$ rpki-client -vvf rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/0745DA884A3C11F0AFF98454C4F9AE02.roa File: 0745DA884A3C11F0AFF98454C4F9AE02.roa (raw, json) Hash identifier: aHkW6AI6M6GCpQTIMNKGhCjE+iAmC4ZK4etHz7DUzdk= Subject key identifier: CD:E7:C7:49:D9:FC:49:2E:31:33:03:96:0E:85:4B:51:27:E4:73:FE Certificate issuer: /CN=A91DD1CC/serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Certificate serial: 02 Authority key identifier: 52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/0745DA884A3C11F0AFF98454C4F9AE02.roa Signing time: Sun 15 Jun 2025 22:56:53 +0000 ROA not before: Sun 15 Jun 2025 22:56:53 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149827 IP address blocks: 165.99.122.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DD1CC, serialNumber=5231C457413B9C79CD5B300D84A43B0039BB6813 Validity Not Before: Jun 15 22:56:53 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684f4fb5-b61a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c1:b8:1f:83:a9:fb:b5:55:9b:87:17:a2:8f: 96:06:06:b9:1c:f5:98:f9:e4:67:f1:2f:d8:31:15: 10:e3:3b:11:5e:e1:53:2d:2b:f8:e1:5c:5d:93:e3: 1b:fa:48:f4:94:34:f0:72:96:b3:26:52:af:47:f6: 85:17:3c:78:a8:5e:88:de:e6:f1:d6:a4:4b:d4:a9: 63:ed:09:6b:3d:53:78:33:c1:71:1e:aa:41:87:87: e2:71:bb:30:48:85:ce:9c:75:45:97:f9:4c:5b:18: d9:19:75:2e:eb:c8:f4:e6:20:71:c3:03:26:36:e1: 38:2c:8d:0c:91:61:17:9c:6f:4b:9c:d8:af:25:f9: ef:7f:0b:ca:71:54:fe:99:94:e0:2b:a4:d4:5f:65: 64:14:51:30:b6:ee:f9:a4:0b:33:40:33:d0:55:5e: 09:8f:1b:a9:77:af:42:82:d9:c5:06:88:d1:89:31: 8e:5b:ba:ab:1e:b1:70:67:60:17:00:1c:53:95:01: 29:d4:d3:e8:46:f9:b3:e0:ce:8a:b1:e2:c0:d5:5d: a9:ae:15:fe:51:be:21:a3:8f:dc:f8:c4:6b:80:22: 2c:08:f5:03:32:11:2e:bb:4b:c6:59:b4:16:68:56: 90:81:4d:09:18:17:8e:d1:24:c9:a9:75:d9:7d:75: e9:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E7:C7:49:D9:FC:49:2E:31:33:03:96:0E:85:4B:51:27:E4:73:FE X509v3 Authority Key Identifier: keyid:52:31:C4:57:41:3B:9C:79:CD:5B:30:0D:84:A4:3B:00:39:BB:68:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/UjHEV0E7nHnNWzANhKQ7ADm7aBM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/UjHEV0E7nHnNWzANhKQ7ADm7aBM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DD1CC/7390680E4A3A11F0BD5C1B4FC4F9AE02/0745DA884A3C11F0AFF98454C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.122.0/23 Signature Algorithm: sha256WithRSAEncryption 70:8c:0e:b4:21:c5:5c:7a:f2:49:49:8f:a3:24:c6:f8:73:05: 0e:6a:13:0c:b6:98:60:be:99:02:28:73:24:11:37:d3:44:71: 84:f5:8e:4c:89:3a:1b:54:0a:7b:3b:53:ba:5e:3e:d8:47:90: c3:0f:ed:21:a5:a1:ca:41:60:34:36:fd:7c:c8:3d:d0:68:2c: 46:f2:30:a5:b7:de:bd:f1:6d:c0:fa:9d:b8:be:6c:89:ca:8c: 97:ac:9e:84:83:b1:6d:55:9d:ed:fe:7c:4f:73:26:31:6e:ac: 3a:c6:3d:11:ba:6a:56:38:f8:16:35:40:8e:e8:3f:a3:5a:3a: 32:14:8d:4b:64:7c:c6:6e:76:e9:16:76:28:04:26:fb:0c:3f: 57:66:8c:93:54:5d:99:80:5a:9d:78:58:84:39:e6:12:e2:fd: 8c:f8:a1:60:d2:65:30:72:01:7c:dd:76:7b:ff:d0:23:ff:2d: fe:40:eb:74:47:6d:94:62:37:08:6f:50:15:52:e4:9f:20:ed: 58:a7:dd:35:52:c8:39:ed:46:7e:d9:4e:ec:81:59:62:63:e6: 30:0f:7a:2e:ca:c9:62:4d:93:db:7c:ad:b2:b1:3f:fd:f5:25: 5d:44:c6:ed:c3:8e:67:16:f1:40:29:84:c6:90:08:15:db:21: ac:fb:b6:0d -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE RDFDQzExMC8GA1UEBRMoNTIzMUM0NTc0MTNCOUM3OUNENUIzMDBEODRBNDNCMDAz OUJCNjgxMzAeFw0yNTA2MTUyMjU2NTNaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NGY0ZmI1LWI2MWEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1wbgfg6n7tVWbhxeij5YGBrkc9Zj55GfxL9gxFRDjOxFe4VMtK/jhXF2T4xv6 SPSUNPBylrMmUq9H9oUXPHioXoje5vHWpEvUqWPtCWs9U3gzwXEeqkGHh+JxuzBI hc6cdUWX+UxbGNkZdS7ryPTmIHHDAyY24TgsjQyRYRecb0uc2K8l+e9/C8pxVP6Z lOArpNRfZWQUUTC27vmkCzNAM9BVXgmPG6l3r0KC2cUGiNGJMY5buqsesXBnYBcA HFOVASnU0+hG+bPgzoqx4sDVXamuFf5RviGjj9z4xGuAIiwI9QMyES67S8ZZtBZo VpCBTQkYF47RJMmpddl9den7AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUzefHSdn8 SS4xMwOWDoVLUSfkc/4wHwYDVR0jBBgwFoAUUjHEV0E7nHnNWzANhKQ7ADm7aBMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUREMUNDLzczOTA2ODBFNEEz QTExRjBCRDVDMUI0RkM0RjlBRTAyL1VqSEVWMEU3bkhuTld6QU5oS1E3QURtN2FC TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvVWpIRVYwRTduSG5OV3pBTmhLUTdBRG03YUJNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE RDFDQy83MzkwNjgwRTRBM0ExMUYwQkQ1QzFCNEZDNEY5QUUwMi8wNzQ1REE4ODRB M0MxMUYwQUZGOTg0NTRDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVjejANBgkqhkiG9w0BAQsFAAOCAQEAcIwOtCHFXHrySUmP oyTG+HMFDmoTDLaYYL6ZAihzJBE300RxhPWOTIk6G1QKeztTul4+2EeQww/tIaWh ykFgNDb9fMg90GgsRvIwpbfevfFtwPqduL5sicqMl6yehIOxbVWd7f58T3MmMW6s OsY9EbpqVjj4FjVAjug/o1o6MhSNS2R8xm526RZ2KAQm+ww/V2aMk1RdmYBanXhY hDnmEuL9jPihYNJlMHIBfN12e//QI/8t/kDrdEdtlGI3CG9QFVLknyDtWKfdNVLI Oe1GftlO7IFZYmPmMA96LsrJYk2T23ytsrE//fUlXUTG7cOOZxbxQCmExpAIFdsh rPu2DQ== -----END CERTIFICATE-----Generated at Fri Jul 4 14:28:04 2025 by rpki-client