$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/EED3285ADDB011EE9A15F138C4F9AE02.roa File: EED3285ADDB011EE9A15F138C4F9AE02.roa (raw, json) Hash identifier: qNj7M1i/V9XB0llPeuAlifU5J05d9lioUv9BePfc9qA= Subject key identifier: 77:9C:4A:73:9F:15:40:36:0A:C1:69:1F:14:8F:37:89:8B:B2:FF:93 Certificate issuer: /CN=A91A560A/serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Certificate serial: 05E8 Authority key identifier: 8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/EED3285ADDB011EE9A15F138C4F9AE02.roa Signing time: Tue 27 May 2025 03:32:24 +0000 ROA not before: Tue 27 May 2025 03:32:24 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135983 IP address blocks: 157.15.86.0/23 maxlen: 23 157.66.80.0/23 maxlen: 24 160.187.240.0/23 maxlen: 24 165.99.16.0/23 maxlen: 24 165.99.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Jun 2025 10:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1512 (0x5e8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=8AC721298F92E10A2EE3051AFBC9114284F80E12 Validity Not Before: May 27 03:32:24 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68353247-2922 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d4:58:09:7f:cf:e2:ac:0f:d3:8e:5f:f0:ec: a9:42:08:f1:e9:60:7d:e2:aa:77:59:66:50:81:76: 2d:8e:33:b4:bf:d5:18:7e:e9:81:99:d4:bf:f0:10: a3:37:b1:ab:04:a7:78:0c:a2:ca:fd:ad:0e:99:f8: 46:85:22:d3:ca:66:bd:37:44:02:24:19:1d:0d:d7: f4:59:6f:98:16:87:3d:05:27:d3:4e:bc:fe:51:67: d3:61:39:4b:11:f7:52:65:62:08:82:12:da:56:33: 43:11:d2:88:5f:4f:35:24:ca:7d:92:88:23:19:6d: 03:93:66:cf:5b:69:a0:07:4c:10:02:17:4e:8c:6e: 06:e1:46:c8:9f:de:62:e9:5b:f5:f8:20:61:19:0f: 0d:32:aa:7f:9b:ff:13:3f:37:61:a9:5f:c6:ef:59: 84:6a:2d:80:2b:fe:90:58:2e:c3:13:d5:75:6a:fa: 17:97:84:07:41:7d:9a:ac:f1:2d:39:a3:c2:97:3b: d7:98:52:09:d7:92:17:ed:a7:0f:b5:81:a2:6f:cd: ce:9f:03:a7:f6:3b:a8:96:a5:6a:2b:85:70:fd:ea: 40:be:9e:bb:d4:7e:29:9c:12:33:05:e2:3d:87:ae: 34:89:a1:91:26:87:d0:ca:8f:04:c6:d8:e5:45:9e: 44:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:9C:4A:73:9F:15:40:36:0A:C1:69:1F:14:8F:37:89:8B:B2:FF:93 X509v3 Authority Key Identifier: keyid:8A:C7:21:29:8F:92:E1:0A:2E:E3:05:1A:FB:C9:11:42:84:F8:0E:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/ischKY-S4Qou4wUa-8kRQoT4DhI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ischKY-S4Qou4wUa-8kRQoT4DhI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/20958618A9DF11EEA356A43EC4F9AE02/EED3285ADDB011EE9A15F138C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 157.15.86.0/23 157.66.80.0/23 160.187.240.0/23 165.99.16.0/23 165.99.96.0/23 Signature Algorithm: sha256WithRSAEncryption 70:a5:df:c7:f6:e1:96:57:77:76:23:84:cc:77:2b:62:07:b5: 7d:2f:e6:7c:af:5b:30:28:ab:18:1e:f3:0b:3e:58:0e:6a:ad: a5:a4:bb:0a:58:5c:39:d5:42:a7:d3:17:5d:60:1b:5b:3e:b0: 1a:4e:99:f4:03:0f:12:85:6f:a5:e6:ff:63:e9:3c:8c:3d:8b: e0:4a:5a:36:67:d8:50:95:d2:5f:81:f8:16:4f:d6:4c:96:3b: b0:3c:d1:a5:91:5e:5e:9a:24:0f:84:f1:b4:fe:19:f3:95:cb: 0d:22:5a:0c:a3:4c:b4:9d:17:49:95:5c:f0:99:e9:11:b4:a2: 4a:db:bb:93:36:e9:71:f3:5e:49:a1:a2:70:56:9a:66:ab:47: 7c:15:ff:d4:7f:63:1d:45:b0:04:c1:26:78:1f:b2:f4:7d:de: 0e:59:fb:d6:b0:6f:48:1f:56:35:24:9c:4d:d7:8c:5e:05:ff: c6:5e:b7:92:55:06:14:4f:0b:5f:f0:f7:c4:fe:87:d4:f5:92: 22:fe:0b:65:e7:6f:1c:08:66:78:e5:38:b1:35:de:04:56:59: f9:97:07:2b:1d:48:7e:48:02:34:82:70:78:1f:57:39:60:eb: d3:04:dd:7f:9c:37:cf:6b:5d:0f:2c:c0:cf:d6:17:2d:25:21: 35:8e:5c:f9 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBegwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDhBQzcyMTI5OEY5MkUxMEEyRUUzMDUxQUZCQzkxMTQy ODRGODBFMTIwHhcNMjUwNTI3MDMzMjI0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM1MzI0Ny0yOTIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw9RYCX/P4qwP045f8OypQgjx6WB94qp3WWZQgXYtjjO0v9UYfumBmdS/8BCj N7GrBKd4DKLK/a0OmfhGhSLTyma9N0QCJBkdDdf0WW+YFoc9BSfTTrz+UWfTYTlL EfdSZWIIghLaVjNDEdKIX081JMp9kogjGW0Dk2bPW2mgB0wQAhdOjG4G4UbIn95i 6Vv1+CBhGQ8NMqp/m/8TPzdhqV/G71mEai2AK/6QWC7DE9V1avoXl4QHQX2arPEt OaPClzvXmFIJ15IX7acPtYGib83OnwOn9juolqVqK4Vw/epAvp671H4pnBIzBeI9 h640iaGRJofQyo8ExtjlRZ5EVQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFHecSnOf FUA2CsFpHxSPN4mLsv+TMB8GA1UdIwQYMBaAFIrHISmPkuEKLuMFGvvJEUKE+A4S MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS8yMDk1ODYxOEE5 REYxMUVFQTM1NkE0M0VDNEY5QUUwMi9pc2NoS1ktUzRRb3U0d1VhLThrUlFvVDRE aEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2lzY2hLWS1TNFFvdTR3VWEtOGtSUW9UNERoSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvMjA5NTg2MThBOURGMTFFRUEzNTZBNDNFQzRGOUFFMDIvRUVEMzI4NUFE REIwMTFFRTlBMTVGMTM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAGdD1YDBAGdQlADBAGgu/ADBAGlYxADBAGlY2AwDQYJKoZI hvcNAQELBQADggEBAHCl38f24ZZXd3YjhMx3K2IHtX0v5nyvWzAoqxge8ws+WA5q raWkuwpYXDnVQqfTF11gG1s+sBpOmfQDDxKFb6Xm/2PpPIw9i+BKWjZn2FCV0l+B +BZP1kyWO7A80aWRXl6aJA+E8bT+GfOVyw0iWgyjTLSdF0mVXPCZ6RG0okrbu5M2 6XHzXkmhonBWmmarR3wV/9R/Yx1FsATBJngfsvR93g5Z+9awb0gfVjUknE3XjF4F /8Zet5JVBhRPC1/w98T+h9T1kiL+C2XnbxwIZnjlOLE13gRWWfmXBysdSH5IAjSC cHgfVzlg69ME3X+cN89rXQ8swM/WFy0lITWOXPk= -----END CERTIFICATE-----Generated at Thu Jun 19 15:05:09 2025 by rpki-client