$ rpki-client -vvf rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/65866C4815D111EABE986319C4F9AE02.roa File: 65866C4815D111EABE986319C4F9AE02.roa (raw, json) Hash identifier: ky275MRbaVtyIuJOfhdH9mQsA448nNjhkiKWj0SgjYE= Subject key identifier: AE:07:4B:50:5E:A7:0C:8A:27:A0:03:09:2F:84:6C:5B:4C:9D:86:14 Certificate issuer: /CN=A91EB6AC/serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Certificate serial: 0BB0 Authority key identifier: CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/65866C4815D111EABE986319C4F9AE02.roa Signing time: Tue 14 Jan 2025 18:56:59 +0000 ROA not before: Tue 14 Jan 2025 18:56:59 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 134971 IP address blocks: 103.252.224.0/22 maxlen: 24 123.253.220.0/22 maxlen: 24 2401:7940::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 18:43:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2992 (0xbb0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EB6AC, serialNumber=CB52054E3D7768EA16B6B0A894C773A27DEA921A Validity Not Before: Jan 14 18:56:59 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=6786b37b-e63e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:5f:b6:f3:c3:79:4b:43:4d:28:8a:99:7e:4d: a7:fc:20:01:7d:5e:1f:28:e5:ad:26:eb:f2:6d:d0: 14:01:92:21:77:64:07:3c:fe:2b:b1:95:dc:b6:16: 39:5f:b4:3a:f8:e7:de:bb:a5:11:83:6e:55:7f:b3: 71:4d:8f:71:82:70:37:37:21:70:4f:da:c4:86:48: b4:e1:cf:f5:f8:f4:d7:7f:19:0d:a5:cf:20:e7:b7: b7:66:36:eb:b9:e6:28:60:1f:75:09:43:b8:7c:d2: ca:84:f1:49:1e:c0:fa:ef:f1:da:1d:4a:af:9e:ad: a5:54:f7:5c:b8:97:28:f1:e5:bb:a4:e0:e0:0a:97: 4e:b6:b4:88:c0:9e:a0:2f:c0:d4:ae:3e:7b:73:f4: e3:79:68:d8:dc:71:49:d4:da:2e:9f:22:f6:b3:54: 79:9f:06:c8:ca:18:7f:98:54:e0:14:30:9e:5b:62: e8:a9:06:2b:fe:81:5e:ef:ad:88:47:37:b5:f6:fe: 4b:67:33:38:8c:4d:aa:e9:ac:70:9b:c4:71:f8:17: 5d:6c:1c:ec:9c:fc:d0:ea:78:62:1d:ac:de:14:b7: 61:28:27:f6:68:b3:01:fd:3d:f3:62:53:e8:f7:7a: 63:b6:bf:90:59:6c:40:23:75:b9:e6:88:9c:0c:8d: b9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:07:4B:50:5E:A7:0C:8A:27:A0:03:09:2F:84:6C:5B:4C:9D:86:14 X509v3 Authority Key Identifier: keyid:CB:52:05:4E:3D:77:68:EA:16:B6:B0:A8:94:C7:73:A2:7D:EA:92:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/y1IFTj13aOoWtrColMdzon3qkho.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/y1IFTj13aOoWtrColMdzon3qkho.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EB6AC/D7E98A6E15D011EA93CA0E19C4F9AE02/65866C4815D111EABE986319C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.252.224.0/22 123.253.220.0/22 IPv6: 2401:7940::/32 Signature Algorithm: sha256WithRSAEncryption 4f:59:fd:f4:1b:4f:0b:7a:3a:57:66:97:c8:a5:b1:17:1c:ae: 77:ec:e6:d4:0e:c9:04:89:91:4f:1f:5c:79:f9:db:04:d1:31: a5:a7:f9:5e:54:f4:c5:cd:9c:78:a4:2e:cb:8c:9a:71:1c:86: cd:e5:58:83:3a:dc:80:c7:f2:bf:ee:2f:34:02:d4:52:3f:b3: af:7f:1c:8d:93:36:8f:ce:3f:87:1e:fe:e0:b1:96:59:9e:e5: 37:2d:44:61:47:f1:9f:cb:48:c0:6e:76:06:d4:32:fa:ed:9f: 04:63:29:f5:8b:e3:fb:2d:fc:19:e3:81:99:a7:ab:b4:0f:6f: bf:a8:61:bb:9d:b5:bf:24:18:98:a9:be:32:09:3b:e5:c9:cd: b6:f3:01:d1:da:69:d7:cc:fd:c3:7f:27:3c:e9:f5:48:63:51: 1a:c8:52:61:02:95:3f:f4:a6:60:04:d1:2d:20:9b:af:02:e7: 89:20:a0:3b:31:94:20:11:c4:09:a7:0f:23:82:79:40:4b:b3: 9e:fa:4e:fc:0e:38:44:9a:c3:75:f3:ee:2c:05:05:6e:c2:8e: 30:c8:4e:7c:e3:53:62:6f:80:0b:84:eb:8c:d3:9f:1c:a8:c5: 86:40:97:c6:6c:9d:bb:f3:cb:c6:e2:95:8d:f1:e7:55:22:0a: c8:7f:c9:b5 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICC7AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUI2QUMxMTAvBgNVBAUTKENCNTIwNTRFM0Q3NzY4RUExNkI2QjBBODk0Qzc3M0Ey N0RFQTkyMUEwHhcNMjUwMTE0MTg1NjU5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02Nzg2YjM3Yi1lNjNlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs1+288N5S0NNKIqZfk2n/CABfV4fKOWtJuvybdAUAZIhd2QHPP4rsZXcthY5 X7Q6+Ofeu6URg25Vf7NxTY9xgnA3NyFwT9rEhki04c/1+PTXfxkNpc8g57e3Zjbr ueYoYB91CUO4fNLKhPFJHsD67/HaHUqvnq2lVPdcuJco8eW7pODgCpdOtrSIwJ6g L8DUrj57c/TjeWjY3HFJ1NounyL2s1R5nwbIyhh/mFTgFDCeW2LoqQYr/oFe762I Rze19v5LZzM4jE2q6axwm8Rx+BddbBzsnPzQ6nhiHazeFLdhKCf2aLMB/T3zYlPo 93pjtr+QWWxAI3W55oicDI25lwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFK4HS1Be pwyKJ6ADCS+EbFtMnYYUMB8GA1UdIwQYMBaAFMtSBU49d2jqFrawqJTHc6J96pIa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQjZBQy9EN0U5OEE2RTE1 RDAxMUVBOTNDQTBFMTlDNEY5QUUwMi95MUlGVGoxM2FPb1d0ckNvbE1kem9uM3Fr aG8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3kxSUZUajEzYU9vV3RyQ29sTWR6b24zcWtoby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUI2QUMvRDdFOThBNkUxNUQwMTFFQTkzQ0EwRTE5QzRGOUFFMDIvNjU4NjZDNDgx NUQxMTFFQUJFOTg2MzE5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn/OADBAJ7/dwwDQQCAAIwBwMFACQBeUAwDQYJKoZIhvcN AQELBQADggEBAE9Z/fQbTwt6Oldml8ilsRccrnfs5tQOyQSJkU8fXHn52wTRMaWn +V5U9MXNnHikLsuMmnEchs3lWIM63IDH8r/uLzQC1FI/s69/HI2TNo/OP4ce/uCx llme5TctRGFH8Z/LSMBudgbUMvrtnwRjKfWL4/st/BnjgZmnq7QPb7+oYbudtb8k GJipvjIJO+XJzbbzAdHaadfM/cN/Jzzp9UhjURrIUmEClT/0pmAE0S0gm68C54kg oDsxlCARxAmnDyOCeUBLs576TvwOOESaw3Xz7iwFBW7CjjDITnzjU2JvgAuE64zT nxyoxYZAl8Zsnbvzy8bilY3x51UiCsh/ybU= -----END CERTIFICATE-----Generated at Sat Apr 26 09:08:51 2025 by rpki-client