$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/6E7D3C16816811EF99DD7787C4F9AE02.roa File: 6E7D3C16816811EF99DD7787C4F9AE02.roa (raw, json) Hash identifier: GJjFHlhUrw3PK9n6h+pqP/cBSWFV8op0nahH1r+sT6k= Subject key identifier: E5:EA:55:CB:06:AC:74:43:26:C1:4C:A5:DB:D2:A2:F7:2D:52:A4:8E Certificate issuer: /CN=A91AA96A/serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Certificate serial: 55 Authority key identifier: 0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/6E7D3C16816811EF99DD7787C4F9AE02.roa Signing time: Sat 11 Jan 2025 05:48:43 +0000 ROA not before: Sat 11 Jan 2025 05:48:43 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 38534 IP address blocks: 202.12.93.0/24 maxlen: 24 203.1.104.0/24 maxlen: 24 203.1.105.0/24 maxlen: 24 203.1.106.0/24 maxlen: 24 203.1.107.0/24 maxlen: 24 203.16.32.0/24 maxlen: 24 203.16.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 85 (0x55) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA96A, serialNumber=0CDD505832EA8C9A4D23B10637201D79429564C0 Validity Not Before: Jan 11 05:48:43 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6782063b-bc05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:91:18:69:4b:c5:55:3d:d4:d7:05:fe:9e:4c: a9:27:0d:20:30:52:39:f9:a6:5f:14:fa:62:e0:67: b0:5e:81:02:13:3c:d4:5c:8c:88:43:01:91:5c:07: db:f7:50:7d:41:c9:35:8f:ab:41:46:9a:65:4d:41: 08:3c:e4:14:e8:ba:d1:ee:fa:a6:13:df:00:c2:4a: ae:bc:85:da:63:43:cf:7e:99:d6:b2:bb:02:48:2b: f7:db:5f:87:24:f7:3e:ab:06:68:90:ba:d7:c7:5e: 73:34:d4:40:a3:08:08:c2:35:73:26:1f:04:dd:e0: 86:85:32:62:08:a1:51:77:65:f9:99:69:e3:90:21: 5d:93:aa:10:c9:4c:eb:93:c3:f4:e0:b8:76:f6:0f: 41:73:3e:bb:c9:59:b2:ac:10:82:90:3c:95:27:b9: c9:6a:de:e8:fc:4b:64:89:ad:5b:4b:3e:91:0f:7b: bb:20:53:74:3c:c9:29:03:5f:21:85:2a:55:48:9d: 6b:81:b1:d5:51:ab:03:4b:5b:5f:47:27:ca:31:63: 62:9c:3a:4d:4f:17:4c:c4:3a:3c:83:0b:ec:e1:1d: bd:e2:f1:2c:e7:25:3d:16:11:bc:48:ae:2a:48:d5: 0b:e3:b0:91:4d:f2:ee:5f:de:05:34:1a:a0:58:dc: ba:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:EA:55:CB:06:AC:74:43:26:C1:4C:A5:DB:D2:A2:F7:2D:52:A4:8E X509v3 Authority Key Identifier: keyid:0C:DD:50:58:32:EA:8C:9A:4D:23:B1:06:37:20:1D:79:42:95:64:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/DN1QWDLqjJpNI7EGNyAdeUKVZMA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DN1QWDLqjJpNI7EGNyAdeUKVZMA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA96A/D4C168826A6E11EF84F98E35C4F9AE02/6E7D3C16816811EF99DD7787C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.12.93.0/24 203.1.104.0/22 203.16.32.0/23 Signature Algorithm: sha256WithRSAEncryption 8e:97:b2:f8:99:63:71:f7:1f:e5:56:e2:fb:db:af:9a:ad:09: 0b:9a:88:78:6e:42:19:e8:dd:2f:3e:e5:4e:ae:94:c8:9a:d1: e2:44:60:d3:07:fa:df:51:03:46:cc:69:de:7e:95:31:55:04: d9:df:fb:f8:81:41:ce:21:82:00:80:d0:ef:77:6c:00:1c:db: fe:c1:76:a3:25:f6:dc:b8:b8:2e:55:7b:7d:c8:da:06:db:36: 25:be:05:cb:89:ff:71:29:ce:29:74:11:b9:c0:b7:74:c8:94: 74:05:33:63:b3:63:b2:56:c5:82:5a:82:b3:bb:54:36:c6:41: 86:46:70:6a:e9:8b:21:22:c2:20:f4:b4:28:3b:cc:83:17:c4: 53:42:5f:51:03:87:84:83:79:bd:a9:2f:ee:c2:2a:1b:b6:e9: f6:2b:90:a9:b9:ab:58:a2:8a:5f:bd:5d:96:ba:00:40:e0:b2: bb:f2:86:1b:69:bc:00:3c:f8:1f:78:3d:75:c0:b2:f2:9b:2d: d1:e7:b1:44:9d:56:97:6d:ee:6d:09:30:16:b0:c1:c1:5b:cc: 48:23:4b:b0:2b:80:ae:a3:0a:d3:d7:76:e3:73:a4:8d:47:ed: f0:54:4a:20:15:4c:fb:07:e3:d4:7d:36:92:91:41:bb:58:31: 28:8b:86:50 -----BEGIN CERTIFICATE----- MIIFfDCCBGSgAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB QTk2QTExMC8GA1UEBRMoMENERDUwNTgzMkVBOEM5QTREMjNCMTA2MzcyMDFENzk0 Mjk1NjRDMDAeFw0yNTAxMTEwNTQ4NDNaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ODIwNjNiLWJjMDUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDRkRhpS8VVPdTXBf6eTKknDSAwUjn5pl8U+mLgZ7BegQITPNRcjIhDAZFcB9v3 UH1ByTWPq0FGmmVNQQg85BToutHu+qYT3wDCSq68hdpjQ89+mdayuwJIK/fbX4ck 9z6rBmiQutfHXnM01ECjCAjCNXMmHwTd4IaFMmIIoVF3ZfmZaeOQIV2TqhDJTOuT w/TguHb2D0FzPrvJWbKsEIKQPJUnuclq3uj8S2SJrVtLPpEPe7sgU3Q8ySkDXyGF KlVInWuBsdVRqwNLW19HJ8oxY2KcOk1PF0zEOjyDC+zhHb3i8SznJT0WEbxIripI 1QvjsJFN8u5f3gU0GqBY3Lo1AgMBAAGjggKhMIICnTAdBgNVHQ4EFgQU5epVywas dEMmwUyl29Ki9y1SpI4wHwYDVR0jBBgwFoAUDN1QWDLqjJpNI7EGNyAdeUKVZMAw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFBOTZBL0Q0QzE2ODgyNkE2 RTExRUY4NEY5OEUzNUM0RjlBRTAyL0ROMVFXRExxakpwTkk3RUdOeUFkZVVLVlpN QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRE4xUVdETHFqSnBOSTdFR055QWRlVUtWWk1BLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB QTk2QS9ENEMxNjg4MjZBNkUxMUVGODRGOThFMzVDNEY5QUUwMi82RTdEM0MxNjgx NjgxMUVGOTlERDc3ODdDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDArBggrBgEFBQcBBwEB/wQc MBowGAQCAAEwEgMEAMoMXQMEAssBaAMEAcsQIDANBgkqhkiG9w0BAQsFAAOCAQEA jpey+Jljcfcf5Vbi+9uvmq0JC5qIeG5CGejdLz7lTq6UyJrR4kRg0wf631EDRsxp 3n6VMVUE2d/7+IFBziGCAIDQ73dsABzb/sF2oyX23Li4LlV7fcjaBts2Jb4Fy4n/ cSnOKXQRucC3dMiUdAUzY7NjslbFglqCs7tUNsZBhkZwaumLISLCIPS0KDvMgxfE U0JfUQOHhIN5vakv7sIqG7bp9iuQqbmrWKKKX71dlroAQOCyu/KGG2m8ADz4H3g9 dcCy8pst0eexRJ1Wl23ubQkwFrDBwVvMSCNLsCuArqMK09d243OkjUft8FRKIBVM +wfj1H02kpFBu1gxKIuGUA== -----END CERTIFICATE-----Generated at Sat Apr 26 13:43:52 2025 by rpki-client