$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/ACE4FD2C6D1711F085288D45C4F9AE02.roa File: ACE4FD2C6D1711F085288D45C4F9AE02.roa (raw, json) Hash identifier: 3byzVFFSNIGYt/y2lN2Kplw2yu43h1x0nZS5XpZza6s= Subject key identifier: D7:0F:62:3B:1D:17:F6:40:26:5A:41:DD:0E:5E:28:CC:9A:82:9E:B7 Certificate issuer: /CN=A91EA786/serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Certificate serial: 0B96 Authority key identifier: 91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/ACE4FD2C6D1711F085288D45C4F9AE02.roa Signing time: Wed 30 Jul 2025 08:55:57 +0000 ROA not before: Wed 30 Jul 2025 08:55:57 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 4755 IP address blocks: 49.124.195.0/24 maxlen: 24 49.124.203.0/24 maxlen: 24 49.124.211.0/24 maxlen: 24 49.124.214.0/24 maxlen: 24 115.164.0.0/24 maxlen: 24 115.164.2.0/24 maxlen: 24 115.164.4.0/24 maxlen: 24 115.164.5.0/24 maxlen: 24 115.164.64.0/24 maxlen: 24 115.164.128.0/24 maxlen: 24 115.164.132.0/24 maxlen: 24 115.164.142.0/24 maxlen: 24 182.62.210.0/24 maxlen: 24 182.63.7.0/24 maxlen: 24 182.63.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2966 (0xb96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA786, serialNumber=91C3C966776F011FC535021D85F5AE7BFBADA57E Validity Not Before: Jul 30 08:55:57 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6889de1d-5389 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:7e:26:39:ad:98:61:36:c6:eb:c8:c5:ab:3e: 2e:02:f0:34:0d:47:0b:88:0d:d7:71:03:5e:c1:3d: 73:ba:04:94:a3:49:1a:05:0a:34:ff:05:95:aa:10: c7:72:18:13:d5:13:17:e1:b1:a1:ca:e2:56:1e:6b: b6:51:9a:b3:7d:27:6a:c8:6f:d4:d0:d7:1a:3e:07: a7:5c:b7:6e:1f:df:4b:4f:33:2d:13:0d:ad:6a:38: 41:e3:51:ba:a8:5f:46:4f:15:c1:f2:7c:2d:7e:ad: b2:3b:17:64:a2:c4:a5:de:a4:90:13:31:ce:aa:b5: 1f:a1:64:3e:1c:2f:3a:50:40:a5:4c:49:26:dd:02: 07:fb:01:e6:96:46:34:1d:be:9e:3b:7f:99:99:3a: 63:0c:51:82:44:07:fd:d6:8b:c9:ba:5e:8d:6f:8e: 99:ae:8b:32:83:7b:e2:0a:3e:36:50:1c:20:39:0a: fd:cb:14:34:4b:0e:b9:6f:bf:13:9e:5f:2f:3d:95: a9:b2:97:59:83:63:b3:b4:8e:f1:44:1e:4d:77:09: e7:78:cc:12:ec:ee:9c:1d:bf:7f:bf:e7:92:cb:e9: 54:1a:fc:bd:1f:9e:77:ce:a4:fc:e2:a9:a9:94:cf: 85:fc:2b:82:c5:3b:f2:d5:8f:48:c0:d4:40:a5:15: 00:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:0F:62:3B:1D:17:F6:40:26:5A:41:DD:0E:5E:28:CC:9A:82:9E:B7 X509v3 Authority Key Identifier: keyid:91:C3:C9:66:77:6F:01:1F:C5:35:02:1D:85:F5:AE:7B:FB:AD:A5:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/kcPJZndvAR_FNQIdhfWue_utpX4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kcPJZndvAR_FNQIdhfWue_utpX4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA786/B0D723EE35DA11EAAB88484AC4F9AE02/ACE4FD2C6D1711F085288D45C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 49.124.195.0/24 49.124.203.0/24 49.124.211.0/24 49.124.214.0/24 115.164.0.0/24 115.164.2.0/24 115.164.4.0/23 115.164.64.0/24 115.164.128.0/24 115.164.132.0/24 115.164.142.0/24 182.62.210.0/24 182.63.7.0/24 182.63.71.0/24 Signature Algorithm: sha256WithRSAEncryption 5c:aa:37:0f:d1:62:49:dd:8a:66:27:8f:b4:7a:b3:2c:69:df: 4f:db:69:01:4e:e9:d8:a6:31:97:30:df:b9:26:f5:94:3c:37: 86:f8:b9:22:4d:ba:1a:e3:35:f8:4f:0b:74:d2:ff:cc:8b:c3: 71:62:c7:49:6a:35:ef:0e:a9:fb:c0:c1:a2:4a:05:48:ec:6e: 0b:b8:fd:f4:0e:94:f8:2c:9b:b2:1f:5b:d1:fe:02:d1:64:6a: 47:e0:67:9e:c5:0e:45:74:d9:93:d7:ba:af:8a:ed:9f:87:aa: 3a:c8:cf:49:e4:28:5d:4c:b0:d6:96:88:3b:d9:4b:1c:98:e0: 6c:21:f9:9e:ef:e4:49:df:1b:fd:0e:23:59:ed:d1:6e:99:9f: bb:a7:fe:0d:d9:25:2d:f8:6f:aa:88:f5:2a:de:74:a8:0b:c2: 95:a3:f9:65:bd:00:0e:e0:92:11:96:48:9b:d7:17:2e:6b:15: 93:1f:5d:e4:b1:56:1c:4b:cb:de:c7:ee:30:6d:1c:81:d3:8a: 51:2b:33:07:f9:5f:7e:97:2c:b4:e2:5d:40:51:42:b0:81:5e: 79:67:99:30:48:82:ac:70:6d:e3:70:61:9a:18:ed:11:48:c1: 50:c9:3a:e0:7b:1c:ae:5d:e6:3b:42:28:2a:85:8f:2c:e8:c0: df:55:f8:fd -----BEGIN CERTIFICATE----- MIIFvzCCBKegAwIBAgICC5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE3ODYxMTAvBgNVBAUTKDkxQzNDOTY2Nzc2RjAxMUZDNTM1MDIxRDg1RjVBRTdC RkJBREE1N0UwHhcNMjUwNzMwMDg1NTU3WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODg5ZGUxZC01Mzg5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwX4mOa2YYTbG68jFqz4uAvA0DUcLiA3XcQNewT1zugSUo0kaBQo0/wWVqhDH chgT1RMX4bGhyuJWHmu2UZqzfSdqyG/U0NcaPgenXLduH99LTzMtEw2tajhB41G6 qF9GTxXB8nwtfq2yOxdkosSl3qSQEzHOqrUfoWQ+HC86UEClTEkm3QIH+wHmlkY0 Hb6eO3+ZmTpjDFGCRAf91ovJul6Nb46Zrosyg3viCj42UBwgOQr9yxQ0Sw65b78T nl8vPZWpspdZg2OztI7xRB5NdwnneMwS7O6cHb9/v+eSy+lUGvy9H553zqT84qmp lM+F/CuCxTvy1Y9IwNRApRUATwIDAQABo4IC4zCCAt8wHQYDVR0OBBYEFNcPYjsd F/ZAJlpB3Q5eKMyagp63MB8GA1UdIwQYMBaAFJHDyWZ3bwEfxTUCHYX1rnv7raV+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTc4Ni9CMEQ3MjNFRTM1 REExMUVBQUI4ODQ4NEFDNEY5QUUwMi9rY1BKWm5kdkFSX0ZOUUlkaGZXdWVfdXRw WDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tjUEpabmR2QVJfRk5RSWRoZld1ZV91dHBYNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE3ODYvQjBENzIzRUUzNURBMTFFQUFCODg0ODRBQzRGOUFFMDIvQUNFNEZEMkM2 RDE3MTFGMDg1Mjg4RDQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbQYIKwYBBQUHAQcBAf8E XjBcMFoEAgABMFQDBAAxfMMDBAAxfMsDBAAxfNMDBAAxfNYDBABzpAADBABzpAID BAFzpAQDBABzpEADBABzpIADBABzpIQDBABzpI4DBAC2PtIDBAC2PwcDBAC2P0cw DQYJKoZIhvcNAQELBQADggEBAFyqNw/RYkndimYnj7R6syxp30/baQFO6dimMZcw 37km9ZQ8N4b4uSJNuhrjNfhPC3TS/8yLw3Fix0lqNe8OqfvAwaJKBUjsbgu4/fQO lPgsm7IfW9H+AtFkakfgZ57FDkV02ZPXuq+K7Z+HqjrIz0nkKF1MsNaWiDvZSxyY 4Gwh+Z7v5EnfG/0OI1nt0W6Zn7un/g3ZJS34b6qI9SredKgLwpWj+WW9AA7gkhGW SJvXFy5rFZMfXeSxVhxLy97H7jBtHIHTilErMwf5X36XLLTiXUBRQrCBXnlnmTBI gqxwbeNwYZoY7RFIwVDJOuB7HK5d5jtCKCqFjyzowN9V+P0= -----END CERTIFICATE-----Generated at Fri Aug 8 21:02:22 2025 by rpki-client