$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/41B2F448ECE611EA882BEA79C4F9AE02.roa File: 41B2F448ECE611EA882BEA79C4F9AE02.roa (raw, json) Hash identifier: jfARn5Pllx6IMjPiI7FxZYgxXYW94DALaj8qH2++9WY= Subject key identifier: DF:CA:5D:DF:5A:E0:E8:D5:02:CF:FD:6F:36:BC:3F:C6:8A:23:6A:CF Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Certificate serial: 0B7F Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/41B2F448ECE611EA882BEA79C4F9AE02.roa Signing time: Sat 19 Jul 2025 02:46:27 +0000 ROA not before: Sat 19 Jul 2025 02:46:27 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 4818 IP address blocks: 49.124.0.0/15 maxlen: 15 115.164.0.0/16 maxlen: 17 115.164.51.0/24 maxlen: 24 115.164.52.0/24 maxlen: 24 115.164.53.0/24 maxlen: 24 115.164.54.0/24 maxlen: 24 115.164.55.0/24 maxlen: 24 115.164.56.0/24 maxlen: 24 182.62.0.0/15 maxlen: 15 182.63.32.0/20 maxlen: 20 182.63.48.0/20 maxlen: 20 182.63.96.0/20 maxlen: 20 182.63.112.0/20 maxlen: 20 2001:4458::/32 maxlen: 33 2001:4458:4004::/48 maxlen: 48 2001:4458:4005::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 19:05:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2943 (0xb7f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Validity Not Before: Jul 19 02:46:27 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=687b0703-6f3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:56:47:1f:1a:de:01:a0:c6:78:dd:3a:00:07: de:bb:bd:24:31:45:b7:2f:9b:70:05:5d:9d:6d:4a: 0f:c8:f6:78:71:62:ca:26:fe:e3:f9:f7:fd:a5:8b: a0:5d:ff:ce:02:1f:df:dd:4e:28:c4:0a:06:98:74: 01:87:22:f7:86:fe:c1:46:38:6f:1c:ef:84:59:09: d8:09:dc:2a:9e:95:25:6f:15:a5:70:76:e0:9d:12: a5:ff:9c:ed:18:2b:62:84:5e:2b:01:09:2a:4a:1a: 7f:a5:54:4f:20:c6:0d:dc:ca:fd:38:7c:0d:91:9e: c7:e7:b6:fd:4b:e3:a4:cb:a6:93:2f:6b:9a:82:48: c4:14:e2:3a:08:d9:00:cc:0a:50:1b:19:7a:4f:b9: a6:1a:27:79:7f:3a:a6:64:03:78:bf:a5:ce:b4:15: ba:d5:f3:59:5a:6e:f7:64:32:6f:2f:18:35:f9:5e: 8c:1b:56:75:ea:0b:5d:6b:11:8c:23:ef:f5:d0:8f: a0:68:4a:fe:ce:d1:00:95:4a:62:e6:eb:b5:d9:6e: dc:5e:c9:c9:f7:0d:06:e1:88:87:d2:ac:6b:a4:51: f2:2d:ca:3e:a4:e2:0b:b8:5c:70:1e:03:db:01:8f: ae:d7:1a:a9:d2:46:13:9c:41:0a:d7:5e:d7:2b:64: ea:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CA:5D:DF:5A:E0:E8:D5:02:CF:FD:6F:36:BC:3F:C6:8A:23:6A:CF X509v3 Authority Key Identifier: keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/41B2F448ECE611EA882BEA79C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.124.0.0/15 115.164.0.0/16 182.62.0.0/15 IPv6: 2001:4458::/32 Signature Algorithm: sha256WithRSAEncryption 98:5a:78:2c:3e:52:e4:b9:9f:2b:c7:93:c5:6b:14:c0:ec:e2: ed:39:4a:8b:4a:ea:d4:d7:77:30:21:1f:6f:24:4b:ba:ac:99: 30:44:71:c6:75:54:a6:63:47:ad:a0:8c:f7:e8:66:76:d1:89: 3c:bf:18:b6:70:71:0b:7f:42:68:83:25:8e:3e:46:7c:20:6b: 5f:25:c0:e6:39:96:dd:42:b0:5b:79:22:47:b9:63:08:f7:f4: 6c:71:38:1e:59:92:12:75:9d:93:66:02:95:b2:fe:31:81:67: 8a:06:f5:27:9e:ed:24:61:aa:80:37:01:21:22:67:28:2c:a1: 12:71:1a:da:c2:0e:bc:e2:54:32:b0:f2:26:db:57:1e:c8:e7: b1:6a:40:76:05:7a:72:23:55:80:45:06:89:a5:e3:d6:d1:ef: 6c:cf:8c:97:7c:a4:bf:8e:38:90:9a:18:a7:30:2d:99:fe:5b: 9f:12:6b:6a:82:5d:4f:a3:05:68:f9:f7:fb:01:47:46:1d:49: 50:f6:75:ca:ab:a9:50:09:ce:4b:71:ae:74:fe:12:a7:18:e4: 0d:31:89:f9:e8:79:0c:a8:5a:f0:3c:ae:17:df:ac:6f:c0:c9: e5:57:92:01:29:a8:04:b8:3a:25:d3:6f:1f:67:a2:4b:45:4a: a0:d7:dd:77 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICC38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC RkJBREE1N0UwHhcNMjUwNzE5MDI0NjI3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODdiMDcwMy02ZjNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwVZHHxreAaDGeN06AAfeu70kMUW3L5twBV2dbUoPyPZ4cWLKJv7j+ff9pYug Xf/OAh/f3U4oxAoGmHQBhyL3hv7BRjhvHO+EWQnYCdwqnpUlbxWlcHbgnRKl/5zt GCtihF4rAQkqShp/pVRPIMYN3Mr9OHwNkZ7H57b9S+Oky6aTL2uagkjEFOI6CNkA zApQGxl6T7mmGid5fzqmZAN4v6XOtBW61fNZWm73ZDJvLxg1+V6MG1Z16gtdaxGM I+/10I+gaEr+ztEAlUpi5uu12W7cXsnJ9w0G4YiH0qxrpFHyLco+pOILuFxwHgPb AY+u1xqp0kYTnEEK117XK2Tq5wIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFN/KXd9a 4OjVAs/9bza8P8aKI2rPMB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1 REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE3ODYvQjBENzIzRUUzNURBMTFFQUFCODg0ODRBQzRGOUFFMDIvNDFCMkY0NDhF Q0U2MTFFQTg4MkJFQTc5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMBUEAgABMA8DAwExfAMDAHOkAwMBtj4wDQQCAAIwBwMFACABRFgwDQYJKoZI hvcNAQELBQADggEBAJhaeCw+UuS5nyvHk8VrFMDs4u05SotK6tTXdzAhH28kS7qs mTBEccZ1VKZjR62gjPfoZnbRiTy/GLZwcQt/QmiDJY4+Rnwga18lwOY5lt1CsFt5 Ike5Ywj39GxxOB5ZkhJ1nZNmApWy/jGBZ4oG9See7SRhqoA3ASEiZygsoRJxGtrC DrziVDKw8ibbVx7I57FqQHYFenIjVYBFBoml49bR72zPjJd8pL+OOJCaGKcwLZn+ W58Sa2qCXU+jBWj59/sBR0YdSVD2dcqrqVAJzktxrnT+EqcY5A0xifnoeQyoWvA8 rhffrG/AyeVXkgEpqAS4OiXTbx9noktFSqDX3Xc= -----END CERTIFICATE-----Generated at Tue Nov 4 22:21:26 2025 by rpki-client