$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/CE3975C845C811F0A78A100DC4F9AE02.roa File: CE3975C845C811F0A78A100DC4F9AE02.roa (raw, json) Hash identifier: 9HTGfO2piDDwEKXCj1vvDxbp+9cC4HfErZG/HpULbg8= Subject key identifier: 7B:4E:05:2C:F1:28:D4:6F:14:F8:8D:88:9B:F2:25:35:87:5E:3C:67 Certificate issuer: /CN=A91AFB9A/serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Certificate serial: 02 Authority key identifier: C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/CE3975C845C811F0A78A100DC4F9AE02.roa Signing time: Tue 10 Jun 2025 07:02:00 +0000 ROA not before: Tue 10 Jun 2025 07:02:00 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 4826 IP address blocks: 203.17.58.0/24 maxlen: 24 203.17.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 07:16:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AFB9A, serialNumber=C3DCD95A724AD6E3B9874C6E4D6B39EBCE142CD4 Validity Not Before: Jun 10 07:02:00 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6847d868-0bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:34:11:a1:32:ba:4e:f8:88:02:64:80:f7: 56:17:ba:08:ba:ac:a6:03:2e:aa:ea:9f:55:03:42: 05:51:fa:ea:44:cc:12:de:83:c4:16:f3:89:d4:fb: e4:e1:fc:f5:a1:63:e4:41:73:a7:9a:0e:39:c6:ba: 14:bb:1e:25:28:4b:48:19:fd:b2:98:ea:83:e0:20: b4:89:1d:d9:d5:4d:13:d0:58:0c:66:77:4a:0e:06: 4f:6e:09:35:33:4a:6e:2b:12:ea:b6:b9:3a:0d:65: 3e:19:59:14:fd:96:b5:2b:52:80:cd:57:7a:5a:52: ef:58:20:8d:a9:50:69:17:6d:11:1f:0e:f1:24:d3: fd:ca:61:87:27:78:51:0a:0f:72:12:9e:00:be:d6: be:cc:88:d8:7d:0a:d6:30:4e:49:e8:e4:4b:bb:32: 4e:6c:f8:c7:37:0b:f5:2e:d8:a3:fb:fa:3c:9b:08: 38:fb:f0:ae:42:28:48:b3:aa:8b:26:e8:e5:9a:7f: 98:57:4b:8c:54:c0:cd:d7:09:d8:78:57:5d:0c:c3: eb:94:a3:fc:f6:87:2a:08:15:be:80:e3:df:b8:e1: a3:8f:b4:15:92:27:88:40:03:3c:86:e6:2a:ba:73: bf:4b:b4:09:90:2f:11:d8:ab:80:4d:19:61:54:35: fd:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4E:05:2C:F1:28:D4:6F:14:F8:8D:88:9B:F2:25:35:87:5E:3C:67 X509v3 Authority Key Identifier: keyid:C3:DC:D9:5A:72:4A:D6:E3:B9:87:4C:6E:4D:6B:39:EB:CE:14:2C:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/w9zZWnJK1uO5h0xuTWs5684ULNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/w9zZWnJK1uO5h0xuTWs5684ULNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFB9A/227AC48645C711F0A9C15528C4F9AE02/CE3975C845C811F0A78A100DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.17.58.0/23 Signature Algorithm: sha256WithRSAEncryption 47:19:73:61:b1:d9:6c:c3:04:d1:9c:75:41:be:90:3d:5a:e2: 92:1d:4b:8f:d5:15:92:94:f7:c6:26:32:26:d4:ae:6a:00:6b: 98:f0:fd:6a:4d:fa:db:55:bd:6e:6b:02:66:dd:d8:6e:f1:e1: 63:ba:b9:e2:a9:ea:19:fc:58:6a:de:b2:eb:4f:b3:dc:7a:b6: 87:68:56:f8:da:82:a7:48:3a:5f:05:b8:5d:84:b1:8e:7f:f6: 64:97:d7:df:d0:13:34:ee:0a:63:72:3e:e6:39:9d:92:53:4b: 34:3d:b1:c1:fe:df:6c:11:57:bf:ac:d6:81:38:11:8b:22:7a: 74:34:8b:12:3f:1d:47:22:ba:2a:c7:1e:15:ee:9a:dc:d4:d9: 90:8e:ff:7e:51:22:cd:c6:47:10:99:04:31:6e:b6:fd:b9:ee: fa:ae:d0:ac:23:30:b9:e8:33:91:d0:7d:87:45:f9:0e:84:35: b3:b1:53:e6:5a:a3:fb:7c:28:27:77:c0:41:f8:fc:59:92:fa: 20:b3:25:61:47:8a:a2:53:a5:4f:95:59:ae:8f:99:f3:3d:df: 3a:36:28:5e:87:51:8c:80:31:d6:c8:e2:c1:a0:2d:1d:65:53: 50:50:b3:a7:af:b2:33:45:5a:70:cb:53:0a:e8:fb:ba:0e:db: 01:47:7c:3f -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB RkI5QTExMC8GA1UEBRMoQzNEQ0Q5NUE3MjRBRDZFM0I5ODc0QzZFNEQ2QjM5RUJD RTE0MkNENDAeFw0yNTA2MTAwNzAyMDBaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4NDdkODY4LTBiYzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCzhjQRoTK6TviIAmSA91YXugi6rKYDLqrqn1UDQgVR+upEzBLeg8QW84nU++Th /PWhY+RBc6eaDjnGuhS7HiUoS0gZ/bKY6oPgILSJHdnVTRPQWAxmd0oOBk9uCTUz Sm4rEuq2uToNZT4ZWRT9lrUrUoDNV3paUu9YII2pUGkXbREfDvEk0/3KYYcneFEK D3ISngC+1r7MiNh9CtYwTkno5Eu7Mk5s+Mc3C/Uu2KP7+jybCDj78K5CKEizqosm 6OWaf5hXS4xUwM3XCdh4V10Mw+uUo/z2hyoIFb6A49+44aOPtBWSJ4hAAzyG5iq6 c79LtAmQLxHYq4BNGWFUNf2VAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUe04FLPEo 1G8U+I2Im/IlNYdePGcwHwYDVR0jBBgwFoAUw9zZWnJK1uO5h0xuTWs5684ULNQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUFGQjlBLzIyN0FDNDg2NDVD NzExRjBBOUMxNTUyOEM0RjlBRTAyL3c5elpXbkpLMXVPNWgweHVUV3M1Njg0VUxO US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdzl6WlduSksxdU81aDB4dVRXczU2ODRVTE5RLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB RkI5QS8yMjdBQzQ4NjQ1QzcxMUYwQTlDMTU1MjhDNEY5QUUwMi9DRTM5NzVDODQ1 QzgxMUYwQTc4QTEwMERDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcsROjANBgkqhkiG9w0BAQsFAAOCAQEARxlzYbHZbMME0Zx1 Qb6QPVrikh1Lj9UVkpT3xiYyJtSuagBrmPD9ak3621W9bmsCZt3YbvHhY7q54qnq GfxYat6y60+z3Hq2h2hW+NqCp0g6XwW4XYSxjn/2ZJfX39ATNO4KY3I+5jmdklNL ND2xwf7fbBFXv6zWgTgRiyJ6dDSLEj8dRyK6KsceFe6a3NTZkI7/flEizcZHEJkE MW62/bnu+q7QrCMwuegzkdB9h0X5DoQ1s7FT5lqj+3woJ3fAQfj8WZL6ILMlYUeK olOlT5VZro+Z8z3fOjYoXodRjIAx1sjiwaAtHWVTUFCzp6+yM0VacMtTCuj7ug7b AUd8Pw== -----END CERTIFICATE-----Generated at Tue Jun 17 01:32:47 2025 by rpki-client