$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa File: 505CFB7465D211EFB4348E63C4F9AE02.roa (raw, json) Hash identifier: 7fSNvionSfHs4PWMuFIAqaMrKI/OBWHvuf1iX2gvFyY= Subject key identifier: D6:A8:E6:C3:42:64:98:6B:C7:B6:90:86:B7:BE:9A:24:54:42:97:E2 Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Certificate serial: 0741 Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa Signing time: Thu 24 Jul 2025 22:34:40 +0000 ROA not before: Thu 24 Jul 2025 22:34:40 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 4229 IP address blocks: 162.128.0.0/23 maxlen: 23 162.128.2.0/23 maxlen: 24 162.128.41.0/24 maxlen: 24 162.128.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 18 Aug 2025 02:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1857 (0x741) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Validity Not Before: Jul 24 22:34:40 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6882b500-8140 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4f:b0:d2:c8:cf:bc:5b:8c:47:66:8f:fc:c3: e2:a1:87:d1:37:5b:85:96:5d:fe:13:cf:35:99:e1: dc:1f:49:bf:44:b5:55:6a:8a:3f:ef:0e:a0:66:f0: d6:39:08:05:a1:5e:ad:0d:3f:c2:11:ce:1e:0a:5e: c2:38:85:78:86:d8:a9:16:52:f4:fe:ac:f2:2b:10: c8:24:af:3f:02:84:c9:19:1f:97:0b:00:b7:8e:8d: 92:a1:af:7b:6c:04:94:fd:c6:e7:89:ac:1f:33:1d: a9:ae:51:04:f9:de:27:ee:de:d4:db:3a:1f:e0:1f: 8a:2f:8c:b8:47:30:db:34:b7:e3:89:16:25:6f:4d: 78:fd:fe:a0:37:5b:2b:2e:60:26:25:c5:44:1b:52: 25:31:52:05:26:2e:d2:10:8e:d5:b1:1b:a8:2c:23: 1c:60:55:c8:51:4c:d2:62:45:53:b0:40:da:b6:a8: cd:d9:14:44:db:e3:53:77:33:22:d5:dd:38:65:97: c2:93:2b:a0:fd:86:ea:2a:ac:f4:b8:6e:84:11:77: e9:f6:df:a2:13:cf:58:da:58:18:9d:61:5f:66:51: 1a:1e:c6:15:18:cf:9b:fa:20:83:60:09:87:10:04: ee:7c:67:af:25:b0:74:24:40:4a:e1:38:46:a2:ef: 91:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A8:E6:C3:42:64:98:6B:C7:B6:90:86:B7:BE:9A:24:54:42:97:E2 X509v3 Authority Key Identifier: keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 162.128.0.0/22 162.128.41.0-162.128.42.255 Signature Algorithm: sha256WithRSAEncryption 82:c0:e1:a2:8d:c7:2a:30:97:33:50:84:82:8d:c0:e4:94:2c: e0:aa:16:de:c1:22:af:f7:fc:74:c3:eb:5c:82:bc:ac:3c:62: 6d:e3:3a:5b:5c:33:98:4b:68:5d:a4:99:ca:d8:ab:23:d4:04: f0:c5:7e:72:87:a5:7a:b0:26:db:a0:8a:8c:85:b2:a5:d1:ad: 8c:5a:b8:c2:b4:d4:9f:17:76:71:08:89:87:24:ba:91:78:05: 51:55:14:fc:55:c8:29:12:0a:83:cc:5b:a4:33:46:4c:fc:a4: 02:aa:02:12:bd:8c:81:c5:50:fd:89:74:80:e0:54:42:13:df: 9a:70:3a:af:dd:e5:76:1a:b8:b5:81:63:74:6e:81:fa:71:8e: 36:45:02:ea:fa:25:ad:ad:0f:7d:8d:09:71:13:f0:73:2f:7e: a1:81:ec:96:c9:a0:75:0f:b3:e0:b3:3b:60:50:10:95:2e:a4: 14:8e:f9:58:c7:92:7b:15:85:5b:d7:24:59:4f:af:e6:72:45: b6:0a:7b:d8:61:80:1f:96:74:74:05:4c:b2:eb:66:76:1b:a6: 0b:16:09:f1:c9:09:09:b2:ec:34:f0:db:ea:93:0e:be:ff:f1: 48:98:8e:19:b6:66:c5:a0:51:27:8f:64:0e:ca:32:05:2f:b9: c7:47:c6:9f -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICB0EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE RTA3MkI3RjMwHhcNMjUwNzI0MjIzNDQwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyYjUwMC04MTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0k+w0sjPvFuMR2aP/MPioYfRN1uFll3+E881meHcH0m/RLVVaoo/7w6gZvDW OQgFoV6tDT/CEc4eCl7COIV4htipFlL0/qzyKxDIJK8/AoTJGR+XCwC3jo2Soa97 bASU/cbniawfMx2prlEE+d4n7t7U2zof4B+KL4y4RzDbNLfjiRYlb014/f6gN1sr LmAmJcVEG1IlMVIFJi7SEI7VsRuoLCMcYFXIUUzSYkVTsEDatqjN2RRE2+NTdzMi 1d04ZZfCkyug/YbqKqz0uG6EEXfp9t+iE89Y2lgYnWFfZlEaHsYVGM+b+iCDYAmH EATufGevJbB0JEBK4ThGou+RtwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFNao5sNC ZJhrx7aQhre+miRUQpfiMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0 X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURCMzcvNERFNjM1RTA3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvNTA1Q0ZCNzQ2 NUQyMTFFRkI0MzQ4RTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAKigAAwDAMEAKKAKQMEAKKAKjANBgkqhkiG9w0BAQsFAAOC AQEAgsDhoo3HKjCXM1CEgo3A5JQs4KoW3sEir/f8dMPrXIK8rDxibeM6W1wzmEto XaSZytirI9QE8MV+coelerAm26CKjIWypdGtjFq4wrTUnxd2cQiJhyS6kXgFUVUU /FXIKRIKg8xbpDNGTPykAqoCEr2MgcVQ/Yl0gOBUQhPfmnA6r93ldhq4tYFjdG6B +nGONkUC6volra0PfY0JcRPwcy9+oYHslsmgdQ+z4LM7YFAQlS6kFI75WMeSexWF W9ckWU+v5nJFtgp72GGAH5Z0dAVMsutmdhumCxYJ8ckJCbLsNPDb6pMOvv/xSJiO GbZmxaBRJ49kDsoyBS+5x0fGnw== -----END CERTIFICATE-----Generated at Tue Aug 12 14:49:07 2025 by rpki-client