$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A48D6CEEED6311EDB69EB62AC4F9AE02.roa File: A48D6CEEED6311EDB69EB62AC4F9AE02.roa (raw, json) Hash identifier: QBFNp4MmnEBSv9rQ1ZErIYUdcQY3it7GFZoZDBAM4/Q= Subject key identifier: 8D:56:2E:44:6C:F1:26:FA:91:F3:C0:8F:64:9A:53:09:BD:38:A9:48 Certificate issuer: /CN=A91EB2B8/serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Certificate serial: 02B7 Authority key identifier: A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A48D6CEEED6311EDB69EB62AC4F9AE02.roa Signing time: Wed 11 Jun 2025 02:18:38 +0000 ROA not before: Wed 11 Jun 2025 02:18:38 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 140224 IP address blocks: 103.189.255.0/24 maxlen: 24 2407:2440:1a::/48 maxlen: 48 2407:2440:29::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 01:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB2B8, serialNumber=A69700E78D0C812AD2E2C114C82C655A0ACD447F Validity Not Before: Jun 11 02:18:38 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=6848e77e-04a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:17:dc:7e:34:63:84:cf:b0:83:b5:e6:ab:1d: 96:3f:ba:6c:51:b4:5a:2b:c3:59:8b:b3:f1:b7:f7: 60:7b:ec:aa:86:d8:38:eb:4e:c2:86:a6:72:a0:12: e1:08:a0:66:7e:9f:52:cb:aa:b3:af:a7:4d:7a:50: f6:56:c8:e7:d5:ca:ff:2e:c4:4f:19:ac:ab:b5:c9: 6b:d9:14:11:9e:a1:62:49:17:36:58:67:fe:d5:d4: 29:9e:2f:39:8d:d6:73:6d:bd:fa:30:7c:0a:79:b6: d1:61:87:c2:88:72:4c:8f:3e:dd:f2:18:a9:89:60: 3f:a9:74:6c:91:a6:67:20:3e:fb:b2:e1:23:74:8d: e0:83:73:35:41:18:6d:cc:c8:a9:78:81:0f:a5:28: 58:ee:7f:34:72:1d:a9:e6:68:89:e9:22:df:f0:32: 0a:93:d5:e4:02:53:b8:a4:e5:6f:04:58:c7:f5:e9: 77:2f:2c:4a:60:05:d7:7c:9d:7e:55:c3:a3:ea:c8: 96:f0:9f:cf:c7:9f:5f:e3:13:8e:97:6a:90:0b:75: 83:ba:7f:b5:d9:7b:88:f3:3c:44:a4:11:a6:d5:60: fc:d0:aa:41:8b:2b:66:fe:6b:e5:e4:3b:06:9a:59: 45:a6:e5:ca:48:c7:88:1b:24:38:b1:84:04:80:79: e2:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:56:2E:44:6C:F1:26:FA:91:F3:C0:8F:64:9A:53:09:BD:38:A9:48 X509v3 Authority Key Identifier: keyid:A6:97:00:E7:8D:0C:81:2A:D2:E2:C1:14:C8:2C:65:5A:0A:CD:44:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/ppcA540MgSrS4sEUyCxlWgrNRH8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ppcA540MgSrS4sEUyCxlWgrNRH8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB2B8/3F44CBAE2F4D11ED8F5A6A64C4F9AE02/A48D6CEEED6311EDB69EB62AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.189.255.0/24 IPv6: 2407:2440:1a::/48 2407:2440:29::/48 Signature Algorithm: sha256WithRSAEncryption 43:7c:f1:7c:17:bc:34:c3:10:9d:a8:14:07:d0:f3:68:fb:a3: 0d:6e:f7:39:a8:6f:78:7f:e6:56:4f:0a:da:9e:28:d6:1e:08: 1e:f1:c3:ab:be:4a:a4:5c:32:98:c5:f6:14:7d:13:96:33:9c: e0:9f:bd:c6:0e:5a:2b:6a:d5:f0:93:32:91:ae:ea:cb:47:57: 51:4f:f5:58:bc:f1:83:80:cf:a4:57:a6:84:88:e8:d2:88:d1: 5b:a6:77:41:92:c0:73:b6:85:fd:39:98:06:69:68:7c:95:d4: e4:df:9e:e4:0b:bb:23:de:66:51:31:80:9b:6f:3f:b7:4c:4e: 84:cc:cd:73:c6:70:56:71:52:ca:b4:a2:dc:78:ee:72:71:4c: 3e:17:da:76:01:70:e2:07:6d:70:bb:ad:92:f6:7a:dc:d4:37: 3d:bd:f9:8a:1c:56:28:65:bd:4a:61:9e:a5:b8:3c:4c:75:c4: 8d:54:0b:73:df:6c:a6:ce:8a:86:42:df:c5:eb:20:4f:4d:c5: 5f:f7:9f:11:98:51:28:90:71:dd:d5:36:ff:13:8f:da:03:c2: c1:4f:f7:3d:0a:da:25:98:5c:94:73:c8:7c:28:f7:1c:a0:6c: db:11:c0:cf:40:c8:ca:0e:42:0a:82:24:41:7b:aa:11:d3:6e: 45:f5:97:2a -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUIyQjgxMTAvBgNVBAUTKEE2OTcwMEU3OEQwQzgxMkFEMkUyQzExNEM4MkM2NTVB MEFDRDQ0N0YwHhcNMjUwNjExMDIxODM4WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQ4ZTc3ZS0wNGE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtxfcfjRjhM+wg7Xmqx2WP7psUbRaK8NZi7Pxt/dge+yqhtg4607ChqZyoBLh CKBmfp9Sy6qzr6dNelD2Vsjn1cr/LsRPGayrtclr2RQRnqFiSRc2WGf+1dQpni85 jdZzbb36MHwKebbRYYfCiHJMjz7d8hipiWA/qXRskaZnID77suEjdI3gg3M1QRht zMipeIEPpShY7n80ch2p5miJ6SLf8DIKk9XkAlO4pOVvBFjH9el3LyxKYAXXfJ1+ VcOj6siW8J/Px59f4xOOl2qQC3WDun+12XuI8zxEpBGm1WD80KpBiytm/mvl5DsG mllFpuXKSMeIGyQ4sYQEgHnikQIDAQABo4ICrzCCAqswHQYDVR0OBBYEFI1WLkRs 8Sb6kfPAj2SaUwm9OKlIMB8GA1UdIwQYMBaAFKaXAOeNDIEq0uLBFMgsZVoKzUR/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjJCOC8zRjQ0Q0JBRTJG NEQxMUVEOEY1QTZBNjRDNEY5QUUwMi9wcGNBNTQwTWdTclM0c0VVeUN4bFdnck5S SDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3BwY0E1NDBNZ1NyUzRzRVV5Q3hsV2dyTlJIOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUIyQjgvM0Y0NENCQUUyRjREMTFFRDhGNUE2QTY0QzRGOUFFMDIvQTQ4RDZDRUVF RDYzMTFFREI2OUVCNjJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMAwEAgABMAYDBABnvf8wGAQCAAIwEgMHACQHJEAAGgMHACQHJEAAKTANBgkq hkiG9w0BAQsFAAOCAQEAQ3zxfBe8NMMQnagUB9DzaPujDW73OahveH/mVk8K2p4o 1h4IHvHDq75KpFwymMX2FH0TljOc4J+9xg5aK2rV8JMyka7qy0dXUU/1WLzxg4DP pFemhIjo0ojRW6Z3QZLAc7aF/TmYBmlofJXU5N+e5Au7I95mUTGAm28/t0xOhMzN c8ZwVnFSyrSi3HjucnFMPhfadgFw4gdtcLutkvZ63NQ3Pb35ihxWKGW9SmGepbg8 THXEjVQLc99sps6KhkLfxesgT03FX/efEZhRKJBx3dU2/xOP2gPCwU/3PQraJZhc lHPIfCj3HKBs2xHAz0DIyg5CCoIkQXuqEdNuRfWXKg== -----END CERTIFICATE-----Generated at Sun Jun 15 17:34:51 2025 by rpki-client