$ rpki-client -vvf rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa File: 89A73D46772311EBB972032EC4F9AE02.roa (raw, json) Hash identifier: r21OVByQYNcBYjJc0J53OAidjOhKnEhsIuFLOBFbEzY= Subject key identifier: AB:73:9A:98:C4:29:2E:3D:54:47:06:C9:32:2E:6F:5D:15:03:A1:23 Certificate issuer: /CN=A91E170B/serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Certificate serial: 3627 Authority key identifier: 6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa Signing time: Mon 30 Jun 2025 14:20:15 +0000 ROA not before: Mon 30 Jun 2025 14:20:15 +0000 ROA not after: Thu 30 Oct 2025 00:00:00 +0000 asID: 135538 IP address blocks: 61.45.253.0/24 maxlen: 24 2401:4601:253::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:17:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13863 (0x3627) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E170B, serialNumber=6D38C5B4CF4BAD3D984871A7321A9D16960BE268 Validity Not Before: Jun 30 14:20:15 2025 GMT Not After : Oct 30 00:00:00 2025 GMT Subject: CN=68629d1f-1415 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0b:3a:5b:d9:b7:b2:c1:8e:f9:71:30:72:98: 87:cd:38:37:12:bb:e3:75:ea:c2:3d:fc:7f:36:77: 36:b9:10:9b:9c:be:5a:38:d5:8d:74:9c:72:ae:63: 8e:91:f1:75:b0:4d:1d:02:4b:b5:b6:a1:80:a9:ae: c6:d1:95:5f:8e:37:0c:eb:9d:b1:1d:5a:ec:1b:37: f6:3b:ef:0c:a7:f9:a2:c8:16:51:58:15:c8:52:7c: b7:fc:d8:72:51:44:41:7c:d7:b0:b5:b3:8e:dd:ba: 17:dd:54:85:86:ef:6e:e6:07:3c:9f:a3:92:a9:1c: 7c:b9:0c:5c:9e:ae:c2:13:e1:9f:c5:f2:b3:82:ee: e6:35:44:b1:a0:33:8b:a3:3f:c9:78:c0:e4:7c:c0: b1:55:ce:b6:13:55:83:ed:ac:65:23:f8:6a:6f:54: 1b:84:e9:f3:94:85:14:d2:23:84:ad:d8:06:ed:b9: e5:e1:57:b4:8d:a9:1d:8a:17:29:0b:82:57:48:2e: 52:73:fe:20:26:1f:da:5a:0c:ba:d3:f2:a3:49:93: a6:38:a5:a5:a9:f3:55:e6:c0:b7:ab:c4:5a:6d:7e: 52:5d:2c:4f:c7:40:b3:69:ea:a9:de:11:2c:79:eb: 7c:f0:e2:00:74:4f:2a:72:89:99:92:64:4d:29:ce: b2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:73:9A:98:C4:29:2E:3D:54:47:06:C9:32:2E:6F:5D:15:03:A1:23 X509v3 Authority Key Identifier: keyid:6D:38:C5:B4:CF:4B:AD:3D:98:48:71:A7:32:1A:9D:16:96:0B:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bTjFtM9LrT2YSHGnMhqdFpYL4mg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E170B/97AF6DF01D6D11E2A12D9EAE08B02CD2/89A73D46772311EBB972032EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 61.45.253.0/24 IPv6: 2401:4601:253::/48 Signature Algorithm: sha256WithRSAEncryption 9a:fd:43:39:ff:93:29:e8:a8:39:a5:6c:e8:8d:ab:70:4c:f4: eb:36:75:8f:87:21:34:a5:3b:e8:b9:01:b1:8a:e6:84:fe:0e: 78:58:d7:54:e2:12:39:ac:f3:ef:fe:53:82:31:9d:f5:7a:e7: d9:85:ad:95:ef:f9:d2:b2:e5:0b:1f:a8:a0:08:4d:85:aa:08: 21:58:91:e4:13:53:ea:9c:1d:33:66:7d:10:52:4a:ca:df:72: 73:e4:6d:9e:b3:bf:85:61:20:70:fa:de:28:c3:b8:4e:25:55: d6:ad:7a:5d:4c:93:33:ba:f7:14:b7:83:5d:9b:fc:9a:06:e3: b5:26:28:46:97:d4:1c:da:30:4b:47:30:34:23:9b:a6:c4:f3: ea:4b:ad:f6:01:b4:85:8d:71:92:6b:d0:49:32:48:04:83:84: 3e:0c:e2:87:4d:92:1e:63:9b:19:10:69:cc:fa:e7:13:41:47: 58:4f:14:9f:b5:6a:38:22:ce:9f:fa:84:a4:72:03:76:88:cb: 21:67:6a:3e:68:79:59:b9:27:e6:aa:e7:8d:66:ac:f1:65:d7: dc:98:07:49:fe:eb:ab:c6:b1:a8:f4:d4:24:ac:0f:16:a8:86: 29:6f:eb:a8:6e:66:81:e6:8f:13:c5:f8:06:a7:0b:cc:91:5b: 83:68:27:a5 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICNicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTE3MEIxMTAvBgNVBAUTKDZEMzhDNUI0Q0Y0QkFEM0Q5ODQ4NzFBNzMyMUE5RDE2 OTYwQkUyNjgwHhcNMjUwNjMwMTQyMDE1WhcNMjUxMDMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYyOWQxZi0xNDE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqgs6W9m3ssGO+XEwcpiHzTg3ErvjderCPfx/Nnc2uRCbnL5aONWNdJxyrmOO kfF1sE0dAku1tqGAqa7G0ZVfjjcM652xHVrsGzf2O+8Mp/miyBZRWBXIUny3/Nhy UURBfNewtbOO3boX3VSFhu9u5gc8n6OSqRx8uQxcnq7CE+GfxfKzgu7mNUSxoDOL oz/JeMDkfMCxVc62E1WD7axlI/hqb1QbhOnzlIUU0iOErdgG7bnl4Ve0jakdihcp C4JXSC5Sc/4gJh/aWgy60/KjSZOmOKWlqfNV5sC3q8RabX5SXSxPx0Czaeqp3hEs eet88OIAdE8qcomZkmRNKc6yZQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFKtzmpjE KS49VEcGyTIub10VA6EjMB8GA1UdIwQYMBaAFG04xbTPS609mEhxpzIanRaWC+Jo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMTcwQi85N0FGNkRGMDFE NkQxMUUyQTEyRDlFQUUwOEIwMkNEMi9iVGpGdE05THJUMllTSEduTWhxZEZwWUw0 bWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JUakZ0TTlMclQyWVNIR25NaHFkRnBZTDRtZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTE3MEIvOTdBRjZERjAxRDZEMTFFMkExMkQ5RUFFMDhCMDJDRDIvODlBNzNENDY3 NzIzMTFFQkI5NzIwMzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAA9Lf0wDwQCAAIwCQMHACQBRgECUzANBgkqhkiG9w0BAQsF AAOCAQEAmv1DOf+TKeioOaVs6I2rcEz06zZ1j4chNKU76LkBsYrmhP4OeFjXVOIS Oazz7/5TgjGd9Xrn2YWtle/50rLlCx+ooAhNhaoIIViR5BNT6pwdM2Z9EFJKyt9y c+RtnrO/hWEgcPreKMO4TiVV1q16XUyTM7r3FLeDXZv8mgbjtSYoRpfUHNowS0cw NCObpsTz6kut9gG0hY1xkmvQSTJIBIOEPgzih02SHmObGRBpzPrnE0FHWE8Un7Vq OCLOn/qEpHIDdojLIWdqPmh5Wbkn5qrnjWas8WXX3JgHSf7rq8axqPTUJKwPFqiG KW/rqG5mgeaPE8X4BqcLzJFbg2gnpQ== -----END CERTIFICATE-----Generated at Thu Jul 3 13:48:52 2025 by rpki-client