$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/27D35A2A7CFD11F0A33DEA21C4F9AE02.roa File: 27D35A2A7CFD11F0A33DEA21C4F9AE02.roa (raw, json) Hash identifier: WMBMTYm4zJmJb6l3lGaR3MIPCoKpE7rld4fHZdKyhLk= Subject key identifier: A2:F8:9D:79:B1:1B:7C:BB:94:8E:84:16:97:50:0E:BD:B4:C7:E1:05 Certificate issuer: /CN=A91EA9C0/serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Certificate serial: 30 Authority key identifier: 7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/27D35A2A7CFD11F0A33DEA21C4F9AE02.roa Signing time: Tue 19 Aug 2025 13:05:19 +0000 ROA not before: Tue 19 Aug 2025 13:05:19 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149419 IP address blocks: 165.99.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:24:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48 (0x30) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA9C0, serialNumber=7A730021113D24511D6E8B8562E724EC9E98251B Validity Not Before: Aug 19 13:05:19 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68a4768e-5d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:dc:b6:ba:db:23:6a:76:aa:7f:d4:cc:38: 1a:79:83:bf:29:2b:55:d2:de:c0:7e:f2:35:16:bf: 60:5d:50:8b:6b:6c:bc:22:8f:b2:a8:e8:30:a1:27: 20:ef:b8:3f:50:4d:f7:63:00:c3:66:a9:ae:8c:2f: 2a:80:65:04:ab:6d:74:92:d3:3b:31:f2:59:60:78: a7:07:02:85:9f:e7:cb:d1:a4:44:15:c2:fb:a8:b7: 63:8f:0b:a0:93:d3:e6:e8:f2:b3:3a:aa:b0:1b:42: dc:7e:80:76:36:3d:d0:db:b3:79:94:e3:c8:d5:4b: d1:64:59:0d:66:2b:3b:49:59:ae:f5:a1:47:73:86: 76:8b:9b:54:ca:3e:86:a2:d5:84:a4:b2:97:e8:48: 39:2e:56:21:68:81:c8:42:4b:8a:6d:f8:97:77:9c: 2a:8d:30:11:f0:f7:2b:aa:e9:de:48:3d:bf:02:06: b6:42:85:f5:9b:dd:49:70:fd:f0:90:2c:bb:55:33: e7:e5:a0:96:b8:fc:86:70:b0:b2:cb:5a:24:c2:c1: 74:61:dc:e2:24:b6:53:73:15:77:30:ad:71:c8:c1: d3:3e:18:9b:8a:45:e9:5e:e2:c6:b1:b0:38:ed:eb: 60:0e:a3:84:93:d0:8b:82:9f:6a:43:41:f2:ac:e3: d0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:F8:9D:79:B1:1B:7C:BB:94:8E:84:16:97:50:0E:BD:B4:C7:E1:05 X509v3 Authority Key Identifier: keyid:7A:73:00:21:11:3D:24:51:1D:6E:8B:85:62:E7:24:EC:9E:98:25:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/enMAIRE9JFEdbouFYuck7J6YJRs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/enMAIRE9JFEdbouFYuck7J6YJRs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9C0/529BC2FC388211F08CCB1866C4F9AE02/27D35A2A7CFD11F0A33DEA21C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.45.0/24 Signature Algorithm: sha256WithRSAEncryption c4:ca:40:fe:f0:25:b5:0e:db:02:8e:e6:5c:07:a6:7f:37:31: f8:c6:62:5f:63:0d:9e:64:60:d7:a3:1c:56:43:bb:e6:9e:af: 0b:eb:c8:eb:ba:1e:fb:18:d2:38:40:24:35:45:02:5a:76:45: e8:ad:ff:f4:2a:ba:14:ab:91:44:d4:17:b3:97:8e:f7:60:e9: aa:23:2b:c5:c5:3d:7d:26:32:7f:e9:58:83:ae:50:3d:b5:a3: 5e:3c:39:30:96:59:81:2b:10:87:84:15:f3:fc:c5:40:4e:45: e4:b7:ba:d4:6d:96:5a:91:ec:6b:68:fc:50:21:b1:39:38:89: de:cc:14:87:32:12:a0:07:1d:06:dd:e7:a7:ce:79:de:87:24: ee:e8:f2:38:4e:fc:d0:15:95:98:dd:38:55:3b:b9:bc:c1:4b: 83:f7:c7:92:d5:fe:4b:4d:19:7f:55:be:16:67:1a:71:e2:32: 6c:a0:6b:c3:a5:15:4d:58:72:fa:3e:00:d7:7c:8d:ac:14:04: 35:e6:85:00:c0:07:03:bd:7f:15:82:15:f3:a8:0e:21:b1:84: c7:cd:e2:6e:a0:91:f3:62:bd:ba:66:5a:b4:5c:30:06:0e:2c: 8e:3f:48:72:74:aa:4d:84:f1:d6:20:59:fb:d1:8b:13:70:14: 97:fd:6e:17 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBMDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QTlDMDExMC8GA1UEBRMoN0E3MzAwMjExMTNEMjQ1MTFENkU4Qjg1NjJFNzI0RUM5 RTk4MjUxQjAeFw0yNTA4MTkxMzA1MTlaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4YTQ3NjhlLTVkMDAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDH7ty2utsjanaqf9TMOBp5g78pK1XS3sB+8jUWv2BdUItrbLwij7Ko6DChJyDv uD9QTfdjAMNmqa6MLyqAZQSrbXSS0zsx8llgeKcHAoWf58vRpEQVwvuot2OPC6CT 0+bo8rM6qrAbQtx+gHY2PdDbs3mU48jVS9FkWQ1mKztJWa71oUdzhnaLm1TKPoai 1YSkspfoSDkuViFogchCS4pt+Jd3nCqNMBHw9yuq6d5IPb8CBrZChfWb3Ulw/fCQ LLtVM+floJa4/IZwsLLLWiTCwXRh3OIktlNzFXcwrXHIwdM+GJuKRele4saxsDjt 62AOo4ST0IuCn2pDQfKs49DDAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUovidebEb fLuUjoQWl1AOvbTH4QUwHwYDVR0jBBgwFoAUenMAIRE9JFEdbouFYuck7J6YJRsw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVBOUMwLzUyOUJDMkZDMzg4 MjExRjA4Q0NCMTg2NkM0RjlBRTAyL2VuTUFJUkU5SkZFZGJvdUZZdWNrN0o2WUpS cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvZW5NQUlSRTlKRkVkYm91Rll1Y2s3SjZZSlJzLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QTlDMC81MjlCQzJGQzM4ODIxMUYwOENDQjE4NjZDNEY5QUUwMi8yN0QzNUEyQTdD RkQxMUYwQTMzREVBMjFDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVjLTANBgkqhkiG9w0BAQsFAAOCAQEAxMpA/vAltQ7bAo7m XAemfzcx+MZiX2MNnmRg16McVkO75p6vC+vI67oe+xjSOEAkNUUCWnZF6K3/9Cq6 FKuRRNQXs5eO92DpqiMrxcU9fSYyf+lYg65QPbWjXjw5MJZZgSsQh4QV8/zFQE5F 5Le61G2WWpHsa2j8UCGxOTiJ3swUhzISoAcdBt3np8553ock7ujyOE780BWVmN04 VTu5vMFLg/fHktX+S00Zf1W+FmcaceIybKBrw6UVTVhy+j4A13yNrBQENeaFAMAH A71/FYIV86gOIbGEx83ibqCR82K9umZatFwwBg4sjj9IcnSqTYTx1iBZ+9GLE3AU l/1uFw== -----END CERTIFICATE-----Generated at Wed Nov 5 16:12:37 2025 by rpki-client