$ rpki-client -vvf rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa File: DB3E929E199611EF9EBFBF4AC4F9AE02.roa (raw, json) Hash identifier: zea1Z4utZ31hyYXYKPM+pLoUfd33/pFxc2Oz6L2A0xI= Subject key identifier: 69:6C:27:3F:00:4F:17:AE:8F:9F:C2:0C:47:54:03:4E:0C:B8:68:6A Certificate issuer: /CN=A91DFB70/serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Certificate serial: 277F Authority key identifier: 5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa Signing time: Tue 08 Apr 2025 15:53:27 +0000 ROA not before: Tue 08 Apr 2025 15:53:27 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132716 IP address blocks: 203.213.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 15:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10111 (0x277f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DFB70, serialNumber=5D2DD154B5DCE21FB786C526DBDEF1B045928AB8 Validity Not Before: Apr 8 15:53:27 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f54676-ddc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c5:45:4f:7d:27:2d:1a:74:07:05:4e:de:c8: 54:0a:5e:8e:ce:bc:c5:0f:e8:90:a2:dd:d5:3f:c3: 2d:39:2d:92:6e:a3:2b:9a:79:f6:9b:b1:b7:9b:2c: 6c:de:f1:9a:d0:21:a4:9a:d6:5e:a9:ec:cb:b7:7d: 12:f3:5b:c3:a0:06:85:eb:77:c5:4b:0e:a7:97:80: 79:96:0a:a8:62:38:1f:b6:96:6e:02:1b:53:68:34: 1f:3f:40:40:8c:b8:65:ea:fb:20:fc:e7:da:c2:35: a8:87:bd:4f:72:1c:1b:fd:0d:f3:35:3f:c9:e3:0f: 8a:9d:a9:ef:46:37:7a:1f:fe:62:bf:bd:55:99:c6: 85:2e:cb:02:36:02:a2:9d:8a:48:8d:c3:16:4b:81: c0:07:83:d4:1f:8f:f6:a1:3a:6d:39:56:57:2b:d0: 6a:49:ff:72:3b:8b:30:29:ef:8a:fc:bf:f0:7c:10: a5:12:e2:82:e1:12:7f:de:2e:39:7e:57:39:77:df: 39:b7:f3:f4:ab:58:56:7e:b8:bf:35:4a:1c:e9:cc: 97:2f:65:ef:b0:b1:73:ca:cb:8b:30:12:5b:dd:e9: b3:5c:02:12:18:fd:3a:55:84:24:33:db:cb:6b:c2: 5a:2c:86:8a:15:3a:e5:34:1a:fc:c9:74:94:95:31: 83:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:6C:27:3F:00:4F:17:AE:8F:9F:C2:0C:47:54:03:4E:0C:B8:68:6A X509v3 Authority Key Identifier: keyid:5D:2D:D1:54:B5:DC:E2:1F:B7:86:C5:26:DB:DE:F1:B0:45:92:8A:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/XS3RVLXc4h-3hsUm297xsEWSirg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XS3RVLXc4h-3hsUm297xsEWSirg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DFB70/2983647C838F11E586FC5812C4F9AE02/DB3E929E199611EF9EBFBF4AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.213.201.0/24 Signature Algorithm: sha256WithRSAEncryption 61:50:c0:16:1d:a6:03:81:f4:8a:b0:a9:9c:83:2c:5f:9a:fe: 3e:87:b2:2d:f9:1c:94:d7:19:c2:7e:78:4e:5e:61:f7:fb:d7: b8:88:7f:61:0e:91:f4:39:00:4a:17:8a:12:81:4d:98:06:93: b1:9f:85:c9:f4:ac:2f:fb:cc:d0:c3:69:27:df:03:d1:0c:6c: 95:2b:f3:73:40:0f:ea:43:9b:c4:f5:7a:b8:f3:e2:e3:56:3f: 22:51:84:e8:79:b0:74:86:d9:6f:82:60:b9:5f:70:e0:08:50: 1f:fd:e8:db:f0:8b:72:13:97:73:d4:3d:56:f5:32:41:75:54: 50:a8:67:ab:07:07:d8:35:be:66:11:d8:12:4e:d1:e1:89:7e: 96:44:36:77:69:68:2d:87:6e:f2:78:fc:81:0b:49:30:ef:85: 83:5b:7d:6a:d0:1e:ac:57:ad:ac:e7:2e:73:e5:bd:05:c4:80: b6:0a:45:a8:aa:09:f6:2f:41:17:d4:1d:39:70:7c:d9:e2:b0: ec:0f:19:10:a8:02:c1:24:e1:6f:9c:09:86:e4:41:46:ca:85: 7c:15:a1:39:02:c9:1d:d8:d3:81:f6:38:cf:75:0f:87:f8:c8: 98:fe:ce:f7:4b:25:13:88:90:11:d4:eb:df:bd:40:f1:9c:71: ab:3f:c7:6d -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICJ38wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REZCNzAxMTAvBgNVBAUTKDVEMkREMTU0QjVEQ0UyMUZCNzg2QzUyNkRCREVGMUIw NDU5MjhBQjgwHhcNMjUwNDA4MTU1MzI3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y1NDY3Ni1kZGM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwMVFT30nLRp0BwVO3shUCl6OzrzFD+iQot3VP8MtOS2SbqMrmnn2m7G3myxs 3vGa0CGkmtZeqezLt30S81vDoAaF63fFSw6nl4B5lgqoYjgftpZuAhtTaDQfP0BA jLhl6vsg/OfawjWoh71Pchwb/Q3zNT/J4w+KnanvRjd6H/5iv71VmcaFLssCNgKi nYpIjcMWS4HAB4PUH4/2oTptOVZXK9BqSf9yO4swKe+K/L/wfBClEuKC4RJ/3i45 flc5d985t/P0q1hWfri/NUoc6cyXL2XvsLFzysuLMBJb3emzXAISGP06VYQkM9vL a8JaLIaKFTrlNBr8yXSUlTGDpQIDAQABo4IClTCCApEwHQYDVR0OBBYEFGlsJz8A Txeuj5/CDEdUA04MuGhqMB8GA1UdIwQYMBaAFF0t0VS13OIft4bFJtve8bBFkoq4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERkI3MC8yOTgzNjQ3Qzgz OEYxMUU1ODZGQzU4MTJDNEY5QUUwMi9YUzNSVkxYYzRoLTNoc1VtMjk3eHNFV1Np cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hTM1JWTFhjNGgtM2hzVW0yOTd4c0VXU2lyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REZCNzAvMjk4MzY0N0M4MzhGMTFFNTg2RkM1ODEyQzRGOUFFMDIvREIzRTkyOUUx OTk2MTFFRjlFQkZCRjRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADL1ckwDQYJKoZIhvcNAQELBQADggEBAGFQwBYdpgOB9Iqw qZyDLF+a/j6Hsi35HJTXGcJ+eE5eYff717iIf2EOkfQ5AEoXihKBTZgGk7Gfhcn0 rC/7zNDDaSffA9EMbJUr83NAD+pDm8T1erjz4uNWPyJRhOh5sHSG2W+CYLlfcOAI UB/96Nvwi3ITl3PUPVb1MkF1VFCoZ6sHB9g1vmYR2BJO0eGJfpZENndpaC2HbvJ4 /IELSTDvhYNbfWrQHqxXraznLnPlvQXEgLYKRaiqCfYvQRfUHTlwfNnisOwPGRCo AsEk4W+cCYbkQUbKhXwVoTkCyR3Y04H2OM91D4f4yJj+zvdLJROIkBHU69+9QPGc cas/x20= -----END CERTIFICATE-----Generated at Sat Apr 26 15:01:09 2025 by rpki-client