$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/69308C200A9611EABF034172C4F9AE02.roa File: 69308C200A9611EABF034172C4F9AE02.roa (raw, json) Hash identifier: UpR8nuBc/YxAqJ5KwZdD471HRL+h2X0H2SIoY13S/74= Subject key identifier: 73:64:0F:0B:66:5A:96:AB:D3:97:2B:4A:FD:A0:CC:79:7A:72:26:81 Certificate issuer: /CN=A91CC8B1/serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Certificate serial: 0BFE Authority key identifier: C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/69308C200A9611EABF034172C4F9AE02.roa Signing time: Sun 02 Mar 2025 19:37:24 +0000 ROA not before: Sun 02 Mar 2025 19:37:24 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 132489 IP address blocks: 45.126.72.0/23 maxlen: 24 103.84.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:32:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3070 (0xbfe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CC8B1, serialNumber=C87FCAE907BD205A08E54C67A63356D921C5913B Validity Not Before: Mar 2 19:37:24 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c4b373-fed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:08:18:ff:8c:30:bd:f5:7f:53:28:f1:0d:b6: 68:92:9c:5a:8b:ba:45:ba:5b:bd:38:21:ba:c8:78: 25:22:c3:96:46:f0:f2:b2:d6:42:cb:fa:db:96:38: 45:72:fe:9a:9f:e8:77:68:9c:e1:33:63:09:5a:8f: c8:63:8a:e1:3a:40:9b:94:bc:81:11:4b:e7:ec:57: 33:f6:77:a9:93:ca:05:08:27:72:9e:50:c6:3c:17: 56:a0:cc:b2:1e:cc:51:f2:15:7c:0a:04:85:62:f3: 5f:9d:7c:48:66:7f:d1:06:3e:8a:ce:42:bd:6a:05: 23:ec:75:b6:7f:a8:d5:37:64:46:45:aa:6e:87:90: 23:15:cb:4d:ed:30:83:ac:f1:c5:3a:fc:b3:5f:ce: 29:59:5e:71:71:59:99:63:d8:80:09:43:56:f5:37: 1c:97:66:32:cd:de:1c:0e:4f:0d:8f:30:67:71:20: 35:8c:95:18:bc:8f:8b:fb:5e:32:6c:51:5a:c4:0b: e1:10:c2:a6:e7:52:a5:78:27:dc:d1:9f:a8:b1:77: fb:eb:25:ac:e0:6c:08:b4:fb:54:0e:f5:50:bd:06: 26:00:6b:d6:96:b3:7f:bf:3e:d6:8e:60:01:66:83: 44:b7:7e:8e:dc:8d:38:68:5c:d6:e7:56:ca:76:a5: 2a:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:64:0F:0B:66:5A:96:AB:D3:97:2B:4A:FD:A0:CC:79:7A:72:26:81 X509v3 Authority Key Identifier: keyid:C8:7F:CA:E9:07:BD:20:5A:08:E5:4C:67:A6:33:56:D9:21:C5:91:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yH_K6Qe9IFoI5UxnpjNW2SHFkTs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC8B1/CE851A560A9511EA85FFAA71C4F9AE02/69308C200A9611EABF034172C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.126.72.0/23 103.84.244.0/22 Signature Algorithm: sha256WithRSAEncryption 89:47:c2:ad:54:81:0d:72:bc:10:9f:e7:a1:4e:5c:cd:ae:56: f3:df:cb:75:55:48:9f:34:28:31:5d:4c:1f:7d:dd:b5:4f:46: 6b:af:c2:f2:57:20:96:dc:e2:29:cf:ce:54:39:3c:79:7d:32: a2:9c:d3:5a:40:62:f4:1b:04:32:7f:96:4b:e3:b6:ad:3f:85: 18:c6:03:6a:44:39:dd:e9:5c:a5:42:7a:19:fe:34:16:e1:0b: 98:fd:b4:1e:ee:26:a6:84:8f:69:02:d8:39:2a:e2:bc:41:16: 5d:4d:73:b8:49:bc:d2:64:d4:7a:0a:00:19:10:56:76:67:59: fb:04:96:a9:5a:a0:df:e4:e3:3f:57:24:1c:85:94:98:b7:70: 53:5b:a5:92:17:49:2d:c1:b0:60:e9:f4:92:75:b3:5d:03:d4: f8:5d:4e:fe:9a:d4:4c:c0:12:a5:94:40:4d:eb:93:84:c0:04: 33:cd:e9:85:cd:c9:00:4e:18:4e:55:82:bb:ed:3f:00:99:60: 60:99:d8:e2:af:a9:bd:b1:f5:84:19:6a:c7:62:f3:3d:8b:e5: b5:18:eb:0c:8a:ea:8b:ac:5d:50:75:e3:50:1c:26:2a:67:09: 1f:19:f8:a6:7a:c5:8b:30:ac:cf:c5:96:73:5b:cd:5b:eb:6c: 2a:b4:15:aa -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC/4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0M4QjExMTAvBgNVBAUTKEM4N0ZDQUU5MDdCRDIwNUEwOEU1NEM2N0E2MzM1NkQ5 MjFDNTkxM0IwHhcNMjUwMzAyMTkzNzI0WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M0YjM3My1mZWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA9ggY/4wwvfV/UyjxDbZokpxai7pFulu9OCG6yHglIsOWRvDystZCy/rbljhF cv6an+h3aJzhM2MJWo/IY4rhOkCblLyBEUvn7Fcz9nepk8oFCCdynlDGPBdWoMyy HsxR8hV8CgSFYvNfnXxIZn/RBj6KzkK9agUj7HW2f6jVN2RGRapuh5AjFctN7TCD rPHFOvyzX84pWV5xcVmZY9iACUNW9Tccl2Yyzd4cDk8NjzBncSA1jJUYvI+L+14y bFFaxAvhEMKm51KleCfc0Z+osXf76yWs4GwItPtUDvVQvQYmAGvWlrN/vz7WjmAB ZoNEt36O3I04aFzW51bKdqUqwQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHNkDwtm Wpar05crSv2gzHl6ciaBMB8GA1UdIwQYMBaAFMh/yukHvSBaCOVMZ6YzVtkhxZE7 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQzhCMS9DRTg1MUE1NjBB OTUxMUVBODVGRkFBNzFDNEY5QUUwMi95SF9LNlFlOUlGb0k1VXhucGpOVzJTSEZr VHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lIX0s2UWU5SUZvSTVVeG5wak5XMlNIRmtUcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0M4QjEvQ0U4NTFBNTYwQTk1MTFFQTg1RkZBQTcxQzRGOUFFMDIvNjkzMDhDMjAw QTk2MTFFQUJGMDM0MTcyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEtfkgDBAJnVPQwDQYJKoZIhvcNAQELBQADggEBAIlHwq1U gQ1yvBCf56FOXM2uVvPfy3VVSJ80KDFdTB993bVPRmuvwvJXIJbc4inPzlQ5PHl9 MqKc01pAYvQbBDJ/lkvjtq0/hRjGA2pEOd3pXKVCehn+NBbhC5j9tB7uJqaEj2kC 2Dkq4rxBFl1Nc7hJvNJk1HoKABkQVnZnWfsElqlaoN/k4z9XJByFlJi3cFNbpZIX SS3BsGDp9JJ1s10D1PhdTv6a1EzAEqWUQE3rk4TABDPN6YXNyQBOGE5VgrvtPwCZ YGCZ2OKvqb2x9YQZasdi8z2L5bUY6wyK6ousXVB141AcJipnCR8Z+KZ6xYswrM/F lnNbzVvrbCq0Fao= -----END CERTIFICATE-----Generated at Sat Apr 26 17:04:33 2025 by rpki-client