$ rpki-client -vvf rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/ACC1DEB0960A11EC8BB4F586C4F9AE02.roa File: ACC1DEB0960A11EC8BB4F586C4F9AE02.roa (raw, json) Hash identifier: hYiudA2rwhN316Pb5lt+GNf53uhu2FFhMUzTaTRI2hw= Subject key identifier: 7A:CB:45:0C:1D:9A:2E:12:46:0A:F8:6E:2D:6C:ED:F4:5D:5D:83:B6 Certificate issuer: /CN=A91E504E/serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Certificate serial: 03D9 Authority key identifier: 04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/ACC1DEB0960A11EC8BB4F586C4F9AE02.roa Signing time: Fri 01 Aug 2025 02:07:35 +0000 ROA not before: Fri 01 Aug 2025 02:07:35 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 133199 IP address blocks: 217.194.132.0/24 maxlen: 24 217.194.133.0/24 maxlen: 24 217.194.134.0/24 maxlen: 24 217.194.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.mft rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 985 (0x3d9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E504E, serialNumber=04EE076A5DFA948C38F83C8CAC20FE0E8E86D80B Validity Not Before: Aug 1 02:07:35 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=688c2167-4adb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:93:15:04:fd:39:17:8c:19:58:18:7e:06:e7: 4b:ef:95:a7:86:ba:60:14:59:26:53:a6:a9:f5:92: c0:03:50:3e:f4:a1:e0:23:40:7a:8d:4e:4d:df:15: 27:4a:77:47:f7:dc:31:6e:2a:67:aa:a6:83:4a:07: 82:12:bd:2a:2c:27:8e:24:80:88:e6:6c:78:71:f9: e4:66:be:1e:40:a5:a4:81:f4:83:6a:93:44:35:25: f7:25:e1:d2:16:11:4b:26:bd:bf:26:c4:b3:94:08: c8:c2:f8:37:25:ab:47:ca:90:d1:1e:91:a9:77:b5: 96:ff:f5:8e:b9:0d:88:bb:8e:00:19:0e:b3:1f:d1: a6:1f:66:7b:d5:80:91:ce:6e:75:74:07:fb:3b:48: da:96:92:4c:84:64:5c:32:d4:69:21:4d:f7:05:2a: 13:eb:30:08:df:2b:e5:e6:b0:70:66:69:4b:33:a6: b9:2e:8d:fb:94:cc:92:19:f2:95:80:53:28:24:87: 68:20:38:a9:fd:14:f7:94:d1:2f:ec:97:98:62:47: fd:46:8b:f2:26:00:8a:6a:e9:61:9b:fd:39:b8:eb: 77:b2:07:dd:1a:87:03:51:db:ac:6e:a1:2a:19:8d: 02:01:69:f6:45:c7:6f:88:a4:ed:6d:26:c0:fd:bc: 41:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:CB:45:0C:1D:9A:2E:12:46:0A:F8:6E:2D:6C:ED:F4:5D:5D:83:B6 X509v3 Authority Key Identifier: keyid:04:EE:07:6A:5D:FA:94:8C:38:F8:3C:8C:AC:20:FE:0E:8E:86:D8:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/BO4Hal36lIw4-DyMrCD-Do6G2As.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/BO4Hal36lIw4-DyMrCD-Do6G2As.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E504E/44A51948960811ECA04A0086C4F9AE02/ACC1DEB0960A11EC8BB4F586C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 217.194.132.0/22 Signature Algorithm: sha256WithRSAEncryption 61:b8:3e:86:30:dc:4e:b2:02:e6:f5:5f:f9:e7:1c:17:45:0b: 2f:c7:89:64:07:db:2f:71:23:bf:8b:ac:d3:ca:72:ad:0b:a3: b3:a7:7d:9f:3d:1e:f9:89:95:2d:a3:0e:48:74:91:8c:f7:ad: a0:aa:e7:fb:11:0f:33:2c:4e:ee:13:58:fa:08:c7:27:7a:fa: b7:58:7c:fa:67:0a:80:a4:2e:ba:1c:6e:ad:31:2d:ad:91:cb: 5e:ea:5f:4d:94:bf:f3:8f:a5:a7:4d:b3:9f:9d:76:a9:17:ac: 4a:b0:3f:74:7b:af:26:b3:46:ca:ef:91:da:c7:9e:df:73:c3: 60:c4:27:c9:b8:86:d1:6f:ec:e2:5b:09:db:35:02:e7:29:45: 7c:1c:3f:4d:7d:40:44:1b:38:19:37:54:35:d4:6e:35:d8:6c: 0b:d1:b1:db:11:8e:c2:09:2a:25:60:36:80:ed:7d:64:3b:1c: 98:f9:0b:4b:94:8f:84:3d:29:79:6c:57:ff:48:3b:70:9b:48: bd:85:c3:c3:20:10:a3:85:69:c6:c0:e8:13:b3:8a:20:7d:ba: b4:df:60:54:c0:2c:53:19:69:cf:80:30:a0:01:a9:c0:32:00: 13:a3:ff:74:b0:8b:13:bf:c5:c7:38:05:12:ba:da:fe:4e:fc: 24:9d:c5:a0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA9kwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTUwNEUxMTAvBgNVBAUTKDA0RUUwNzZBNURGQTk0OEMzOEY4M0M4Q0FDMjBGRTBF OEU4NkQ4MEIwHhcNMjUwODAxMDIwNzM1WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODhjMjE2Ny00YWRiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAlZMVBP05F4wZWBh+BudL75WnhrpgFFkmU6ap9ZLAA1A+9KHgI0B6jU5N3xUn SndH99wxbipnqqaDSgeCEr0qLCeOJICI5mx4cfnkZr4eQKWkgfSDapNENSX3JeHS FhFLJr2/JsSzlAjIwvg3JatHypDRHpGpd7WW//WOuQ2Iu44AGQ6zH9GmH2Z71YCR zm51dAf7O0jalpJMhGRcMtRpIU33BSoT6zAI3yvl5rBwZmlLM6a5Lo37lMySGfKV gFMoJIdoIDip/RT3lNEv7JeYYkf9RovyJgCKaulhm/05uOt3sgfdGocDUdusbqEq GY0CAWn2RcdviKTtbSbA/bxBAQIDAQABo4IClTCCApEwHQYDVR0OBBYEFHrLRQwd mi4SRgr4bi1s7fRdXYO2MB8GA1UdIwQYMBaAFATuB2pd+pSMOPg8jKwg/g6OhtgL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTA0RS80NEE1MTk0ODk2 MDgxMUVDQTA0QTAwODZDNEY5QUUwMi9CTzRIYWwzNmxJdzQtRHlNckNELURvNkcy QXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy RkQxRkYyL0JPNEhhbDM2bEl3NC1EeU1yQ0QtRG82RzJBcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTUwNEUvNDRBNTE5NDg5NjA4MTFFQ0EwNEEwMDg2QzRGOUFFMDIvQUNDMURFQjA5 NjBBMTFFQzhCQjRGNTg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALZwoQwDQYJKoZIhvcNAQELBQADggEBAGG4PoYw3E6yAub1 X/nnHBdFCy/HiWQH2y9xI7+LrNPKcq0Lo7OnfZ89HvmJlS2jDkh0kYz3raCq5/sR DzMsTu4TWPoIxyd6+rdYfPpnCoCkLrocbq0xLa2Ry17qX02Uv/OPpadNs5+ddqkX rEqwP3R7ryazRsrvkdrHnt9zw2DEJ8m4htFv7OJbCds1AucpRXwcP019QEQbOBk3 VDXUbjXYbAvRsdsRjsIJKiVgNoDtfWQ7HJj5C0uUj4Q9KXlsV/9IO3CbSL2Fw8Mg EKOFacbA6BOziiB9urTfYFTALFMZac+AMKABqcAyABOj/3SwixO/xcc4BRK62v5O /CSdxaA= -----END CERTIFICATE-----Generated at Sun Aug 10 18:31:35 2025 by rpki-client