$ rpki-client -vvf rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/1E008B864B7411F09B3DF33BC4F9AE02.roa File: 1E008B864B7411F09B3DF33BC4F9AE02.roa (raw, json) Hash identifier: ev5mDZ6XFmJ+ji01cNK3sq1eGbo1TIpqJN2vMLDyQBI= Subject key identifier: 5E:FF:E2:E0:D7:C5:F5:51:4A:3C:A8:BD:95:91:F6:53:87:85:36:01 Certificate issuer: /CN=A91E3E80/serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Certificate serial: 02 Authority key identifier: 9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/1E008B864B7411F09B3DF33BC4F9AE02.roa Signing time: Tue 17 Jun 2025 12:10:54 +0000 ROA not before: Tue 17 Jun 2025 12:10:54 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 153935 IP address blocks: 165.99.196.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 07:20:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E3E80, serialNumber=9A587E4ECF68EC7729D8DE435FFDAADCEA5B4939 Validity Not Before: Jun 17 12:10:54 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68515b4e-86ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:7b:bc:e5:93:0a:d5:d1:01:5d:5b:46:84:02: a9:4c:db:e1:b7:3a:51:ad:2e:1b:b9:f8:11:87:63: 77:9a:26:fb:01:f3:1d:d5:93:43:76:24:54:f7:a0: e5:13:2b:cc:16:d6:56:d1:8d:4b:cb:ac:15:b7:c5: 65:43:9a:28:fb:0d:e5:61:21:1d:1c:8c:09:4a:7f: 3e:26:17:4a:a7:0c:78:d9:eb:f1:83:6e:0d:d1:70: 66:52:32:49:46:32:13:14:ef:66:68:e4:9c:a0:6b: 33:49:8a:84:75:4f:ff:e2:fd:3b:ff:df:cb:81:54: 83:f8:51:9f:8f:9c:6a:9c:b1:2c:20:b7:a1:9f:4a: d4:ea:04:1a:94:8f:8d:3e:c7:5a:f4:78:b5:9f:6f: d8:be:31:a1:88:69:d6:27:28:fc:43:05:25:18:a6: d0:bf:40:14:83:96:7b:31:8b:cb:21:31:bc:76:a5: 03:5e:3a:0c:cd:7b:8b:23:33:4a:b4:6a:f1:a9:34: 16:eb:7b:9e:f0:a0:2c:c8:e6:de:dd:ff:8b:ef:70: 70:a7:2a:29:e0:f6:f1:99:ac:34:1e:72:6e:d5:6c: 5f:5d:cb:9c:a9:ee:2a:8d:2c:29:31:cd:23:f2:64: 49:69:c2:5a:46:53:c3:d1:67:f1:56:77:db:7d:d6: 32:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:FF:E2:E0:D7:C5:F5:51:4A:3C:A8:BD:95:91:F6:53:87:85:36:01 X509v3 Authority Key Identifier: keyid:9A:58:7E:4E:CF:68:EC:77:29:D8:DE:43:5F:FD:AA:DC:EA:5B:49:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mlh-Ts9o7Hcp2N5DX_2q3OpbSTk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E3E80/35433F224B6611F0B8852439C4F9AE02/1E008B864B7411F09B3DF33BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.196.0/23 Signature Algorithm: sha256WithRSAEncryption 1c:a1:a7:3c:eb:05:33:6c:7c:2f:c5:e6:2e:9f:6c:fb:f5:4f: d9:1a:43:c5:cc:15:93:aa:a0:06:12:1a:96:5f:45:a5:31:d9: b5:6c:3e:e4:e8:71:47:af:d0:66:f8:23:b3:67:9a:09:20:fa: 06:67:5e:1c:18:74:5f:a3:75:84:d1:37:54:a6:5b:f1:87:63: c8:b1:4f:66:fd:2a:41:a2:f4:0f:b9:48:47:9b:c7:bf:98:45: d3:62:04:26:73:32:4d:1a:9b:9d:b3:c5:d5:73:28:28:f2:76: 03:e7:8f:73:a5:aa:0e:12:e0:3b:28:0f:65:51:62:b3:13:29: 4a:15:3f:dd:fe:43:3b:d0:f5:3e:8f:11:88:6e:c9:dc:bc:38: 9b:f3:cb:69:15:a0:42:fd:47:ef:29:5f:26:81:10:dc:ac:16: a8:20:b2:03:83:d4:27:10:ae:ac:77:b9:64:97:85:c4:25:12: b2:9e:f4:58:e8:17:02:b4:d5:f8:ba:88:b2:a2:b2:7c:9a:4e: d0:8d:4e:ba:32:ca:76:c1:fe:de:db:96:3e:23:e0:25:33:4e: 3e:b7:ac:9d:1f:da:e1:a5:48:2f:f4:bf:2c:8a:86:53:72:62: d5:b9:ab:d9:96:4f:9d:7d:86:7f:68:86:c6:62:8c:02:33:02: 44:04:9c:56 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF M0U4MDExMC8GA1UEBRMoOUE1ODdFNEVDRjY4RUM3NzI5RDhERTQzNUZGREFBRENF QTVCNDkzOTAeFw0yNTA2MTcxMjEwNTRaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NTE1YjRlLTg2YmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCpe7zlkwrV0QFdW0aEAqlM2+G3OlGtLhu5+BGHY3eaJvsB8x3Vk0N2JFT3oOUT K8wW1lbRjUvLrBW3xWVDmij7DeVhIR0cjAlKfz4mF0qnDHjZ6/GDbg3RcGZSMklG MhMU72Zo5JygazNJioR1T//i/Tv/38uBVIP4UZ+PnGqcsSwgt6GfStTqBBqUj40+ x1r0eLWfb9i+MaGIadYnKPxDBSUYptC/QBSDlnsxi8shMbx2pQNeOgzNe4sjM0q0 avGpNBbre57woCzI5t7d/4vvcHCnKing9vGZrDQecm7VbF9dy5yp7iqNLCkxzSPy ZElpwlpGU8PRZ/FWd9t91jKxAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUXv/i4NfF 9VFKPKi9lZH2U4eFNgEwHwYDVR0jBBgwFoAUmlh+Ts9o7Hcp2N5DX/2q3OpbSTkw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUUzRTgwLzM1NDMzRjIyNEI2 NjExRjBCODg1MjQzOUM0RjlBRTAyL21saC1UczlvN0hjcDJONURYXzJxM09wYlNU ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvbWxoLVRzOW83SGNwMk41RFhfMnEzT3BiU1RrLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF M0U4MC8zNTQzM0YyMjRCNjYxMUYwQjg4NTI0MzlDNEY5QUUwMi8xRTAwOEI4NjRC NzQxMUYwOUIzREYzM0JDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAaVjxDANBgkqhkiG9w0BAQsFAAOCAQEAHKGnPOsFM2x8L8Xm Lp9s+/VP2RpDxcwVk6qgBhIall9FpTHZtWw+5OhxR6/QZvgjs2eaCSD6BmdeHBh0 X6N1hNE3VKZb8YdjyLFPZv0qQaL0D7lIR5vHv5hF02IEJnMyTRqbnbPF1XMoKPJ2 A+ePc6WqDhLgOygPZVFisxMpShU/3f5DO9D1Po8RiG7J3Lw4m/PLaRWgQv1H7ylf JoEQ3KwWqCCyA4PUJxCurHe5ZJeFxCUSsp70WOgXArTV+LqIsqKyfJpO0I1OujLK dsH+3tuWPiPgJTNOPresnR/a4aVIL/S/LIqGU3Ji1bmr2ZZPnX2Gf2iGxmKMAjMC RAScVg== -----END CERTIFICATE-----Generated at Wed Nov 5 05:11:17 2025 by rpki-client