$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C0944D9067A511F0A26BDB35C4F9AE02.roa File: C0944D9067A511F0A26BDB35C4F9AE02.roa (raw, json) Hash identifier: IxJaQb+zzd1lJvoY6KKkLjp+2uEjzuaNpnlDrVRlqd8= Subject key identifier: BA:94:BC:52:E9:6A:51:DC:80:B6:2B:CE:14:D9:A4:17:B4:03:E5:9B Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 0635 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C0944D9067A511F0A26BDB35C4F9AE02.roa Signing time: Wed 23 Jul 2025 09:16:45 +0000 ROA not before: Wed 23 Jul 2025 09:16:45 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131435 IP address blocks: 148.222.90.0/24 maxlen: 24 148.222.91.0/24 maxlen: 24 148.222.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 19 Aug 2025 14:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1589 (0x635) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: Jul 23 09:16:45 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6880a87c-d7a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7e:a2:7b:b4:95:f3:cf:b3:d1:ee:62:5f:e5: 6e:6d:c6:a1:f1:39:66:c8:df:b9:a0:e2:ec:25:cc: ee:56:a0:33:33:97:a0:cf:46:08:4e:0c:e1:b4:20: a0:76:e2:98:b9:e1:96:2a:ed:fa:3b:3f:f0:70:cf: 5e:b6:d5:a7:54:ff:2d:e2:2d:90:f5:12:65:f2:db: e4:6d:9b:50:44:8b:77:fc:9a:8a:ab:c6:13:63:18: 59:06:d0:40:f5:79:ea:63:80:07:0c:6c:e3:4b:21: 81:13:c5:9d:7c:09:a4:6c:01:e1:c4:7f:c9:b9:e6: 08:ac:6d:af:0e:43:54:9b:33:6b:ab:9e:e6:93:a2: c0:d6:55:48:37:29:af:0f:e4:5b:7a:22:48:71:48: c9:fb:80:04:a7:94:85:9a:20:82:25:3d:39:f2:4e: 7e:26:91:34:57:e2:09:5e:ab:f4:74:ec:15:36:48: ab:79:e3:09:31:58:8a:e3:23:a0:1d:47:4b:f5:4f: 49:a7:85:50:be:34:8c:cb:9f:c5:ad:04:ea:7e:18: 6f:0c:e1:08:d8:51:71:91:bf:98:19:0b:dd:8a:fe: 7d:88:b4:ce:33:e1:f1:cf:cb:4f:ee:ac:71:95:a1: 1f:da:df:65:a1:f1:bb:1c:60:04:b8:c0:16:bc:ee: 0e:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:94:BC:52:E9:6A:51:DC:80:B6:2B:CE:14:D9:A4:17:B4:03:E5:9B X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/C0944D9067A511F0A26BDB35C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 148.222.90.0/23 148.222.95.0/24 Signature Algorithm: sha256WithRSAEncryption 18:5c:43:f5:8e:9d:f8:c1:9a:9e:77:84:6a:c6:07:5f:59:4f: 38:ca:77:a1:ee:49:eb:80:98:41:84:86:91:13:f5:5a:46:ae: 04:fe:a8:ed:64:dc:a2:d4:8c:07:97:96:1a:7f:0d:63:89:e6: 2f:e3:d4:8b:1b:6a:7a:63:cd:6b:b6:cc:92:97:6e:df:61:64: bd:a5:d0:d5:90:99:8c:d1:20:3c:7c:f8:50:a8:fc:47:b7:0b: 65:b2:05:93:ed:1f:a7:ba:3f:a2:44:3e:86:b1:a5:a7:0e:e9: 32:d9:0d:ed:f7:71:33:d1:f9:76:2a:46:37:49:03:a9:16:46: 1a:db:e3:e2:93:72:36:13:ff:fc:05:f1:0d:3f:0b:82:0f:cb: 19:7c:97:a7:2d:04:33:05:4a:10:fc:1d:60:10:a6:8f:be:0b: 86:f1:e4:01:4c:2d:2e:aa:96:76:60:14:ca:9a:94:b0:d8:8f: ef:86:da:10:af:ef:5d:cc:c7:e7:d1:52:c6:cb:46:89:e4:78: 93:bc:42:08:ee:52:77:72:25:b2:82:85:f7:81:94:25:3c:c1: 0a:74:f6:81:cb:a8:be:0f:64:53:a1:f4:7a:a7:35:f3:58:16: 9a:06:bd:b3:f2:ad:6d:cf:af:b1:07:7e:ba:b0:94:38:aa:c5: 2a:ca:3c:dc -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBjUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwNzIzMDkxNjQ1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgwYTg3Yy1kN2E4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvX6ie7SV88+z0e5iX+Vubcah8TlmyN+5oOLsJczuVqAzM5egz0YITgzhtCCg duKYueGWKu36Oz/wcM9ettWnVP8t4i2Q9RJl8tvkbZtQRIt3/JqKq8YTYxhZBtBA 9XnqY4AHDGzjSyGBE8WdfAmkbAHhxH/JueYIrG2vDkNUmzNrq57mk6LA1lVINymv D+RbeiJIcUjJ+4AEp5SFmiCCJT058k5+JpE0V+IJXqv0dOwVNkireeMJMViK4yOg HUdL9U9Jp4VQvjSMy5/FrQTqfhhvDOEI2FFxkb+YGQvdiv59iLTOM+Hxz8tP7qxx laEf2t9lofG7HGAEuMAWvO4O3QIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLqUvFLp alHcgLYrzhTZpBe0A+WbMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvQzA5NDREOTA2 N0E1MTFGMEEyNkJEQjM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAGU3loDBACU3l8wDQYJKoZIhvcNAQELBQADggEBABhcQ/WO nfjBmp53hGrGB19ZTzjKd6HuSeuAmEGEhpET9VpGrgT+qO1k3KLUjAeXlhp/DWOJ 5i/j1IsbanpjzWu2zJKXbt9hZL2l0NWQmYzRIDx8+FCo/Ee3C2WyBZPtH6e6P6JE PoaxpacO6TLZDe33cTPR+XYqRjdJA6kWRhrb4+KTcjYT//wF8Q0/C4IPyxl8l6ct BDMFShD8HWAQpo++C4bx5AFMLS6qlnZgFMqalLDYj++G2hCv713Mx+fRUsbLRonk eJO8QgjuUndyJbKChfeBlCU8wQp09oHLqL4PZFOh9HqnNfNYFpoGvbPyrW3Pr7EH frqwlDiqxSrKPNw= -----END CERTIFICATE-----Generated at Wed Aug 13 04:25:03 2025 by rpki-client