$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/6127B9001FE711ECB8454E83C4F9AE02.roa File: 6127B9001FE711ECB8454E83C4F9AE02.roa (raw, json) Hash identifier: +yvtNS8LKQHKe3DTi4wIovOu3eQ4uVvjs9/gUB2eHD0= Subject key identifier: 68:7E:02:2F:0E:83:A6:09:FB:E5:BA:5F:89:91:F8:7B:86:31:35:96 Certificate issuer: /CN=A91D3078/serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Certificate serial: 111E Authority key identifier: 8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/6127B9001FE711ECB8454E83C4F9AE02.roa Signing time: Wed 04 Jun 2025 17:19:33 +0000 ROA not before: Wed 04 Jun 2025 17:19:33 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 63992 IP address blocks: 103.58.220.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 17:13:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4382 (0x111e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D3078, serialNumber=8B261686BD92E2CF6BF548CD35596DEA95FF5833 Validity Not Before: Jun 4 17:19:33 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68408025-c8b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:05:88:21:ce:52:13:33:fa:e5:7e:89:ec:4c: 85:f4:53:c3:41:7f:6f:5c:f9:62:6d:00:9e:37:b3: 05:f7:f1:a3:30:1f:86:70:ee:0d:7a:5a:d0:b2:d4: ed:3e:76:af:0d:0f:54:cc:60:6d:e5:8c:0f:9c:98: f0:72:45:28:35:ad:cd:7e:37:34:d1:53:76:de:e5: 30:58:38:c6:61:47:5d:99:a6:a1:bb:6c:22:46:b1: d5:27:e5:52:ec:75:5c:09:37:5f:25:18:29:c5:11: b5:c5:ca:2d:d9:71:02:74:02:1a:93:84:d1:d3:7f: d9:76:72:87:76:fd:99:ba:11:fe:2b:18:ec:f1:77: 24:16:26:c3:bf:6a:59:e0:e8:46:91:29:4f:64:c2: ab:f1:be:c1:93:2f:84:17:00:b6:87:59:19:67:8a: af:58:7e:3d:83:bf:ef:04:80:47:0e:69:17:ae:0a: 2a:ea:77:5e:81:26:7b:db:cd:6a:6b:bb:c8:b2:9a: 79:fd:f5:82:82:89:22:39:f2:c9:e7:b7:21:3f:ab: 2c:62:2c:da:66:a9:d9:91:34:4c:32:b6:d7:dc:68: 4c:05:63:c6:4c:eb:5e:dc:bc:93:31:69:14:f9:4f: 2b:aa:c4:1e:d8:3d:5c:1a:ed:a0:eb:de:c3:50:ce: 8c:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:7E:02:2F:0E:83:A6:09:FB:E5:BA:5F:89:91:F8:7B:86:31:35:96 X509v3 Authority Key Identifier: keyid:8B:26:16:86:BD:92:E2:CF:6B:F5:48:CD:35:59:6D:EA:95:FF:58:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/iyYWhr2S4s9r9UjNNVlt6pX_WDM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iyYWhr2S4s9r9UjNNVlt6pX_WDM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3078/66C8302C13BC11E9987C4646C4F9AE02/6127B9001FE711ECB8454E83C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.58.220.0/22 Signature Algorithm: sha256WithRSAEncryption 51:9c:71:be:67:e6:b3:a7:ad:f7:e3:e5:aa:33:e5:be:10:e9: 01:fa:f5:45:57:3b:b1:fe:17:9b:46:54:6e:ef:cb:4a:a1:79: 16:29:e5:6d:0d:4c:8a:af:6d:4e:e4:f4:31:00:cf:9b:7f:99: 8f:9c:d6:44:19:05:48:32:23:f8:89:3e:88:71:44:5a:d5:ae: 92:c1:c5:2b:00:ee:ad:27:9d:35:16:f1:3e:ac:70:47:eb:61: b9:54:d1:87:9e:eb:c1:00:29:6d:e5:fe:c2:b9:0e:a7:48:99: c0:bf:97:a2:db:99:54:61:3f:52:21:13:2c:79:af:cc:fe:62: f2:c1:f1:28:e4:e1:4e:e5:0f:d7:a0:26:ca:75:25:f7:3e:8b: e6:0f:0f:68:85:44:33:dc:f8:1d:ea:c3:03:d4:41:8b:0d:61: 03:df:af:65:1a:95:18:aa:24:8b:f8:dd:0f:12:eb:c0:49:21: c0:2f:57:91:c3:aa:39:75:d7:8e:b4:39:6c:e9:66:a8:9d:27: a9:1c:5d:f3:a7:8d:9c:a3:f5:6f:f1:74:be:d7:48:c4:ca:1e: 44:e4:71:2d:29:01:c8:90:68:89:08:a7:28:ec:5a:7c:8b:7e: f4:a9:a0:c8:57:cf:5d:07:59:12:dc:6f:29:d0:ad:08:35:d3: 90:1f:e1:47 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICER4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDMwNzgxMTAvBgNVBAUTKDhCMjYxNjg2QkQ5MkUyQ0Y2QkY1NDhDRDM1NTk2REVB OTVGRjU4MzMwHhcNMjUwNjA0MTcxOTMzWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwODAyNS1jOGI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5gWIIc5SEzP65X6J7EyF9FPDQX9vXPlibQCeN7MF9/GjMB+GcO4NelrQstTt PnavDQ9UzGBt5YwPnJjwckUoNa3Nfjc00VN23uUwWDjGYUddmaahu2wiRrHVJ+VS 7HVcCTdfJRgpxRG1xcot2XECdAIak4TR03/ZdnKHdv2ZuhH+Kxjs8XckFibDv2pZ 4OhGkSlPZMKr8b7Bky+EFwC2h1kZZ4qvWH49g7/vBIBHDmkXrgoq6ndegSZ7281q a7vIspp5/fWCgokiOfLJ57chP6ssYizaZqnZkTRMMrbX3GhMBWPGTOte3LyTMWkU +U8rqsQe2D1cGu2g697DUM6MowIDAQABo4IClTCCApEwHQYDVR0OBBYEFGh+Ai8O g6YJ++W6X4mR+HuGMTWWMB8GA1UdIwQYMBaAFIsmFoa9kuLPa/VIzTVZbeqV/1gz MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMzA3OC82NkM4MzAyQzEz QkMxMUU5OTg3QzQ2NDZDNEY5QUUwMi9peVlXaHIyUzRzOXI5VWpOTlZsdDZwWF9X RE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2l5WVdocjJTNHM5cjlVak5OVmx0NnBYX1dETS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDMwNzgvNjZDODMwMkMxM0JDMTFFOTk4N0M0NjQ2QzRGOUFFMDIvNjEyN0I5MDAx RkU3MTFFQ0I4NDU0RTgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnOtwwDQYJKoZIhvcNAQELBQADggEBAFGccb5n5rOnrffj 5aoz5b4Q6QH69UVXO7H+F5tGVG7vy0qheRYp5W0NTIqvbU7k9DEAz5t/mY+c1kQZ BUgyI/iJPohxRFrVrpLBxSsA7q0nnTUW8T6scEfrYblU0Yee68EAKW3l/sK5DqdI mcC/l6LbmVRhP1IhEyx5r8z+YvLB8Sjk4U7lD9egJsp1Jfc+i+YPD2iFRDPc+B3q wwPUQYsNYQPfr2UalRiqJIv43Q8S68BJIcAvV5HDqjl11460OWzpZqidJ6kcXfOn jZyj9W/xdL7XSMTKHkTkcS0pAciQaIkIpyjsWnyLfvSpoMhXz10HWRLcbynQrQg1 05Af4Uc= -----END CERTIFICATE-----Generated at Sun Jun 15 09:36:38 2025 by rpki-client