$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa File: D66D72562EAB11EF9B369566C4F9AE02.roa (raw, json) Hash identifier: CNHdYxX0Gq5u4Blz4lZshKjYS5M126ch5WfH88c9eRk= Subject key identifier: F9:CD:73:34:0C:07:01:B3:28:45:D9:48:F7:FD:2B:CF:A0:05:A8:08 Certificate issuer: /CN=A91B7BDC/serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Certificate serial: 0150 Authority key identifier: EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa Signing time: Thu 23 Oct 2025 06:20:27 +0000 ROA not before: Thu 23 Oct 2025 06:20:27 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 132139 IP address blocks: 185.81.70.0/24 maxlen: 24 185.81.70.144/29 maxlen: 29 185.81.70.176/29 maxlen: 29 185.81.70.184/29 maxlen: 29 185.81.70.192/29 maxlen: 29 185.81.70.200/29 maxlen: 29 185.81.70.208/29 maxlen: 29 185.81.70.216/29 maxlen: 29 185.81.70.224/31 maxlen: 31 185.81.70.226/31 maxlen: 31 185.81.70.236/31 maxlen: 31 185.81.70.238/31 maxlen: 31 185.81.70.240/29 maxlen: 29 185.81.70.248/29 maxlen: 29 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 00:06:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 336 (0x150) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7BDC, serialNumber=EF25A925BFBD4CBAEF52456AB3B309B747040DFE Validity Not Before: Oct 23 06:20:27 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68f9c92b-cc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:62:d2:07:50:db:a0:d8:8a:ea:14:92:9d:39: cc:a2:c7:23:7e:2f:e2:2a:71:3f:f7:61:2a:16:9e: b5:eb:cf:f0:ab:95:30:0c:05:f3:2b:ec:72:47:d5: 8f:41:59:1f:c8:76:e0:22:fd:09:96:71:21:17:42: 7b:fd:90:7f:7d:d1:ec:02:be:51:9a:e7:75:24:99: 4b:7b:9b:04:00:af:69:25:2a:ec:65:1d:53:ba:be: 62:b1:25:0e:47:9a:a1:11:27:ed:84:aa:24:83:13: 65:df:9c:e7:b9:7a:f7:8d:73:19:d5:05:61:ff:c7: cf:4a:e0:89:2e:91:a4:4b:9d:cc:ba:7a:f6:c0:15: a4:90:2b:19:82:0c:97:38:f0:99:db:9b:28:78:3c: 3d:19:1e:be:11:f4:47:b3:5b:53:c8:1d:43:4f:ea: 47:6a:6a:ea:5f:bb:13:69:fc:d6:29:cb:b5:43:b4: 8d:13:ac:e8:82:fd:e7:2b:03:c7:58:0f:4a:d6:dd: b2:ac:1b:71:42:17:db:0f:f4:c8:fd:f1:aa:3f:94: 1f:42:01:b5:a6:83:7b:4b:93:bd:23:ff:b1:9e:e1: c7:f3:38:13:3b:3f:f7:fe:a3:0d:8d:42:10:60:ec: 59:fe:f8:cb:af:07:3a:d6:b8:dc:47:f4:4a:42:3a: ce:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CD:73:34:0C:07:01:B3:28:45:D9:48:F7:FD:2B:CF:A0:05:A8:08 X509v3 Authority Key Identifier: keyid:EF:25:A9:25:BF:BD:4C:BA:EF:52:45:6A:B3:B3:09:B7:47:04:0D:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/7yWpJb-9TLrvUkVqs7MJt0cEDf4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/7yWpJb-9TLrvUkVqs7MJt0cEDf4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7BDC/79EE0BC4E27211EEB83D606BC4F9AE02/D66D72562EAB11EF9B369566C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 185.81.70.0/24 Signature Algorithm: sha256WithRSAEncryption 81:07:90:ab:26:17:c5:d2:f5:ae:68:bc:c6:67:1c:b2:26:9e: 3e:ed:e1:bc:97:5b:d2:1f:49:35:63:72:5a:24:8e:74:91:04: da:26:b9:be:a8:21:18:1e:a3:18:3b:77:7a:0b:43:ed:28:1e: c1:fa:66:07:e5:3e:9b:e5:75:50:f6:e4:94:80:cd:d6:26:b8: da:ab:cd:35:35:f0:32:7a:37:3d:68:85:aa:7b:a6:6e:58:c2: 97:ff:f4:f2:b1:4d:a5:0e:55:96:75:7a:08:19:15:71:31:56: 62:5f:45:12:bd:46:aa:4c:02:ea:0a:e0:22:cf:59:dd:d1:f6: 02:81:54:1d:8e:78:03:ea:92:85:de:52:8d:94:2c:d6:77:a2: 1f:9b:6a:f0:18:9a:f8:4a:d7:be:00:51:41:34:8d:e1:cd:5f: 02:ba:a9:77:33:69:1d:1e:ae:08:56:53:0b:e5:ba:66:6e:3f: f5:77:ea:00:4c:c9:2d:51:37:05:88:08:50:81:9a:57:38:4d: 70:b0:c0:a7:4c:b8:1c:31:e4:9f:33:91:80:c3:c7:64:fe:09: b8:3a:ca:2a:98:c6:62:fb:f7:d6:3c:27:8d:22:5e:9b:4b:cd: b0:20:48:5c:95:4a:3f:1c:4d:26:58:22:48:9d:22:70:29:1a: 5c:08:19:e7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAVAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjdCREMxMTAvBgNVBAUTKEVGMjVBOTI1QkZCRDRDQkFFRjUyNDU2QUIzQjMwOUI3 NDcwNDBERkUwHhcNMjUxMDIzMDYyMDI3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGY5YzkyYi1jYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1GLSB1DboNiK6hSSnTnMoscjfi/iKnE/92EqFp6168/wq5UwDAXzK+xyR9WP QVkfyHbgIv0JlnEhF0J7/ZB/fdHsAr5Rmud1JJlLe5sEAK9pJSrsZR1Tur5isSUO R5qhESfthKokgxNl35znuXr3jXMZ1QVh/8fPSuCJLpGkS53Munr2wBWkkCsZggyX OPCZ25soeDw9GR6+EfRHs1tTyB1DT+pHamrqX7sTafzWKcu1Q7SNE6zogv3nKwPH WA9K1t2yrBtxQhfbD/TI/fGqP5QfQgG1poN7S5O9I/+xnuHH8zgTOz/3/qMNjUIQ YOxZ/vjLrwc61rjcR/RKQjrOSQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPnNczQM BwGzKEXZSPf9K8+gBagIMB8GA1UdIwQYMBaAFO8lqSW/vUy671JFarOzCbdHBA3+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCN0JEQy83OUVFMEJDNEUy NzIxMUVFQjgzRDYwNkJDNEY5QUUwMi83eVdwSmItOVRMcnZVa1ZxczdNSnQwY0VE ZjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyLzd5V3BKYi05VExydlVrVnFzN01KdDBjRURmNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjdCREMvNzlFRTBCQzRFMjcyMTFFRUI4M0Q2MDZCQzRGOUFFMDIvRDY2RDcyNTYy RUFCMTFFRjlCMzY5NTY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAC5UUYwDQYJKoZIhvcNAQELBQADggEBAIEHkKsmF8XS9a5o vMZnHLImnj7t4byXW9IfSTVjclokjnSRBNomub6oIRgeoxg7d3oLQ+0oHsH6Zgfl PpvldVD25JSAzdYmuNqrzTU18DJ6Nz1ohap7pm5Ywpf/9PKxTaUOVZZ1eggZFXEx VmJfRRK9RqpMAuoK4CLPWd3R9gKBVB2OeAPqkoXeUo2ULNZ3oh+bavAYmvhK174A UUE0jeHNXwK6qXczaR0erghWUwvlumZuP/V36gBMyS1RNwWICFCBmlc4TXCwwKdM uBwx5J8zkYDDx2T+Cbg6yiqYxmL799Y8J40iXptLzbAgSFyVSj8cTSZYIkidInAp GlwIGec= -----END CERTIFICATE-----Generated at Wed Nov 5 19:33:00 2025 by rpki-client