$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B765C5224C0811F0A0985D69C4F9AE02.roa File: B765C5224C0811F0A0985D69C4F9AE02.roa (raw, json) Hash identifier: x6blm5e8kLGYKSB5FzQZ6LbsLybZ7M+AKWY5ZGCtiQU= Subject key identifier: 8C:60:2E:AB:3F:54:5C:E8:8D:E1:DE:E3:4F:85:11:F3:2B:D0:7D:96 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 27CA Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B765C5224C0811F0A0985D69C4F9AE02.roa Signing time: Wed 18 Jun 2025 05:54:37 +0000 ROA not before: Wed 18 Jun 2025 05:54:37 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 396073 IP address blocks: 223.29.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:35:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10186 (0x27ca) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Jun 18 05:54:37 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6852549d-04db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:0a:51:4a:19:d7:c7:6b:e0:d5:86:b9:bc:69: b5:c5:08:02:25:1d:35:6e:5f:c2:ab:fe:80:5a:c9: 1a:b0:e7:56:50:c7:01:d0:fa:f5:3b:c5:11:a5:89: 5e:9a:cc:d9:48:ba:8f:1e:80:7a:91:22:70:3b:82: fa:40:61:e4:e3:24:99:7e:1c:ab:6f:36:bb:0a:25: 89:29:1f:89:7b:56:ff:8d:b8:5c:9d:a9:27:81:0a: d1:5a:38:91:3e:55:83:76:05:49:19:60:4e:69:31: ed:f2:fa:7a:14:5b:86:33:be:33:d5:14:56:55:92: b8:2c:15:f2:25:c7:f2:37:d5:7a:41:97:71:0f:7e: 99:30:e9:74:75:a4:9b:1b:51:81:4f:88:c5:c3:f4: f1:6e:a9:1c:9d:e4:85:0a:6b:a3:d1:6e:8d:b9:2c: e4:40:5a:39:af:08:42:5c:75:8c:17:bf:94:42:d3: 42:01:17:eb:04:22:e0:4b:9c:a1:20:4c:70:3a:91: c4:1a:ba:ee:15:04:1c:4d:b4:1a:fa:bd:ad:f0:bd: cf:dc:62:1f:8b:15:01:84:6b:b6:19:bc:21:1b:46: ce:63:56:80:4e:33:bf:d9:65:e6:3a:fd:5c:42:a3: 6a:9a:ac:c2:8f:4f:44:f2:10:db:ae:a3:04:04:ae: b1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:60:2E:AB:3F:54:5C:E8:8D:E1:DE:E3:4F:85:11:F3:2B:D0:7D:96 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/B765C5224C0811F0A0985D69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 223.29.237.0/24 Signature Algorithm: sha256WithRSAEncryption af:d7:cf:71:92:40:85:5b:87:28:52:42:60:2f:22:1d:fc:74: a0:83:76:f5:85:ef:f1:f0:ca:8c:78:87:ac:b4:81:a1:09:92: ad:66:8c:e6:e5:bf:e6:a1:c8:e2:73:c2:14:5d:ac:fe:cc:1e: 1b:c6:d9:aa:87:4e:11:d6:c4:93:82:94:72:b9:70:91:3f:e2: b9:e7:12:bb:57:48:12:06:a0:13:70:9a:ab:4e:14:a9:ae:38: 98:5b:d5:20:b0:61:7d:2d:f6:54:61:38:55:fa:4b:45:d3:15: 47:dc:10:0a:e2:fc:03:24:ee:7d:cf:0d:c4:51:7b:60:b6:d4: 6d:8f:dd:0d:f9:49:b6:5d:4a:6c:33:83:fa:be:86:cb:90:fc: 06:6c:51:62:0b:8f:cc:da:dc:3f:7d:82:fd:1c:79:85:29:c3: f5:0e:fe:e5:24:28:f2:11:43:4d:95:f8:92:71:6f:be:c8:f4: 2b:23:41:4c:2a:5b:78:47:3e:4f:7e:13:e8:f1:c4:c4:13:ef: 1b:ef:6d:b2:0b:67:66:7c:5d:7d:c4:01:df:92:18:24:80:1a: c2:57:fc:bb:71:2d:77:6a:23:1e:e3:59:81:1d:6c:25:54:7b: bc:c8:38:e4:38:9d:b8:68:30:a5:5f:a2:b1:5e:c2:13:fc:50: 44:18:5b:33 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJ8owDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwNjE4MDU1NDM3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUyNTQ5ZC0wNGRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1QpRShnXx2vg1Ya5vGm1xQgCJR01bl/Cq/6AWskasOdWUMcB0Pr1O8URpYle mszZSLqPHoB6kSJwO4L6QGHk4ySZfhyrbza7CiWJKR+Je1b/jbhcnakngQrRWjiR PlWDdgVJGWBOaTHt8vp6FFuGM74z1RRWVZK4LBXyJcfyN9V6QZdxD36ZMOl0daSb G1GBT4jFw/TxbqkcneSFCmuj0W6NuSzkQFo5rwhCXHWMF7+UQtNCARfrBCLgS5yh IExwOpHEGrruFQQcTbQa+r2t8L3P3GIfixUBhGu2GbwhG0bOY1aATjO/2WXmOv1c QqNqmqzCj09E8hDbrqMEBK6xXQIDAQABo4IClTCCApEwHQYDVR0OBBYEFIxgLqs/ VFzojeHe40+FEfMr0H2WMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvQjc2NUM1MjI0 QzA4MTFGMEEwOTg1RDY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADfHe0wDQYJKoZIhvcNAQELBQADggEBAK/Xz3GSQIVbhyhS QmAvIh38dKCDdvWF7/Hwyox4h6y0gaEJkq1mjOblv+ahyOJzwhRdrP7MHhvG2aqH ThHWxJOClHK5cJE/4rnnErtXSBIGoBNwmqtOFKmuOJhb1SCwYX0t9lRhOFX6S0XT FUfcEAri/AMk7n3PDcRRe2C21G2P3Q35SbZdSmwzg/q+hsuQ/AZsUWILj8za3D99 gv0ceYUpw/UO/uUkKPIRQ02V+JJxb77I9CsjQUwqW3hHPk9+E+jxxMQT7xvvbbIL Z2Z8XX3EAd+SGCSAGsJX/LtxLXdqIx7jWYEdbCVUe7zIOOQ4nbhoMKVforFewhP8 UEQYWzM= -----END CERTIFICATE-----Generated at Wed Jul 2 22:50:40 2025 by rpki-client