$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/2AECA58494EE11EE84F9D73CC4F9AE02.roa File: 2AECA58494EE11EE84F9D73CC4F9AE02.roa (raw, json) Hash identifier: wLYW8B6Rn+O3Hc7orBE129yGkBtSqh6g59+DMKOYlkE= Subject key identifier: F7:87:61:AB:4C:10:B1:4E:98:01:98:90:FE:4E:14:E3:59:BB:E5:89 Certificate issuer: /CN=A91DC31B/serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Certificate serial: 074A Authority key identifier: 8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/2AECA58494EE11EE84F9D73CC4F9AE02.roa Signing time: Fri 27 Jun 2025 11:51:56 +0000 ROA not before: Fri 27 Jun 2025 11:51:56 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 19551 IP address blocks: 166.81.2.0/24 maxlen: 24 166.81.51.0/24 maxlen: 24 166.81.52.0/24 maxlen: 24 166.81.53.0/24 maxlen: 24 166.81.54.0/24 maxlen: 24 166.81.56.0/24 maxlen: 24 166.81.57.0/24 maxlen: 24 166.81.61.0/24 maxlen: 24 166.81.62.0/24 maxlen: 24 166.81.63.0/24 maxlen: 24 166.81.83.0/24 maxlen: 24 166.81.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Jul 2025 22:48:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1866 (0x74a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DC31B, serialNumber=8B8AD5CA1C3E8B8CF468B5F496A91ABB0E48CFA8 Validity Not Before: Jun 27 11:51:56 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=685e85dc-00df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9b:1d:96:08:6b:6b:ac:7d:f1:50:8f:a9:69: 47:44:39:da:10:c0:96:cc:ae:57:27:2a:6c:d1:6a: 1e:19:fe:db:9d:62:f2:68:12:e1:51:16:73:e9:7e: 6a:06:85:71:95:61:76:60:1b:b6:13:fd:56:88:04: 8f:58:01:1b:fe:e8:c9:b2:fa:fb:7a:c2:c4:f5:7d: d0:d2:26:9d:c7:5c:58:a4:41:b8:05:db:6c:a4:bb: 0d:9a:f0:37:cc:cb:16:88:fa:6c:a6:07:8b:59:cd: ca:33:a5:db:28:89:6c:e5:cc:63:f2:90:db:ec:ba: 23:9a:50:49:8e:70:aa:4f:78:8c:fe:30:4e:f3:d4: af:32:34:c5:7b:df:23:fc:87:97:b8:0c:56:fe:8b: 37:ba:c5:37:36:a2:a6:ff:a8:d8:fa:4f:d0:23:ba: 02:35:cc:13:c8:24:0b:85:72:11:a1:24:ea:97:e8: 1c:a1:55:e3:c4:ec:7b:64:cf:67:8b:73:0d:b7:c3: 0a:98:09:5c:39:8a:e2:82:bf:e9:68:60:20:60:83: 46:00:a4:41:3f:10:9c:50:c7:3f:bf:53:5b:22:0a: 8a:7d:08:dd:d1:29:07:c9:db:38:0c:56:00:d6:f0: 56:db:d0:ad:b1:db:d8:51:85:94:02:eb:7b:0f:c2: 55:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:87:61:AB:4C:10:B1:4E:98:01:98:90:FE:4E:14:E3:59:BB:E5:89 X509v3 Authority Key Identifier: keyid:8B:8A:D5:CA:1C:3E:8B:8C:F4:68:B5:F4:96:A9:1A:BB:0E:48:CF:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/i4rVyhw-i4z0aLX0lqkauw5Iz6g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/i4rVyhw-i4z0aLX0lqkauw5Iz6g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC31B/D0ECCD48893D11EB916DF022C4F9AE02/2AECA58494EE11EE84F9D73CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 166.81.2.0/24 166.81.51.0-166.81.54.255 166.81.56.0/23 166.81.61.0-166.81.63.255 166.81.83.0-166.81.84.255 Signature Algorithm: sha256WithRSAEncryption 80:b6:c4:aa:4c:4f:9b:e5:7c:aa:04:a5:4a:0f:b5:19:85:5c: 22:98:f1:1f:3e:50:c8:58:35:25:8e:bd:52:03:08:68:bf:a1: da:63:c8:18:67:46:cb:0b:4c:47:a0:39:c9:61:1a:d0:46:d7: d5:d3:25:2f:2a:28:88:05:95:8a:b7:7e:2f:2f:b4:12:39:1a: 92:7f:2f:e7:6a:43:ff:9e:84:1c:b6:53:e0:89:0b:be:2a:7d: 97:c4:18:35:70:3f:37:56:14:ad:fc:56:8b:89:89:67:ba:df: 7e:3b:fd:47:ce:4a:d3:2d:05:b8:c4:35:4a:f7:f3:6f:b2:84: 70:0c:8d:cf:fc:7d:7d:1a:70:d5:a0:1c:f5:32:e3:23:d2:76: 02:8f:58:3b:ee:2a:12:9e:46:86:eb:94:a5:80:5d:79:e2:80: ff:63:1a:55:39:b6:fb:39:85:fe:1e:62:1e:1a:f3:bb:b5:3c: 87:b2:4b:c5:2c:49:72:88:da:80:ed:91:6d:26:83:e9:43:cd: f7:03:4e:84:14:9c:4e:52:f6:54:99:95:45:fb:cc:da:01:e4: b0:56:6c:01:b3:62:5d:7a:0e:b8:c0:f3:83:12:40:5a:8e:67: 27:b7:7d:1c:30:04:a0:6f:41:93:5e:95:7c:04:1e:f2:fb:bc: 20:13:03:83 -----BEGIN CERTIFICATE----- MIIFoTCCBImgAwIBAgICB0owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REMzMUIxMTAvBgNVBAUTKDhCOEFENUNBMUMzRThCOENGNDY4QjVGNDk2QTkxQUJC MEU0OENGQTgwHhcNMjUwNjI3MTE1MTU2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVlODVkYy0wMGRmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwJsdlghra6x98VCPqWlHRDnaEMCWzK5XJyps0WoeGf7bnWLyaBLhURZz6X5q BoVxlWF2YBu2E/1WiASPWAEb/ujJsvr7esLE9X3Q0iadx1xYpEG4BdtspLsNmvA3 zMsWiPpspgeLWc3KM6XbKIls5cxj8pDb7LojmlBJjnCqT3iM/jBO89SvMjTFe98j /IeXuAxW/os3usU3NqKm/6jY+k/QI7oCNcwTyCQLhXIRoSTql+gcoVXjxOx7ZM9n i3MNt8MKmAlcOYrigr/paGAgYINGAKRBPxCcUMc/v1NbIgqKfQjd0SkHyds4DFYA 1vBW29CtsdvYUYWUAut7D8JVPQIDAQABo4ICxTCCAsEwHQYDVR0OBBYEFPeHYatM ELFOmAGYkP5OFONZu+WJMB8GA1UdIwQYMBaAFIuK1cocPouM9Gi19JapGrsOSM+o MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEQzMxQi9EMEVDQ0Q0ODg5 M0QxMUVCOTE2REYwMjJDNEY5QUUwMi9pNHJWeWh3LWk0ejBhTFgwbHFrYXV3NUl6 NmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2k0clZ5aHctaTR6MGFMWDBscWthdXc1SXo2Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REMzMUIvRDBFQ0NENDg4OTNEMTFFQjkxNkRGMDIyQzRGOUFFMDIvMkFFQ0E1ODQ5 NEVFMTFFRTg0RjlENzNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTwYIKwYBBQUHAQcBAf8E QDA+MDwEAgABMDYDBACmUQIwDAMEAKZRMwMEAKZRNgMEAaZRODAMAwQAplE9AwQG plEAMAwDBACmUVMDBACmUVQwDQYJKoZIhvcNAQELBQADggEBAIC2xKpMT5vlfKoE pUoPtRmFXCKY8R8+UMhYNSWOvVIDCGi/odpjyBhnRssLTEegOclhGtBG19XTJS8q KIgFlYq3fi8vtBI5GpJ/L+dqQ/+ehBy2U+CJC74qfZfEGDVwPzdWFK38VouJiWe6 3347/UfOStMtBbjENUr382+yhHAMjc/8fX0acNWgHPUy4yPSdgKPWDvuKhKeRobr lKWAXXnigP9jGlU5tvs5hf4eYh4a87u1PIeyS8UsSXKI2oDtkW0mg+lDzfcDToQU nE5S9lSZlUX7zNoB5LBWbAGzYl16DrjA84MSQFqOZye3fRwwBKBvQZNelXwEHvL7 vCATA4M= -----END CERTIFICATE-----Generated at Tue Jul 1 11:08:27 2025 by rpki-client