$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa File: 00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa (raw, json) Hash identifier: S6XJldwVWEMnmvJiGl/r0iO9V7JTGSk9MMM8z1zA1+0= Subject key identifier: 16:84:1D:09:1F:DB:BC:C1:EB:27:1B:CA:98:82:75:CB:7B:98:8D:E2 Certificate issuer: /CN=A91EC3C9/serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Certificate serial: 0B Authority key identifier: 17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa Signing time: Tue 27 May 2025 08:17:18 +0000 ROA not before: Tue 27 May 2025 08:17:18 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 138575 IP address blocks: 165.99.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 12 Nov 2025 07:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11 (0xb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC3C9, serialNumber=1784AF68CF76D997B99F774063780DB299B54A93 Validity Not Before: May 27 08:17:18 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6835750d-e7d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:68:30:c8:fb:a2:71:dc:f4:50:dd:9f:d7:a1: 38:e0:9e:96:16:db:fc:4e:0f:81:0d:db:3b:77:20: 9f:b9:01:d1:9f:29:d6:40:64:5c:da:c6:26:73:b8: 3d:c2:2f:a3:41:b6:25:1b:eb:21:55:a5:0f:ef:5a: 93:1a:13:02:e1:f4:a7:3e:54:0c:3e:59:e0:c1:fd: c5:f2:30:07:31:d5:4e:b7:06:60:87:9e:fb:ef:92: 30:6d:de:ea:7d:24:f2:9f:60:4a:d5:fe:01:f8:22: 79:a1:b2:d9:50:4e:f6:cf:7e:6b:23:ea:74:25:35: 78:40:02:61:02:8c:4e:3e:6f:24:11:c4:1e:e4:f5: c9:86:da:6a:f1:18:40:b8:a7:79:0f:d8:9f:de:26: cf:e5:ca:78:de:3b:7b:92:f2:7c:5e:d6:5c:04:8a: 1e:9a:f6:de:c6:e8:b7:65:c0:49:43:10:57:0b:e4: d1:ac:51:0f:5a:5b:01:5b:f4:ea:37:16:a4:b3:ed: 7b:d5:23:1c:53:ac:91:06:08:f5:d7:30:62:d9:1a: 4a:66:55:c6:d9:15:57:57:e5:7e:f8:13:e1:8d:38: 77:9d:24:c3:38:f2:1e:2f:5d:4b:c2:78:e2:7d:b4: d1:9d:37:27:b7:c8:dd:f0:99:57:0f:72:86:6a:fb: b1:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:84:1D:09:1F:DB:BC:C1:EB:27:1B:CA:98:82:75:CB:7B:98:8D:E2 X509v3 Authority Key Identifier: keyid:17:84:AF:68:CF:76:D9:97:B9:9F:77:40:63:78:0D:B2:99:B5:4A:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/F4SvaM922Ze5n3dAY3gNspm1SpM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4SvaM922Ze5n3dAY3gNspm1SpM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/14A7B26233FF11F098AB8F20C4F9AE02/00DDE7DA3AD311F09AB8AF3EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 165.99.81.0/24 Signature Algorithm: sha256WithRSAEncryption 77:86:54:ea:24:43:ae:0b:22:ff:bd:00:28:09:4a:1e:67:01: 66:ce:5d:df:db:30:10:c4:f5:e8:8d:6f:5c:df:f0:f8:3e:f8: 26:c1:73:99:cb:45:a9:58:50:6c:c0:8f:af:29:f8:de:9c:07: be:2a:3e:d3:b5:9b:e1:16:9a:fe:81:7d:1c:16:14:46:2d:31: 9f:d5:d4:32:6f:b4:7a:18:9d:b2:90:be:8c:5a:e9:08:47:f3: 30:97:51:de:df:a0:a9:d1:1b:a8:08:2a:57:cd:70:99:3f:ac: 20:de:bc:bd:93:a2:ad:49:19:7c:71:93:0b:09:61:50:32:75: 74:b1:51:69:dd:01:9d:2d:4c:8f:36:72:3b:22:62:89:94:65: 34:d1:a1:dd:2c:e9:18:fe:e9:a3:c8:d7:77:2d:f9:22:de:fb: 98:98:41:5f:5c:f0:32:20:92:58:29:eb:ee:35:b5:20:64:e3: a8:61:d3:19:c9:d5:15:37:b8:95:a8:ab:9d:c8:99:5e:90:ef: 23:9d:8d:70:47:b3:4d:aa:f0:d0:7c:63:eb:c0:e2:5d:86:3f: ea:b3:09:17:fb:f7:d8:51:35:a1:9a:38:3f:dd:1c:3a:0b:ed: 98:71:8a:6c:e0:40:b3:a7:c5:4c:a8:43:32:88:b5:f0:97:fe: 8c:aa:15:a7 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBCzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFF QzNDOTExMC8GA1UEBRMoMTc4NEFGNjhDRjc2RDk5N0I5OUY3NzQwNjM3ODBEQjI5 OUI1NEE5MzAeFw0yNTA1MjcwODE3MThaFw0yNjA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MzU3NTBkLWU3ZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCWaDDI+6Jx3PRQ3Z/XoTjgnpYW2/xOD4EN2zt3IJ+5AdGfKdZAZFzaxiZzuD3C L6NBtiUb6yFVpQ/vWpMaEwLh9Kc+VAw+WeDB/cXyMAcx1U63BmCHnvvvkjBt3up9 JPKfYErV/gH4InmhstlQTvbPfmsj6nQlNXhAAmECjE4+byQRxB7k9cmG2mrxGEC4 p3kP2J/eJs/lynjeO3uS8nxe1lwEih6a9t7G6LdlwElDEFcL5NGsUQ9aWwFb9Oo3 FqSz7XvVIxxTrJEGCPXXMGLZGkpmVcbZFVdX5X74E+GNOHedJMM48h4vXUvCeOJ9 tNGdNye3yN3wmVcPcoZq+7E1AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUFoQdCR/b vMHrJxvKmIJ1y3uYjeIwHwYDVR0jBBgwFoAUF4SvaM922Ze5n3dAY3gNspm1SpMw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUVDM0M5LzE0QTdCMjYyMzNG RjExRjA5OEFCOEYyMEM0RjlBRTAyL0Y0U3ZhTTkyMlplNW4zZEFZM2dOc3BtMVNw TS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG RDFGRjIvRjRTdmFNOTIyWmU1bjNkQVkzZ05zcG0xU3BNLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF QzNDOS8xNEE3QjI2MjMzRkYxMUYwOThBQjhGMjBDNEY5QUUwMi8wMERERTdEQTNB RDMxMUYwOUFCOEFGM0VDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAKVjUTANBgkqhkiG9w0BAQsFAAOCAQEAd4ZU6iRDrgsi/70A KAlKHmcBZs5d39swEMT16I1vXN/w+D74JsFzmctFqVhQbMCPryn43pwHvio+07Wb 4Raa/oF9HBYURi0xn9XUMm+0ehidspC+jFrpCEfzMJdR3t+gqdEbqAgqV81wmT+s IN68vZOirUkZfHGTCwlhUDJ1dLFRad0BnS1MjzZyOyJiiZRlNNGh3SzpGP7po8jX dy35It77mJhBX1zwMiCSWCnr7jW1IGTjqGHTGcnVFTe4lairnciZXpDvI52NcEez Tarw0Hxj68DiXYY/6rMJF/v32FE1oZo4P90cOgvtmHGKbOBAs6fFTKhDMoi18Jf+ jKoVpw== -----END CERTIFICATE-----Generated at Wed Nov 5 11:26:31 2025 by rpki-client