$ rpki-client -vvf rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/B1291960691911F08409AD61C4F9AE02.roa File: B1291960691911F08409AD61C4F9AE02.roa (raw, json) Hash identifier: hkVZ9bulChZT+JRQzeQV5xMH0Uf7jpvzU5/VZfM7gPQ= Subject key identifier: 8F:EB:1C:23:36:FA:5E:78:CB:B1:06:41:24:92:C7:EA:A3:C3:E3:31 Certificate issuer: /CN=A918A2D9/serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A Certificate serial: 02 Authority key identifier: A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/B1291960691911F08409AD61C4F9AE02.roa Signing time: Fri 25 Jul 2025 05:39:12 +0000 ROA not before: Fri 25 Jul 2025 05:39:12 +0000 ROA not after: Sat 31 Oct 2026 00:00:00 +0000 asID: 154083 IP address blocks: 165.101.254.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 08:25:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918A2D9, serialNumber=A5AAEFA76153534CBB0EB64B68C429F5DC7F9E0A Validity Not Before: Jul 25 05:39:12 2025 GMT Not After : Oct 31 00:00:00 2026 GMT Subject: CN=6883187f-353f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:35:7f:0e:bf:c6:80:45:4a:ff:58:01:19:49: d4:1d:3f:e7:10:f4:1f:f3:8d:fd:3f:4f:65:e8:d1: 87:f3:ec:b4:f7:88:66:0d:6d:02:ac:49:62:d7:56: 7c:c9:69:dd:46:e7:28:e8:cd:95:79:14:b5:fb:2d: 2f:95:53:3e:9d:ab:68:3a:3e:0f:2a:3a:c9:fc:4c: 44:41:bc:83:de:f3:86:36:a1:d4:07:f4:3e:88:c4: 8d:b2:a5:a7:c7:c5:b2:5b:9c:a4:64:24:75:1b:f6: 1e:0f:52:d1:97:d1:8f:7d:24:49:37:9a:cf:30:76: 9f:13:b6:dc:eb:5e:71:b7:9c:7e:88:b4:1a:f2:00: 0c:bd:ac:6f:b8:eb:91:d0:11:ac:a6:41:a6:fd:0d: 88:a8:c9:ae:e2:51:7e:24:6f:ab:68:c9:97:0f:f7: 5d:3e:76:f8:c8:25:51:7d:a2:df:a8:b6:2c:97:6f: b6:bd:e3:d3:0e:4b:2d:99:ab:d2:5f:8e:9a:0d:61: f7:bc:34:c0:24:74:61:53:d6:28:77:26:6c:58:a0: 46:1a:b2:e3:07:1a:ab:6e:ca:40:81:38:59:ff:87: 2d:9a:5d:9a:18:4e:0d:e2:17:cd:19:e1:10:1b:cd: 2b:53:fb:41:8a:65:04:c5:56:2c:c6:90:d3:b7:40: 07:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:EB:1C:23:36:FA:5E:78:CB:B1:06:41:24:92:C7:EA:A3:C3:E3:31 X509v3 Authority Key Identifier: keyid:A5:AA:EF:A7:61:53:53:4C:BB:0E:B6:4B:68:C4:29:F5:DC:7F:9E:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/parvp2FTU0y7DrZLaMQp9dx_ngo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/parvp2FTU0y7DrZLaMQp9dx_ngo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918A2D9/E9E1474C691811F0A10F8B5FC4F9AE02/B1291960691911F08409AD61C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.101.254.0/23 Signature Algorithm: sha256WithRSAEncryption 33:d9:de:f8:4e:23:14:00:62:55:4e:8e:3e:37:56:6a:bb:6d: e8:20:06:f9:b8:06:97:f1:98:40:37:c3:f9:0c:72:54:bb:33: 71:9e:8b:76:24:3b:52:23:a9:d5:17:c5:72:b2:d0:42:a1:35: bb:07:fe:ec:39:12:04:cd:c8:a5:94:a5:d0:4e:41:a4:da:ad: a5:5e:22:0b:64:03:7a:a1:98:f6:ec:75:69:93:d1:8a:d6:61: b0:1e:f8:8b:48:76:e0:59:d1:96:4f:e6:cd:36:63:0e:66:55: 4f:e1:83:24:25:64:d6:55:24:81:67:0e:75:06:04:79:53:83: bf:d2:41:9c:6d:45:5b:a1:28:c6:b8:d6:c5:a8:08:36:ae:3a: d9:a3:08:71:b9:a1:16:b2:65:1a:77:42:cc:ab:d8:fd:83:06: 4c:59:fe:f5:b3:cc:b1:24:c7:67:b2:2a:f0:b0:6e:50:ad:bb: 83:81:33:e0:fb:b3:50:54:ce:83:c5:f5:d0:76:c0:61:6e:f7: 32:01:d4:56:bd:aa:eb:e0:47:20:c7:5f:cc:5e:b9:0d:4d:d1: 56:37:54:73:d5:23:bf:9d:0a:9f:13:53:d3:6c:f9:c7:9b:52: 9f:b8:6d:a5:f5:2e:28:1b:da:a7:6a:bd:9a:38:53:91:3c:7f: bc:b0:df:4b -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE4 QTJEOTExMC8GA1UEBRMoQTVBQUVGQTc2MTUzNTM0Q0JCMEVCNjRCNjhDNDI5RjVE QzdGOUUwQTAeFw0yNTA3MjUwNTM5MTJaFw0yNjEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ODMxODdmLTM1M2YwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC+NX8Ov8aARUr/WAEZSdQdP+cQ9B/zjf0/T2Xo0Yfz7LT3iGYNbQKsSWLXVnzJ ad1G5yjozZV5FLX7LS+VUz6dq2g6Pg8qOsn8TERBvIPe84Y2odQH9D6IxI2ypafH xbJbnKRkJHUb9h4PUtGX0Y99JEk3ms8wdp8TttzrXnG3nH6ItBryAAy9rG+465HQ EaymQab9DYioya7iUX4kb6toyZcP910+dvjIJVF9ot+otiyXb7a949MOSy2Zq9Jf jpoNYfe8NMAkdGFT1ih3JmxYoEYasuMHGqtuykCBOFn/hy2aXZoYTg3iF80Z4RAb zStT+0GKZQTFVizGkNO3QAfVAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUj+scIzb6 XnjLsQZBJJLH6qPD4zEwHwYDVR0jBBgwFoAUparvp2FTU0y7DrZLaMQp9dx/ngow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MThBMkQ5L0U5RTE0NzRDNjkx ODExRjBBMTBGOEI1RkM0RjlBRTAyL3BhcnZwMkZUVTB5N0RyWkxhTVFwOWR4X25n by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvcGFydnAyRlRVMHk3RHJaTGFNUXA5ZHhfbmdvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 QTJEOS9FOUUxNDc0QzY5MTgxMUYwQTEwRjhCNUZDNEY5QUUwMi9CMTI5MTk2MDY5 MTkxMUYwODQwOUFENjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVl/jANBgkqhkiG9w0BAQsFAAOCAQEAM9ne+E4jFABiVU6O PjdWartt6CAG+bgGl/GYQDfD+QxyVLszcZ6LdiQ7UiOp1RfFcrLQQqE1uwf+7DkS BM3IpZSl0E5BpNqtpV4iC2QDeqGY9ux1aZPRitZhsB74i0h24FnRlk/mzTZjDmZV T+GDJCVk1lUkgWcOdQYEeVODv9JBnG1FW6EoxrjWxagINq462aMIcbmhFrJlGndC zKvY/YMGTFn+9bPMsSTHZ7Iq8LBuUK27g4Ez4PuzUFTOg8X10HbAYW73MgHUVr2q 6+BHIMdfzF65DU3RVjdUc9Ujv50KnxNT02z5x5tSn7htpfUuKBvap2q9mjhTkTx/ vLDfSw== -----END CERTIFICATE-----Generated at Tue Aug 12 18:54:25 2025 by rpki-client