$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/CDEFCF14801F11EF99206C47C4F9AE02.roa File: CDEFCF14801F11EF99206C47C4F9AE02.roa (raw, json) Hash identifier: kISEPEmE2ZLNGr7M+gIIuLb+wfjhIl0pN5Ozrn7290M= Subject key identifier: 82:AA:A6:B4:98:1A:34:2D:23:8C:D7:4E:FA:74:8E:77:FA:F7:13:13 Certificate issuer: /CN=A91BF905/serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Certificate serial: 0AC1 Authority key identifier: 21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/CDEFCF14801F11EF99206C47C4F9AE02.roa Signing time: Sat 08 Feb 2025 19:37:52 +0000 ROA not before: Sat 08 Feb 2025 19:37:52 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 138556 IP address blocks: 103.132.224.0/24 maxlen: 24 103.132.225.0/24 maxlen: 24 103.132.226.0/24 maxlen: 24 2404:4140::/32 maxlen: 32 2404:4140::/36 maxlen: 36 2404:4140:1000::/36 maxlen: 36 2404:4140:2000::/36 maxlen: 36 2404:4140:3000::/36 maxlen: 36 2404:4140:4000::/36 maxlen: 36 2404:4140:5000::/36 maxlen: 36 2404:4140:6000::/36 maxlen: 36 2404:4140:7000::/36 maxlen: 36 2404:4140:8000::/36 maxlen: 36 2404:4140:9000::/36 maxlen: 36 2404:4140:a000::/36 maxlen: 36 2404:4140:b000::/36 maxlen: 36 2404:4140:c000::/36 maxlen: 36 2404:4140:d000::/36 maxlen: 36 2404:4140:e000::/36 maxlen: 36 2404:4140:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 19:19:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2753 (0xac1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF905, serialNumber=21A47FFFC81A13335C07B92605A2DDFD1807A14C Validity Not Before: Feb 8 19:37:52 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a7b290-f423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e1:00:d9:38:d3:45:a5:73:8a:27:33:26:0e: 99:4b:f5:51:ca:a4:92:ff:9e:fe:e3:87:68:98:fb: da:8a:62:5b:b3:b8:db:ac:79:04:d3:b1:3c:02:ab: b2:3d:c9:5e:7e:2e:36:0b:b3:6f:22:48:25:fb:19: 11:09:ef:42:16:49:5c:b0:42:82:76:e3:5e:4c:bb: e1:7a:e7:7c:52:b8:bc:6c:37:08:07:2e:4f:47:88: 5a:14:a4:af:6d:cf:00:bc:4c:5f:b0:4e:77:b7:6c: cc:13:05:08:38:ca:24:cd:f0:76:c8:cb:f7:90:d8: fa:a8:8e:ca:23:18:73:96:e2:05:09:de:28:46:df: a5:c5:17:ca:3d:d0:26:e7:72:9d:ee:37:0a:02:1c: c1:b6:d8:a6:ac:c6:9b:c6:de:10:73:d2:ed:e3:29: 75:96:57:89:42:73:d4:65:25:73:01:38:65:5c:ca: d7:48:3b:d7:47:0d:3e:95:0a:dc:88:e7:6e:2d:70: 40:ee:6a:ee:0f:5b:2b:f7:2b:a9:ce:de:05:dc:46: fe:59:10:4a:ab:3e:1f:57:63:02:d4:42:15:97:b9: 0b:b0:9a:d1:50:a7:f8:d7:c4:38:c9:ea:00:f4:03: cb:17:a9:4d:19:cb:6e:4d:ea:bd:22:2d:5b:73:a0: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:AA:A6:B4:98:1A:34:2D:23:8C:D7:4E:FA:74:8E:77:FA:F7:13:13 X509v3 Authority Key Identifier: keyid:21:A4:7F:FF:C8:1A:13:33:5C:07:B9:26:05:A2:DD:FD:18:07:A1:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/IaR__8gaEzNcB7kmBaLd_RgHoUw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IaR__8gaEzNcB7kmBaLd_RgHoUw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF905/1FA7C46C48D311EA8AAE4668C4F9AE02/CDEFCF14801F11EF99206C47C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.224.0-103.132.226.255 IPv6: 2404:4140::/32 Signature Algorithm: sha256WithRSAEncryption 14:ed:36:d6:69:51:51:b6:9e:3e:98:6a:67:64:c2:42:21:a8: c6:0c:aa:47:53:56:96:44:88:5f:69:38:26:13:a8:da:6d:eb: 05:24:0a:05:a5:2b:03:ac:00:7a:61:b1:e0:9e:7c:11:7c:86: cd:e1:c6:93:7a:b1:6b:ce:b1:50:6b:f7:ee:bf:94:e8:9d:b4: 4d:70:e1:c4:79:cc:0a:16:96:c9:09:af:48:98:de:c0:96:86: fb:79:fa:e9:4c:f6:e3:05:38:79:f1:54:1b:40:ae:31:a0:0b: 46:58:9f:78:cc:3b:90:13:4e:bb:e0:a8:ba:6a:a1:26:3d:05: 10:52:67:8a:9b:60:e7:be:f5:f7:7e:6d:0d:b8:47:a3:52:4a: e7:29:44:3f:54:9b:43:48:aa:25:c0:f3:54:7a:c3:ae:39:92: 14:5b:db:dc:83:9c:af:ae:84:61:51:25:cf:d4:6c:af:f9:4f: 41:ef:d3:df:8a:8e:87:2d:0b:47:06:4b:6d:f6:87:cb:2e:71: a2:5a:08:42:30:42:11:0d:d9:c8:3d:81:fe:e1:03:20:51:50: ea:b0:16:9d:51:62:46:93:1f:bd:d2:7e:ea:03:e0:61:68:0a: 51:46:f6:03:3c:11:d1:e4:4e:4e:7e:1a:1b:77:09:b2:e5:4e: 8b:05:f9:b7 -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCsEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkY5MDUxMTAvBgNVBAUTKDIxQTQ3RkZGQzgxQTEzMzM1QzA3QjkyNjA1QTJEREZE MTgwN0ExNEMwHhcNMjUwMjA4MTkzNzUyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E3YjI5MC1mNDIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluEA2TjTRaVziiczJg6ZS/VRyqSS/57+44domPvaimJbs7jbrHkE07E8Aquy Pclefi42C7NvIkgl+xkRCe9CFklcsEKCduNeTLvheud8Uri8bDcIBy5PR4haFKSv bc8AvExfsE53t2zMEwUIOMokzfB2yMv3kNj6qI7KIxhzluIFCd4oRt+lxRfKPdAm 53Kd7jcKAhzBttimrMabxt4Qc9Lt4yl1lleJQnPUZSVzAThlXMrXSDvXRw0+lQrc iOduLXBA7mruD1sr9yupzt4F3Eb+WRBKqz4fV2MC1EIVl7kLsJrRUKf418Q4yeoA 9APLF6lNGctuTeq9Ii1bc6B9HQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFIKqprSY GjQtI4zXTvp0jnf69xMTMB8GA1UdIwQYMBaAFCGkf//IGhMzXAe5JgWi3f0YB6FM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjkwNS8xRkE3QzQ2QzQ4 RDMxMUVBOEFBRTQ2NjhDNEY5QUUwMi9JYVJfXzhnYUV6TmNCN2ttQmFMZF9SZ0hv VXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lhUl9fOGdhRXpOY0I3a21CYUxkX1JnSG9Vdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkY5MDUvMUZBN0M0NkM0OEQzMTFFQThBQUU0NjY4QzRGOUFFMDIvQ0RFRkNGMTQ4 MDFGMTFFRjk5MjA2QzQ3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEBWeE4AMEAGeE4jANBAIAAjAHAwUAJARBQDANBgkqhkiG 9w0BAQsFAAOCAQEAFO021mlRUbaePphqZ2TCQiGoxgyqR1NWlkSIX2k4JhOo2m3r BSQKBaUrA6wAemGx4J58EXyGzeHGk3qxa86xUGv37r+U6J20TXDhxHnMChaWyQmv SJjewJaG+3n66Uz24wU4efFUG0CuMaALRlifeMw7kBNOu+CoumqhJj0FEFJniptg 5771935tDbhHo1JK5ylEP1SbQ0iqJcDzVHrDrjmSFFvb3IOcr66EYVElz9Rsr/lP Qe/T34qOhy0LRwZLbfaHyy5xoloIQjBCEQ3ZyD2B/uEDIFFQ6rAWnVFiRpMfvdJ+ 6gPgYWgKUUb2AzwR0eROTn4aG3cJsuVOiwX5tw== -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:42 2025 by rpki-client