$ rpki-client -vvf rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/2131145E9E4C11EABF30421BC4F9AE02.roa File: 2131145E9E4C11EABF30421BC4F9AE02.roa (raw, json) Hash identifier: R50vxZrWUTgOZOulbAeHkJh7/C1wukAfa8pX0j0danc= Subject key identifier: C2:F6:6C:64:06:52:BB:CC:E7:66:C0:8D:D6:FC:CE:41:7A:A7:D9:44 Certificate issuer: /CN=A91E734C/serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Certificate serial: 0A5C Authority key identifier: 6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/2131145E9E4C11EABF30421BC4F9AE02.roa Signing time: Wed 06 Aug 2025 20:31:26 +0000 ROA not before: Wed 06 Aug 2025 20:31:26 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 24570 IP address blocks: 58.181.65.0/24 maxlen: 24 58.181.69.0/24 maxlen: 24 58.181.72.0/24 maxlen: 24 58.181.73.0/24 maxlen: 24 58.181.75.0/24 maxlen: 24 58.181.77.0/24 maxlen: 24 58.181.77.240/29 maxlen: 29 58.181.80.0/24 maxlen: 24 58.181.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2652 (0xa5c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E734C, serialNumber=6C680840381C1EF32D3C8DBBF3ACC4082CF6A5B3 Validity Not Before: Aug 6 20:31:26 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6893bb9e-80c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d1:bb:4e:2c:c8:cd:35:10:4a:e0:ab:7f:26: 6d:b5:ce:4a:6e:ef:fa:87:c6:a0:4e:d5:4c:93:2e: 76:39:c6:47:57:8e:00:0a:0a:22:c9:f9:f5:9b:d8: f1:28:2a:b8:40:83:00:ac:c8:45:a3:6e:76:9f:64: fc:c0:e0:7b:6a:30:c4:35:38:bb:8d:fb:1f:1c:4d: 62:57:c3:d7:e7:7f:7b:70:13:32:dd:d9:aa:71:1e: 3c:a5:52:f2:7a:b7:3f:42:f6:f5:50:63:71:ed:ed: 79:b8:7c:74:81:a5:5a:4d:20:26:12:e4:be:6e:85: e8:14:47:bb:64:98:75:f7:c6:4b:06:43:8d:8e:dc: 78:54:4a:d5:88:f5:c5:d1:9e:55:8c:6b:44:bf:9b: 08:b4:e2:89:3d:72:2a:8f:10:3b:81:56:9a:28:79: 01:3c:95:db:03:53:0b:ed:66:7a:0c:ee:f9:b5:b7: ae:8a:b1:9d:6c:29:c6:44:1d:e0:8a:f4:db:8e:17: 7f:76:3e:33:37:a0:66:76:57:8f:90:2e:b4:b0:80: 92:4b:c1:a1:ce:21:fd:54:eb:87:d1:56:d0:3f:6c: 73:95:ab:9c:b3:b0:2a:54:c6:c7:22:ae:b7:bf:44: f2:9d:52:b9:f5:24:9f:43:ba:a7:9a:6d:94:e5:86: ca:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:F6:6C:64:06:52:BB:CC:E7:66:C0:8D:D6:FC:CE:41:7A:A7:D9:44 X509v3 Authority Key Identifier: keyid:6C:68:08:40:38:1C:1E:F3:2D:3C:8D:BB:F3:AC:C4:08:2C:F6:A5:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/bGgIQDgcHvMtPI2786zECCz2pbM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bGgIQDgcHvMtPI2786zECCz2pbM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E734C/A73235EC73C211EA9D40B885C4F9AE02/2131145E9E4C11EABF30421BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 58.181.65.0/24 58.181.69.0/24 58.181.72.0/23 58.181.75.0/24 58.181.77.0/24 58.181.80.0/24 58.181.95.0/24 Signature Algorithm: sha256WithRSAEncryption 7e:89:56:97:12:a4:05:74:5a:4f:a9:fb:39:52:b9:76:ea:07: 54:ab:03:2b:92:e8:19:67:c8:a8:f1:3a:b0:55:52:a7:23:9d: e5:f5:69:e8:5d:00:a7:84:c8:5c:2d:6c:84:d9:46:90:b6:04: e7:9d:35:fa:d7:fc:b3:21:0b:4f:96:ab:48:3b:7b:26:52:de: cf:f1:16:9e:30:00:f0:eb:cd:fe:7d:01:9e:9c:c4:bd:46:11: af:85:c7:da:2c:09:5b:ff:91:56:a7:79:29:1f:6b:7c:6e:07: 1d:b3:3f:1c:04:95:50:d3:19:4a:27:2f:db:78:c5:d4:e0:f3: 7c:a6:2e:f9:0e:cd:30:f3:4c:75:a8:3c:e9:73:b4:bf:4d:5e: fc:b9:4a:98:e8:4c:6c:d7:5b:8f:91:ad:ec:64:cb:6a:ac:a5: ce:a6:20:0a:2e:e9:c1:e2:af:d2:96:1b:f2:f1:ee:24:01:86: d1:f0:14:b0:22:eb:18:51:27:82:ce:fa:ed:04:45:c0:d0:56: bb:0b:90:e5:0f:6e:95:08:23:5d:39:ce:a9:a6:48:c1:d1:59: 05:1f:5b:bf:a9:4a:2d:92:9f:65:e6:82:b1:ba:6b:a1:30:e0: 0e:33:00:1d:f3:c5:7c:71:9b:d0:44:89:33:d7:ae:56:30:90: 91:5a:e9:4e -----BEGIN CERTIFICATE----- MIIFlTCCBH2gAwIBAgICClwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTczNEMxMTAvBgNVBAUTKDZDNjgwODQwMzgxQzFFRjMyRDNDOERCQkYzQUNDNDA4 MkNGNkE1QjMwHhcNMjUwODA2MjAzMTI2WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODkzYmI5ZS04MGMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAndG7TizIzTUQSuCrfyZttc5Kbu/6h8agTtVMky52OcZHV44ACgoiyfn1m9jx KCq4QIMArMhFo252n2T8wOB7ajDENTi7jfsfHE1iV8PX5397cBMy3dmqcR48pVLy erc/Qvb1UGNx7e15uHx0gaVaTSAmEuS+boXoFEe7ZJh198ZLBkONjtx4VErViPXF 0Z5VjGtEv5sItOKJPXIqjxA7gVaaKHkBPJXbA1ML7WZ6DO75tbeuirGdbCnGRB3g ivTbjhd/dj4zN6BmdlePkC60sICSS8GhziH9VOuH0VbQP2xzlaucs7AqVMbHIq63 v0TynVK59SSfQ7qnmm2U5YbK/QIDAQABo4ICuTCCArUwHQYDVR0OBBYEFML2bGQG UrvM52bAjdb8zkF6p9lEMB8GA1UdIwQYMBaAFGxoCEA4HB7zLTyNu/OsxAgs9qWz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNzM0Qy9BNzMyMzVFQzcz QzIxMUVBOUQ0MEI4ODVDNEY5QUUwMi9iR2dJUURnY0h2TXRQSTI3ODZ6RUNDejJw Yk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JHZ0lRRGdjSHZNdFBJMjc4NnpFQ0N6MnBiTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTczNEMvQTczMjM1RUM3M0MyMTFFQTlENDBCODg1QzRGOUFFMDIvMjEzMTE0NUU5 RTRDMTFFQUJGMzA0MjFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQwYIKwYBBQUHAQcBAf8E NDAyMDAEAgABMCoDBAA6tUEDBAA6tUUDBAE6tUgDBAA6tUsDBAA6tU0DBAA6tVAD BAA6tV8wDQYJKoZIhvcNAQELBQADggEBAH6JVpcSpAV0Wk+p+zlSuXbqB1SrAyuS 6BlnyKjxOrBVUqcjneX1aehdAKeEyFwtbITZRpC2BOedNfrX/LMhC0+Wq0g7eyZS 3s/xFp4wAPDrzf59AZ6cxL1GEa+Fx9osCVv/kVaneSkfa3xuBx2zPxwElVDTGUon L9t4xdTg83ymLvkOzTDzTHWoPOlztL9NXvy5SpjoTGzXW4+Rrexky2qspc6mIAou 6cHir9KWG/Lx7iQBhtHwFLAi6xhRJ4LO+u0ERcDQVrsLkOUPbpUII105zqmmSMHR WQUfW7+pSi2Sn2XmgrG6a6Ew4A4zAB3zxXxxm9BEiTPXrlYwkJFa6U4= -----END CERTIFICATE-----Generated at Sat Aug 9 23:18:31 2025 by rpki-client