$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/A2EBCE92083011EF82AFFD44C4F9AE02.roa File: A2EBCE92083011EF82AFFD44C4F9AE02.roa (raw, json) Hash identifier: lXTjS6CJ65+GSXDHPnNs6WKGp+QMD+laNZ7PWnUDq4w= Subject key identifier: FB:F5:E5:EF:04:B8:E6:F6:92:A3:AE:A0:48:26:36:4D:8D:51:D2:0E Certificate issuer: /CN=A91AC532/serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Certificate serial: D3 Authority key identifier: BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/A2EBCE92083011EF82AFFD44C4F9AE02.roa Signing time: Thu 27 Mar 2025 05:42:49 +0000 ROA not before: Thu 27 Mar 2025 05:42:49 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 45652 IP address blocks: 43.252.120.0/22 maxlen: 24 103.233.80.0/22 maxlen: 24 110.34.139.0/24 maxlen: 24 110.34.158.0/24 maxlen: 24 110.34.162.0/24 maxlen: 24 110.34.164.0/24 maxlen: 24 110.34.166.0/24 maxlen: 24 110.34.180.0/23 maxlen: 24 110.34.183.0/24 maxlen: 24 110.34.184.0/23 maxlen: 24 110.34.186.0/23 maxlen: 24 110.34.188.0/23 maxlen: 24 110.34.190.0/23 maxlen: 24 110.34.220.0/22 maxlen: 24 2401:4a40::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:56:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 211 (0xd3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AC532, serialNumber=BCAB3E76F84ED43742F2A081242708E799CE1B5F Validity Not Before: Mar 27 05:42:49 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e4e559-c3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:5e:0d:85:b2:af:7a:68:51:a4:25:21:7d: a0:d7:56:24:81:c4:22:2a:5e:59:5a:44:b6:de:d3: 22:9a:9e:8a:4b:2b:95:1c:0f:fa:18:3e:c1:89:39: c6:45:2f:41:71:dc:d3:ff:59:c1:fc:9b:02:b8:27: be:7c:c1:d8:ec:b4:fd:b0:5e:32:e4:ab:f1:18:7e: 4a:66:1b:17:d4:0b:5a:1b:8a:c4:15:9c:23:a3:3a: 5e:51:4e:f3:6e:8f:b2:c9:35:73:64:c4:01:47:10: 5a:95:c3:92:71:60:c8:bf:39:a9:8c:23:ff:a4:47: 12:8e:df:2a:cb:c9:a8:8e:b1:cf:25:a6:fc:4c:7c: f3:b8:a7:6b:69:8e:44:1b:3a:86:33:da:f3:13:7c: 18:88:7f:b3:28:24:ac:6d:85:2f:92:06:31:16:f8: 5b:20:57:bc:4b:8f:8f:94:da:75:30:4c:ba:71:40: 18:2c:21:1d:5b:db:8c:36:49:5d:03:12:fc:da:42: ab:3c:e9:c0:dc:2d:37:3c:df:8e:a4:5b:7c:f9:ce: dd:ad:7a:ad:13:86:df:28:a0:16:70:45:17:db:f7: 15:51:db:f8:b3:13:a8:d7:31:6b:82:4f:8d:da:fa: 40:38:d9:f1:ea:a6:cd:4b:b7:ef:64:52:a6:0d:a0: 35:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:F5:E5:EF:04:B8:E6:F6:92:A3:AE:A0:48:26:36:4D:8D:51:D2:0E X509v3 Authority Key Identifier: keyid:BC:AB:3E:76:F8:4E:D4:37:42:F2:A0:81:24:27:08:E7:99:CE:1B:5F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/vKs-dvhO1DdC8qCBJCcI55nOG18.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vKs-dvhO1DdC8qCBJCcI55nOG18.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC532/DAA0D0B4037E11EF8520E758C4F9AE02/A2EBCE92083011EF82AFFD44C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.120.0/22 103.233.80.0/22 110.34.139.0/24 110.34.158.0/24 110.34.162.0/24 110.34.164.0/24 110.34.166.0/24 110.34.180.0/23 110.34.183.0-110.34.191.255 110.34.220.0/22 IPv6: 2401:4a40::/32 Signature Algorithm: sha256WithRSAEncryption 06:ea:0f:de:da:29:44:aa:ee:24:81:f5:43:13:72:2d:3f:65: d7:cf:6d:b1:e9:28:68:e0:da:0a:a3:f4:3e:5d:72:95:a4:df: d5:82:d0:c7:91:13:fe:dc:94:ac:22:84:82:14:d7:c5:eb:45: d7:30:83:3c:be:62:32:4b:fe:ca:d3:e5:54:a6:6b:c2:c4:4d: 68:d7:e5:41:7b:c6:4a:a0:7e:d2:24:c1:e9:80:31:33:bb:22: c6:0e:cc:84:38:fe:3b:62:6f:bc:1f:e2:19:55:06:e8:97:cb: 81:28:fa:d4:58:ae:c8:1d:d4:a9:8f:01:12:b8:89:af:4a:a3: 44:37:3f:b2:c8:8c:fd:df:09:91:ac:29:0f:83:44:2f:10:8f: 36:35:4c:12:c6:36:21:06:07:e7:cc:2d:97:ed:d6:03:a7:85: 08:ad:4a:e3:b1:ac:d4:bb:21:0c:b3:dd:e5:29:87:66:b9:34: fe:ff:7c:02:9f:05:b7:11:c7:50:02:4c:70:51:3f:cf:26:ba: a9:80:3a:02:81:f0:32:ea:c5:aa:2e:38:b4:bc:3d:2a:3e:a7: aa:62:94:76:9b:66:c4:f2:a1:a0:52:d6:94:52:07:11:14:a0: e2:d0:45:4e:89:52:ed:a1:67:14:52:76:ad:b0:a0:d9:cd:47: 34:46:9d:63 -----BEGIN CERTIFICATE----- MIIFvjCCBKagAwIBAgICANMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUM1MzIxMTAvBgNVBAUTKEJDQUIzRTc2Rjg0RUQ0Mzc0MkYyQTA4MTI0MjcwOEU3 OTlDRTFCNUYwHhcNMjUwMzI3MDU0MjQ5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0ZTU1OS1jM2NiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAu19eDYWyr3poUaQlIX2g11YkgcQiKl5ZWkS23tMimp6KSyuVHA/6GD7BiTnG RS9BcdzT/1nB/JsCuCe+fMHY7LT9sF4y5KvxGH5KZhsX1AtaG4rEFZwjozpeUU7z bo+yyTVzZMQBRxBalcOScWDIvzmpjCP/pEcSjt8qy8mojrHPJab8THzzuKdraY5E GzqGM9rzE3wYiH+zKCSsbYUvkgYxFvhbIFe8S4+PlNp1MEy6cUAYLCEdW9uMNkld AxL82kKrPOnA3C03PN+OpFt8+c7drXqtE4bfKKAWcEUX2/cVUdv4sxOo1zFrgk+N 2vpAONnx6qbNS7fvZFKmDaA1DQIDAQABo4IC4jCCAt4wHQYDVR0OBBYEFPv15e8E uOb2kqOuoEgmNk2NUdIOMB8GA1UdIwQYMBaAFLyrPnb4TtQ3QvKggSQnCOeZzhtf MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQzUzMi9EQUEwRDBCNDAz N0UxMUVGODUyMEU3NThDNEY5QUUwMi92S3MtZHZoTzFEZEM4cUNCSkNjSTU1bk9H MTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3ZLcy1kdmhPMURkQzhxQ0JKQ2NJNTVuT0cxOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUM1MzIvREFBMEQwQjQwMzdFMTFFRjg1MjBFNzU4QzRGOUFFMDIvQTJFQkNFOTIw ODMwMTFFRjgyQUZGRDQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwbAYIKwYBBQUHAQcBAf8E XTBbMEoEAgABMEQDBAIr/HgDBAJn6VADBABuIosDBABuIp4DBABuIqIDBABuIqQD BABuIqYDBAFuIrQwDAMEAG4itwMEBm4igAMEAm4i3DANBAIAAjAHAwUAJAFKQDAN BgkqhkiG9w0BAQsFAAOCAQEABuoP3topRKruJIH1QxNyLT9l189tsekoaODaCqP0 Pl1ylaTf1YLQx5ET/tyUrCKEghTXxetF1zCDPL5iMkv+ytPlVKZrwsRNaNflQXvG SqB+0iTB6YAxM7sixg7MhDj+O2JvvB/iGVUG6JfLgSj61FiuyB3UqY8BEriJr0qj RDc/ssiM/d8JkawpD4NELxCPNjVMEsY2IQYH58wtl+3WA6eFCK1K47Gs1LshDLPd 5SmHZrk0/v98Ap8FtxHHUAJMcFE/zya6qYA6AoHwMurFqi44tLw9Kj6nqmKUdptm xPKhoFLWlFIHERSg4tBFTolS7aFnFFJ2rbCg2c1HNEadYw== -----END CERTIFICATE-----Generated at Sat Apr 26 08:14:03 2025 by rpki-client