$ rpki-client -vvf rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/727850D8D3EF11EFB596E00CC4F9AE02.roa File: 727850D8D3EF11EFB596E00CC4F9AE02.roa (raw, json) Hash identifier: hvte1LGzH8lQs5HlVIeT4otbezAzwXIr7d7vqIECmd8= Subject key identifier: AA:62:B5:5D:1F:75:08:29:D6:AC:CA:81:06:99:67:A8:96:FD:61:11 Certificate issuer: /CN=A91D74A6/serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Certificate serial: 22 Authority key identifier: DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/727850D8D3EF11EFB596E00CC4F9AE02.roa Signing time: Wed 05 Feb 2025 06:48:49 +0000 ROA not before: Wed 05 Feb 2025 06:48:49 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133752 IP address blocks: 64.120.88.0/22 maxlen: 23 64.120.112.0/21 maxlen: 21 64.120.112.0/22 maxlen: 22 64.120.116.0/22 maxlen: 22 64.120.120.0/23 maxlen: 23 172.241.216.0/21 maxlen: 21 209.58.184.0/21 maxlen: 21 209.58.184.0/23 maxlen: 23 209.58.186.0/24 maxlen: 24 209.58.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 06:36:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34 (0x22) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D74A6, serialNumber=DC80C85E5101089AB2425D3FC9177985A0125C6E Validity Not Before: Feb 5 06:48:49 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a309d1-9f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:90:9e:84:2f:8c:ac:73:ab:fd:bb:37:89:55: 5f:b2:0d:d2:36:bb:f6:d9:aa:21:c1:88:f0:c1:32: da:e7:46:82:39:e1:f4:7b:aa:8b:cd:55:e8:61:bf: 60:bc:bc:69:f1:7a:32:7b:42:8b:74:b3:79:0a:92: a7:92:24:21:0c:87:47:48:8c:2f:5e:c0:f4:c7:b2: 5a:63:06:53:aa:47:a6:31:67:21:60:f6:d2:b3:dd: 64:3f:1d:af:21:66:7f:05:8e:b7:cf:a9:37:a1:d4: fb:d3:e8:6d:14:04:b7:c7:59:3c:a3:48:82:36:1d: 12:5a:cf:2f:46:df:1e:5e:fa:7c:73:0a:a5:c0:8a: 3c:70:56:e0:65:fd:d9:db:d3:4f:c0:0c:1e:4c:e6: fe:ac:f4:4d:ab:34:88:0c:5d:e5:fe:92:99:11:7c: 94:ef:ed:7d:88:8e:3e:d8:57:42:e6:2f:53:e5:df: d1:ee:cb:46:65:d9:bc:0d:a2:f8:60:80:3f:fb:8f: 86:a2:84:53:43:97:0a:30:64:69:44:bf:29:d2:af: a1:eb:7f:12:d6:71:b2:c7:c4:f0:18:fd:99:ee:61: 1e:8c:be:9d:d3:48:1f:05:86:0c:73:a0:59:87:a8: c2:bb:fb:37:0d:ba:e0:59:60:94:cf:ee:f0:08:fc: 27:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:62:B5:5D:1F:75:08:29:D6:AC:CA:81:06:99:67:A8:96:FD:61:11 X509v3 Authority Key Identifier: keyid:DC:80:C8:5E:51:01:08:9A:B2:42:5D:3F:C9:17:79:85:A0:12:5C:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/3IDIXlEBCJqyQl0_yRd5haASXG4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/3IDIXlEBCJqyQl0_yRd5haASXG4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D74A6/7171BBF2D19C11EF83CEAD3CC4F9AE02/727850D8D3EF11EFB596E00CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 64.120.88.0/22 64.120.112.0-64.120.121.255 172.241.216.0/21 209.58.184.0/21 Signature Algorithm: sha256WithRSAEncryption 6d:d5:b1:60:7f:fe:0f:22:1a:9b:f7:30:1e:71:8c:4e:a1:f5: d3:9f:bf:01:df:32:89:c7:f3:37:0b:a0:2e:64:9b:9b:f0:75: 81:2c:39:7c:1f:1f:4a:67:85:7f:1d:21:7a:6c:ab:54:75:6d: 27:63:a3:2a:0a:46:49:26:30:1e:ed:cd:0c:47:a4:07:c3:94: a7:d8:52:54:db:43:68:c1:bc:7d:22:14:2a:9d:e4:3a:c3:74: 80:38:45:07:12:39:21:ae:43:45:7c:0e:97:5a:51:dd:c4:94: 03:83:4b:ea:1b:c2:97:a4:dc:fd:af:07:97:e8:46:84:2b:c2: 20:25:c6:22:51:52:f4:78:4e:c1:22:08:bf:50:8a:e1:42:a6: c8:e4:ae:38:12:ff:b8:26:bf:32:4b:b1:ac:de:a9:ef:08:48: 52:59:22:f5:18:57:21:23:e4:a8:a4:47:a4:9f:2e:69:d9:d7: 21:7e:23:f2:9d:19:a3:af:57:57:37:1a:1e:85:ca:96:2f:51: 71:56:c8:39:82:34:da:09:f4:a6:9b:a0:36:d6:9f:8c:d9:b5: 2c:10:81:2e:55:07:ca:8a:0e:f5:41:52:87:b0:cf:b2:35:a9: 9b:37:25:96:ca:f3:0c:d8:37:9f:24:ea:15:f5:8c:78:b3:17: 31:7e:74:91 -----BEGIN CERTIFICATE----- MIIFijCCBHKgAwIBAgIBIjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NzRBNjExMC8GA1UEBRMoREM4MEM4NUU1MTAxMDg5QUIyNDI1RDNGQzkxNzc5ODVB MDEyNUM2RTAeFw0yNTAyMDUwNjQ4NDlaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YTMwOWQxLTlmMjIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCtkJ6EL4ysc6v9uzeJVV+yDdI2u/bZqiHBiPDBMtrnRoI54fR7qovNVehhv2C8 vGnxejJ7Qot0s3kKkqeSJCEMh0dIjC9ewPTHslpjBlOqR6YxZyFg9tKz3WQ/Ha8h Zn8FjrfPqTeh1PvT6G0UBLfHWTyjSII2HRJazy9G3x5e+nxzCqXAijxwVuBl/dnb 00/ADB5M5v6s9E2rNIgMXeX+kpkRfJTv7X2Ijj7YV0LmL1Pl39Huy0Zl2bwNovhg gD/7j4aihFNDlwowZGlEvynSr6HrfxLWcbLHxPAY/ZnuYR6Mvp3TSB8FhgxzoFmH qMK7+zcNuuBZYJTP7vAI/CexAgMBAAGjggKvMIICqzAdBgNVHQ4EFgQUqmK1XR91 CCnWrMqBBplnqJb9YREwHwYDVR0jBBgwFoAU3IDIXlEBCJqyQl0/yRd5haASXG4w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ3NEE2LzcxNzFCQkYyRDE5 QzExRUY4M0NFQUQzQ0M0RjlBRTAyLzNJRElYbEVCQ0pxeVFsMF95UmQ1aGFBU1hH NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvM0lESVhsRUJDSnF5UWwwX3lSZDVoYUFTWEc0LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NzRBNi83MTcxQkJGMkQxOUMxMUVGODNDRUFEM0NDNEY5QUUwMi83Mjc4NTBEOEQz RUYxMUVGQjU5NkUwMENDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA5BggrBgEFBQcBBwEB/wQq MCgwJgQCAAEwIAMEAkB4WDAMAwQEQHhwAwQBQHh4AwQDrPHYAwQD0Tq4MA0GCSqG SIb3DQEBCwUAA4IBAQBt1bFgf/4PIhqb9zAecYxOofXTn78B3zKJx/M3C6AuZJub 8HWBLDl8Hx9KZ4V/HSF6bKtUdW0nY6MqCkZJJjAe7c0MR6QHw5Sn2FJU20Nowbx9 IhQqneQ6w3SAOEUHEjkhrkNFfA6XWlHdxJQDg0vqG8KXpNz9rweX6EaEK8IgJcYi UVL0eE7BIgi/UIrhQqbI5K44Ev+4Jr8yS7Gs3qnvCEhSWSL1GFchI+SopEekny5p 2dchfiPynRmjr1dXNxoehcqWL1FxVsg5gjTaCfSmm6A21p+M2bUsEIEuVQfKig71 QVKHsM+yNambNyWWyvMM2DefJOoV9Yx4sxcxfnSR -----END CERTIFICATE-----Generated at Wed Nov 5 13:31:38 2025 by rpki-client