$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/D83A0A7E1DAF11F0B2131B09C4F9AE02.roa File: D83A0A7E1DAF11F0B2131B09C4F9AE02.roa (raw, json) Hash identifier: 919/QrkbKK7KbwR685ZBie0PZUotLL4IkEQTf5I8BR0= Subject key identifier: 00:85:BD:E9:67:19:80:94:AE:21:61:39:51:FF:DE:E8:D3:5A:A9:D2 Certificate issuer: /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224 Certificate serial: 89 Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/D83A0A7E1DAF11F0B2131B09C4F9AE02.roa Signing time: Sun 20 Apr 2025 06:35:53 +0000 ROA not before: Sun 20 Apr 2025 06:35:53 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 62610 IP address blocks: 45.121.212.0/24 maxlen: 24 45.121.213.0/24 maxlen: 24 45.121.214.0/24 maxlen: 24 103.62.52.0/24 maxlen: 24 103.62.53.0/24 maxlen: 24 103.62.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 137 (0x89) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C55CE, serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224 Validity Not Before: Apr 20 06:35:53 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=680495c8-3b2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:09:98:97:16:53:54:8d:0e:a1:e1:b5:1a: 6e:e1:53:ea:6c:42:79:74:d2:81:d4:a6:45:e3:60: 9d:a4:bf:35:c2:01:a5:11:ad:f6:68:ee:a2:f1:1f: 50:ce:80:2f:9f:10:24:a6:7e:ef:f7:70:8b:4c:fa: 81:b2:97:d4:9e:99:89:47:1c:9c:5b:db:c5:c1:9d: b8:4b:24:a4:c5:b4:f0:6b:3a:f2:ed:b9:8f:05:90: 0e:31:70:0c:0c:eb:12:28:aa:1a:57:73:71:4f:e1: db:ff:fe:60:fc:7d:93:88:6d:66:a6:71:3a:23:55: 25:c8:b1:52:ce:9d:3f:7a:a3:d1:ab:b3:45:01:2e: bd:46:8c:56:b7:f3:51:3b:a8:79:8c:60:40:a5:9a: 9f:0d:5c:68:64:e6:fd:c8:15:a4:86:0a:de:c4:12: 9f:7a:2f:9a:08:45:ac:26:ba:6c:ef:6a:db:df:7b: b8:96:d0:bc:e3:de:cb:e0:f8:6c:08:dc:90:d8:c3: 73:72:52:91:2f:db:c2:c9:48:22:7e:94:31:fe:9a: aa:c6:a5:2f:96:b8:97:f9:f0:b4:33:8c:aa:e3:ed: 39:b2:30:74:2e:03:ec:db:b2:99:65:c7:22:f9:a7: ec:7e:f0:86:fb:7e:ab:2a:1e:e0:ad:87:9c:92:29: 92:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:85:BD:E9:67:19:80:94:AE:21:61:39:51:FF:DE:E8:D3:5A:A9:D2 X509v3 Authority Key Identifier: keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/D83A0A7E1DAF11F0B2131B09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.212.0-45.121.214.255 103.62.52.0-103.62.54.255 Signature Algorithm: sha256WithRSAEncryption 2e:ed:6c:3c:bf:c1:cf:17:be:54:38:f8:39:a7:21:4f:ae:c6: 89:67:cf:c7:86:1c:58:2b:ec:24:7b:05:41:c5:e8:27:f7:60: 00:d8:48:d1:bc:f3:fa:8c:c1:eb:e5:c4:41:af:e4:0c:78:f9: 51:18:c1:18:1b:af:4e:00:a8:6e:3c:75:24:7c:2f:aa:d3:de: 81:23:c4:78:b0:96:49:01:92:af:0d:cc:c5:d1:66:64:e5:9b: 12:0f:ff:83:17:4e:58:e4:73:70:97:c4:e3:15:c9:c9:c5:e6: 30:62:55:e0:20:9e:1b:bd:a1:5e:29:fc:f2:05:5e:a5:43:2d: 51:42:f3:ef:c2:c1:a7:99:67:93:da:db:3d:4f:2f:69:cf:1c: db:ea:9c:9c:ea:cb:16:89:cd:13:b4:98:a3:75:38:04:76:d7: 72:cd:73:b6:a5:0b:02:cb:49:28:12:d0:de:9c:a0:c7:f7:da: 6c:d1:c5:03:84:ec:f5:34:95:a9:c0:c4:15:90:ef:a8:25:d0: b9:8b:ce:ff:70:58:b7:5e:fe:b8:ac:a4:ee:a8:e4:26:7a:b9: 7c:24:e2:72:b7:69:0c:45:db:c8:7d:0b:8e:39:ba:f1:ef:aa: c9:f5:f5:44:c9:8f:80:ef:f7:c1:10:f1:51:3d:f9:b9:32:c6: b0:77:af:d5 -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICAIkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzU1Q0UxMTAvBgNVBAUTKDgyOEE0N0QzQUM2RTZCMDM2MDExQzIzMzIzMTcwQTk3 MzFCQUQyMjQwHhcNMjUwNDIwMDYzNTUzWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA0OTVjOC0zYjJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtZgJmJcWU1SNDqHhtRpu4VPqbEJ5dNKB1KZF42CdpL81wgGlEa32aO6i8R9Q zoAvnxAkpn7v93CLTPqBspfUnpmJRxycW9vFwZ24SySkxbTwazry7bmPBZAOMXAM DOsSKKoaV3NxT+Hb//5g/H2TiG1mpnE6I1UlyLFSzp0/eqPRq7NFAS69RoxWt/NR O6h5jGBApZqfDVxoZOb9yBWkhgrexBKfei+aCEWsJrps72rb33u4ltC8497L4Phs CNyQ2MNzclKRL9vCyUgifpQx/pqqxqUvlriX+fC0M4yq4+05sjB0LgPs27KZZcci +afsfvCG+36rKh7grYeckimSCwIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFACFveln GYCUriFhOVH/3ujTWqnSMB8GA1UdIwQYMBaAFIKKR9OsbmsDYBHCMyMXCpcxutIk MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNTVDRS80NTFBODIzQThC N0IxMUVGODI5MDMyN0ZDNEY5QUUwMi9nb3BIMDZ4dWF3TmdFY0l6SXhjS2x6RzYw aVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2dvcEgwNnh1YXdOZ0VjSXpJeGNLbHpHNjBpUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzU1Q0UvNDUxQTgyM0E4QjdCMTFFRjgyOTAzMjdGQzRGOUFFMDIvRDgzQTBBN0Ux REFGMTFGMEIyMTMxQjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMCIEAgABMBwwDAMEAi151AMEAC151jAMAwQCZz40AwQAZz42MA0GCSqGSIb3 DQEBCwUAA4IBAQAu7Ww8v8HPF75UOPg5pyFPrsaJZ8/HhhxYK+wkewVBxegn92AA 2EjRvPP6jMHr5cRBr+QMePlRGMEYG69OAKhuPHUkfC+q096BI8R4sJZJAZKvDczF 0WZk5ZsSD/+DF05Y5HNwl8TjFcnJxeYwYlXgIJ4bvaFeKfzyBV6lQy1RQvPvwsGn mWeT2ts9Ty9pzxzb6pyc6ssWic0TtJijdTgEdtdyzXO2pQsCy0koEtDenKDH99ps 0cUDhOz1NJWpwMQVkO+oJdC5i87/cFi3Xv64rKTuqOQmerl8JOJyt2kMRdvIfQuO Obrx76rJ9fVEyY+A7/fBEPFRPfm5Msawd6/V -----END CERTIFICATE-----Generated at Sat Apr 26 16:56:47 2025 by rpki-client