$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/35BBCFB005C111EEA3A8584CC4F9AE02.roa File: 35BBCFB005C111EEA3A8584CC4F9AE02.roa (raw, json) Hash identifier: r5pIAbK8kOI15XkP+OMpWTYz9FMauuzr/FnyF6gxDgI= Subject key identifier: B9:63:AC:3E:C5:E5:22:37:03:97:57:34:5F:36:AA:5D:6C:10:7A:31 Certificate issuer: /CN=A91FCABC/serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Certificate serial: 01A0 Authority key identifier: 97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/35BBCFB005C111EEA3A8584CC4F9AE02.roa Signing time: Tue 19 Aug 2025 03:39:11 +0000 ROA not before: Tue 19 Aug 2025 03:39:11 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 18191 IP address blocks: 168.132.0.0/16 maxlen: 17 168.132.121.0/24 maxlen: 24 168.132.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 03:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 416 (0x1a0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FCABC, serialNumber=97CE568F6468256473F84B38B3CE03EA3549EB89 Validity Not Before: Aug 19 03:39:11 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68a3f1df-7097 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d0:5e:0b:24:75:b7:bb:ea:99:cf:31:03:be: 8c:5b:52:97:93:21:64:e0:ed:e7:7d:ed:5d:f8:dc: a9:76:a6:0e:ea:3d:fe:70:3b:33:4a:ea:fd:fc:ab: 00:13:f5:21:85:09:49:85:ec:3e:d2:96:22:a2:c2: 2f:e6:f1:a0:10:90:63:f7:2e:60:a3:16:cb:77:a0: b6:cf:c6:84:f5:bf:63:1f:b6:13:b9:d3:b4:1c:52: a2:bb:36:9f:11:20:5e:ce:a1:a4:04:cd:7d:d4:ec: 44:c7:95:94:6e:70:ca:7f:99:c4:e4:88:09:ff:a9: e4:c2:d3:24:c2:a6:4c:c9:00:1a:35:3f:11:a2:59: 76:35:85:03:22:02:00:3d:8e:98:4a:b3:37:21:a7: a6:83:19:a1:17:24:45:67:71:51:36:a5:9d:6e:87: 75:0b:ef:d3:92:8b:b6:46:9e:f6:e6:4c:9c:0c:9f: 6d:91:03:a0:41:3f:89:d7:fc:4b:19:a8:3c:14:2a: 26:c4:4e:3f:22:57:5b:f9:d2:02:4b:cc:b1:e9:dc: 98:0a:53:67:77:60:2e:f7:48:84:c4:ef:05:ba:fb: 70:61:cd:f4:ec:1f:eb:96:8d:02:6d:5a:41:5d:e3: 95:43:c8:28:b9:ca:f0:8d:14:86:3e:9f:2e:9c:b3: e2:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:63:AC:3E:C5:E5:22:37:03:97:57:34:5F:36:AA:5D:6C:10:7A:31 X509v3 Authority Key Identifier: keyid:97:CE:56:8F:64:68:25:64:73:F8:4B:38:B3:CE:03:EA:35:49:EB:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/l85Wj2RoJWRz-Es4s84D6jVJ64k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/l85Wj2RoJWRz-Es4s84D6jVJ64k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCABC/C551641205B911EEA9130B37C4F9AE02/35BBCFB005C111EEA3A8584CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 168.132.0.0/16 Signature Algorithm: sha256WithRSAEncryption 32:a8:06:85:87:51:8f:62:d0:96:a2:ff:47:43:8c:86:93:bc: 1c:0f:57:84:00:d6:ec:a0:1c:3d:e3:8e:cb:a0:bb:d0:e4:21: ef:63:13:71:ef:e3:02:35:06:ce:56:bb:0c:16:b7:10:7e:14: 09:cc:8e:3d:53:43:1a:d8:c3:58:b0:a7:6f:60:58:38:6f:d3: 08:d1:94:c3:42:5a:48:04:c2:4b:cb:e4:b4:0a:b9:6c:44:3d: 8d:c3:56:d6:84:a5:23:c0:d3:6c:c9:87:30:8f:82:2a:56:af: 4b:d5:a8:46:7b:37:3b:1f:60:f6:54:65:d4:3e:46:bd:cb:fd: 58:18:1b:e3:eb:88:36:2b:36:5f:54:d5:b3:9b:e2:d8:44:23: 62:cd:66:91:84:c2:a8:b6:ce:68:98:9c:24:df:32:70:cd:e2: c2:00:46:2f:01:1a:e3:25:bb:bd:19:55:fd:72:6d:af:25:15: 9f:cc:1b:44:d7:c5:a7:41:4d:98:15:19:4b:92:a9:8c:9a:65: 2e:1e:28:f4:50:94:e6:ec:e3:6f:58:c1:2a:09:5b:ca:c3:a3: 71:8e:6b:7a:98:00:15:f0:f0:8c:b3:f4:02:55:f6:53:f9:5a: a1:67:ea:bb:ce:a6:04:dc:ec:25:c6:85:20:64:b6:24:8d:54: b0:bd:f7:c9 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgICAaAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkNBQkMxMTAvBgNVBAUTKDk3Q0U1NjhGNjQ2ODI1NjQ3M0Y4NEIzOEIzQ0UwM0VB MzU0OUVCODkwHhcNMjUwODE5MDMzOTExWhcNMjYxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGEzZjFkZi03MDk3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq9BeCyR1t7vqmc8xA76MW1KXkyFk4O3nfe1d+NypdqYO6j3+cDszSur9/KsA E/UhhQlJhew+0pYiosIv5vGgEJBj9y5goxbLd6C2z8aE9b9jH7YTudO0HFKiuzaf ESBezqGkBM191OxEx5WUbnDKf5nE5IgJ/6nkwtMkwqZMyQAaNT8Roll2NYUDIgIA PY6YSrM3IaemgxmhFyRFZ3FRNqWdbod1C+/Tkou2Rp725kycDJ9tkQOgQT+J1/xL Gag8FComxE4/Ildb+dICS8yx6dyYClNnd2Au90iExO8FuvtwYc307B/rlo0CbVpB XeOVQ8goucrwjRSGPp8unLPiKQIDAQABo4IClDCCApAwHQYDVR0OBBYEFLljrD7F 5SI3A5dXNF82ql1sEHoxMB8GA1UdIwQYMBaAFJfOVo9kaCVkc/hLOLPOA+o1SeuJ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQ0FCQy9DNTUxNjQxMjA1 QjkxMUVFQTkxMzBCMzdDNEY5QUUwMi9sODVXajJSb0pXUnotRXM0czg0RDZqVko2 NGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2w4NVdqMlJvSldSei1FczRzODRENmpWSjY0ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkNBQkMvQzU1MTY0MTIwNUI5MTFFRUE5MTMwQjM3QzRGOUFFMDIvMzVCQkNGQjAw NUMxMTFFRUEzQTg1ODRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8E DzANMAsEAgABMAUDAwCohDANBgkqhkiG9w0BAQsFAAOCAQEAMqgGhYdRj2LQlqL/ R0OMhpO8HA9XhADW7KAcPeOOy6C70OQh72MTce/jAjUGzla7DBa3EH4UCcyOPVND GtjDWLCnb2BYOG/TCNGUw0JaSATCS8vktAq5bEQ9jcNW1oSlI8DTbMmHMI+CKlav S9WoRns3Ox9g9lRl1D5Gvcv9WBgb4+uINis2X1TVs5vi2EQjYs1mkYTCqLbOaJic JN8ycM3iwgBGLwEa4yW7vRlV/XJtryUVn8wbRNfFp0FNmBUZS5KpjJplLh4o9FCU 5uzjb1jBKglbysOjcY5repgAFfDwjLP0AlX2U/laoWfqu86mBNzsJcaFIGS2JI1U sL33yQ== -----END CERTIFICATE-----Generated at Sat Aug 23 17:07:15 2025 by rpki-client