$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/991B38BC44E811F0968D8B30C4F9AE02.roa File: 991B38BC44E811F0968D8B30C4F9AE02.roa (raw, json) Hash identifier: eEF2YFvICJOqay9i6WsFZPXnUiZoOP0Qsq3SyzYoK+g= Subject key identifier: D9:BC:67:AB:1E:D9:A9:29:C4:21:DA:52:5F:D8:A9:FB:60:04:8F:FF Certificate issuer: /CN=A91DE2B2/serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Certificate serial: 34A3 Authority key identifier: 73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/991B38BC44E811F0968D8B30C4F9AE02.roa Signing time: Mon 09 Jun 2025 04:17:04 +0000 ROA not before: Mon 09 Jun 2025 04:17:04 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 45754 IP address blocks: 27.109.64.0/19 maxlen: 24 103.67.228.0/22 maxlen: 24 110.93.64.0/19 maxlen: 24 2402:fe00::/32 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Jun 2025 14:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13475 (0x34a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE2B2, serialNumber=73CE1274CDDF17C30DA3ABCFF81FD9F12FD1B4F2 Validity Not Before: Jun 9 04:17:04 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68466040-8cce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b2:2c:e8:5a:7b:7d:6e:47:42:81:15:1d:82: 70:96:11:13:dd:f0:04:99:ba:c4:2b:17:9c:73:31: 9b:ba:a3:9b:59:74:68:3a:33:26:82:c2:2b:64:64: a9:0e:67:f3:92:94:c6:66:64:62:6b:ea:d4:a5:5e: 0b:d9:20:ac:20:b5:e1:8a:36:3e:6d:9c:e0:e6:98: c4:ea:da:27:32:ca:b6:78:f4:2a:5d:f1:98:03:a0: 03:ed:02:ce:20:87:d0:ab:2a:f3:d6:08:a7:12:76: e5:b8:5e:9b:30:4a:de:a2:5e:59:26:84:82:fd:f9: 95:9d:ad:86:81:20:87:15:38:ad:57:f1:fb:66:54: df:39:f9:7e:51:0e:00:60:2b:3a:dc:2d:9e:ff:58: e0:c8:78:80:cd:c8:ad:1b:97:27:6e:fa:56:20:2a: 77:1f:39:fb:8c:01:6e:32:d5:e7:89:42:ca:4e:db: b0:a0:39:02:fb:9f:93:e5:25:e7:02:c3:e7:2c:d0: e6:a2:76:a1:c0:1a:eb:a1:ad:55:b2:a8:92:ef:aa: ad:20:2f:25:ca:3c:5f:f3:a4:73:91:04:f5:2a:e5: 3e:30:89:30:cf:27:27:70:52:ef:0d:39:66:aa:ca: 6e:50:db:d8:21:db:ed:ea:c2:7e:ab:e7:02:c8:e1: 76:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BC:67:AB:1E:D9:A9:29:C4:21:DA:52:5F:D8:A9:FB:60:04:8F:FF X509v3 Authority Key Identifier: keyid:73:CE:12:74:CD:DF:17:C3:0D:A3:AB:CF:F8:1F:D9:F1:2F:D1:B4:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/c84SdM3fF8MNo6vP-B_Z8S_RtPI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE2B2/53CA462A1D9D11E2AF456D8C08B02CD2/991B38BC44E811F0968D8B30C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 27.109.64.0/19 103.67.228.0/22 110.93.64.0/19 IPv6: 2402:fe00::/32 Signature Algorithm: sha256WithRSAEncryption 04:2a:c9:91:2e:d8:9d:1a:b8:23:99:6c:1b:fe:0c:96:10:03: a0:04:9b:ca:73:5f:e4:6b:fe:1b:c5:e3:be:47:a5:c5:36:b8: 18:4e:fe:b2:32:d8:22:c3:80:88:5e:60:c5:2d:c0:c8:b1:79: ce:49:9e:aa:26:6f:d7:22:d9:a1:56:f0:a3:ba:45:39:cb:7e: 7a:96:90:42:2f:ff:b3:9f:e3:00:04:08:4b:0f:9c:4b:39:ff: 69:0f:7e:cd:84:8d:10:e1:a3:0d:0f:46:cd:ae:64:6c:89:a7: 63:90:48:b5:35:4b:f6:25:f5:31:8f:91:09:8f:31:3d:e0:8c: 58:d1:6a:00:bd:a0:3b:83:e9:ca:12:8c:94:00:94:ba:eb:09: 67:56:5a:1f:21:88:c7:ae:0f:e8:15:a6:e3:64:4e:e5:22:3d: f2:90:e1:2b:a1:42:44:e1:8f:a1:7e:eb:f3:4c:e0:68:bc:14: 30:ac:21:5c:02:47:ce:51:ce:ee:4a:45:39:e2:8e:06:41:90: 4e:cd:17:d5:19:66:83:9e:73:f8:a1:27:b6:0d:10:2c:0b:ff: 11:f0:93:07:27:04:51:31:95:b0:4d:95:5a:e2:ef:c4:3b:0f: ac:e0:3e:fd:ce:37:ce:0b:97:5d:3a:00:93:c3:de:43:9a:34: 4b:cf:b1:a6 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICNKMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REUyQjIxMTAvBgNVBAUTKDczQ0UxMjc0Q0RERjE3QzMwREEzQUJDRkY4MUZEOUYx MkZEMUI0RjIwHhcNMjUwNjA5MDQxNzA0WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ2NjA0MC04Y2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0rIs6Fp7fW5HQoEVHYJwlhET3fAEmbrEKxecczGbuqObWXRoOjMmgsIrZGSp DmfzkpTGZmRia+rUpV4L2SCsILXhijY+bZzg5pjE6tonMsq2ePQqXfGYA6AD7QLO IIfQqyrz1ginEnbluF6bMEreol5ZJoSC/fmVna2GgSCHFTitV/H7ZlTfOfl+UQ4A YCs63C2e/1jgyHiAzcitG5cnbvpWICp3Hzn7jAFuMtXniULKTtuwoDkC+5+T5SXn AsPnLNDmonahwBrroa1VsqiS76qtIC8lyjxf86RzkQT1KuU+MIkwzycncFLvDTlm qspuUNvYIdvt6sJ+q+cCyOF2OQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFNm8Z6se 2akpxCHaUl/YqftgBI//MB8GA1UdIwQYMBaAFHPOEnTN3xfDDaOrz/gf2fEv0bTy MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTJCMi81M0NBNDYyQTFE OUQxMUUyQUY0NTZEOEMwOEIwMkNEMi9jODRTZE0zZkY4TU5vNnZQLUJfWjhTX1J0 UEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2M4NFNkTTNmRjhNTm82dlAtQl9aOFNfUnRQSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REUyQjIvNTNDQTQ2MkExRDlEMTFFMkFGNDU2RDhDMDhCMDJDRDIvOTkxQjM4QkM0 NEU4MTFGMDk2OEQ4QjMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAUbbUADBAJnQ+QDBAVuXUAwDQQCAAIwBwMFACQC/gAwDQYJ KoZIhvcNAQELBQADggEBAAQqyZEu2J0auCOZbBv+DJYQA6AEm8pzX+Rr/hvF475H pcU2uBhO/rIy2CLDgIheYMUtwMixec5Jnqomb9ci2aFW8KO6RTnLfnqWkEIv/7Of 4wAECEsPnEs5/2kPfs2EjRDhow0PRs2uZGyJp2OQSLU1S/Yl9TGPkQmPMT3gjFjR agC9oDuD6coSjJQAlLrrCWdWWh8hiMeuD+gVpuNkTuUiPfKQ4SuhQkThj6F+6/NM 4Gi8FDCsIVwCR85Rzu5KRTnijgZBkE7NF9UZZoOec/ihJ7YNECwL/xHwkwcnBFEx lbBNlVri78Q7D6zgPv3ON84Ll106AJPD3kOaNEvPsaY= -----END CERTIFICATE-----Generated at Thu Jun 19 17:47:39 2025 by rpki-client