$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/D055AA08480111F098A44B5CC4F9AE02.roa File: D055AA08480111F098A44B5CC4F9AE02.roa (raw, json) Hash identifier: qhyVTwwEqxyTdaMk7ejochFJVyO6XKIlCbt0eSHtSs4= Subject key identifier: B1:24:6F:9B:91:BF:B8:74:07:23:08:0F:BD:21:E4:8E:7D:EA:5E:AC Certificate issuer: /CN=A91A7B36/serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506 Certificate serial: 09 Authority key identifier: 2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/D055AA08480111F098A44B5CC4F9AE02.roa Signing time: Fri 13 Jun 2025 03:02:11 +0000 ROA not before: Fri 13 Jun 2025 03:02:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 153908 IP address blocks: 165.99.114.0/23 maxlen: 23 165.99.114.0/24 maxlen: 24 165.99.115.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Jun 2025 07:06:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9 (0x9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7B36, serialNumber=2D3E3FBBC7C2B12CD534C8B9ED3786FB6AA55506 Validity Not Before: Jun 13 03:02:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=684b94b3-58f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f3:ab:a2:b3:89:bf:0e:7a:40:4b:8a:95:67: f5:f5:3f:22:0e:eb:68:3f:10:62:fc:13:f9:56:ac: c5:f6:5b:b5:8f:4d:20:15:e4:e0:97:d5:22:4d:96: 21:48:e3:eb:15:0b:b8:33:4a:f7:ec:fc:f8:72:89: 75:95:a0:d3:eb:87:ba:d6:d0:d9:e9:ed:1f:36:5c: c2:b4:3d:7d:32:5c:32:e8:b1:11:68:bd:54:46:f3: 7c:2b:95:73:b9:15:3b:2a:4d:9c:2e:10:57:68:26: b3:a7:13:38:91:ac:87:7a:c4:b6:7b:e3:50:fd:e9: ba:6c:a2:ad:18:74:ee:f2:22:2f:d2:1a:e1:18:5e: 9c:f2:3e:4d:6c:1e:2d:72:07:35:49:6f:a7:cd:5e: 3b:3c:de:d9:13:8b:49:d9:ba:26:9e:98:14:3e:a4: 6b:4b:7c:94:b1:30:33:2b:83:26:22:90:c0:45:d4: 48:31:a3:de:98:57:35:2b:51:1f:96:42:1d:f7:0c: 00:bf:d9:0c:6c:ee:b7:4a:40:3c:83:2e:fb:f7:7f: 40:c2:b2:0d:6c:e7:50:b1:e6:d3:72:4a:a4:bf:fa: 98:09:b0:73:ef:98:6c:d7:d4:7e:92:76:a7:b3:3b: 84:0a:1d:d3:94:f6:83:1b:5c:b5:81:e4:36:45:06: 63:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:24:6F:9B:91:BF:B8:74:07:23:08:0F:BD:21:E4:8E:7D:EA:5E:AC X509v3 Authority Key Identifier: keyid:2D:3E:3F:BB:C7:C2:B1:2C:D5:34:C8:B9:ED:37:86:FB:6A:A5:55:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/LT4_u8fCsSzVNMi57TeG-2qlVQY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/LT4_u8fCsSzVNMi57TeG-2qlVQY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7B36/6A2CE882408F11F0B34AEF47C4F9AE02/D055AA08480111F098A44B5CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.114.0/23 Signature Algorithm: sha256WithRSAEncryption 4b:89:8c:38:b2:0c:06:56:b6:25:89:a0:4e:f5:a2:af:85:e1: 34:f6:ac:27:47:80:3f:00:6c:c4:05:c1:00:72:63:2a:8f:b5: 46:00:0c:36:97:fe:06:4a:28:a0:e9:24:01:c0:ac:29:df:2f: 8f:e2:b8:06:91:93:f1:ff:46:ba:cb:05:34:dc:8d:5e:3a:c2: 95:1d:a9:63:8a:ae:d9:9b:01:d1:11:55:6b:e0:8f:9e:4a:c8: 11:45:b0:74:22:e6:46:bb:82:46:64:71:73:a0:6f:e4:be:c8: c7:7c:87:46:a7:37:6e:a3:d1:21:0c:7d:0a:3d:c3:d3:b4:48: 5f:55:12:8e:ee:31:81:9a:7c:f4:54:fd:a7:d2:b7:59:1b:0f: 3d:0e:47:26:00:15:2e:ff:47:ba:3f:bb:a6:a7:08:a5:60:c0: c7:2a:d7:25:7c:09:c1:f1:35:43:6e:13:45:d2:5c:95:d4:91: fb:d3:12:26:00:c7:a2:b4:03:2e:28:7c:91:fb:43:b5:1c:7f: fb:15:b9:26:f3:ff:ed:13:d4:48:5e:e5:9a:c4:36:de:d3:61: 81:c9:da:62:da:c1:bf:fe:6a:b7:44:36:25:b9:64:41:10:73: 1c:ad:9f:00:87:ca:40:04:bf:5d:e4:c4:ae:52:9b:1f:f7:0f: dd:30:13:05 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB N0IzNjExMC8GA1UEBRMoMkQzRTNGQkJDN0MyQjEyQ0Q1MzRDOEI5RUQzNzg2RkI2 QUE1NTUwNjAeFw0yNTA2MTMwMzAyMTFaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NGI5NGIzLTU4ZjUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDf86uis4m/DnpAS4qVZ/X1PyIO62g/EGL8E/lWrMX2W7WPTSAV5OCX1SJNliFI 4+sVC7gzSvfs/PhyiXWVoNPrh7rW0Nnp7R82XMK0PX0yXDLosRFovVRG83wrlXO5 FTsqTZwuEFdoJrOnEziRrId6xLZ741D96bpsoq0YdO7yIi/SGuEYXpzyPk1sHi1y BzVJb6fNXjs83tkTi0nZuiaemBQ+pGtLfJSxMDMrgyYikMBF1Egxo96YVzUrUR+W Qh33DAC/2Qxs7rdKQDyDLvv3f0DCsg1s51Cx5tNySqS/+pgJsHPvmGzX1H6Sdqez O4QKHdOU9oMbXLWB5DZFBmOzAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUsSRvm5G/ uHQHIwgPvSHkjn3qXqwwHwYDVR0jBBgwFoAULT4/u8fCsSzVNMi57TeG+2qlVQYw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE3QjM2LzZBMkNFODgyNDA4 RjExRjBCMzRBRUY0N0M0RjlBRTAyL0xUNF91OGZDc1N6Vk5NaTU3VGVHLTJxbFZR WS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvTFQ0X3U4ZkNzU3pWTk1pNTdUZUctMnFsVlFZLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB N0IzNi82QTJDRTg4MjQwOEYxMUYwQjM0QUVGNDdDNEY5QUUwMi9EMDU1QUEwODQ4 MDExMUYwOThBNDRCNUNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVjcjANBgkqhkiG9w0BAQsFAAOCAQEAS4mMOLIMBla2JYmg TvWir4XhNPasJ0eAPwBsxAXBAHJjKo+1RgAMNpf+BkoooOkkAcCsKd8vj+K4BpGT 8f9GussFNNyNXjrClR2pY4qu2ZsB0RFVa+CPnkrIEUWwdCLmRruCRmRxc6Bv5L7I x3yHRqc3bqPRIQx9Cj3D07RIX1USju4xgZp89FT9p9K3WRsPPQ5HJgAVLv9Huj+7 pqcIpWDAxyrXJXwJwfE1Q24TRdJcldSR+9MSJgDHorQDLih8kftDtRx/+xW5JvP/ 7RPUSF7lmsQ23tNhgcnaYtrBv/5qt0Q2JblkQRBzHK2fAIfKQAS/XeTErlKbH/cP 3TATBQ== -----END CERTIFICATE-----Generated at Mon Jun 23 00:56:44 2025 by rpki-client