$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/D4B550921C2011F09CB77376C4F9AE02.roa File: D4B550921C2011F09CB77376C4F9AE02.roa (raw, json) Hash identifier: SlZtNEQoEo8oXho49gjLYjnKVm8ZinsqnLWqLrWSNS0= Subject key identifier: 69:D1:91:9E:51:AE:16:93:C3:57:5D:14:70:6E:D0:F5:61:B6:02:D0 Certificate issuer: /CN=A91F0CC8/serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06 Certificate serial: 0868 Authority key identifier: 56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/D4B550921C2011F09CB77376C4F9AE02.roa Signing time: Fri 18 Apr 2025 06:55:04 +0000 ROA not before: Fri 18 Apr 2025 06:55:04 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 18222 IP address blocks: 45.115.216.0/22 maxlen: 22 45.115.216.0/23 maxlen: 24 45.115.218.0/23 maxlen: 24 45.117.152.0/23 maxlen: 24 103.90.84.0/22 maxlen: 22 103.90.84.0/23 maxlen: 23 103.90.84.0/24 maxlen: 24 103.90.85.0/24 maxlen: 24 103.90.86.0/23 maxlen: 23 103.90.86.0/24 maxlen: 24 103.90.87.0/24 maxlen: 24 103.250.132.0/23 maxlen: 24 202.51.74.0/23 maxlen: 24 202.51.82.0/23 maxlen: 23 202.51.95.0/24 maxlen: 24 2400:89e0::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2152 (0x868) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0CC8, serialNumber=56D7B15CC1AE8277858D6492C01DD5330844CC06 Validity Not Before: Apr 18 06:55:04 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6801f748-c67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:79:97:15:01:25:75:21:86:38:8b:34:48:aa: a3:d7:0c:ca:47:fc:72:f7:75:65:59:57:62:09:fb: 54:0f:28:52:5a:1a:d2:b9:8d:49:23:90:41:9e:54: f6:b2:1a:26:31:38:8b:11:73:86:2d:40:36:16:7f: e1:d5:dd:4e:c2:be:10:6d:2e:ac:96:ab:89:e7:83: 1f:1d:13:72:15:79:b3:be:95:cc:a8:24:89:de:a8: 2d:1a:b7:ac:bd:80:64:b1:11:cf:4b:38:df:ce:5b: 08:e3:07:5a:fc:55:cd:6a:ba:e0:ad:a4:1a:5e:c0: 23:b0:c4:12:0c:68:4b:a2:32:b1:51:77:0d:84:0c: 03:be:33:29:83:32:29:08:3d:7b:51:63:2c:df:0b: 18:94:1c:01:03:64:f6:d1:36:4e:0b:37:dd:bc:3b: 0b:dd:21:1a:ed:44:e1:f3:cc:f5:f3:67:03:4d:98: 84:69:99:2d:fa:79:b2:9a:79:03:2d:d3:a8:4e:c7: 8b:ad:b9:7a:c4:83:25:33:f5:a1:66:51:ab:13:ec: a2:d5:b8:04:9c:83:58:ab:2c:de:1d:4f:2e:49:bd: 5d:05:a7:38:5f:da:e2:99:46:14:7f:52:0e:7b:e6: 8d:be:d7:7a:4d:6c:d3:18:96:2b:36:89:0f:f9:27: 64:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:D1:91:9E:51:AE:16:93:C3:57:5D:14:70:6E:D0:F5:61:B6:02:D0 X509v3 Authority Key Identifier: keyid:56:D7:B1:5C:C1:AE:82:77:85:8D:64:92:C0:1D:D5:33:08:44:CC:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/VtexXMGugneFjWSSwB3VMwhEzAY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VtexXMGugneFjWSSwB3VMwhEzAY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0CC8/012ED1BECA4D11EAA132E17BC4F9AE02/D4B550921C2011F09CB77376C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.115.216.0/22 45.117.152.0/23 103.90.84.0/22 103.250.132.0/23 202.51.74.0/23 202.51.82.0/23 202.51.95.0/24 IPv6: 2400:89e0::/32 Signature Algorithm: sha256WithRSAEncryption 0e:c8:cc:c2:1e:6f:4f:5b:ed:3f:e9:e3:74:86:85:12:7e:d0: 76:8b:71:54:b9:a0:61:e8:4f:4c:a2:e4:4f:74:5c:32:30:da: c2:23:5e:9f:4a:e4:ff:dd:d2:75:05:88:57:cb:ab:be:7f:db: 91:6d:71:6d:18:42:cd:1c:68:22:fe:02:4d:f4:fd:8c:6c:de: 20:23:ec:e1:0c:86:1a:4b:6b:63:00:76:e4:c3:a7:c1:1f:45: e5:87:05:d7:e3:e4:bb:b1:dc:d3:bc:70:ab:6a:e1:f0:c3:a5: b9:11:00:b9:79:8f:b3:a1:94:a4:f6:01:9c:f2:09:5a:24:a5: db:12:dc:83:64:f7:33:88:b8:a1:ec:23:80:1d:31:1b:71:39: e7:5b:78:82:68:28:e7:02:0a:4e:67:40:d8:85:44:66:4c:89: d6:14:20:16:5a:9b:4c:fa:99:95:3a:6c:a3:21:53:9c:41:92: 71:e2:bc:a4:98:79:7d:60:60:e8:e0:36:4f:8c:a6:e4:9d:e5: 3f:06:66:bf:35:aa:18:48:6a:9e:72:53:e1:d5:b7:7f:d2:76: 20:69:51:1b:6f:8c:61:b6:12:04:f6:2c:a2:fc:1f:2a:1e:11: d4:5c:f9:1d:f3:6b:40:6e:e9:0f:a4:cc:a1:0e:93:6c:0d:10: f9:e7:77:84 -----BEGIN CERTIFICATE----- MIIFpDCCBIygAwIBAgICCGgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBDQzgxMTAvBgNVBAUTKDU2RDdCMTVDQzFBRTgyNzc4NThENjQ5MkMwMURENTMz MDg0NENDMDYwHhcNMjUwNDE4MDY1NTA0WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAxZjc0OC1jNjdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArnmXFQEldSGGOIs0SKqj1wzKR/xy93VlWVdiCftUDyhSWhrSuY1JI5BBnlT2 shomMTiLEXOGLUA2Fn/h1d1Owr4QbS6slquJ54MfHRNyFXmzvpXMqCSJ3qgtGres vYBksRHPSzjfzlsI4wda/FXNarrgraQaXsAjsMQSDGhLojKxUXcNhAwDvjMpgzIp CD17UWMs3wsYlBwBA2T20TZOCzfdvDsL3SEa7UTh88z182cDTZiEaZkt+nmymnkD LdOoTseLrbl6xIMlM/WhZlGrE+yi1bgEnINYqyzeHU8uSb1dBac4X9rimUYUf1IO e+aNvtd6TWzTGJYrNokP+Sdk7QIDAQABo4ICyDCCAsQwHQYDVR0OBBYEFGnRkZ5R rhaTw1ddFHBu0PVhtgLQMB8GA1UdIwQYMBaAFFbXsVzBroJ3hY1kksAd1TMIRMwG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMENDOC8wMTJFRDFCRUNB NEQxMUVBQTEzMkUxN0JDNEY5QUUwMi9WdGV4WE1HdWduZUZqV1NTd0IzVk13aEV6 QVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1Z0ZXhYTUd1Z25lRmpXU1N3QjNWTXdoRXpBWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBDQzgvMDEyRUQxQkVDQTREMTFFQUExMzJFMTdCQzRGOUFFMDIvRDRCNTUwOTIx QzIwMTFGMDlDQjc3Mzc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUgYIKwYBBQUHAQcBAf8E QzBBMDAEAgABMCoDBAItc9gDBAEtdZgDBAJnWlQDBAFn+oQDBAHKM0oDBAHKM1ID BADKM18wDQQCAAIwBwMFACQAieAwDQYJKoZIhvcNAQELBQADggEBAA7IzMIeb09b 7T/p43SGhRJ+0HaLcVS5oGHoT0yi5E90XDIw2sIjXp9K5P/d0nUFiFfLq75/25Ft cW0YQs0caCL+Ak30/Yxs3iAj7OEMhhpLa2MAduTDp8EfReWHBdfj5Lux3NO8cKtq 4fDDpbkRALl5j7OhlKT2AZzyCVokpdsS3INk9zOIuKHsI4AdMRtxOedbeIJoKOcC Ck5nQNiFRGZMidYUIBZam0z6mZU6bKMhU5xBknHivKSYeX1gYOjgNk+MpuSd5T8G Zr81qhhIap5yU+HVt3/SdiBpURtvjGG2EgT2LKL8HyoeEdRc+R3za0Bu6Q+kzKEO k2wNEPnnd4Q= -----END CERTIFICATE-----Generated at Sat Apr 26 12:24:18 2025 by rpki-client