$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65877060BF3C11EAAF328582C4F9AE02.roa File: 65877060BF3C11EAAF328582C4F9AE02.roa (raw, json) Hash identifier: 8Ve/Cl0hRolwdHsLuG0VDkNM1FdRmkmQ9YowmP0sm+M= Subject key identifier: 51:E1:87:F5:DC:0B:1A:B9:14:9D:25:6D:34:1B:5A:29:B7:D4:27:08 Certificate issuer: /CN=A91DEA56/serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E Certificate serial: 0850 Authority key identifier: BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65877060BF3C11EAAF328582C4F9AE02.roa Signing time: Sat 04 Jan 2025 20:29:19 +0000 ROA not before: Sat 04 Jan 2025 20:29:19 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 132827 IP address blocks: 43.248.40.0/22 maxlen: 22 103.16.36.0/22 maxlen: 22 103.23.220.0/24 maxlen: 24 103.23.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:30:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2128 (0x850) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEA56, serialNumber=BBE49FCB41F5026A35BF6C93B91FDFF3C88C736E Validity Not Before: Jan 4 20:29:19 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67799a1f-10a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:94:71:fc:5d:dc:2f:9d:35:1c:73:b0:da:08: 88:d7:03:01:b4:0b:14:70:3c:93:bf:7b:46:a5:45: a2:0c:ef:e9:1f:24:fb:74:41:3b:cd:b1:ef:ee:5f: 43:7a:8f:f1:82:bf:ed:f1:75:4b:dd:8e:a6:e0:f1: 7f:6e:7c:22:2d:57:17:87:4f:e5:c4:d3:74:b9:0d: a0:77:b1:77:1d:47:8b:76:44:61:36:c9:13:20:2e: 77:1e:7c:b0:c0:d4:db:c5:3a:77:5b:63:99:fb:c5: e3:df:00:81:ba:dd:eb:2a:e8:71:07:94:93:14:16: 57:ae:c1:15:0a:17:10:a2:53:50:3e:1e:ef:87:a2: 2d:dc:c8:a4:85:cc:25:fa:be:21:ba:cc:d8:79:b5: d0:fa:a0:ab:41:4a:cd:b1:ec:cb:3e:9f:21:fa:41: 46:ed:57:ae:c6:b3:fe:bc:ec:6d:41:a1:63:00:c8: 92:98:ee:be:cf:cd:5a:17:2a:cc:41:14:ed:4c:6e: cf:88:61:e0:0d:78:19:a1:5f:0b:12:30:db:ec:cf: 14:14:be:ef:15:f0:dd:2a:34:cf:15:46:e9:4e:3e: a3:49:0c:3e:39:0d:45:35:5b:94:72:43:bc:c7:06: 9d:fc:ad:cd:49:6e:5a:4e:5a:79:b7:a7:54:33:5d: e8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E1:87:F5:DC:0B:1A:B9:14:9D:25:6D:34:1B:5A:29:B7:D4:27:08 X509v3 Authority Key Identifier: keyid:BB:E4:9F:CB:41:F5:02:6A:35:BF:6C:93:B9:1F:DF:F3:C8:8C:73:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/u-Sfy0H1Amo1v2yTuR_f88iMc24.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u-Sfy0H1Amo1v2yTuR_f88iMc24.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEA56/684667F4BF3A11EA94AE4E7CC4F9AE02/65877060BF3C11EAAF328582C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.40.0/22 103.16.36.0/22 103.23.220.0/24 103.23.223.0/24 Signature Algorithm: sha256WithRSAEncryption 98:cd:88:75:20:43:59:d9:1a:33:2b:67:dc:ff:ae:54:03:76: ed:ae:7e:1b:ab:22:5c:8f:8a:7e:fe:dd:03:30:b4:cc:c9:50: a2:57:38:44:0a:59:08:f8:b8:14:09:33:d2:8e:61:ff:71:0a: db:9a:07:07:06:19:d4:d5:6a:e0:f4:e1:88:4a:b2:1f:24:9a: a2:0e:8d:93:ab:7d:f4:c7:4c:e7:12:5b:11:7f:d4:a4:ed:5d: bf:6a:ff:1f:2e:08:4b:88:6b:c7:20:ab:ed:20:b5:a8:ee:af: 1f:a1:26:73:be:86:99:08:cc:31:e8:66:ea:77:84:49:18:ae: 0e:b5:b9:16:db:43:c4:63:c8:e3:ae:2e:0a:af:9e:a2:db:5c: 39:ba:04:33:3f:e9:61:f8:26:5e:cc:37:17:31:b1:09:a4:17: 39:80:7b:4d:9b:52:e7:9e:e3:b9:41:2b:8a:99:7d:d6:01:c2: ee:63:55:11:b5:53:d8:5a:a7:bb:f8:95:72:27:3f:87:90:f6: 17:31:f2:a5:c8:d9:91:61:4c:3a:77:39:f5:ba:c2:d4:9b:21: 03:ba:b5:92:c8:14:5c:8e:f6:a3:2c:f5:d6:2a:e3:10:63:60: 20:20:6a:c7:e5:f9:b5:e2:31:33:09:2e:8d:06:79:fc:2e:81: 7e:e6:18:9b -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCFAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVBNTYxMTAvBgNVBAUTKEJCRTQ5RkNCNDFGNTAyNkEzNUJGNkM5M0I5MUZERkYz Qzg4QzczNkUwHhcNMjUwMTA0MjAyOTE5WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzc5OWExZi0xMGE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmpRx/F3cL501HHOw2giI1wMBtAsUcDyTv3tGpUWiDO/pHyT7dEE7zbHv7l9D eo/xgr/t8XVL3Y6m4PF/bnwiLVcXh0/lxNN0uQ2gd7F3HUeLdkRhNskTIC53Hnyw wNTbxTp3W2OZ+8Xj3wCBut3rKuhxB5STFBZXrsEVChcQolNQPh7vh6It3Mikhcwl +r4huszYebXQ+qCrQUrNsezLPp8h+kFG7VeuxrP+vOxtQaFjAMiSmO6+z81aFyrM QRTtTG7PiGHgDXgZoV8LEjDb7M8UFL7vFfDdKjTPFUbpTj6jSQw+OQ1FNVuUckO8 xwad/K3NSW5aTlp5t6dUM13oXwIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFFHhh/Xc Cxq5FJ0lbTQbWim31CcIMB8GA1UdIwQYMBaAFLvkn8tB9QJqNb9sk7kf3/PIjHNu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUE1Ni82ODQ2NjdGNEJG M0ExMUVBOTRBRTRFN0NDNEY5QUUwMi91LVNmeTBIMUFtbzF2MnlUdVJfZjg4aU1j MjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3UtU2Z5MEgxQW1vMXYyeVR1Ul9mODhpTWMyNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVBNTYvNjg0NjY3RjRCRjNBMTFFQTk0QUU0RTdDQzRGOUFFMDIvNjU4NzcwNjBC RjNDMTFFQUFGMzI4NTgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAIr+CgDBAJnECQDBABnF9wDBABnF98wDQYJKoZIhvcNAQEL BQADggEBAJjNiHUgQ1nZGjMrZ9z/rlQDdu2ufhurIlyPin7+3QMwtMzJUKJXOEQK WQj4uBQJM9KOYf9xCtuaBwcGGdTVauD04YhKsh8kmqIOjZOrffTHTOcSWxF/1KTt Xb9q/x8uCEuIa8cgq+0gtajurx+hJnO+hpkIzDHoZup3hEkYrg61uRbbQ8RjyOOu LgqvnqLbXDm6BDM/6WH4Jl7MNxcxsQmkFzmAe02bUuee47lBK4qZfdYBwu5jVRG1 U9hap7v4lXInP4eQ9hcx8qXI2ZFhTDp3OfW6wtSbIQO6tZLIFFyO9qMs9dYq4xBj YCAgasfl+bXiMTMJLo0GefwugX7mGJs= -----END CERTIFICATE-----Generated at Sat Apr 26 09:29:56 2025 by rpki-client