$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa File: 36521694382D11EDB904E684C4F9AE02.roa (raw, json) Hash identifier: 1zfS1JuX1ZnqGxJoi41qLtD41Ss9DXMmoAAMxPa408g= Subject key identifier: 85:DB:F1:7E:98:3B:AA:72:87:0C:89:EF:80:91:7C:4E:A0:A0:A6:6E Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4A81 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa Signing time: Wed 23 Apr 2025 14:59:27 +0000 ROA not before: Wed 23 Apr 2025 14:59:27 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131414 IP address blocks: 45.118.144.0/22 maxlen: 24 103.97.132.0/22 maxlen: 24 103.237.144.0/22 maxlen: 24 2403:bf40:3::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 02:40:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19073 (0x4a81) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Apr 23 14:59:27 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6809004f-c76c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:04:e6:e2:89:86:af:c8:e8:bb:8c:02:27:5c: d1:b9:3f:6d:93:cc:2b:37:b0:62:c8:b1:3b:02:88: d2:75:62:0b:53:10:a2:9f:c0:90:cf:3a:f6:33:1e: 2c:7d:5d:16:99:97:dd:c0:a9:db:89:48:77:93:72: 41:52:33:dc:39:92:93:0f:6f:03:d8:93:6e:7f:a2: 91:f0:ed:6d:b4:dd:07:9a:2f:15:96:bd:fb:b4:71: d9:65:e6:cd:fd:04:31:dc:39:58:86:2d:e7:41:a5: 7c:32:08:f0:0f:eb:dd:e3:d9:d5:85:ef:8f:74:29: 4a:b1:fb:a4:6a:9c:7e:dc:67:a7:64:2c:f4:1c:14: e1:54:fb:31:83:c1:d2:04:88:70:ca:b7:0f:cb:9e: 7f:d3:27:76:b0:89:73:0a:34:0c:7a:82:64:2d:ef: ad:3d:4f:0d:aa:aa:e5:3b:6e:61:23:4d:94:88:35: ca:9c:c4:60:d4:dc:9b:29:57:11:17:a7:73:7e:7f: 37:bd:28:63:12:af:18:21:28:47:d1:a2:09:69:37: 21:33:71:f4:d1:60:a5:ed:f0:6f:27:40:00:1a:89: c6:3c:66:e5:c6:b9:9d:0c:84:28:6f:e7:ee:f9:a0: 77:ac:e4:e3:c5:bb:86:3b:c6:5b:ef:94:58:31:e0: 2c:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:DB:F1:7E:98:3B:AA:72:87:0C:89:EF:80:91:7C:4E:A0:A0:A6:6E X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/36521694382D11EDB904E684C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.118.144.0/22 103.97.132.0/22 103.237.144.0/22 IPv6: 2403:bf40:3::/48 Signature Algorithm: sha256WithRSAEncryption 6e:87:b7:62:46:7c:08:85:b0:6b:87:0d:3c:1b:b6:41:74:c6: 65:ce:a5:2f:38:ed:a2:b8:79:eb:77:30:9c:9b:59:3f:4a:f7: 85:9d:be:17:d4:0c:95:c9:21:b5:e4:c6:bf:0a:d9:66:17:6d: 2f:46:4e:f4:70:c8:28:d2:f6:32:df:3f:47:a9:38:c1:ef:61: 3c:6f:7e:9a:17:d8:43:af:2a:c1:6b:10:87:61:3c:67:2e:f6: e7:e8:0e:ab:f0:f7:f2:d2:63:42:d4:98:a4:03:18:54:aa:e0: 93:e0:1a:95:65:2d:78:49:6b:e9:58:5d:45:90:ba:a2:85:26: dd:4b:eb:c1:dd:e7:be:b7:9e:3a:4b:30:49:9b:d0:59:dd:dc: 1e:e9:8e:b9:40:1f:0b:c9:b5:07:c9:4a:57:75:bc:c5:c6:6e: 28:66:1e:12:14:0b:b1:2d:8b:50:4c:b6:74:c1:0d:76:b9:26: 42:fc:de:2b:41:9d:ea:84:89:e6:58:cc:eb:47:1a:24:02:c9: 87:53:00:6f:24:cd:25:cb:61:71:99:48:55:37:65:12:50:95: 34:82:7b:c5:b5:98:73:d5:f5:f7:cf:f6:03:7f:29:97:c6:17: ca:83:8d:c8:78:69:86:e6:c5:04:37:e9:67:a6:6e:26:c3:8b: 0d:fe:29:96 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICSoEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwNDIzMTQ1OTI3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA5MDA0Zi1jNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzwTm4omGr8jou4wCJ1zRuT9tk8wrN7BiyLE7AojSdWILUxCin8CQzzr2Mx4s fV0WmZfdwKnbiUh3k3JBUjPcOZKTD28D2JNuf6KR8O1ttN0Hmi8Vlr37tHHZZebN /QQx3DlYhi3nQaV8MgjwD+vd49nVhe+PdClKsfukapx+3GenZCz0HBThVPsxg8HS BIhwyrcPy55/0yd2sIlzCjQMeoJkLe+tPU8NqqrlO25hI02UiDXKnMRg1NybKVcR F6dzfn83vShjEq8YIShH0aIJaTchM3H00WCl7fBvJ0AAGonGPGblxrmdDIQob+fu +aB3rOTjxbuGO8Zb75RYMeAsaQIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFIXb8X6Y O6pyhwyJ74CRfE6goKZuMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvMzY1MjE2OTQz ODJEMTFFREI5MDRFNjg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAItdpADBAJnYYQDBAJn7ZAwDwQCAAIwCQMHACQDv0AAAzAN BgkqhkiG9w0BAQsFAAOCAQEAboe3YkZ8CIWwa4cNPBu2QXTGZc6lLzjtorh563cw nJtZP0r3hZ2+F9QMlckhteTGvwrZZhdtL0ZO9HDIKNL2Mt8/R6k4we9hPG9+mhfY Q68qwWsQh2E8Zy725+gOq/D38tJjQtSYpAMYVKrgk+AalWUteElr6VhdRZC6ooUm 3Uvrwd3nvreeOkswSZvQWd3cHumOuUAfC8m1B8lKV3W8xcZuKGYeEhQLsS2LUEy2 dMENdrkmQvzeK0Gd6oSJ5ljM60caJALJh1MAbyTNJcthcZlIVTdlElCVNIJ7xbWY c9X198/2A38pl8YXyoONyHhphubFBDfpZ6ZuJsOLDf4plg== -----END CERTIFICATE-----Generated at Sat Apr 26 13:47:08 2025 by rpki-client