$ rpki-client -vvf rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/72B84162E2A411E9A300492AC4F9AE02.roa File: 72B84162E2A411E9A300492AC4F9AE02.roa (raw, json) Hash identifier: mKEvuFivV/Rx5B93IYGv/jXl23LxYS0A2kDJi7kjILY= Subject key identifier: 49:72:C5:AC:4E:5E:DD:6E:55:90:34:C1:3B:65:68:4B:33:40:85:1A Certificate issuer: /CN=A91281E0/serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Certificate serial: 0D06 Authority key identifier: 8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/72B84162E2A411E9A300492AC4F9AE02.roa Signing time: Mon 09 Jun 2025 17:58:16 +0000 ROA not before: Mon 09 Jun 2025 17:58:16 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 38200 IP address blocks: 45.64.164.0/24 maxlen: 24 45.64.165.0/24 maxlen: 24 45.64.166.0/24 maxlen: 24 45.64.167.0/24 maxlen: 24 103.234.24.0/24 maxlen: 24 103.234.25.0/24 maxlen: 24 103.234.26.0/24 maxlen: 24 103.234.27.0/24 maxlen: 24 103.234.164.0/22 maxlen: 22 103.234.164.0/24 maxlen: 24 103.234.165.0/24 maxlen: 24 103.234.166.0/24 maxlen: 24 103.234.167.0/24 maxlen: 24 220.247.160.0/24 maxlen: 24 220.247.161.0/24 maxlen: 24 220.247.162.0/24 maxlen: 24 220.247.163.0/24 maxlen: 24 220.247.164.0/24 maxlen: 24 220.247.165.0/24 maxlen: 24 220.247.166.0/24 maxlen: 24 220.247.167.0/24 maxlen: 24 2401:580::/32 maxlen: 32 2401:580:a::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Jun 2025 18:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3334 (0xd06) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91281E0, serialNumber=8DE1D0B56130980B83900FB78FADA670DE2E0A65 Validity Not Before: Jun 9 17:58:16 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=684720b8-38d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:7e:77:fb:b6:03:ea:a0:88:c0:3b:60:39: 4d:5b:37:92:8d:4f:fb:dd:97:7e:58:7a:26:31:20: a4:78:0e:30:fa:0b:ab:35:2f:8c:cb:b1:cc:16:fe: 8a:f6:56:9c:0a:22:c0:c7:ef:c0:24:7b:f1:e8:8d: 6c:dd:83:75:9b:49:a8:62:c2:a7:0e:e5:0d:3d:90: f0:30:dc:21:23:9c:42:84:dc:fc:c3:fe:4e:fe:42: d1:ed:d2:b6:66:62:1d:bc:56:19:bb:fc:cb:a6:05: d2:61:e0:d9:26:63:fc:a4:12:94:02:35:ff:70:5c: 69:f2:72:3f:4f:3c:6b:2c:96:68:79:7c:e4:52:e3: d1:94:ed:a7:ea:cb:c2:69:8e:fe:55:7b:75:7c:97: ca:8a:e3:86:42:75:3c:a1:1a:92:20:f3:e2:a0:b2: df:54:dc:61:47:e9:d5:31:4c:c7:c7:13:f9:b5:89: 62:15:e9:7d:7b:3d:21:3c:b3:27:b6:d8:4a:26:3b: d2:6f:f0:2e:b8:42:7d:76:86:24:a0:c0:09:83:23: bf:19:df:09:e3:94:d2:37:84:bb:18:f2:ef:37:d2: ef:6f:08:24:c5:f6:4c:50:a7:18:3b:42:f9:6f:26: eb:a8:a6:be:c3:15:31:1d:6a:3e:96:15:98:85:75: 54:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:72:C5:AC:4E:5E:DD:6E:55:90:34:C1:3B:65:68:4B:33:40:85:1A X509v3 Authority Key Identifier: keyid:8D:E1:D0:B5:61:30:98:0B:83:90:0F:B7:8F:AD:A6:70:DE:2E:0A:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/jeHQtWEwmAuDkA-3j62mcN4uCmU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jeHQtWEwmAuDkA-3j62mcN4uCmU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91281E0/761A7EACE2A311E9AE8BB528C4F9AE02/72B84162E2A411E9A300492AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.164.0/22 103.234.24.0/22 103.234.164.0/22 220.247.160.0/21 IPv6: 2401:580::/32 Signature Algorithm: sha256WithRSAEncryption 8c:16:38:9d:62:fa:9b:18:ef:f8:2f:8b:91:5b:c6:30:bc:aa: b6:f2:20:ac:ed:e3:35:47:7a:a4:12:05:a0:4e:e7:d8:70:08: 1b:c9:4b:4f:86:c1:2a:0d:49:c5:3b:7e:8e:90:38:2c:31:39: dd:7f:17:86:bb:6f:7b:d9:b8:db:f0:c7:c9:9a:73:fe:25:f9: 9c:42:64:8f:5c:cd:ed:72:9b:08:ec:1a:20:c4:c7:ab:93:41: 9e:c2:00:5d:47:e4:d5:0a:04:78:83:f5:b4:a6:ac:c9:24:68: 2b:ee:20:e5:4f:19:81:ed:d5:a3:6d:d4:e3:a8:4d:a8:1f:33: 4d:d6:73:36:24:24:b2:0c:1a:59:a2:e8:d0:33:71:8e:79:1c: 08:63:32:56:bb:db:73:40:65:d1:1a:a7:3b:1c:4c:81:b3:66: c4:b0:5c:24:77:2a:f5:a7:f8:3c:56:09:7e:f1:df:d3:f4:cf: 4c:34:86:86:ec:ff:57:c4:4a:58:31:82:34:fb:0c:ee:38:1d: c7:0c:42:26:1f:aa:aa:58:9c:6b:a1:69:81:3d:c9:9b:d4:76: 9f:58:ea:7a:80:14:04:5a:fe:24:68:3d:c2:b0:13:44:15:53: 29:73:45:36:9c:e3:b6:a3:2c:44:ca:b4:18:52:17:4a:21:de: a2:96:c8:2c -----BEGIN CERTIFICATE----- MIIFkjCCBHqgAwIBAgICDQYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjgxRTAxMTAvBgNVBAUTKDhERTFEMEI1NjEzMDk4MEI4MzkwMEZCNzhGQURBNjcw REUyRTBBNjUwHhcNMjUwNjA5MTc1ODE2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ3MjBiOC0zOGQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyzx+d/u2A+qgiMA7YDlNWzeSjU/73Zd+WHomMSCkeA4w+gurNS+My7HMFv6K 9lacCiLAx+/AJHvx6I1s3YN1m0moYsKnDuUNPZDwMNwhI5xChNz8w/5O/kLR7dK2 ZmIdvFYZu/zLpgXSYeDZJmP8pBKUAjX/cFxp8nI/TzxrLJZoeXzkUuPRlO2n6svC aY7+VXt1fJfKiuOGQnU8oRqSIPPioLLfVNxhR+nVMUzHxxP5tYliFel9ez0hPLMn tthKJjvSb/AuuEJ9doYkoMAJgyO/Gd8J45TSN4S7GPLvN9LvbwgkxfZMUKcYO0L5 bybrqKa+wxUxHWo+lhWYhXVUOQIDAQABo4ICtjCCArIwHQYDVR0OBBYEFElyxaxO Xt1uVZA0wTtlaEszQIUaMB8GA1UdIwQYMBaAFI3h0LVhMJgLg5APt4+tpnDeLgpl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyODFFMC83NjFBN0VBQ0Uy QTMxMUU5QUU4QkI1MjhDNEY5QUUwMi9qZUhRdFdFd21BdURrQS0zajYybWNONHVD bVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2plSFF0V0V3bUF1RGtBLTNqNjJtY040dUNtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjgxRTAvNzYxQTdFQUNFMkEzMTFFOUFFOEJCNTI4QzRGOUFFMDIvNzJCODQxNjJF MkE0MTFFOUEzMDA0OTJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwQAYIKwYBBQUHAQcBAf8E MTAvMB4EAgABMBgDBAItQKQDBAJn6hgDBAJn6qQDBAPc96AwDQQCAAIwBwMFACQB BYAwDQYJKoZIhvcNAQELBQADggEBAIwWOJ1i+psY7/gvi5FbxjC8qrbyIKzt4zVH eqQSBaBO59hwCBvJS0+GwSoNScU7fo6QOCwxOd1/F4a7b3vZuNvwx8mac/4l+ZxC ZI9cze1ymwjsGiDEx6uTQZ7CAF1H5NUKBHiD9bSmrMkkaCvuIOVPGYHt1aNt1OOo TagfM03WczYkJLIMGlmi6NAzcY55HAhjMla723NAZdEapzscTIGzZsSwXCR3KvWn +DxWCX7x39P0z0w0hobs/1fESlgxgjT7DO44HccMQiYfqqpYnGuhaYE9yZvUdp9Y 6nqAFARa/iRoPcKwE0QVUylzRTac47ajLETKtBhSF0oh3qKWyCw= -----END CERTIFICATE-----Generated at Sat Jun 21 12:25:26 2025 by rpki-client