$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/F9722F8255C411E9A0FEF781C4F9AE02.roa File: F9722F8255C411E9A0FEF781C4F9AE02.roa (raw, json) Hash identifier: symelOI4KiPwqS+zxOG2abXkQkOu/9Ecrvxkqaxc9Us= Subject key identifier: 30:D1:9B:49:72:5A:CD:5F:C7:20:19:F4:D4:9C:D4:C1:F9:C8:1F:F9 Certificate issuer: /CN=A91EF19E/serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Certificate serial: 2A19 Authority key identifier: 9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/F9722F8255C411E9A0FEF781C4F9AE02.roa Signing time: Mon 30 Jun 2025 15:00:22 +0000 ROA not before: Mon 30 Jun 2025 15:00:22 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 7575 IP address blocks: 138.44.0.0/16 maxlen: 24 160.250.178.0/23 maxlen: 24 192.203.235.0/24 maxlen: 24 192.207.33.0/24 maxlen: 24 192.207.113.0/24 maxlen: 24 192.207.161.0/24 maxlen: 24 192.231.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 14:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10777 (0x2a19) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF19E, serialNumber=9E1F19A7E18D8BCED23EF2EDAB19E85438E7F08A Validity Not Before: Jun 30 15:00:22 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6862a685-1bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8d:b1:7f:7b:86:31:cf:aa:37:4d:4c:39:08: c4:55:a6:26:26:f2:90:3b:19:d3:42:15:fb:b0:55: 39:3b:f0:39:65:9c:45:73:01:b8:d3:31:ba:7a:de: b4:cd:04:37:36:7d:1a:49:85:70:93:40:8b:f8:6c: e4:74:1a:d5:84:7f:3a:f8:96:f2:23:18:0b:d0:cf: d1:c9:e0:39:20:b1:bc:32:57:d9:dd:f9:de:89:42: 01:bd:51:9a:07:d0:50:1e:db:b8:f0:76:f1:4c:cd: f4:76:8b:d4:2a:5a:22:c2:2a:7a:4a:33:27:94:e3: e8:d4:b7:6b:e2:92:8f:db:41:a8:14:63:7e:83:e9: 66:f1:fc:09:55:d8:a5:74:b2:46:f2:ac:f6:b6:6d: 7f:5c:14:d5:5b:ae:f7:69:dc:64:0b:fb:7f:ce:c7: e6:32:a1:c0:10:9d:58:4b:62:e5:9a:8a:96:93:7f: 00:e4:23:76:3d:a2:68:4b:3c:50:83:ca:7b:d0:78: dd:51:64:17:67:c1:55:e3:3c:ba:cf:80:fc:a4:48: d0:29:02:7b:27:e6:8e:19:f5:27:06:6b:ac:11:be: f0:2e:b3:e6:21:c6:db:df:d9:88:75:2b:e9:55:22: 77:64:39:b2:0d:d7:20:52:41:2e:34:a2:fe:f2:2e: d8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:D1:9B:49:72:5A:CD:5F:C7:20:19:F4:D4:9C:D4:C1:F9:C8:1F:F9 X509v3 Authority Key Identifier: keyid:9E:1F:19:A7:E1:8D:8B:CE:D2:3E:F2:ED:AB:19:E8:54:38:E7:F0:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/nh8Zp-GNi87SPvLtqxnoVDjn8Io.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nh8Zp-GNi87SPvLtqxnoVDjn8Io.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF19E/A93E993E340D11E49EC98163C4F9AE02/F9722F8255C411E9A0FEF781C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 138.44.0.0/16 160.250.178.0/23 192.203.235.0/24 192.207.33.0/24 192.207.113.0/24 192.207.161.0/24 192.231.212.0/24 Signature Algorithm: sha256WithRSAEncryption 53:6c:fa:c4:08:bb:c4:77:6e:59:96:3a:38:63:88:56:27:17: 32:2e:50:ea:91:e2:cb:40:95:22:5a:f7:f6:02:8b:c1:7b:a9: 65:08:a4:c5:11:1a:a4:66:8c:f0:32:a2:42:3a:11:46:33:2e: b9:9f:66:94:05:18:f2:dd:69:77:40:ea:00:f5:b6:c1:91:bd: fe:90:17:6c:f7:4a:20:ca:6e:19:7b:ee:f2:65:32:d9:80:df: ce:7c:1b:ab:8d:d9:a4:c6:3e:f0:40:ce:16:a2:30:a8:bf:32: 45:34:c3:52:62:85:68:bd:ea:0f:27:03:4d:a1:ca:8d:71:f5: bd:72:78:5c:fa:06:24:8c:38:8c:39:40:d4:47:61:b5:22:79: cf:1c:a8:08:88:b4:fe:ed:b6:ce:23:04:4d:b6:a0:74:a6:45: 29:a7:e2:29:e8:53:c8:e8:46:04:ba:bf:bb:3d:4d:c9:50:dc: 58:df:db:57:a8:17:19:71:75:57:39:f2:9c:2e:33:7c:3b:e0: 57:ad:2b:25:c4:d1:f9:66:fe:88:5d:9b:11:2c:7f:e0:b1:6a: 8e:34:6f:5a:50:f6:8f:79:0a:58:59:bb:1d:16:b9:e6:68:65: 9a:ec:56:fc:a1:4e:fb:62:0e:f2:39:f1:2b:0c:52:f5:16:67: 75:48:b5:aa -----BEGIN CERTIFICATE----- MIIFlDCCBHygAwIBAgICKhkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUYxOUUxMTAvBgNVBAUTKDlFMUYxOUE3RTE4RDhCQ0VEMjNFRjJFREFCMTlFODU0 MzhFN0YwOEEwHhcNMjUwNjMwMTUwMDIyWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYyYTY4NS0xYmI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyY2xf3uGMc+qN01MOQjEVaYmJvKQOxnTQhX7sFU5O/A5ZZxFcwG40zG6et60 zQQ3Nn0aSYVwk0CL+GzkdBrVhH86+JbyIxgL0M/RyeA5ILG8MlfZ3fneiUIBvVGa B9BQHtu48HbxTM30dovUKloiwip6SjMnlOPo1Ldr4pKP20GoFGN+g+lm8fwJVdil dLJG8qz2tm1/XBTVW673adxkC/t/zsfmMqHAEJ1YS2LlmoqWk38A5CN2PaJoSzxQ g8p70HjdUWQXZ8FV4zy6z4D8pEjQKQJ7J+aOGfUnBmusEb7wLrPmIcbb39mIdSvp VSJ3ZDmyDdcgUkEuNKL+8i7YmQIDAQABo4ICuDCCArQwHQYDVR0OBBYEFDDRm0ly Ws1fxyAZ9NSc1MH5yB/5MB8GA1UdIwQYMBaAFJ4fGafhjYvO0j7y7asZ6FQ45/CK MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjE5RS9BOTNFOTkzRTM0 MEQxMUU0OUVDOTgxNjNDNEY5QUUwMi9uaDhacC1HTmk4N1NQdkx0cXhub1ZEam44 SW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL25oOFpwLUdOaTg3U1B2THRxeG5vVkRqbjhJby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUYxOUUvQTkzRTk5M0UzNDBEMTFFNDlFQzk4MTYzQzRGOUFFMDIvRjk3MjJGODI1 NUM0MTFFOUEwRkVGNzgxQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQgYIKwYBBQUHAQcBAf8E MzAxMC8EAgABMCkDAwCKLAMEAaD6sgMEAMDL6wMEAMDPIQMEAMDPcQMEAMDPoQME AMDn1DANBgkqhkiG9w0BAQsFAAOCAQEAU2z6xAi7xHduWZY6OGOIVicXMi5Q6pHi y0CVIlr39gKLwXupZQikxREapGaM8DKiQjoRRjMuuZ9mlAUY8t1pd0DqAPW2wZG9 /pAXbPdKIMpuGXvu8mUy2YDfznwbq43ZpMY+8EDOFqIwqL8yRTTDUmKFaL3qDycD TaHKjXH1vXJ4XPoGJIw4jDlA1EdhtSJ5zxyoCIi0/u22ziMETbagdKZFKafiKehT yOhGBLq/uz1NyVDcWN/bV6gXGXF1VznynC4zfDvgV60rJcTR+Wb+iF2bESx/4LFq jjRvWlD2j3kKWFm7HRa55mhlmuxW/KFO+2IO8jnxKwxS9RZndUi1qg== -----END CERTIFICATE-----Generated at Wed Jul 2 23:30:00 2025 by rpki-client