$ rpki-client -vvf rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/CDFDBE10061C11ECA4633B32C4F9AE02.roa File: CDFDBE10061C11ECA4633B32C4F9AE02.roa (raw, json) Hash identifier: phE+adBWK7PYAI4KAosAkS6IfQBeyVMqazuKmnqaEwg= Subject key identifier: F9:A0:BA:88:06:9E:4F:9D:DA:84:A6:36:4B:3F:1B:D0:64:5B:9F:31 Certificate issuer: /CN=A91876D9/serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF Certificate serial: 04F0 Authority key identifier: 91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/CDFDBE10061C11ECA4633B32C4F9AE02.roa Signing time: Wed 05 Mar 2025 01:15:31 +0000 ROA not before: Wed 05 Mar 2025 01:15:31 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 45437 IP address blocks: 103.224.84.0/22 maxlen: 24 2402:3540::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 23:27:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1264 (0x4f0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91876D9, serialNumber=91E669CE0215097BD4D477A1A7446B0D9D0248FF Validity Not Before: Mar 5 01:15:31 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c7a5b3-cbd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2b:29:e0:b3:60:d9:55:3c:73:c8:6f:48:67: 32:16:c9:be:84:7f:95:08:b1:4c:6e:40:4a:9d:64: 13:b5:2f:72:96:09:17:0b:62:b5:01:bd:b5:0e:83: de:8e:95:25:97:e0:13:b9:38:8f:14:43:ed:e0:a5: 3f:59:06:97:37:36:1d:2a:8a:10:f5:11:8d:12:ae: 25:f9:3f:79:03:da:1d:0d:88:ca:98:de:ff:23:6e: b0:0a:ae:69:14:ec:f2:ab:df:01:7c:fe:2d:33:61: 9a:ad:0e:11:cd:19:fa:e3:d3:62:e3:08:d4:c9:2c: 2d:a6:9c:aa:b0:93:9c:13:16:61:ae:06:5d:52:73: 64:24:20:b5:d4:93:c5:19:e0:63:4b:d8:4d:98:09: b0:da:bb:23:81:cf:55:30:0f:ba:c9:a3:7d:19:80: 8d:a4:83:8c:d7:45:83:9d:ea:c0:93:33:2d:eb:45: e4:2c:05:5e:7f:1b:44:b7:e8:28:1d:52:6e:ba:fd: e7:3c:08:ed:98:b1:e5:aa:91:dc:61:49:f8:80:76: 04:f4:8b:0d:c4:fd:9a:e2:0a:de:ea:bc:43:50:7a: a5:39:b3:18:55:7c:9c:e1:cd:34:38:71:6a:70:62: 05:25:6a:ef:33:a3:a0:1b:6c:e8:ed:fa:6f:ff:ff: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A0:BA:88:06:9E:4F:9D:DA:84:A6:36:4B:3F:1B:D0:64:5B:9F:31 X509v3 Authority Key Identifier: keyid:91:E6:69:CE:02:15:09:7B:D4:D4:77:A1:A7:44:6B:0D:9D:02:48:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/keZpzgIVCXvU1Hehp0RrDZ0CSP8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/keZpzgIVCXvU1Hehp0RrDZ0CSP8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91876D9/9260C658061811ECBB262C5EC4F9AE02/CDFDBE10061C11ECA4633B32C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.224.84.0/22 IPv6: 2402:3540::/32 Signature Algorithm: sha256WithRSAEncryption 9f:41:c5:a3:9b:fc:48:9d:32:d3:0d:cb:39:46:31:95:97:b6: 43:d5:9a:82:10:f8:9c:1c:65:4d:37:f1:99:3d:c5:ee:d5:ba: 33:fc:8d:77:4f:1d:08:8e:7b:fd:76:1e:db:e8:07:bc:b6:e0: a2:b8:47:ed:53:b4:f9:d3:88:ff:bf:53:87:6a:ec:35:6b:b7: 75:f2:d6:14:05:a2:7a:92:5a:52:fe:2f:57:3c:4e:b2:90:87: ae:9d:ad:1b:1b:ca:d5:a2:c3:9a:73:a6:38:14:ff:7a:f2:a9: c1:e3:dd:bd:e9:61:4b:38:9f:7d:52:1c:d7:00:f9:83:9e:6b: 1d:3c:9c:80:90:c4:04:51:76:fa:dc:14:5e:b7:c9:ed:dd:53: 9e:08:50:99:aa:d3:3e:82:8e:21:15:97:10:fe:6d:d6:83:53: 7f:0c:70:c7:fb:85:c8:89:9a:9b:bf:e4:03:30:24:6d:b1:19: db:6f:20:d2:88:5b:b2:70:7f:3d:0b:5e:69:1d:9f:4f:89:c1: 14:cc:c5:2b:6b:84:3d:41:e5:68:d5:b2:38:b3:63:0b:83:8c: 00:d9:c8:fe:f0:11:1e:2d:10:2f:53:5d:c7:6b:95:03:0d:43: 44:e3:64:dd:81:48:6b:74:3e:cd:fe:d9:0a:f5:a2:9c:42:d0: a0:91:f4:66 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICBPAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODc2RDkxMTAvBgNVBAUTKDkxRTY2OUNFMDIxNTA5N0JENEQ0NzdBMUE3NDQ2QjBE OUQwMjQ4RkYwHhcNMjUwMzA1MDExNTMxWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3YTViMy1jYmQyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApisp4LNg2VU8c8hvSGcyFsm+hH+VCLFMbkBKnWQTtS9ylgkXC2K1Ab21DoPe jpUll+ATuTiPFEPt4KU/WQaXNzYdKooQ9RGNEq4l+T95A9odDYjKmN7/I26wCq5p FOzyq98BfP4tM2GarQ4RzRn649Ni4wjUySwtppyqsJOcExZhrgZdUnNkJCC11JPF GeBjS9hNmAmw2rsjgc9VMA+6yaN9GYCNpIOM10WDnerAkzMt60XkLAVefxtEt+go HVJuuv3nPAjtmLHlqpHcYUn4gHYE9IsNxP2a4gre6rxDUHqlObMYVXyc4c00OHFq cGIFJWrvM6OgG2zo7fpv///crwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFPmguogG nk+d2oSmNks/G9BkW58xMB8GA1UdIwQYMBaAFJHmac4CFQl71NR3oadEaw2dAkj/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NzZEOS85MjYwQzY1ODA2 MTgxMUVDQkIyNjJDNUVDNEY5QUUwMi9rZVpwemdJVkNYdlUxSGVocDBSckRaMENT UDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2tlWnB6Z0lWQ1h2VTFIZWhwMFJyRFowQ1NQOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODc2RDkvOTI2MEM2NTgwNjE4MTFFQ0JCMjYyQzVFQzRGOUFFMDIvQ0RGREJFMTAw NjFDMTFFQ0E0NjMzQjMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJn4FQwDQQCAAIwBwMFACQCNUAwDQYJKoZIhvcNAQELBQAD ggEBAJ9BxaOb/EidMtMNyzlGMZWXtkPVmoIQ+JwcZU038Zk9xe7VujP8jXdPHQiO e/12HtvoB7y24KK4R+1TtPnTiP+/U4dq7DVrt3Xy1hQFonqSWlL+L1c8TrKQh66d rRsbytWiw5pzpjgU/3ryqcHj3b3pYUs4n31SHNcA+YOeax08nICQxARRdvrcFF63 ye3dU54IUJmq0z6CjiEVlxD+bdaDU38McMf7hciJmpu/5AMwJG2xGdtvINKIW7Jw fz0LXmkdn0+JwRTMxStrhD1B5WjVsjizYwuDjADZyP7wER4tEC9TXcdrlQMNQ0Tj ZN2BSGt0Ps3+2Qr1opxC0KCR9GY= -----END CERTIFICATE-----Generated at Sat Apr 26 08:05:54 2025 by rpki-client