$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/98DB93A4301011EEA92BE919C4F9AE02.roa File: 98DB93A4301011EEA92BE919C4F9AE02.roa (raw, json) Hash identifier: MrKs9S+pIK9ruhlRFpWtUpK3GffZ/Q4iUqs1HpDuQLY= Subject key identifier: B2:0B:AB:56:48:51:76:E6:35:A0:40:7B:7C:1C:6D:19:14:2F:2F:4B Certificate issuer: /CN=A91D5BDA/serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Certificate serial: 013F Authority key identifier: D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/98DB93A4301011EEA92BE919C4F9AE02.roa Signing time: Tue 01 Apr 2025 04:30:08 +0000 ROA not before: Tue 01 Apr 2025 04:30:08 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 58907 IP address blocks: 43.230.108.0/22 maxlen: 22 43.230.108.0/24 maxlen: 24 43.230.109.0/24 maxlen: 24 43.230.110.0/24 maxlen: 24 43.230.111.0/24 maxlen: 24 103.249.140.0/22 maxlen: 23 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 03:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 319 (0x13f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D5BDA, serialNumber=D8AF07D43A9B8BBB81D60E4C177EA818EC8B73E5 Validity Not Before: Apr 1 04:30:08 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67eb6bcf-9a02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:dd:c7:e7:be:57:2d:61:33:e4:f1:bf:40:4b: 41:bb:1e:ab:c4:40:46:a1:0d:40:d1:b3:d5:05:e4: 65:02:9d:50:c8:c3:0a:36:ff:01:42:8f:b2:33:d6: 02:9c:27:b3:06:d6:75:dd:06:d6:40:65:06:80:f8: 0d:01:03:d4:5b:f6:04:27:66:71:19:6b:28:39:82: de:9c:bc:04:22:ce:e9:43:08:1c:1b:e8:2a:a9:62: 7b:4d:22:cb:20:fc:56:7a:b4:36:d6:51:0c:92:73: 9b:cb:3a:c8:b3:a9:02:f8:93:52:0a:f3:ad:cf:99: a8:29:0c:22:ab:62:ce:f2:c2:fe:6e:b5:b0:14:00: d5:4e:83:7c:50:c7:e3:40:27:7e:59:16:90:fc:74: c6:cd:7c:79:02:c0:df:b8:a7:3e:79:1f:3b:00:50: c4:e9:6a:7b:42:75:c9:b1:dd:3d:01:8f:f2:ce:df: 46:b3:ac:e2:c4:59:86:f4:77:f4:56:0b:63:9d:76: cb:3f:93:33:67:60:72:58:e1:a5:f0:2a:e3:de:5f: f3:37:a0:1a:36:96:18:5a:4a:5c:1d:f8:60:f7:57: 4c:e1:f0:93:67:70:df:e5:0e:a7:25:99:0a:dd:1a: 3a:b9:8b:07:e9:21:6e:f9:c0:80:f1:8b:4f:e2:34: 8e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0B:AB:56:48:51:76:E6:35:A0:40:7B:7C:1C:6D:19:14:2F:2F:4B X509v3 Authority Key Identifier: keyid:D8:AF:07:D4:3A:9B:8B:BB:81:D6:0E:4C:17:7E:A8:18:EC:8B:73:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/2K8H1Dqbi7uB1g5MF36oGOyLc-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K8H1Dqbi7uB1g5MF36oGOyLc-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5BDA/F73F20A6300F11EE85EA0415C4F9AE02/98DB93A4301011EEA92BE919C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.108.0/22 103.249.140.0/22 Signature Algorithm: sha256WithRSAEncryption 94:0d:25:a8:e4:a4:6e:ec:88:fa:09:81:2a:45:1e:46:02:00: 27:60:44:68:83:e4:ca:4c:af:e8:d1:64:39:92:74:12:1e:9a: d7:84:03:9f:42:af:6e:2f:63:78:f6:f6:21:9d:36:75:1b:69: ae:aa:8a:97:65:a8:01:a5:b6:41:b4:4f:2f:7e:2d:aa:e4:79: 31:7e:37:5a:66:67:64:87:ce:1c:b1:fb:cd:78:81:15:e2:e4: 27:1c:78:7e:d5:ce:1f:00:28:6a:a8:48:1d:e9:61:95:85:65: fc:87:ef:42:b4:03:0c:db:0a:a2:b9:20:c4:09:e9:4f:7b:81: a4:7c:19:72:24:bb:d6:83:b0:78:f8:19:af:a1:aa:98:bf:2c: 9c:09:8e:44:d2:ba:f6:b3:aa:50:25:6e:f7:d9:b8:e8:98:dd: 29:9e:3e:0d:51:83:0d:5b:41:2e:9b:77:64:89:ab:b2:8a:79: 52:fb:f2:3b:43:52:d1:c0:6c:8b:df:da:4c:01:cf:02:6c:f3: 00:0d:a6:df:f8:f9:c1:2b:26:23:e0:2e:7b:0d:42:31:0c:42: 13:12:62:8a:47:81:a3:9a:23:e6:c0:01:40:27:fd:f1:bb:c3: 30:fa:7c:fb:2b:39:68:40:61:5f:85:e0:aa:23:a4:34:a2:6c: 91:9d:a1:53 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAT8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDVCREExMTAvBgNVBAUTKEQ4QUYwN0Q0M0E5QjhCQkI4MUQ2MEU0QzE3N0VBODE4 RUM4QjczRTUwHhcNMjUwNDAxMDQzMDA4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViNmJjZi05YTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA093H575XLWEz5PG/QEtBux6rxEBGoQ1A0bPVBeRlAp1QyMMKNv8BQo+yM9YC nCezBtZ13QbWQGUGgPgNAQPUW/YEJ2ZxGWsoOYLenLwEIs7pQwgcG+gqqWJ7TSLL IPxWerQ21lEMknObyzrIs6kC+JNSCvOtz5moKQwiq2LO8sL+brWwFADVToN8UMfj QCd+WRaQ/HTGzXx5AsDfuKc+eR87AFDE6Wp7QnXJsd09AY/yzt9Gs6zixFmG9Hf0 VgtjnXbLP5MzZ2ByWOGl8Crj3l/zN6AaNpYYWkpcHfhg91dM4fCTZ3Df5Q6nJZkK 3Ro6uYsH6SFu+cCA8YtP4jSOjwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLILq1ZI UXbmNaBAe3wcbRkULy9LMB8GA1UdIwQYMBaAFNivB9Q6m4u7gdYOTBd+qBjsi3Pl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENUJEQS9GNzNGMjBBNjMw MEYxMUVFODVFQTA0MTVDNEY5QUUwMi8ySzhIMURxYmk3dUIxZzVNRjM2b0dPeUxj LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzJLOEgxRHFiaTd1QjFnNU1GMzZvR095TGMtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDVCREEvRjczRjIwQTYzMDBGMTFFRTg1RUEwNDE1QzRGOUFFMDIvOThEQjkzQTQz MDEwMTFFRUE5MkJFOTE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr5mwDBAJn+YwwDQYJKoZIhvcNAQELBQADggEBAJQNJajk pG7siPoJgSpFHkYCACdgRGiD5MpMr+jRZDmSdBIemteEA59Cr24vY3j29iGdNnUb aa6qipdlqAGltkG0Ty9+LarkeTF+N1pmZ2SHzhyx+814gRXi5CcceH7Vzh8AKGqo SB3pYZWFZfyH70K0AwzbCqK5IMQJ6U97gaR8GXIku9aDsHj4Ga+hqpi/LJwJjkTS uvazqlAlbvfZuOiY3SmePg1Rgw1bQS6bd2SJq7KKeVL78jtDUtHAbIvf2kwBzwJs 8wANpt/4+cErJiPgLnsNQjEMQhMSYopHgaOaI+bAAUAn/fG7wzD6fPsrOWhAYV+F 4KojpDSibJGdoVM= -----END CERTIFICATE-----Generated at Sat Apr 26 15:08:55 2025 by rpki-client