$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/CDA9BB546E0C11ED8BF41547C4F9AE02.roa File: CDA9BB546E0C11ED8BF41547C4F9AE02.roa (raw, json) Hash identifier: 5xUQVljU0BWWuc6LYolHHzG3Hqi8KmssX696YCKuce8= Subject key identifier: 00:5C:E3:D2:AD:AE:ED:99:E4:B7:15:98:18:BE:2D:D8:99:97:B3:ED Certificate issuer: /CN=A91F5216/serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Certificate serial: 01CB Authority key identifier: A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/CDA9BB546E0C11ED8BF41547C4F9AE02.roa Signing time: Sat 19 Apr 2025 02:28:37 +0000 ROA not before: Sat 19 Apr 2025 02:28:37 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55491 IP address blocks: 146.196.0.0/19 maxlen: 19 146.196.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 02:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 459 (0x1cb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5216, serialNumber=A841BDC5AFA9E9A0A95B88546113CA745EE963B5 Validity Not Before: Apr 19 02:28:37 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68030a55-bb36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:58:59:c7:17:06:b7:e2:30:08:3b:2c:63:13: 8b:1d:49:ad:2c:86:db:67:41:7a:d9:cf:9c:73:72: 37:c1:f0:a9:39:fe:4e:dd:b2:a4:9f:86:3a:e1:ae: 3c:9d:bf:42:16:5b:24:18:d1:0a:83:e0:ae:4f:d6: 44:54:b7:e6:40:1f:89:99:2c:a7:d4:05:03:ad:de: 99:b7:16:32:1c:08:34:46:f9:c4:ed:e4:0c:16:f6: 58:06:40:7e:2b:88:92:c9:fb:07:4c:22:70:1c:d2: 06:77:02:43:fb:7e:2b:b3:95:ef:32:6e:69:0d:aa: a1:bc:a2:db:9b:0f:b2:1f:be:7f:42:96:ff:56:bc: fd:93:05:e4:91:5a:d2:36:b8:33:57:3d:4c:d2:b7: ea:9f:2d:8e:4d:fc:de:d4:f6:ea:61:8f:34:e6:22: 65:68:56:83:c9:85:5b:61:fb:06:9a:ef:7f:d6:c6: 9e:7d:f9:16:55:9a:65:37:0a:cb:3c:32:1f:a7:72: f9:22:37:3c:4a:ee:b1:2c:07:3c:b5:60:f7:fb:30: 6f:0c:2a:91:51:dd:ef:83:8a:d4:16:73:4f:7a:83: 42:c8:e6:af:56:12:c5:7a:fb:eb:7b:b0:2c:36:29: 3c:97:a4:6e:a3:c5:44:0a:f2:d0:9e:1a:00:19:1a: 7f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:5C:E3:D2:AD:AE:ED:99:E4:B7:15:98:18:BE:2D:D8:99:97:B3:ED X509v3 Authority Key Identifier: keyid:A8:41:BD:C5:AF:A9:E9:A0:A9:5B:88:54:61:13:CA:74:5E:E9:63:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/qEG9xa-p6aCpW4hUYRPKdF7pY7U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/qEG9xa-p6aCpW4hUYRPKdF7pY7U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/5CD5E7306E0811EDBEED6284C4F9AE02/CDA9BB546E0C11ED8BF41547C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 146.196.0.0/19 Signature Algorithm: sha256WithRSAEncryption 47:4d:a6:6b:41:07:88:e1:3e:92:05:82:4a:5f:b0:ca:a5:b8: 5f:2f:8e:1a:6a:3d:ea:98:0f:90:00:1b:ac:58:69:9d:01:85: 91:98:0f:8e:f9:ad:7f:dc:4b:8d:14:0d:0e:30:45:f1:03:83: a2:fa:67:97:83:f0:29:06:ad:31:aa:2a:62:c5:0f:cc:bf:86: 15:7a:e5:b0:41:7a:e5:96:c6:1f:bb:95:e8:3b:4f:a4:22:37: 76:12:85:7a:9f:d3:e6:02:d4:60:94:c0:6c:e1:45:84:c1:5e: 48:0b:f3:70:70:1e:ac:38:57:56:a2:41:97:6b:24:bb:99:1d: 32:ae:ec:64:fd:ad:ac:25:f7:15:e8:0c:95:ee:ad:b1:3d:27: 8b:76:0c:b4:a3:ee:dd:67:dc:4f:1f:92:2a:f8:59:fb:5c:3f: 11:2d:31:1b:8a:b8:92:be:1d:31:4d:f5:3c:ab:28:ce:4d:f5: 02:f8:1c:0e:54:30:ca:ae:5d:f9:5e:cc:d4:2f:b8:ba:d6:33: 47:16:3c:e4:da:5a:0b:a4:c9:c8:1d:a1:d8:d4:c9:f9:92:a2: 76:0d:8c:35:57:29:13:df:b7:0d:ab:e1:fa:f6:23:f2:36:47: c4:24:98:2f:66:17:ee:c3:45:05:b7:a2:98:be:ce:38:e3:14: a3:fd:5e:4b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAcswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjUyMTYxMTAvBgNVBAUTKEE4NDFCREM1QUZBOUU5QTBBOTVCODg1NDYxMTNDQTc0 NUVFOTYzQjUwHhcNMjUwNDE5MDIyODM3WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAzMGE1NS1iYjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyFhZxxcGt+IwCDssYxOLHUmtLIbbZ0F62c+cc3I3wfCpOf5O3bKkn4Y64a48 nb9CFlskGNEKg+CuT9ZEVLfmQB+JmSyn1AUDrd6ZtxYyHAg0RvnE7eQMFvZYBkB+ K4iSyfsHTCJwHNIGdwJD+34rs5XvMm5pDaqhvKLbmw+yH75/Qpb/Vrz9kwXkkVrS NrgzVz1M0rfqny2OTfze1PbqYY805iJlaFaDyYVbYfsGmu9/1saeffkWVZplNwrL PDIfp3L5Ijc8Su6xLAc8tWD3+zBvDCqRUd3vg4rUFnNPeoNCyOavVhLFevvre7As Nik8l6Ruo8VECvLQnhoAGRp/GQIDAQABo4IClTCCApEwHQYDVR0OBBYEFABc49Kt ru2Z5LcVmBi+LdiZl7PtMB8GA1UdIwQYMBaAFKhBvcWvqemgqVuIVGETynRe6WO1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTIxNi81Q0Q1RTczMDZF MDgxMUVEQkVFRDYyODRDNEY5QUUwMi9xRUc5eGEtcDZhQ3BXNGhVWVJQS2RGN3BZ N1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3FFRzl4YS1wNmFDcFc0aFVZUlBLZEY3cFk3VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjUyMTYvNUNENUU3MzA2RTA4MTFFREJFRUQ2Mjg0QzRGOUFFMDIvQ0RBOUJCNTQ2 RTBDMTFFRDhCRjQxNTQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAWSxAAwDQYJKoZIhvcNAQELBQADggEBAEdNpmtBB4jhPpIF gkpfsMqluF8vjhpqPeqYD5AAG6xYaZ0BhZGYD475rX/cS40UDQ4wRfEDg6L6Z5eD 8CkGrTGqKmLFD8y/hhV65bBBeuWWxh+7leg7T6QiN3YShXqf0+YC1GCUwGzhRYTB XkgL83BwHqw4V1aiQZdrJLuZHTKu7GT9rawl9xXoDJXurbE9J4t2DLSj7t1n3E8f kir4WftcPxEtMRuKuJK+HTFN9TyrKM5N9QL4HA5UMMquXflezNQvuLrWM0cWPOTa WgukycgdodjUyfmSonYNjDVXKRPftw2r4fr2I/I2R8QkmC9mF+7DRQW3opi+zjjj FKP9Xks= -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:13 2025 by rpki-client