$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DB701E584E6311EEBED9743CC4F9AE02.roa File: DB701E584E6311EEBED9743CC4F9AE02.roa (raw, json) Hash identifier: Zd7NoechSfahxSRsj2v3JsOwSTFCMebH21LUprHvV20= Subject key identifier: 82:8A:2C:D8:2A:06:17:BB:0A:A0:57:73:88:74:AB:0F:89:AF:0E:8E Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Certificate serial: 0A5F Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DB701E584E6311EEBED9743CC4F9AE02.roa Signing time: Wed 26 Mar 2025 19:59:50 +0000 ROA not before: Wed 26 Mar 2025 19:59:50 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 10204 IP address blocks: 203.78.200.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:38:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2655 (0xa5f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Validity Not Before: Mar 26 19:59:50 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e45cb6-8ef9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:65:40:3f:35:f3:ec:86:a2:07:91:17:10:9b: e1:2c:81:42:7e:54:bd:67:8d:ea:e4:54:82:2d:14: a1:33:7e:df:f1:b1:53:4c:f5:45:48:10:70:18:db: bf:ab:da:ee:dc:ab:91:85:d7:c3:45:64:7b:3c:10: 03:f6:db:14:20:a8:ce:39:bd:6b:5c:8f:5b:86:88: f1:61:4b:ef:47:7a:9e:a1:1a:d8:ce:08:31:4a:b6: bc:5c:4d:8e:d3:a7:93:11:d6:0c:1c:88:8a:2f:d4: 35:f9:6f:30:e7:d4:c9:8a:8f:1c:15:e5:69:d1:16: af:b9:bc:79:e4:40:0d:48:d4:90:54:4f:c6:64:12: c9:22:ca:d8:05:2f:1e:5d:d9:76:d2:60:5c:a4:8a: 40:9b:92:56:64:53:87:5e:b3:30:f9:c3:20:d1:d5: 46:c6:b5:d5:40:c4:15:cb:51:37:79:2c:0a:65:ab: 40:88:27:fc:4e:9d:67:c7:fc:4d:3e:5e:de:5f:e2: 5f:9a:25:5c:e2:3f:79:6a:d4:69:f0:a0:07:02:ec: 6b:85:e9:a4:8f:26:f5:ff:e1:af:77:d3:8b:11:a5: 27:f1:a5:40:bf:d9:3a:56:5a:3d:72:69:17:f8:11: 16:5b:84:ec:b0:a0:c9:a5:32:cf:c5:cf:a7:55:0d: 43:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:8A:2C:D8:2A:06:17:BB:0A:A0:57:73:88:74:AB:0F:89:AF:0E:8E X509v3 Authority Key Identifier: keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DB701E584E6311EEBED9743CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.78.200.0/22 Signature Algorithm: sha256WithRSAEncryption 42:37:00:d2:28:7c:29:53:d0:c1:64:35:1f:d5:da:f5:d3:e4: f3:3a:b7:36:93:df:ec:e3:8d:79:e4:63:d9:2a:09:ab:b3:34: 74:21:6f:9d:e2:f6:53:9f:cb:60:50:08:6c:f4:48:10:6c:db: 1f:9b:72:30:a4:15:61:3d:5d:57:a1:b8:5a:a3:ad:cf:d8:68: 5c:0c:29:c6:74:1b:b4:ee:5e:a4:fe:af:ea:85:94:bb:06:f5: 9f:15:b1:65:eb:21:67:38:6b:44:9c:b7:16:fd:27:d2:ba:6c: fb:bf:ac:5a:71:cb:07:b0:ab:d8:3e:81:23:74:8b:33:1c:47: ef:3e:40:ae:ea:db:1a:5f:94:38:00:33:88:28:69:ae:77:0c: b0:20:4f:9d:4e:bf:7a:39:f4:63:17:7b:8a:c0:9d:71:08:66: 25:af:24:a6:72:da:7c:fc:d5:ba:49:f4:1a:db:b8:21:c8:c4: 14:85:19:36:1f:43:cf:26:be:48:cf:1f:9f:a7:0c:df:a0:bf: 70:34:1d:29:ba:58:a9:77:fa:47:c3:56:04:17:eb:fc:ac:df: 01:56:b8:b8:9b:fa:9f:2b:5d:26:ba:16:f8:50:2d:b2:24:8a: 38:be:9e:81:6d:a1:55:bd:c6:b2:0b:3d:08:31:f3:fa:0d:8b: 37:69:7f:d9 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCl8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4 M0NCRTE4NjcwHhcNMjUwMzI2MTk1OTUwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0NWNiNi04ZWY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAw2VAPzXz7IaiB5EXEJvhLIFCflS9Z43q5FSCLRShM37f8bFTTPVFSBBwGNu/ q9ru3KuRhdfDRWR7PBAD9tsUIKjOOb1rXI9bhojxYUvvR3qeoRrYzggxSra8XE2O 06eTEdYMHIiKL9Q1+W8w59TJio8cFeVp0Ravubx55EANSNSQVE/GZBLJIsrYBS8e Xdl20mBcpIpAm5JWZFOHXrMw+cMg0dVGxrXVQMQVy1E3eSwKZatAiCf8Tp1nx/xN Pl7eX+JfmiVc4j95atRp8KAHAuxrhemkjyb1/+Gvd9OLEaUn8aVAv9k6Vlo9cmkX +BEWW4TssKDJpTLPxc+nVQ1D0wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIKKLNgq Bhe7CqBXc4h0qw+Jrw6OMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4 RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI0OTMvNUZDQUI2NzI2OEYzMTFFQTgzMkREQjM3QzRGOUFFMDIvREI3MDFFNTg0 RTYzMTFFRUJFRDk3NDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALLTsgwDQYJKoZIhvcNAQELBQADggEBAEI3ANIofClT0MFk NR/V2vXT5PM6tzaT3+zjjXnkY9kqCauzNHQhb53i9lOfy2BQCGz0SBBs2x+bcjCk FWE9XVehuFqjrc/YaFwMKcZ0G7TuXqT+r+qFlLsG9Z8VsWXrIWc4a0Sctxb9J9K6 bPu/rFpxywewq9g+gSN0izMcR+8+QK7q2xpflDgAM4goaa53DLAgT51Ov3o59GMX e4rAnXEIZiWvJKZy2nz81bpJ9BrbuCHIxBSFGTYfQ88mvkjPH5+nDN+gv3A0HSm6 WKl3+kfDVgQX6/ys3wFWuLib+p8rXSa6FvhQLbIkiji+noFtoVW9xrILPQgx8/oN izdpf9k= -----END CERTIFICATE-----Generated at Sat Apr 26 09:19:07 2025 by rpki-client