$ rpki-client -vvf rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/AA5E96065B9F11EF9F1B175DC4F9AE02.roa File: AA5E96065B9F11EF9F1B175DC4F9AE02.roa (raw, json) Hash identifier: 835GCMndjNXvDx8DWI9YwArs6Gdw+YBn2q/Ep2PzpX0= Subject key identifier: 40:3C:3E:1F:04:2A:37:F7:B8:CB:79:6D:B1:DC:02:92:71:57:67:28 Certificate issuer: /CN=A91122B3/serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Certificate serial: 7E Authority key identifier: 23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/AA5E96065B9F11EF9F1B175DC4F9AE02.roa Signing time: Wed 09 Apr 2025 05:42:21 +0000 ROA not before: Wed 09 Apr 2025 05:42:21 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 26658 IP address blocks: 103.212.72.0/22 maxlen: 22 139.5.180.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:35:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 126 (0x7e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91122B3, serialNumber=23C0B2D7ACE109D3DFE83AEBEF2EA3149C5CAC17 Validity Not Before: Apr 9 05:42:21 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f608bd-7289 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:af:47:3b:d1:65:38:f5:7f:8c:bf:a3:4f:bc: 77:c1:ff:41:ae:54:0e:22:3f:eb:d9:63:04:b2:e4: 54:d5:dc:fd:98:7b:33:c3:35:79:db:ae:12:8a:fc: 9b:c9:11:e9:13:fe:80:01:3a:66:2c:1a:95:91:19: c8:2d:dc:f0:ea:8d:7b:89:78:42:72:a7:00:ea:3d: 7f:0c:cc:1c:ac:f2:08:54:62:29:bf:07:0a:f0:c2: 48:2b:83:6d:64:d3:70:87:7b:44:c8:32:64:d6:db: 71:66:c4:88:f0:c5:1d:0f:b6:42:f8:33:21:96:e0: 03:31:69:f0:a6:62:17:1e:e5:92:c7:ce:78:5c:71: 82:da:aa:07:70:34:d9:16:0e:19:5a:c1:ce:73:c1: af:2f:29:00:60:dc:0a:38:5e:6c:01:ee:28:3d:26: 92:69:d4:7f:e1:61:6c:50:c3:85:b5:78:86:eb:d0: b1:9a:f7:8c:14:58:8d:20:03:fe:f6:d7:06:8d:50: ea:03:a9:b7:4b:bc:09:90:7f:20:78:13:19:3d:36: 7b:e7:57:c6:42:07:a9:5e:79:88:95:c7:d6:63:8f: 3a:a8:90:85:fe:e5:68:97:b7:ae:2c:c6:63:d5:49: 35:6c:c1:44:11:6f:60:19:8d:20:12:36:dc:ce:fe: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:3C:3E:1F:04:2A:37:F7:B8:CB:79:6D:B1:DC:02:92:71:57:67:28 X509v3 Authority Key Identifier: keyid:23:C0:B2:D7:AC:E1:09:D3:DF:E8:3A:EB:EF:2E:A3:14:9C:5C:AC:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/I8Cy16zhCdPf6Drr7y6jFJxcrBc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I8Cy16zhCdPf6Drr7y6jFJxcrBc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91122B3/5E4D47625B9F11EFA14BBB5CC4F9AE02/AA5E96065B9F11EF9F1B175DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.212.72.0/22 139.5.180.0/22 Signature Algorithm: sha256WithRSAEncryption 5a:1c:0a:10:9d:47:35:86:4e:e2:90:3e:fc:f2:c0:38:4c:43: 96:e7:4e:a6:09:06:d4:20:04:e3:0e:b5:20:7d:6c:22:4e:b2: 8e:88:64:e1:9b:21:ed:f6:b9:3c:3c:27:c6:63:04:62:a3:da: f7:68:06:18:90:9e:be:2b:25:da:e1:b9:fa:23:d3:4c:3f:ae: 2d:da:26:a0:26:3e:63:96:0b:73:6b:c3:5a:2b:bc:70:49:a7: 0c:2d:16:93:14:4b:9f:00:02:b1:60:2e:9c:50:07:04:b1:1a: 34:44:b7:2d:9e:86:40:bb:aa:d6:af:39:5d:17:af:59:86:59: d6:3e:b8:58:ce:cb:2a:57:16:5d:73:1a:f5:b3:58:6b:7c:5b: 66:20:9f:98:99:6d:24:0d:b3:fe:70:cc:5c:8a:6b:e1:33:69: 52:6b:b9:30:d3:bd:04:c5:4a:77:16:d3:0f:c6:a0:22:76:31: 3a:53:34:b8:b1:af:03:30:ee:1e:5d:df:67:14:14:63:f6:b1: e1:bf:2e:4b:a1:2c:e7:10:b1:d7:17:81:5b:ff:89:bf:67:30: e6:f8:f5:01:b7:98:ff:1c:a7:ca:64:55:c6:92:72:b7:3f:97: a2:7e:48:8a:79:ed:40:e9:9e:d6:4d:51:57:6c:51:d6:27:31: 64:f0:7b:8a -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBfjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTEx MjJCMzExMC8GA1UEBRMoMjNDMEIyRDdBQ0UxMDlEM0RGRTgzQUVCRUYyRUEzMTQ5 QzVDQUMxNzAeFw0yNTA0MDkwNTQyMjFaFw0yNjA3MDEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZjYwOGJkLTcyODkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCyr0c70WU49X+Mv6NPvHfB/0GuVA4iP+vZYwSy5FTV3P2YezPDNXnbrhKK/JvJ EekT/oABOmYsGpWRGcgt3PDqjXuJeEJypwDqPX8MzBys8ghUYim/Bwrwwkgrg21k 03CHe0TIMmTW23FmxIjwxR0PtkL4MyGW4AMxafCmYhce5ZLHznhccYLaqgdwNNkW Dhlawc5zwa8vKQBg3Ao4XmwB7ig9JpJp1H/hYWxQw4W1eIbr0LGa94wUWI0gA/72 1waNUOoDqbdLvAmQfyB4Exk9NnvnV8ZCB6leeYiVx9ZjjzqokIX+5WiXt64sxmPV STVswUQRb2AZjSASNtzO/mP7AgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUQDw+HwQq N/e4y3ltsdwCknFXZygwHwYDVR0jBBgwFoAUI8Cy16zhCdPf6Drr7y6jFJxcrBcw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTEyMkIzLzVFNEQ0NzYyNUI5 RjExRUZBMTRCQkI1Q0M0RjlBRTAyL0k4Q3kxNnpoQ2RQZjZEcnI3eTZqRkp4Y3JC Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvSThDeTE2emhDZFBmNkRycjd5NmpGSnhjckJjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx MjJCMy81RTRENDc2MjVCOUYxMUVGQTE0QkJCNUNDNEY5QUUwMi9BQTVFOTYwNjVC OUYxMUVGOUYxQjE3NURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAmfUSAMEAosFtDANBgkqhkiG9w0BAQsFAAOCAQEAWhwKEJ1H NYZO4pA+/PLAOExDludOpgkG1CAE4w61IH1sIk6yjohk4Zsh7fa5PDwnxmMEYqPa 92gGGJCevisl2uG5+iPTTD+uLdomoCY+Y5YLc2vDWiu8cEmnDC0WkxRLnwACsWAu nFAHBLEaNES3LZ6GQLuq1q85XRevWYZZ1j64WM7LKlcWXXMa9bNYa3xbZiCfmJlt JA2z/nDMXIpr4TNpUmu5MNO9BMVKdxbTD8agInYxOlM0uLGvAzDuHl3fZxQUY/ax 4b8uS6Es5xCx1xeBW/+Jv2cw5vj1AbeY/xynymRVxpJytz+Xon5IinntQOme1k1R V2xR1icxZPB7ig== -----END CERTIFICATE-----Generated at Sat Apr 26 09:17:50 2025 by rpki-client