$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/07D85DDEA7C811EF92C28379C4F9AE02.roa File: 07D85DDEA7C811EF92C28379C4F9AE02.roa (raw, json) Hash identifier: ZcWeD92UYMu6fLpMaSqSsvoWJIwNEm94vjjCo7cjTrY= Subject key identifier: 1A:FE:71:74:1F:52:6B:BE:E6:FD:82:8D:64:67:14:A5:65:6B:8E:89 Certificate issuer: /CN=A91D4786/serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Certificate serial: 48 Authority key identifier: 57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/07D85DDEA7C811EF92C28379C4F9AE02.roa Signing time: Sat 29 Mar 2025 07:02:39 +0000 ROA not before: Sat 29 Mar 2025 07:02:39 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 7545 IP address blocks: 203.22.108.0/23 maxlen: 23 203.22.108.0/24 maxlen: 24 203.22.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 06:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72 (0x48) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D4786, serialNumber=578C8D02AEF0B43E29FECEA1895DCC9D10663535 Validity Not Before: Mar 29 07:02:39 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e79b0f-e9c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:3c:c4:72:11:c2:1e:71:d9:46:c2:66:a4: 42:99:e4:11:16:24:c2:ae:58:6d:cb:f4:66:fb:93: 62:71:0c:e3:48:10:bc:38:7c:90:c1:13:be:a5:d5: 6e:64:89:dd:7c:c3:59:2a:4f:89:9f:2b:97:bf:a7: a2:2c:a7:d4:7b:62:95:be:df:e5:43:48:c1:f6:c1: 93:34:43:40:93:a0:01:c0:9e:46:fc:6f:9c:3f:a9: 0f:b7:15:7b:b5:ab:bf:15:5a:65:83:fc:89:28:72: b5:32:00:ce:9b:07:cd:43:05:1e:ad:7c:de:93:28: e0:4a:42:8d:1f:e1:61:4a:a0:27:20:66:33:15:0e: 0b:51:66:74:96:b3:16:fa:18:30:bc:43:61:40:38: d3:f5:5c:38:57:d8:9b:b2:3c:80:23:5f:3c:97:eb: 71:ed:38:cc:e2:69:62:40:09:e8:2b:86:8b:fc:56: 83:8a:c7:4d:e7:8f:db:3b:60:e4:50:b9:97:42:26: 42:65:79:c0:1b:e2:f3:2b:9f:08:b4:fd:62:c5:3c: 2d:17:2f:dd:68:58:db:3d:be:ad:d5:28:b4:43:44: f2:f4:62:a5:d2:81:b3:6b:e3:6d:be:38:3c:6f:81: c0:98:fb:9d:12:8a:bf:99:48:02:52:6a:21:8d:06: cc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:FE:71:74:1F:52:6B:BE:E6:FD:82:8D:64:67:14:A5:65:6B:8E:89 X509v3 Authority Key Identifier: keyid:57:8C:8D:02:AE:F0:B4:3E:29:FE:CE:A1:89:5D:CC:9D:10:66:35:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/V4yNAq7wtD4p_s6hiV3MnRBmNTU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/V4yNAq7wtD4p_s6hiV3MnRBmNTU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4786/34598C70A7C311EFB511E053C4F9AE02/07D85DDEA7C811EF92C28379C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.22.108.0/23 Signature Algorithm: sha256WithRSAEncryption 01:fd:f8:b2:c1:44:90:4e:d5:73:32:42:aa:16:c2:7a:2b:29: a4:23:b6:b5:f9:c7:13:ee:9f:0f:e6:84:32:82:cc:73:f9:7f: 6f:cf:6e:73:90:93:db:86:be:60:0f:c9:01:35:2b:74:93:ee: 4e:75:25:30:55:1f:3b:74:6a:f6:77:04:19:97:89:7f:af:4a: d5:33:c5:c4:8c:81:d7:a7:ce:d4:e6:62:12:4f:30:ca:8c:8d: 7e:62:31:3e:81:0e:92:67:86:75:ee:4d:99:80:d3:40:e9:85: 6d:7a:a1:fc:f2:7b:f8:a7:bd:23:c2:36:2b:f4:0e:ce:58:e6: c3:05:1e:fd:32:36:7a:bd:c2:de:75:34:db:66:c7:46:cd:65: 5f:fd:98:94:13:63:13:75:41:f1:08:f5:c3:b6:1c:c3:69:6f: 0b:33:13:f1:35:0d:33:1c:5e:a8:89:da:83:90:ff:56:02:b6: 66:6c:23:db:ae:7a:ef:2e:74:c8:e1:34:ce:6e:97:f4:88:a4: 6c:b8:be:ef:e5:dc:1f:17:e9:73:87:f8:f2:5e:a5:0c:e1:f0: 46:8a:ee:48:ff:a1:0d:37:0c:8e:4e:d3:e7:b4:f1:50:b2:ce: 5f:20:5f:89:7f:5d:72:ea:03:74:51:e3:61:b8:0f:ee:95:b5: 3d:8f:22:36 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDc4NjExMC8GA1UEBRMoNTc4QzhEMDJBRUYwQjQzRTI5RkVDRUExODk1RENDOUQx MDY2MzUzNTAeFw0yNTAzMjkwNzAyMzlaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ZTc5YjBmLWU5YzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDJVDzEchHCHnHZRsJmpEKZ5BEWJMKuWG3L9Gb7k2JxDONIELw4fJDBE76l1W5k id18w1kqT4mfK5e/p6Isp9R7YpW+3+VDSMH2wZM0Q0CToAHAnkb8b5w/qQ+3FXu1 q78VWmWD/IkocrUyAM6bB81DBR6tfN6TKOBKQo0f4WFKoCcgZjMVDgtRZnSWsxb6 GDC8Q2FAONP1XDhX2JuyPIAjXzyX63HtOMziaWJACegrhov8VoOKx03nj9s7YORQ uZdCJkJlecAb4vMrnwi0/WLFPC0XL91oWNs9vq3VKLRDRPL0YqXSgbNr422+ODxv gcCY+50Sir+ZSAJSaiGNBszLAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUGv5xdB9S a77m/YKNZGcUpWVrjokwHwYDVR0jBBgwFoAUV4yNAq7wtD4p/s6hiV3MnRBmNTUw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0Nzg2LzM0NTk4QzcwQTdD MzExRUZCNTExRTA1M0M0RjlBRTAyL1Y0eU5BcTd3dEQ0cF9zNmhpVjNNblJCbU5U VS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvVjR5TkFxN3d0RDRwX3M2aGlWM01uUkJtTlRVLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDc4Ni8zNDU5OEM3MEE3QzMxMUVGQjUxMUUwNTNDNEY5QUUwMi8wN0Q4NURERUE3 QzgxMUVGOTJDMjgzNzlDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAcsWbDANBgkqhkiG9w0BAQsFAAOCAQEAAf34ssFEkE7VczJC qhbCeisppCO2tfnHE+6fD+aEMoLMc/l/b89uc5CT24a+YA/JATUrdJPuTnUlMFUf O3Rq9ncEGZeJf69K1TPFxIyB16fO1OZiEk8wyoyNfmIxPoEOkmeGde5NmYDTQOmF bXqh/PJ7+Ke9I8I2K/QOzljmwwUe/TI2er3C3nU022bHRs1lX/2YlBNjE3VB8Qj1 w7Ycw2lvCzMT8TUNMxxeqInag5D/VgK2Zmwj26567y50yOE0zm6X9IikbLi+7+Xc Hxfpc4f48l6lDOHwRoruSP+hDTcMjk7T57TxULLOXyBfiX9dcuoDdFHjYbgP7pW1 PY8iNg== -----END CERTIFICATE-----Generated at Sat Apr 26 07:52:33 2025 by rpki-client