$ rpki-client -vvf rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/CD603AAA6B2B11F0B21D7F0EC4F9AE02.roa File: CD603AAA6B2B11F0B21D7F0EC4F9AE02.roa (raw, json) Hash identifier: I4V72owrg5qiCod5LgKXA3su1gxxiAdnYcB+BZWhJ8o= Subject key identifier: 2B:3D:83:8D:12:E5:3B:92:5D:44:37:55:B9:0D:40:97:B9:75:16:55 Certificate issuer: /CN=A91425C3/serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Certificate serial: 09 Authority key identifier: 9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/CD603AAA6B2B11F0B21D7F0EC4F9AE02.roa Signing time: Sun 27 Jul 2025 20:54:43 +0000 ROA not before: Sun 27 Jul 2025 20:54:43 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154071 IP address blocks: 165.101.238.0/24 maxlen: 24 165.101.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91425C3, serialNumber=9EBDA123D9EE83094305A1180C2A08057FE5406A Validity Not Before: Jul 27 20:54:43 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=68869213-65e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:70:80:94:42:ff:a3:5a:26:cc:c5:56:0f:ea: 69:8a:1b:85:19:b7:46:6a:c4:b3:75:b8:79:e2:8b: ea:61:c7:ba:ea:d0:17:61:6a:34:73:e7:54:74:fe: 15:4e:7d:97:84:30:cb:a8:1c:e6:c7:6d:58:04:07: 03:7e:e9:a1:06:5b:17:73:8c:27:59:85:bf:90:17: d5:a7:e9:c5:f6:bc:cf:e5:70:2f:54:32:0b:e9:76: ab:7f:45:7d:6b:dd:0a:64:13:ba:74:60:af:18:4b: 75:9f:06:dd:b9:06:13:ca:47:25:e5:28:0e:aa:e3: 2d:71:74:2b:1d:29:ae:83:4a:e5:62:96:6a:49:24: 1e:40:8f:a6:e6:9b:44:2c:76:4c:f8:69:1f:f3:6f: 82:53:cb:37:8b:6f:96:f6:3c:d1:54:7e:f7:bb:43: ca:50:ea:c9:ac:16:de:70:a3:a6:0a:40:47:bc:de: 18:95:2c:33:ae:61:5d:b0:01:b7:86:94:80:da:13: 33:e2:a2:64:b6:7e:be:62:10:bd:a8:fe:48:8c:d8: ec:81:25:ff:78:ba:c2:16:3f:c4:2b:fd:0e:cd:e9: a2:34:21:19:49:14:df:36:4f:41:99:d0:d2:52:45: 06:0e:ae:c0:22:32:c0:83:75:e3:63:52:88:49:b0: 29:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3D:83:8D:12:E5:3B:92:5D:44:37:55:B9:0D:40:97:B9:75:16:55 X509v3 Authority Key Identifier: keyid:9E:BD:A1:23:D9:EE:83:09:43:05:A1:18:0C:2A:08:05:7F:E5:40:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/nr2hI9nugwlDBaEYDCoIBX_lQGo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/nr2hI9nugwlDBaEYDCoIBX_lQGo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91425C3/2326C63E660411F0A4C5192BC4F9AE02/CD603AAA6B2B11F0B21D7F0EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.238.0/23 Signature Algorithm: sha256WithRSAEncryption 34:a6:84:a2:ec:17:59:59:74:15:b0:cc:37:b8:02:81:de:9c: f5:73:4e:f7:e6:24:3a:87:9d:1d:45:e2:23:1c:5d:0b:59:fb: db:97:9e:bc:59:32:6c:45:26:77:c6:37:1b:54:fd:a8:61:c1: 24:7f:20:6d:fc:e8:a3:36:f2:b3:6c:6d:cb:cb:f6:65:ee:51: 1c:d2:af:f3:eb:ec:2a:f0:d0:a8:fb:de:a2:42:a4:16:22:f8: 49:ae:0e:48:e2:39:e0:94:28:dc:67:2a:08:b9:3c:3d:dd:04: e9:5a:f8:81:79:9e:17:96:86:5b:30:c4:6d:26:07:9a:df:89: d4:c4:0d:63:d3:19:98:92:68:c4:f3:87:5f:40:20:8f:e3:2f: b5:85:8e:06:4f:5d:5f:8e:8e:b1:b4:ab:cc:3c:9c:35:82:fe: ed:21:ad:e9:80:e0:95:f0:a7:38:fb:86:d7:b7:a6:84:78:59: 20:77:dc:0f:eb:ed:93:c9:cf:c0:a2:04:05:f3:ae:17:0e:21: 2a:6b:ca:9a:4f:0b:db:c8:ce:02:10:28:d2:00:bc:0b:76:1f: 21:08:04:0d:cf:d7:7b:4e:82:85:8c:0f:35:c9:d2:04:b8:55: b8:8f:e6:b3:81:ca:22:d9:15:14:33:5b:22:88:70:a4:55:c6: 4c:c2:e2:8f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0 MjVDMzExMC8GA1UEBRMoOUVCREExMjNEOUVFODMwOTQzMDVBMTE4MEMyQTA4MDU3 RkU1NDA2QTAeFw0yNTA3MjcyMDU0NDNaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ODY5MjEzLTY1ZTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDfcICUQv+jWibMxVYP6mmKG4UZt0ZqxLN1uHnii+phx7rq0BdhajRz51R0/hVO fZeEMMuoHObHbVgEBwN+6aEGWxdzjCdZhb+QF9Wn6cX2vM/lcC9UMgvpdqt/RX1r 3QpkE7p0YK8YS3WfBt25BhPKRyXlKA6q4y1xdCsdKa6DSuVilmpJJB5Aj6bmm0Qs dkz4aR/zb4JTyzeLb5b2PNFUfve7Q8pQ6smsFt5wo6YKQEe83hiVLDOuYV2wAbeG lIDaEzPiomS2fr5iEL2o/kiM2OyBJf94usIWP8Qr/Q7N6aI0IRlJFN82T0GZ0NJS RQYOrsAiMsCDdeNjUohJsClNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUKz2DjRLl O5JdRDdVuQ1Al7l1FlUwHwYDVR0jBBgwFoAUnr2hI9nugwlDBaEYDCoIBX/lQGow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTQyNUMzLzIzMjZDNjNFNjYw NDExRjBBNEM1MTkyQkM0RjlBRTAyL25yMmhJOW51Z3dsREJhRVlEQ29JQlhfbFFH by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbnIyaEk5bnVnd2xEQmFFWURDb0lCWF9sUUdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0 MjVDMy8yMzI2QzYzRTY2MDQxMUYwQTRDNTE5MkJDNEY5QUUwMi9DRDYwM0FBQTZC MkIxMUYwQjIxRDdGMEVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVl7jANBgkqhkiG9w0BAQsFAAOCAQEANKaEouwXWVl0FbDM N7gCgd6c9XNO9+YkOoedHUXiIxxdC1n725eevFkybEUmd8Y3G1T9qGHBJH8gbfzo ozbys2xty8v2Ze5RHNKv8+vsKvDQqPveokKkFiL4Sa4OSOI54JQo3GcqCLk8Pd0E 6Vr4gXmeF5aGWzDEbSYHmt+J1MQNY9MZmJJoxPOHX0Agj+MvtYWOBk9dX46OsbSr zDycNYL+7SGt6YDglfCnOPuG17emhHhZIHfcD+vtk8nPwKIEBfOuFw4hKmvKmk8L 28jOAhAo0gC8C3YfIQgEDc/Xe06ChYwPNcnSBLhVuI/ms4HKItkVFDNbIohwpFXG TMLijw== -----END CERTIFICATE-----Generated at Sun Aug 10 18:21:27 2025 by rpki-client