8ccW8HampH8xJIBJ8iBhvo/FBOUaZ81YH3nFT oPtm4APnV5kDDCsTgJ6LwVZNo7ey3XuGdtfmq6wiRrJAiU0j9/9ghDelBkKBvOt/ 8QI3SIC2Ok2E+sz1aYqTkUmjMuxTjm+Xv4Yhr3s25wPam3HOXTVjQjxNh3nVCf9I 5Xb5YoCjDlWYQO1rEVwtWPSnvbMCMyYv4K1lZD+CbveEPS8k6g== -----END CERTIFICATE-----Generated at Sun May 11 23:00:32 2025 by rpki-client