$ rpki-client -vvf rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa File: 505CFB7465D211EFB4348E63C4F9AE02.roa (raw, json) Hash identifier: wu0wIwRs7YF0fDot1PZ0W0ESHYfBwxbZk+Z5Rtxb3Ik= Subject key identifier: C1:F0:B2:69:6A:86:16:28:B9:F9:EC:9B:71:CB:7A:93:A8:83:33:16 Certificate issuer: /CN=A91EDB37/serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Certificate serial: 0711 Authority key identifier: 95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa Signing time: Wed 18 Jun 2025 08:49:05 +0000 ROA not before: Wed 18 Jun 2025 08:49:05 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 4229 IP address blocks: 162.128.0.0/23 maxlen: 23 162.128.2.0/23 maxlen: 24 162.128.41.0/24 maxlen: 24 162.128.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 22:04:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1809 (0x711) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EDB37, serialNumber=95FEBE93A33A3394BD1F60DCBBDDB9FDE072B7F3 Validity Not Before: Jun 18 08:49:05 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=68527d80-e1bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:a3:e6:7c:f6:e8:08:08:1d:82:5a:b7:2f:1d: bc:3a:26:57:0f:ff:69:19:c4:db:a2:21:a1:76:07: 6f:6d:a7:42:24:77:f9:74:c1:6d:e8:5b:8b:d8:33: ba:d4:13:52:b7:15:d5:dc:b0:fe:66:28:e3:32:ef: a8:46:a8:6a:cb:f4:8e:14:e0:ef:36:73:b4:9e:70: f0:8f:d7:b9:54:59:e2:79:27:e7:0d:3e:49:45:b9: bb:f9:40:ad:3f:60:1e:ef:a5:73:ce:b0:bc:5f:6b: 0a:d6:03:fe:05:2f:a2:92:55:b1:ec:3f:33:e8:ab: 79:1b:e8:42:bd:ff:ae:86:d3:fe:c6:3b:79:11:44: 56:2d:7d:fb:73:f5:ea:93:b7:0d:7e:46:4e:7b:11: 6e:b9:03:d3:0e:67:fa:55:ee:2b:6d:6e:aa:96:95: 95:06:bf:c6:bf:c9:21:7b:b3:7e:6f:d6:e4:fa:f3: e3:e1:35:2c:41:64:9a:ce:90:ea:ee:56:2c:66:5b: 11:f0:62:0b:24:96:b6:f5:ad:6e:f1:7a:4e:9e:66: 89:ee:27:75:10:7e:2d:2d:15:64:52:3e:de:e6:3f: 57:a2:5f:b8:10:4c:22:8b:85:d0:ba:20:d1:85:40: 98:80:0d:87:ba:87:f8:d8:48:74:9e:e7:7f:00:4d: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F0:B2:69:6A:86:16:28:B9:F9:EC:9B:71:CB:7A:93:A8:83:33:16 X509v3 Authority Key Identifier: keyid:95:FE:BE:93:A3:3A:33:94:BD:1F:60:DC:BB:DD:B9:FD:E0:72:B7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/lf6-k6M6M5S9H2Dcu925_eByt_M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/lf6-k6M6M5S9H2Dcu925_eByt_M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EDB37/4DE635E078A011EB950D3175C4F9AE02/505CFB7465D211EFB4348E63C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 162.128.0.0/22 162.128.41.0-162.128.42.255 Signature Algorithm: sha256WithRSAEncryption 12:62:a6:4c:e9:4b:15:7b:09:27:d6:e4:4a:6e:15:79:81:64: 06:ad:6b:71:fd:b8:72:ff:e1:3e:2d:51:e2:39:52:c9:c6:b5: 79:b5:b7:12:2a:66:5a:bd:74:78:3c:7a:55:cd:c7:f8:54:35: 91:8f:56:2f:5d:6e:a9:f6:04:23:ef:40:3a:9c:9f:63:3f:4a: 26:34:06:8e:01:4c:72:5e:ff:05:6c:8d:5b:14:43:8d:9d:8b: b9:5f:10:29:ca:e2:6c:74:e8:f8:e6:49:3d:e5:69:08:43:72: 5e:00:e3:2f:16:52:c3:a1:37:cf:61:fa:2c:43:40:73:ba:51: 59:b8:d1:a0:2c:6b:12:bd:91:2a:3e:22:7e:c3:50:07:d8:92: 04:8b:40:3b:a7:5f:33:67:e4:02:55:ad:14:32:f0:f1:ad:3f: 49:82:c7:a3:97:be:d4:26:57:75:ad:3f:f6:26:15:cc:08:46: 71:62:bb:27:07:ba:7c:fe:c3:b9:d3:a2:47:ba:2d:08:3f:d0: 67:4a:3e:35:94:3a:0c:2e:a3:e3:71:3c:39:44:5d:05:a6:eb: 1a:95:b5:d8:27:a5:67:2c:b0:9f:ee:c4:1f:2b:35:c6:0b:f5: 81:f2:af:e9:50:d6:1d:c1:85:fa:84:5b:f3:c4:83:12:71:21: 09:1d:d3:80 -----BEGIN CERTIFICATE----- MIIFfzCCBGegAwIBAgICBxEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RURCMzcxMTAvBgNVBAUTKDk1RkVCRTkzQTMzQTMzOTRCRDFGNjBEQ0JCRERCOUZE RTA3MkI3RjMwHhcNMjUwNjE4MDg0OTA1WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODUyN2Q4MC1lMWJiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8qPmfPboCAgdglq3Lx28OiZXD/9pGcTboiGhdgdvbadCJHf5dMFt6FuL2DO6 1BNStxXV3LD+ZijjMu+oRqhqy/SOFODvNnO0nnDwj9e5VFnieSfnDT5JRbm7+UCt P2Ae76VzzrC8X2sK1gP+BS+iklWx7D8z6Kt5G+hCvf+uhtP+xjt5EURWLX37c/Xq k7cNfkZOexFuuQPTDmf6Ve4rbW6qlpWVBr/Gv8khe7N+b9bk+vPj4TUsQWSazpDq 7lYsZlsR8GILJJa29a1u8XpOnmaJ7id1EH4tLRVkUj7e5j9Xol+4EEwii4XQuiDR hUCYgA2Huof42Eh0nud/AE0hfwIDAQABo4ICozCCAp8wHQYDVR0OBBYEFMHwsmlq hhYoufnsm3HLepOogzMWMB8GA1UdIwQYMBaAFJX+vpOjOjOUvR9g3Lvduf3gcrfz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFREIzNy80REU2MzVFMDc4 QTAxMUVCOTUwRDMxNzVDNEY5QUUwMi9sZjYtazZNNk01UzlIMkRjdTkyNV9lQnl0 X00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL2xmNi1rNk02TTVTOUgyRGN1OTI1X2VCeXRfTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RURCMzcvNERFNjM1RTA3OEEwMTFFQjk1MEQzMTc1QzRGOUFFMDIvNTA1Q0ZCNzQ2 NUQyMTFFRkI0MzQ4RTYzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLQYIKwYBBQUHAQcBAf8E HjAcMBoEAgABMBQDBAKigAAwDAMEAKKAKQMEAKKAKjANBgkqhkiG9w0BAQsFAAOC AQEAEmKmTOlLFXsJJ9bkSm4VeYFkBq1rcf24cv/hPi1R4jlSyca1ebW3EipmWr10 eDx6Vc3H+FQ1kY9WL11uqfYEI+9AOpyfYz9KJjQGjgFMcl7/BWyNWxRDjZ2LuV8Q KcribHTo+OZJPeVpCENyXgDjLxZSw6E3z2H6LENAc7pRWbjRoCxrEr2RKj4ifsNQ B9iSBItAO6dfM2fkAlWtFDLw8a0/SYLHo5e+1CZXda0/9iYVzAhGcWK7Jwe6fP7D udOiR7otCD/QZ0o+NZQ6DC6j43E8OURdBabrGpW12CelZyywn+7EHys1xgv1gfKv 6VDWHcGF+oRb88SDEnEhCR3TgA== -----END CERTIFICATE-----Generated at Sat Jun 21 07:17:52 2025 by rpki-client