$ rpki-client -vvf rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/BA1752AE176B11EF9ADED980C4F9AE02.roa File: BA1752AE176B11EF9ADED980C4F9AE02.roa (raw, json) Hash identifier: E4ey91ujkF/MRIeBzx9ZLQooU0yVAuuvKVrBh8MDQSg= Subject key identifier: E1:CC:05:E2:E8:92:D8:FA:80:1F:C3:20:59:E8:AF:21:63:A8:51:AB Certificate issuer: /CN=A91DF93A/serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Certificate serial: 08BE Authority key identifier: 07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/BA1752AE176B11EF9ADED980C4F9AE02.roa Signing time: Wed 18 Jun 2025 21:07:58 +0000 ROA not before: Wed 18 Jun 2025 21:07:58 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 21859 IP address blocks: 164.90.70.0/24 maxlen: 24 164.90.73.0/24 maxlen: 24 164.90.75.0/24 maxlen: 24 164.90.97.0/24 maxlen: 24 164.90.104.0/24 maxlen: 24 164.90.112.0/24 maxlen: 24 164.90.123.0/24 maxlen: 24 164.90.124.0/24 maxlen: 24 202.63.36.0/24 maxlen: 24 202.63.39.0/24 maxlen: 24 202.63.40.0/24 maxlen: 24 202.168.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 21:08:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2238 (0x8be) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DF93A, serialNumber=07A1C08545CACC65E0882D49E9F2F8CFD2BE8260 Validity Not Before: Jun 18 21:07:58 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68532aae-f10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5b:56:d9:8c:76:dd:7c:09:b2:3c:78:f6:fe: 93:be:b8:a1:e8:e3:11:eb:7a:37:86:12:9c:35:17: 76:df:44:06:10:4c:25:76:e3:76:3a:dc:e3:04:0f: 6c:8e:d8:19:86:5e:63:e8:e7:b7:f2:3f:ff:5d:3c: 7a:d1:69:d7:18:05:30:62:63:6f:be:26:35:3e:4c: c5:2e:31:be:10:16:5d:3c:6e:22:8d:aa:12:e3:29: 9e:8d:7c:8a:04:ce:ce:ba:14:e9:92:09:97:45:d9: db:56:ef:c8:63:c8:4d:39:d8:71:ce:50:45:56:91: 89:ca:36:62:2e:d6:7f:95:0d:66:ea:9b:af:1f:1b: ac:9d:1f:9a:25:ea:39:88:d0:fe:15:27:d9:c7:73: f0:07:b1:f9:69:7f:c9:8f:cf:6c:1c:14:c7:9c:64: bc:b6:e4:be:47:13:cb:19:f5:42:de:05:28:59:61: c1:7b:54:5d:36:0e:41:c0:1e:a3:9c:0d:7c:d7:d5: 23:5c:2f:11:f2:f5:d3:15:c5:50:64:be:f7:85:92: 53:ab:59:1f:0a:ae:2a:21:95:93:80:91:ff:92:a5: bb:f0:4c:09:67:3e:b9:08:d4:ae:98:8c:bf:31:2f: 03:79:0a:1c:6b:04:58:a1:27:f4:22:71:a2:53:d3: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:CC:05:E2:E8:92:D8:FA:80:1F:C3:20:59:E8:AF:21:63:A8:51:AB X509v3 Authority Key Identifier: keyid:07:A1:C0:85:45:CA:CC:65:E0:88:2D:49:E9:F2:F8:CF:D2:BE:82:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/B6HAhUXKzGXgiC1J6fL4z9K-gmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B6HAhUXKzGXgiC1J6fL4z9K-gmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DF93A/FF51E59EE5F311EAB3A91561C4F9AE02/BA1752AE176B11EF9ADED980C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 164.90.70.0/24 164.90.73.0/24 164.90.75.0/24 164.90.97.0/24 164.90.104.0/24 164.90.112.0/24 164.90.123.0-164.90.124.255 202.63.36.0/24 202.63.39.0-202.63.40.255 202.168.111.0/24 Signature Algorithm: sha256WithRSAEncryption 73:95:9b:57:4b:88:bb:8d:0f:b1:9c:b9:48:e8:36:88:bf:da: 2e:74:1e:28:41:1f:c4:89:b4:fd:03:fd:2e:89:72:79:85:04: 9e:26:79:bb:2a:07:48:40:dc:5e:62:9c:74:0f:25:1b:24:02: 58:16:7d:9b:92:45:fc:16:e9:a2:99:c7:5d:b5:e7:1e:e4:b0: 18:c2:98:59:0a:b7:21:3b:69:f2:53:bd:8a:b4:47:df:15:c0: 69:e8:3b:b8:2d:78:41:25:57:b0:ff:84:19:58:7d:52:83:f8: 23:f0:74:6d:f1:66:3d:a3:61:d4:fb:82:8d:de:cf:90:61:f1: 90:23:d3:01:26:a1:50:56:1f:cd:78:1d:1d:59:d1:bb:f2:15: cb:a3:01:07:a7:8c:d1:a0:09:14:64:d3:b9:1f:f0:09:39:61: 8c:70:b8:bd:97:e2:b2:30:04:1d:4e:7f:76:1d:47:2e:a2:ed: bd:ef:e2:c8:1b:3d:80:41:46:39:77:0f:3b:ce:75:f8:91:91: 8d:b9:8f:66:8c:3e:0c:38:5c:cc:cc:d6:ff:0b:8c:a4:76:13: ab:ad:bd:82:70:f6:b3:96:c8:cf:24:d1:5e:be:1b:d7:47:cd: 13:2a:90:01:54:fd:1c:fe:ea:31:fc:57:cd:dd:84:b7:c4:a7: 35:3f:86:c7 -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICCL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REY5M0ExMTAvBgNVBAUTKDA3QTFDMDg1NDVDQUNDNjVFMDg4MkQ0OUU5RjJGOENG RDJCRTgyNjAwHhcNMjUwNjE4MjEwNzU4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUzMmFhZS1mMTBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4ltW2Yx23XwJsjx49v6Tvrih6OMR63o3hhKcNRd230QGEEwlduN2OtzjBA9s jtgZhl5j6Oe38j//XTx60WnXGAUwYmNvviY1PkzFLjG+EBZdPG4ijaoS4ymejXyK BM7OuhTpkgmXRdnbVu/IY8hNOdhxzlBFVpGJyjZiLtZ/lQ1m6puvHxusnR+aJeo5 iND+FSfZx3PwB7H5aX/Jj89sHBTHnGS8tuS+RxPLGfVC3gUoWWHBe1RdNg5BwB6j nA1819UjXC8R8vXTFcVQZL73hZJTq1kfCq4qIZWTgJH/kqW78EwJZz65CNSumIy/ MS8DeQocawRYoSf0InGiU9PO1QIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFOHMBeLo ktj6gB/DIFnoryFjqFGrMB8GA1UdIwQYMBaAFAehwIVFysxl4IgtSeny+M/SvoJg MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERjkzQS9GRjUxRTU5RUU1 RjMxMUVBQjNBOTE1NjFDNEY5QUUwMi9CNkhBaFVYS3pHWGdpQzFKNmZMNHo5Sy1n bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0I2SEFoVVhLekdYZ2lDMUo2Zkw0ejlLLWdtQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REY5M0EvRkY1MUU1OUVFNUYzMTFFQUIzQTkxNTYxQzRGOUFFMDIvQkExNzUyQUUx NzZCMTFFRjlBREVEOTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZQYIKwYBBQUHAQcBAf8E VjBUMFIEAgABMEwDBACkWkYDBACkWkkDBACkWksDBACkWmEDBACkWmgDBACkWnAw DAMEAKRaewMEAKRafAMEAMo/JDAMAwQAyj8nAwQAyj8oAwQAyqhvMA0GCSqGSIb3 DQEBCwUAA4IBAQBzlZtXS4i7jQ+xnLlI6DaIv9oudB4oQR/EibT9A/0uiXJ5hQSe Jnm7KgdIQNxeYpx0DyUbJAJYFn2bkkX8Fumimcddtece5LAYwphZCrchO2nyU72K tEffFcBp6Du4LXhBJVew/4QZWH1Sg/gj8HRt8WY9o2HU+4KN3s+QYfGQI9MBJqFQ Vh/NeB0dWdG78hXLowEHp4zRoAkUZNO5H/AJOWGMcLi9l+KyMAQdTn92HUcuou29 7+LIGz2AQUY5dw87znX4kZGNuY9mjD4MOFzMzNb/C4ykdhOrrb2CcPazlsjPJNFe vhvXR80TKpABVP0c/uox/FfN3YS3xKc1P4bH -----END CERTIFICATE-----Generated at Thu Jun 19 10:23:44 2025 by rpki-client