$ rpki-client -vvf rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/654665EA197611F09D2B1C76C4F9AE02.roa File: 654665EA197611F09D2B1C76C4F9AE02.roa (raw, json) Hash identifier: +GCGIqPvO3PU3ceu6b5k3g5FWDNdoijguoZ0F6Ql6aE= Subject key identifier: 7C:84:36:89:FB:7A:AA:9D:05:35:3E:E9:9E:1B:4C:99:CA:DF:BF:BB Certificate issuer: /CN=A91582D9/serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Certificate serial: 0828 Authority key identifier: 52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/654665EA197611F09D2B1C76C4F9AE02.roa Signing time: Mon 14 Apr 2025 21:26:14 +0000 ROA not before: Mon 14 Apr 2025 21:26:14 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 58889 IP address blocks: 45.64.136.0/24 maxlen: 24 45.64.138.0/24 maxlen: 24 45.64.139.0/24 maxlen: 24 2401:1980::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 16:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2088 (0x828) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91582D9, serialNumber=5282A4642AF7D35799291BBA447EA14251A4D5FC Validity Not Before: Apr 14 21:26:14 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67fd7d75-b4c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3f:95:81:a4:2d:c4:06:d1:bd:a0:53:4d:10: 50:68:c3:97:c0:e1:13:9c:69:13:d8:07:7f:7a:bb: cc:a3:86:f4:49:71:92:78:ab:ab:8d:52:8b:fc:c7: 93:c4:ed:9c:e1:00:4d:5c:d0:6e:fa:65:ee:0c:a5: 8c:f2:52:e7:d8:ae:bf:73:ac:4c:00:4f:91:e1:72: 59:22:d9:f4:f2:f4:d6:e4:39:1d:bb:95:42:87:d2: d5:d1:4e:e8:6b:83:61:15:4a:83:46:a9:8a:ff:33: 22:3e:34:54:8c:26:2c:54:70:26:38:4a:ca:0c:ca: 2a:d1:74:83:5e:1f:a9:72:1e:3e:c7:93:14:ac:61: a0:f0:8d:f6:70:a5:57:65:6a:ee:e2:93:80:db:f1: 08:86:56:fc:90:42:d6:59:a0:6a:d8:ef:cf:6e:fe: 6e:98:57:bf:17:ce:3b:a2:c7:b2:0b:4e:2d:ea:d0: 05:b8:19:83:41:f0:44:ea:65:49:79:c4:7d:2b:aa: b5:0c:d6:27:27:f2:9e:12:f4:d5:fd:77:4d:87:b3: b6:e1:f4:92:8e:5b:16:23:ff:43:f4:d3:77:2c:42: 83:b6:69:1f:f9:95:e9:28:72:15:bc:ef:55:3a:9a: 48:e7:fd:d1:ff:fe:3d:d1:93:cb:87:31:5f:be:b6: 66:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:84:36:89:FB:7A:AA:9D:05:35:3E:E9:9E:1B:4C:99:CA:DF:BF:BB X509v3 Authority Key Identifier: keyid:52:82:A4:64:2A:F7:D3:57:99:29:1B:BA:44:7E:A1:42:51:A4:D5:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/UoKkZCr301eZKRu6RH6hQlGk1fw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoKkZCr301eZKRu6RH6hQlGk1fw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91582D9/0EDA6D5ECDDA11E7BDEA8C2BC4F9AE02/654665EA197611F09D2B1C76C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.64.136.0/24 45.64.138.0/23 IPv6: 2401:1980::/32 Signature Algorithm: sha256WithRSAEncryption 49:0e:c8:bf:75:9e:82:0d:c6:af:ef:9c:c4:65:ae:79:d2:cd: b1:4f:5d:98:6e:c2:3b:1e:7f:f4:ec:d1:73:27:42:d6:38:e8: 4f:58:23:04:60:ee:57:96:05:60:9d:95:ae:42:23:21:37:f4: 7c:28:5e:a5:ef:73:3a:b9:97:b3:b2:35:b2:ad:b6:79:5c:84: 70:f9:cb:ba:5e:b7:12:37:d6:97:6e:a4:90:90:a6:3c:14:b2: bb:76:ac:58:17:26:4a:65:7f:b4:9c:b0:cb:f5:47:99:79:56: 96:a7:84:31:19:f9:27:8a:92:c4:8c:86:f1:1a:91:10:6e:eb: 9c:5c:55:83:9a:9f:b0:90:a2:d8:25:44:de:34:e0:8c:9a:a4: a3:e2:0c:3e:bd:e4:92:89:48:81:ec:a1:cd:b6:ad:61:9c:d8: 77:39:6d:7c:65:ef:f3:df:d7:cd:12:42:68:4e:dc:89:fa:f9: b3:b7:54:9a:e9:84:50:63:1d:5c:d8:41:54:30:b0:4d:3c:3d: 4d:c9:31:f1:a4:e9:5f:82:ab:51:bd:d4:71:8c:55:f4:81:f4: 83:ef:ea:45:91:d6:c7:20:f8:1d:cb:45:89:10:a7:19:57:e6: ca:fb:b5:58:72:02:75:5f:69:94:28:b9:26:7d:02:96:76:69: 37:24:c9:03 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCCgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTgyRDkxMTAvBgNVBAUTKDUyODJBNDY0MkFGN0QzNTc5OTI5MUJCQTQ0N0VBMTQy NTFBNEQ1RkMwHhcNMjUwNDE0MjEyNjE0WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2ZkN2Q3NS1iNGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqj+VgaQtxAbRvaBTTRBQaMOXwOETnGkT2Ad/ervMo4b0SXGSeKurjVKL/MeT xO2c4QBNXNBu+mXuDKWM8lLn2K6/c6xMAE+R4XJZItn08vTW5Dkdu5VCh9LV0U7o a4NhFUqDRqmK/zMiPjRUjCYsVHAmOErKDMoq0XSDXh+pch4+x5MUrGGg8I32cKVX ZWru4pOA2/EIhlb8kELWWaBq2O/Pbv5umFe/F847oseyC04t6tAFuBmDQfBE6mVJ ecR9K6q1DNYnJ/KeEvTV/XdNh7O24fSSjlsWI/9D9NN3LEKDtmkf+ZXpKHIVvO9V OppI5/3R//490ZPLhzFfvrZm4wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFHyENon7 eqqdBTU+6Z4bTJnK37+7MB8GA1UdIwQYMBaAFFKCpGQq99NXmSkbukR+oUJRpNX8 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1ODJEOS8wRURBNkQ1RUNE REExMUU3QkRFQThDMkJDNEY5QUUwMi9Vb0trWkNyMzAxZVpLUnU2Ukg2aFFsR2sx ZncuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VvS2taQ3IzMDFlWktSdTZSSDZoUWxHazFmdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTgyRDkvMEVEQTZENUVDRERBMTFFN0JERUE4QzJCQzRGOUFFMDIvNjU0NjY1RUEx OTc2MTFGMDlEMkIxQzc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAAtQIgDBAEtQIowDQQCAAIwBwMFACQBGYAwDQYJKoZIhvcN AQELBQADggEBAEkOyL91noINxq/vnMRlrnnSzbFPXZhuwjsef/Ts0XMnQtY46E9Y IwRg7leWBWCdla5CIyE39HwoXqXvczq5l7OyNbKttnlchHD5y7petxI31pdupJCQ pjwUsrt2rFgXJkplf7ScsMv1R5l5VpanhDEZ+SeKksSMhvEakRBu65xcVYOan7CQ otglRN404IyapKPiDD695JKJSIHsoc22rWGc2Hc5bXxl7/Pf180SQmhO3In6+bO3 VJrphFBjHVzYQVQwsE08PU3JMfGk6V+Cq1G91HGMVfSB9IPv6kWR1scg+B3LRYkQ pxlX5sr7tVhyAnVfaZQouSZ9ApZ2aTckyQM= -----END CERTIFICATE-----Generated at Sat Apr 26 16:41:09 2025 by rpki-client