$ rpki-client -vvf rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/7B96F1340C6011F088E6FD2FC4F9AE02.roa File: 7B96F1340C6011F088E6FD2FC4F9AE02.roa (raw, json) Hash identifier: FmIgsBhn26Msitd9uYBqz2EKKDjWry4yTM+2My3/Yyg= Subject key identifier: F1:0F:BB:F4:CC:22:9B:E0:D3:28:E6:0A:E0:07:21:21:CD:C5:D1:6E Certificate issuer: /CN=A91829E3/serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Certificate serial: 0BFC Authority key identifier: 23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/7B96F1340C6011F088E6FD2FC4F9AE02.roa Signing time: Sat 29 Mar 2025 05:44:09 +0000 ROA not before: Sat 29 Mar 2025 05:44:09 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 135076 IP address blocks: 43.245.244.0/22 maxlen: 24 103.208.180.0/22 maxlen: 24 103.240.248.0/22 maxlen: 24 137.59.180.0/22 maxlen: 22 137.59.180.0/24 maxlen: 24 137.59.181.0/24 maxlen: 24 137.59.182.0/24 maxlen: 24 137.59.183.0/24 maxlen: 24 221.120.96.0/21 maxlen: 24 2405:9e80::/32 maxlen: 32 2405:9e80::/36 maxlen: 36 2405:9e80:1000::/36 maxlen: 36 2405:9e80:2000::/36 maxlen: 36 2405:9e80:3000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:42:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3068 (0xbfc) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91829E3, serialNumber=23D20DA209C895C300EE6B659B6B1829925FBD4F Validity Not Before: Mar 29 05:44:09 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67e788a8-98a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:85:17:52:10:88:c2:d9:dd:cd:e8:b3:3a:6c: 7c:d7:0d:a6:34:6d:8a:89:f6:65:aa:2e:eb:9d:f0: 9c:ef:5a:a2:24:59:78:4c:8d:6a:5b:44:e1:b0:6c: 49:d6:30:27:94:75:0e:64:1b:27:c6:61:c0:a5:70: 8a:d3:45:ad:a7:61:5c:44:3b:34:d3:62:6e:96:b5: dc:98:35:ea:6e:46:2c:85:e0:29:03:d6:d1:83:0f: 84:31:5e:3f:97:57:09:7d:5f:63:6f:1d:18:34:63: 3f:23:76:2e:bb:aa:82:24:a8:6f:d7:8f:9b:ea:84: c6:a9:6d:1a:e5:2b:b6:36:04:86:77:64:fa:56:a5: 38:8a:8f:bd:4e:f4:48:50:61:88:1f:96:4f:bd:7b: 88:c7:de:92:ff:6b:b4:29:c7:a8:93:52:5f:cd:a3: 00:15:9d:b5:61:9c:4c:79:3e:a2:a3:00:4d:37:de: 28:b8:a5:79:88:dc:98:0a:84:83:be:3b:48:96:98: 41:5c:a8:eb:a6:d3:ba:58:18:f5:8d:13:9b:d6:63: a2:32:33:00:8f:32:4f:c8:a7:07:4b:a4:b0:b7:71: a7:df:dd:da:9e:07:12:a5:ed:3e:86:71:32:2f:9a: 7c:61:ff:b0:34:01:6c:2f:78:90:38:d5:7c:c2:23: 01:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:0F:BB:F4:CC:22:9B:E0:D3:28:E6:0A:E0:07:21:21:CD:C5:D1:6E X509v3 Authority Key Identifier: keyid:23:D2:0D:A2:09:C8:95:C3:00:EE:6B:65:9B:6B:18:29:92:5F:BD:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/I9INognIlcMA7mtlm2sYKZJfvU8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/I9INognIlcMA7mtlm2sYKZJfvU8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91829E3/C45F60DA143711EAACF9FA33C4F9AE02/7B96F1340C6011F088E6FD2FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.244.0/22 103.208.180.0/22 103.240.248.0/22 137.59.180.0/22 221.120.96.0/21 IPv6: 2405:9e80::/32 Signature Algorithm: sha256WithRSAEncryption 92:8a:49:88:a7:7f:97:e5:5c:ab:2b:b8:ef:50:f7:2b:6c:03: 21:fc:5f:fe:17:e5:33:e9:6b:6f:6d:5f:a8:14:ab:fc:b4:99: 40:71:8f:29:1e:97:97:6d:7e:89:d0:ef:92:c4:cc:81:6d:7c: 61:8b:85:45:d8:a5:6c:8b:91:ef:16:5b:e6:98:fa:25:b8:42: 8d:1a:9f:76:fa:9a:18:fe:f5:a5:16:5a:5d:ab:24:9b:f5:f9: f6:0c:b3:ed:30:ae:5d:42:fb:aa:6e:7d:2f:67:44:df:fb:0e: 2f:9f:57:19:99:84:f0:2d:66:af:20:2e:ea:29:ea:74:dc:a7: 5b:c6:86:a0:83:18:32:aa:3e:30:7c:1c:08:51:95:41:92:2f: 8d:f8:fb:1c:fb:e5:c3:6f:c4:6d:e9:eb:2e:03:2d:b7:25:8a: 31:a7:01:00:f6:b6:2b:75:5a:e8:99:28:24:d4:df:ab:58:59: af:e1:d2:94:78:e8:d3:e7:ac:17:70:a9:f8:da:69:6e:38:e1: 3c:22:df:f9:bf:e2:f0:76:bc:da:5b:78:04:60:3f:48:fd:8a: e6:05:a8:2b:f5:22:de:dd:3c:13:63:32:85:b1:5c:aa:f7:50: d2:2d:dd:50:b0:30:71:f8:dc:55:af:0f:8f:1f:c4:66:c1:92: 66:54:bf:66 -----BEGIN CERTIFICATE----- MIIFmDCCBICgAwIBAgICC/wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODI5RTMxMTAvBgNVBAUTKDIzRDIwREEyMDlDODk1QzMwMEVFNkI2NTlCNkIxODI5 OTI1RkJENEYwHhcNMjUwMzI5MDU0NDA5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2U3ODhhOC05OGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApoUXUhCIwtndzeizOmx81w2mNG2KifZlqi7rnfCc71qiJFl4TI1qW0ThsGxJ 1jAnlHUOZBsnxmHApXCK00Wtp2FcRDs002JulrXcmDXqbkYsheApA9bRgw+EMV4/ l1cJfV9jbx0YNGM/I3Yuu6qCJKhv14+b6oTGqW0a5Su2NgSGd2T6VqU4io+9TvRI UGGIH5ZPvXuIx96S/2u0Kceok1JfzaMAFZ21YZxMeT6iowBNN94ouKV5iNyYCoSD vjtIlphBXKjrptO6WBj1jROb1mOiMjMAjzJPyKcHS6Swt3Gn393angcSpe0+hnEy L5p8Yf+wNAFsL3iQONV8wiMBqQIDAQABo4ICvDCCArgwHQYDVR0OBBYEFPEPu/TM Ipvg0yjmCuAHISHNxdFuMB8GA1UdIwQYMBaAFCPSDaIJyJXDAO5rZZtrGCmSX71P MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MjlFMy9DNDVGNjBEQTE0 MzcxMUVBQUNGOUZBMzNDNEY5QUUwMi9JOUlOb2duSWxjTUE3bXRsbTJzWUtaSmZ2 VTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0k5SU5vZ25JbGNNQTdtdGxtMnNZS1pKZnZVOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODI5RTMvQzQ1RjYwREExNDM3MTFFQUFDRjlGQTMzQzRGOUFFMDIvN0I5NkYxMzQw QzYwMTFGMDg4RTZGRDJGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwRgYIKwYBBQUHAQcBAf8E NzA1MCQEAgABMB4DBAIr9fQDBAJn0LQDBAJn8PgDBAKJO7QDBAPdeGAwDQQCAAIw BwMFACQFnoAwDQYJKoZIhvcNAQELBQADggEBAJKKSYinf5flXKsruO9Q9ytsAyH8 X/4X5TPpa29tX6gUq/y0mUBxjykel5dtfonQ75LEzIFtfGGLhUXYpWyLke8WW+aY +iW4Qo0an3b6mhj+9aUWWl2rJJv1+fYMs+0wrl1C+6pufS9nRN/7Di+fVxmZhPAt Zq8gLuop6nTcp1vGhqCDGDKqPjB8HAhRlUGSL434+xz75cNvxG3p6y4DLbclijGn AQD2tit1WuiZKCTU36tYWa/h0pR46NPnrBdwqfjaaW444Twi3/m/4vB2vNpbeARg P0j9iuYFqCv1It7dPBNjMoWxXKr3UNIt3VCwMHH43FWvD48fxGbBkmZUv2Y= -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:32 2025 by rpki-client