$ rpki-client -vvf rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/54B32544D84711EF81BD1E0BC4F9AE02.roa File: 54B32544D84711EF81BD1E0BC4F9AE02.roa (raw, json) Hash identifier: n/Sc1HZXxr+QB2+UH8INg78Itmv5yzjeOuf4NXzLeAU= Subject key identifier: 2B:CA:9D:05:C5:E8:8B:83:EE:D2:4A:30:BE:8E:8D:27:37:83:D6:6A Certificate issuer: /CN=A9111926/serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C Certificate serial: 0BBD Authority key identifier: 6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/54B32544D84711EF81BD1E0BC4F9AE02.roa Signing time: Thu 10 Apr 2025 03:31:58 +0000 ROA not before: Thu 10 Apr 2025 03:31:58 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 38442 IP address blocks: 27.123.128.0/18 maxlen: 24 103.244.228.0/22 maxlen: 24 183.81.128.0/20 maxlen: 24 2401:5100::/32 maxlen: 40 2401:5100:300::/48 maxlen: 48 2401:5100:301::/48 maxlen: 48 2401:5100:302::/48 maxlen: 48 2401:5100:303::/48 maxlen: 48 2401:5100:308::/48 maxlen: 48 2401:5100:309::/48 maxlen: 48 2401:5100:30a::/48 maxlen: 48 2401:5100:30b::/48 maxlen: 48 2401:5100:2300::/46 maxlen: 46 2401:5100:2300::/48 maxlen: 48 2401:5100:2301::/48 maxlen: 48 2401:5100:2302::/48 maxlen: 48 2401:5100:2303::/48 maxlen: 48 2401:5100:2308::/48 maxlen: 48 2401:5100:2309::/48 maxlen: 48 2401:5100:230a::/48 maxlen: 48 2401:5100:230b::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:53:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3005 (0xbbd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9111926, serialNumber=6F23BB4BE82F34B0E7461279520C73977AB1D23C Validity Not Before: Apr 10 03:31:58 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67f73bae-1178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:80:bb:9f:4b:1d:3c:bf:65:a2:42:1c:da:3b: 57:97:58:db:84:95:3f:3a:51:1d:da:8d:e9:18:45: 6e:8d:75:10:5e:1d:01:0b:e1:70:49:e9:f5:b1:bd: 83:36:6e:51:d7:2e:6a:bb:eb:01:f9:74:8d:e3:6f: 26:85:6c:35:85:26:80:cf:fd:35:55:e5:49:e1:9a: 84:65:59:83:0a:b5:43:65:2e:d3:c4:bf:3b:12:9a: 60:52:ec:5d:ba:a3:f6:a5:8a:7b:33:69:dd:cb:07: 0f:43:f4:a3:ca:2f:2f:75:b9:83:e7:40:ae:e1:52: e8:b3:00:dc:02:88:49:5e:9b:9f:35:3d:6f:d4:bf: 47:c3:ec:e6:72:7e:64:b0:a8:70:22:de:c0:a3:11: 2e:23:c4:43:8b:71:1e:ff:72:7c:65:8f:28:c5:16: 6c:cf:b8:3f:83:d1:22:41:8d:57:3b:f3:ab:d2:5e: f5:90:56:cc:1a:4a:fb:8b:44:43:7f:e3:9a:d8:16: d7:0a:84:c0:95:ef:a7:ed:dc:bd:0c:f8:7a:cd:f5: 71:ab:f5:f3:c7:ff:49:ac:16:7d:35:ac:30:8b:9e: 17:08:f6:b3:f0:7e:d1:a1:92:24:b4:42:7f:9f:12: 9c:88:ca:9b:00:fc:7e:ec:36:77:c4:d1:47:88:27: ab:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:CA:9D:05:C5:E8:8B:83:EE:D2:4A:30:BE:8E:8D:27:37:83:D6:6A X509v3 Authority Key Identifier: keyid:6F:23:BB:4B:E8:2F:34:B0:E7:46:12:79:52:0C:73:97:7A:B1:D2:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/byO7S-gvNLDnRhJ5Ugxzl3qx0jw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111926/7C6A0E4421FF11EAA7232A3DC4F9AE02/54B32544D84711EF81BD1E0BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.123.128.0/18 103.244.228.0/22 183.81.128.0/20 IPv6: 2401:5100::/32 Signature Algorithm: sha256WithRSAEncryption ad:8b:f4:8b:09:7a:a8:6b:d4:a2:9c:51:e9:31:39:ed:fd:47: e4:07:e5:9d:c8:4a:d2:97:da:e5:67:32:f3:ab:48:a3:54:3c: bd:e7:81:2a:70:ce:47:e9:e0:e0:f2:bd:e0:ae:15:47:c2:2b: c8:d0:ec:34:66:ec:0a:a2:2e:2f:7f:8f:48:fd:be:6e:4a:9a: e0:90:59:a9:07:d8:a5:52:36:c0:a3:a4:42:cb:25:87:5e:6c: 85:7e:5e:9c:dd:0a:b4:bb:c5:64:87:58:bb:43:a1:81:89:17: 4d:b8:c7:20:3a:6c:7f:ca:f9:55:5f:66:6a:3d:29:7d:9c:4b: b1:c0:2f:9f:80:39:e4:07:5f:c8:a6:77:86:7f:94:cf:1a:02: 5e:30:c7:3a:d5:c9:f0:9a:7f:50:46:5f:9d:3e:02:eb:63:db: ca:c0:c2:41:38:4d:88:7c:dd:db:56:1d:6d:59:9b:5f:c3:b0: 8a:ab:f1:c0:b5:6f:68:e9:53:dd:5f:48:d3:5a:98:5d:5f:aa: b2:46:96:ad:2f:00:16:6b:1c:30:bf:27:b5:43:8c:c2:a6:f8: f6:b4:18:bc:12:3b:c1:46:52:b1:86:89:7f:05:33:a9:0b:57: f4:f5:7f:ee:c6:5b:14:25:b0:3f:bc:35:ff:cc:48:22:7f:7e: 48:16:67:a9 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICC70wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTE5MjYxMTAvBgNVBAUTKDZGMjNCQjRCRTgyRjM0QjBFNzQ2MTI3OTUyMEM3Mzk3 N0FCMUQyM0MwHhcNMjUwNDEwMDMzMTU4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y3M2JhZS0xMTc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA14C7n0sdPL9lokIc2jtXl1jbhJU/OlEd2o3pGEVujXUQXh0BC+FwSen1sb2D Nm5R1y5qu+sB+XSN428mhWw1hSaAz/01VeVJ4ZqEZVmDCrVDZS7TxL87EppgUuxd uqP2pYp7M2ndywcPQ/Sjyi8vdbmD50Cu4VLoswDcAohJXpufNT1v1L9Hw+zmcn5k sKhwIt7AoxEuI8RDi3Ee/3J8ZY8oxRZsz7g/g9EiQY1XO/Or0l71kFbMGkr7i0RD f+Oa2BbXCoTAle+n7dy9DPh6zfVxq/Xzx/9JrBZ9Nawwi54XCPaz8H7RoZIktEJ/ nxKciMqbAPx+7DZ3xNFHiCerAQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFCvKnQXF 6IuD7tJKML6OjSc3g9ZqMB8GA1UdIwQYMBaAFG8ju0voLzSw50YSeVIMc5d6sdI8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTkyNi83QzZBMEU0NDIx RkYxMUVBQTcyMzJBM0RDNEY5QUUwMi9ieU83Uy1ndk5MRG5SaEo1VWd4emwzcXgw ancuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2J5TzdTLWd2TkxEblJoSjVVZ3h6bDNxeDBqdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTE5MjYvN0M2QTBFNDQyMUZGMTFFQUE3MjMyQTNEQzRGOUFFMDIvNTRCMzI1NDRE ODQ3MTFFRjgxQkQxRTBCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAYbe4ADBAJn9OQDBAS3UYAwDQQCAAIwBwMFACQBUQAwDQYJ KoZIhvcNAQELBQADggEBAK2L9IsJeqhr1KKcUekxOe39R+QH5Z3IStKX2uVnMvOr SKNUPL3ngSpwzkfp4ODyveCuFUfCK8jQ7DRm7AqiLi9/j0j9vm5KmuCQWakH2KVS NsCjpELLJYdebIV+XpzdCrS7xWSHWLtDoYGJF024xyA6bH/K+VVfZmo9KX2cS7HA L5+AOeQHX8imd4Z/lM8aAl4wxzrVyfCaf1BGX50+Autj28rAwkE4TYh83dtWHW1Z m1/DsIqr8cC1b2jpU91fSNNamF1fqrJGlq0vABZrHDC/J7VDjMKm+Pa0GLwSO8FG UrGGiX8FM6kLV/T1f+7GWxQlsD+8Nf/MSCJ/fkgWZ6k= -----END CERTIFICATE-----Generated at Sat Apr 26 15:25:58 2025 by rpki-client