$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/D99266FE4F7911F095AB2D46C4F9AE02.roa File: D99266FE4F7911F095AB2D46C4F9AE02.roa (raw, json) Hash identifier: zM2x4PpXDO/09IRoY9uPWWkCUNv9rLsNP/d1xRjR15g= Subject key identifier: 20:D3:FD:8B:01:17:4D:8A:CE:B0:F0:65:7D:E0:36:37:66:AA:8C:EF Certificate issuer: /CN=A91CB063/serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Certificate serial: 6C Authority key identifier: BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/D99266FE4F7911F095AB2D46C4F9AE02.roa Signing time: Thu 24 Jul 2025 05:30:11 +0000 ROA not before: Thu 24 Jul 2025 05:30:11 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 153530 IP address blocks: 161.248.220.0/24 maxlen: 24 161.248.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 108 (0x6c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB063, serialNumber=BEDB4D31C801C78B1EFA3487639D0355AC91354B Validity Not Before: Jul 24 05:30:11 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=6881c4e3-829d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b7:86:f9:80:34:1f:f4:2a:09:71:b2:53:63: 81:a4:5d:23:d6:58:68:69:56:ee:c4:a6:82:9f:b5: 62:6d:c0:a0:4a:57:ef:5f:ab:d3:b6:b0:29:1e:de: 60:7a:e8:92:c5:1c:13:7a:cb:4e:0b:66:59:95:d1: 6f:05:5d:20:8f:70:f4:27:1d:31:f3:25:0a:e9:a8: 6f:bf:50:30:53:8b:6d:4b:27:cd:8e:6f:c1:26:40: 99:08:c1:d5:82:ff:0d:1d:42:78:f8:0d:ff:b6:53: fd:8d:c5:0c:0b:e4:77:c7:db:83:e5:d6:a5:4a:6c: db:c1:0d:92:13:49:7b:75:07:b6:2f:12:04:41:85: 75:ac:1d:b6:a4:a3:d2:4c:d8:e3:b2:b3:a4:89:c2: df:e5:76:bd:bb:95:a2:63:81:25:0b:80:36:f5:ea: 06:62:e1:df:a8:db:6b:51:2f:97:57:be:de:4c:20: b2:74:71:0c:79:cf:22:46:94:2c:75:9b:3b:2d:14: a3:d1:8f:42:88:ae:00:a5:60:d8:58:a6:08:89:07: 11:54:14:b8:ed:3f:8f:06:bd:16:f4:65:ea:6d:bd: f6:f6:f7:00:5a:bf:9d:fa:93:43:0f:f8:5b:12:4c: aa:fd:ea:00:a4:4a:47:46:44:f5:11:b0:ee:a2:0d: e3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D3:FD:8B:01:17:4D:8A:CE:B0:F0:65:7D:E0:36:37:66:AA:8C:EF X509v3 Authority Key Identifier: keyid:BE:DB:4D:31:C8:01:C7:8B:1E:FA:34:87:63:9D:03:55:AC:91:35:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/vttNMcgBx4se-jSHY50DVayRNUs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/vttNMcgBx4se-jSHY50DVayRNUs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB063/63B47602D6ED11EF9D9BF36AC4F9AE02/D99266FE4F7911F095AB2D46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 161.248.220.0/23 Signature Algorithm: sha256WithRSAEncryption a0:5d:da:40:14:ac:40:f3:e3:13:08:49:b9:c7:d3:00:a7:1d: ad:90:c9:4d:78:92:e4:9b:4e:c5:e7:7c:c3:ea:b2:01:47:0b: ee:ae:19:34:4b:e8:83:c6:f9:b1:ca:ee:8c:7c:59:a9:cc:1f: 7b:00:ac:a8:cd:f4:6a:7f:37:7f:2b:54:18:fc:01:20:ca:83: 71:e9:9b:6c:dd:6f:a8:69:2d:85:0b:87:1c:6a:88:4b:b8:b1: c0:c1:b5:3c:d2:34:e7:43:1c:12:13:20:99:39:23:54:9b:da: 24:b4:13:17:19:d8:0d:9b:32:34:a5:5a:5a:01:88:cc:0f:47: 70:59:a9:40:a3:2f:5a:b3:63:ab:41:9e:14:b5:03:ce:b3:3e: b7:91:18:77:84:6c:15:a0:50:f4:46:08:75:34:5e:fa:aa:d2: 7f:63:f8:fd:18:9d:81:78:da:88:2c:7b:87:2b:34:cf:c4:95: 03:c2:0f:f3:9e:2b:7d:75:9a:62:b8:34:0e:a9:8d:32:1e:8c: 8c:19:f6:c4:22:14:17:60:1c:cd:d0:45:f1:03:00:c9:75:fc: 98:c3:03:cf:42:0b:f9:80:90:2b:db:b6:a2:ba:9a:76:eb:7a: cd:61:52:e4:78:5a:3c:cc:a6:c7:c3:ae:fe:62:7c:40:b2:18: 58:8c:9b:72 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBbDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD QjA2MzExMC8GA1UEBRMoQkVEQjREMzFDODAxQzc4QjFFRkEzNDg3NjM5RDAzNTVB QzkxMzU0QjAeFw0yNTA3MjQwNTMwMTFaFw0yNjA1MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4ODFjNGUzLTgyOWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDyt4b5gDQf9CoJcbJTY4GkXSPWWGhpVu7EpoKftWJtwKBKV+9fq9O2sCke3mB6 6JLFHBN6y04LZlmV0W8FXSCPcPQnHTHzJQrpqG+/UDBTi21LJ82Ob8EmQJkIwdWC /w0dQnj4Df+2U/2NxQwL5HfH24Pl1qVKbNvBDZITSXt1B7YvEgRBhXWsHbako9JM 2OOys6SJwt/ldr27laJjgSULgDb16gZi4d+o22tRL5dXvt5MILJ0cQx5zyJGlCx1 mzstFKPRj0KIrgClYNhYpgiJBxFUFLjtP48GvRb0Zeptvfb29wBav536k0MP+FsS TKr96gCkSkdGRPURsO6iDePNAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUINP9iwEX TYrOsPBlfeA2N2aqjO8wHwYDVR0jBBgwFoAUvttNMcgBx4se+jSHY50DVayRNUsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUNCMDYzLzYzQjQ3NjAyRDZF RDExRUY5RDlCRjM2QUM0RjlBRTAyL3Z0dE5NY2dCeDRzZS1qU0hZNTBEVmF5Uk5V cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvdnR0Tk1jZ0J4NHNlLWpTSFk1MERWYXlSTlVzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD QjA2My82M0I0NzYwMkQ2RUQxMUVGOUQ5QkYzNkFDNEY5QUUwMi9EOTkyNjZGRTRG NzkxMUYwOTVBQjJENDZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaH43DANBgkqhkiG9w0BAQsFAAOCAQEAoF3aQBSsQPPjEwhJ ucfTAKcdrZDJTXiS5JtOxed8w+qyAUcL7q4ZNEvog8b5scrujHxZqcwfewCsqM30 an83fytUGPwBIMqDcembbN1vqGkthQuHHGqIS7ixwMG1PNI050McEhMgmTkjVJva JLQTFxnYDZsyNKVaWgGIzA9HcFmpQKMvWrNjq0GeFLUDzrM+t5EYd4RsFaBQ9EYI dTRe+qrSf2P4/RidgXjaiCx7hys0z8SVA8IP854rfXWaYrg0DqmNMh6MjBn2xCIU F2AczdBF8QMAyXX8mMMDz0IL+YCQK9u2orqadut6zWFS5HhaPMymx8Ou/mJ8QLIY WIybcg== -----END CERTIFICATE-----Generated at Mon Aug 11 10:29:40 2025 by rpki-client