$ rpki-client -vvf rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/2C3D8AAA50B511F09288303CC4F9AE02.roa File: 2C3D8AAA50B511F09288303CC4F9AE02.roa (raw, json) Hash identifier: BRO70xst4iX7U+BsAkMQkxP1DSIFJqspyvz/A47AIrw= Subject key identifier: 72:4D:F7:1D:06:87:6D:FE:79:93:0E:77:EB:4F:C3:C1:C2:64:F4:67 Certificate issuer: /CN=A91389E7/serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9 Certificate serial: 08 Authority key identifier: 05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/2C3D8AAA50B511F09288303CC4F9AE02.roa Signing time: Tue 24 Jun 2025 04:39:11 +0000 ROA not before: Tue 24 Jun 2025 04:39:11 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 153975 IP address blocks: 165.101.20.0/24 maxlen: 24 165.101.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:33:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8 (0x8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91389E7, serialNumber=05897E735E34E8F6587554A9AF3734082CE289D9 Validity Not Before: Jun 24 04:39:11 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=685a2bef-5dd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:76:ee:39:30:40:71:a6:c8:f7:3d:57:d8:69: 81:31:dd:ba:5f:4b:6f:40:38:cf:81:69:48:09:84: e9:85:1d:7f:42:cd:78:1c:fe:a4:01:c9:b8:6a:a4: 4e:a4:a0:16:f1:0e:64:19:df:62:bd:33:aa:76:35: 17:ba:d4:11:91:a9:e6:5a:19:0f:6c:bf:c7:f1:01: 5c:b2:88:06:6e:33:a7:a5:09:18:27:e1:4a:23:b3: 87:d8:c7:34:de:99:30:1d:56:43:d7:97:75:fc:c7: a7:c8:b0:fb:bc:ca:f2:e4:54:89:33:5f:c3:fe:81: 0f:74:b4:20:ee:16:47:d9:78:f7:b2:70:10:1d:7c: 11:de:a4:74:29:c2:33:43:84:23:c8:21:66:fb:13: f5:8b:c2:17:ee:43:46:63:21:73:91:0f:f0:7b:95: 97:ac:21:19:f3:15:14:31:36:34:ad:53:d2:b0:91: 2a:0b:1c:9b:40:26:06:62:81:9a:76:70:8e:4d:db: 70:9f:26:ba:ef:15:02:a0:17:72:76:16:e1:d1:6d: ad:fd:3f:c1:5b:70:81:d6:42:cf:4e:f1:6a:ee:18: 9d:bb:a0:86:ae:36:66:72:9e:bb:c6:7f:44:37:be: 24:a9:f7:3e:54:a7:b9:d3:a6:eb:b1:a4:45:9c:99: 4b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:4D:F7:1D:06:87:6D:FE:79:93:0E:77:EB:4F:C3:C1:C2:64:F4:67 X509v3 Authority Key Identifier: keyid:05:89:7E:73:5E:34:E8:F6:58:75:54:A9:AF:37:34:08:2C:E2:89:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/BYl-c1406PZYdVSprzc0CCziidk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/BYl-c1406PZYdVSprzc0CCziidk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91389E7/99D28C9C4C0911F09F38B628C4F9AE02/2C3D8AAA50B511F09288303CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.20.0/23 Signature Algorithm: sha256WithRSAEncryption 49:ef:aa:a1:7b:b8:89:af:61:5a:91:e6:3b:9e:cc:0c:9d:4b: 69:00:4d:ec:23:73:d8:8d:3d:b7:84:f0:a9:72:bc:81:45:47: 7f:b0:0e:4d:b7:d5:f7:66:f2:1e:fa:33:ba:43:c1:47:c5:aa: b8:12:72:ba:6a:f1:9e:93:e7:03:17:79:2b:c0:0c:dd:88:bb: a6:fc:ed:2b:2b:2c:a2:1d:83:eb:8a:ff:69:72:b5:d4:e8:24: e8:12:f7:03:4b:d1:8c:44:0c:8a:97:c9:63:b5:cc:7f:aa:e6: 10:0e:68:f6:a2:28:47:b7:e2:ce:97:78:4e:76:7f:23:42:79: 61:15:d6:05:bb:b1:f8:fe:7b:c6:a5:55:f0:b7:e8:a8:61:8f: 3e:dc:c5:fe:4e:d0:9f:ea:3e:65:57:31:18:39:56:74:d7:37: 0c:3c:44:37:13:6e:f4:b2:e8:32:f7:83:27:db:c9:bc:32:83: a3:61:9b:ea:82:5e:47:71:bb:d3:0a:d3:c3:13:61:a0:17:30: 89:87:85:ea:2b:af:9e:d2:d7:db:06:b4:67:d2:ff:66:30:03: 37:6c:b4:5c:00:73:82:5b:4f:f6:3a:00:a1:f3:4f:52:4e:03: b0:64:dd:4c:4a:09:8a:72:e3:27:3d:f9:e4:f2:f7:6d:03:7c: 02:a0:00:d6 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEz ODlFNzExMC8GA1UEBRMoMDU4OTdFNzM1RTM0RThGNjU4NzU1NEE5QUYzNzM0MDgy Q0UyODlEOTAeFw0yNTA2MjQwNDM5MTFaFw0yNjA5MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NWEyYmVmLTVkZDYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDHdu45MEBxpsj3PVfYaYEx3bpfS29AOM+BaUgJhOmFHX9CzXgc/qQBybhqpE6k oBbxDmQZ32K9M6p2NRe61BGRqeZaGQ9sv8fxAVyyiAZuM6elCRgn4Uojs4fYxzTe mTAdVkPXl3X8x6fIsPu8yvLkVIkzX8P+gQ90tCDuFkfZePeycBAdfBHepHQpwjND hCPIIWb7E/WLwhfuQ0ZjIXORD/B7lZesIRnzFRQxNjStU9KwkSoLHJtAJgZigZp2 cI5N23CfJrrvFQKgF3J2FuHRba39P8FbcIHWQs9O8WruGJ27oIauNmZynrvGf0Q3 viSp9z5Up7nTpuuxpEWcmUtBAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUck33HQaH bf55kw5360/DwcJk9GcwHwYDVR0jBBgwFoAUBYl+c1406PZYdVSprzc0CCziidkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTM4OUU3Lzk5RDI4QzlDNEMw OTExRjA5RjM4QjYyOEM0RjlBRTAyL0JZbC1jMTQwNlBaWWRWU3ByemMwQ0N6aWlk ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvQllsLWMxNDA2UFpZZFZTcHJ6YzBDQ3ppaWRrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz ODlFNy85OUQyOEM5QzRDMDkxMUYwOUYzOEI2MjhDNEY5QUUwMi8yQzNEOEFBQTUw QjUxMUYwOTI4ODMwM0NDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVlFDANBgkqhkiG9w0BAQsFAAOCAQEASe+qoXu4ia9hWpHm O57MDJ1LaQBN7CNz2I09t4TwqXK8gUVHf7AOTbfV92byHvozukPBR8WquBJyumrx npPnAxd5K8AM3Yi7pvztKyssoh2D64r/aXK11Ogk6BL3A0vRjEQMipfJY7XMf6rm EA5o9qIoR7fizpd4TnZ/I0J5YRXWBbux+P57xqVV8LfoqGGPPtzF/k7Qn+o+ZVcx GDlWdNc3DDxENxNu9LLoMveDJ9vJvDKDo2Gb6oJeR3G70wrTwxNhoBcwiYeF6iuv ntLX2wa0Z9L/ZjADN2y0XABzgltP9joAofNPUk4DsGTdTEoJinLjJz355PL3bQN8 AqAA1g== -----END CERTIFICATE-----Generated at Wed Nov 5 20:26:43 2025 by rpki-client