$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/09CEF4D0708411E9AC9EA90EC4F9AE02.roa File: 09CEF4D0708411E9AC9EA90EC4F9AE02.roa (raw, json) Hash identifier: qze9TLSC/LlQUaDdTzlKDoE3Bw7Tcrh+S+c1zck+d7A= Subject key identifier: FA:15:D3:7E:B9:9B:CD:76:C0:9B:DA:4D:41:1B:98:5C:A1:23:45:BA Certificate issuer: /CN=A91F2230/serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Certificate serial: 0F23 Authority key identifier: 17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/09CEF4D0708411E9AC9EA90EC4F9AE02.roa Signing time: Fri 04 Apr 2025 17:48:09 +0000 ROA not before: Fri 04 Apr 2025 17:48:09 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 136480 IP address blocks: 43.227.12.0/22 maxlen: 22 43.227.12.0/24 maxlen: 24 43.227.13.0/24 maxlen: 24 43.227.14.0/24 maxlen: 24 43.227.15.0/24 maxlen: 24 103.89.176.0/22 maxlen: 22 103.89.176.0/24 maxlen: 24 103.89.177.0/24 maxlen: 24 103.89.178.0/24 maxlen: 24 103.89.179.0/24 maxlen: 24 2400:f1c0::/32 maxlen: 32 2400:f1c0::/48 maxlen: 48 2400:f1c0:1::/48 maxlen: 48 2400:f1c0:2::/48 maxlen: 48 2400:f1c0:3::/48 maxlen: 48 2400:f1c0:4::/48 maxlen: 48 2400:f1c0:5::/48 maxlen: 48 2400:f1c0:6::/48 maxlen: 48 2400:f1c0:7::/48 maxlen: 48 2400:f1c0:8::/48 maxlen: 48 2400:f1c0:9::/48 maxlen: 48 2400:f1c0:a::/48 maxlen: 48 2400:f1c0:b::/48 maxlen: 48 2400:f1c0:c::/48 maxlen: 48 2400:f1c0:d::/48 maxlen: 48 2400:f1c0:e::/48 maxlen: 48 2400:f1c0:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3875 (0xf23) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F2230, serialNumber=176A4E03B540AF2514A8BC719C2BA0F9F76FFB2F Validity Not Before: Apr 4 17:48:09 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f01b59-c4b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f1:46:c2:80:ae:ab:b6:e5:11:c7:d9:4c:5a: 52:42:97:67:2e:28:e0:13:72:44:b8:bb:24:60:66: f4:d9:43:3a:34:e2:e6:d4:6c:d3:2b:84:49:0b:83: 9f:5a:20:39:4f:f7:7c:6c:42:7a:2f:95:46:35:95: 56:2f:04:d9:2d:67:dc:c9:9c:54:d6:fa:2b:80:17: 16:a3:ce:1c:4a:54:ce:a6:02:e6:d8:86:e7:c5:e9: 83:75:30:fc:c1:a0:3d:6b:28:4c:08:08:49:34:fa: aa:96:ba:3c:9c:51:28:49:31:29:f8:2e:ae:8e:96: 06:83:42:38:d9:4d:dd:e1:3c:87:e5:6d:3b:79:f1: 70:7a:2f:a0:06:05:f7:e4:b5:2c:a3:c5:f1:08:66: 84:9b:aa:bf:20:3a:1b:b2:41:54:af:b3:1e:42:20: c8:0b:2a:69:12:08:49:f7:88:2f:a3:ed:43:2d:0a: 43:be:43:9e:f8:91:d7:cb:f1:26:2d:d8:a5:4b:59: 88:b0:ca:af:98:66:c4:be:c3:f4:54:38:9b:04:9f: 29:40:19:cc:6c:56:25:d8:75:4d:e6:48:58:c5:3a: b8:95:02:28:69:21:05:cb:d5:43:36:52:1a:2b:45: f8:11:bf:a8:38:5f:96:79:c4:f1:6e:d0:67:74:2b: 0c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:15:D3:7E:B9:9B:CD:76:C0:9B:DA:4D:41:1B:98:5C:A1:23:45:BA X509v3 Authority Key Identifier: keyid:17:6A:4E:03:B5:40:AF:25:14:A8:BC:71:9C:2B:A0:F9:F7:6F:FB:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/F2pOA7VAryUUqLxxnCug-fdv-y8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2pOA7VAryUUqLxxnCug-fdv-y8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2230/ADFA554C708211E9B7BC390AC4F9AE02/09CEF4D0708411E9AC9EA90EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.227.12.0/22 103.89.176.0/22 IPv6: 2400:f1c0::/32 Signature Algorithm: sha256WithRSAEncryption 15:ae:81:de:d7:21:86:09:ab:1f:70:4d:30:0b:92:e8:9c:75: e1:6a:d3:bb:62:60:56:73:36:8d:48:df:54:19:70:22:18:31: 4b:fa:f1:e8:b1:9b:88:1c:fc:3c:1c:a8:74:af:f2:af:7e:86: e8:4b:5f:66:ae:4c:ce:18:a6:dd:67:97:61:8f:68:ae:75:58: fc:82:14:60:91:06:62:b5:ef:f2:da:6b:f9:d7:4b:09:dc:71: fa:79:2b:13:91:65:9f:7f:d3:5d:60:76:31:2c:7c:df:38:ac: e2:f8:63:a6:31:58:21:dd:aa:9d:1e:cd:78:f9:7a:f7:2a:32: 24:47:ca:09:aa:e2:df:5e:cd:d3:5d:c7:86:a5:dc:48:fc:4f: 79:ee:83:3f:a9:85:94:77:25:bf:95:53:86:3d:8c:bc:c7:6c: 59:b1:aa:a1:80:55:fd:26:29:c6:0d:76:e7:b9:89:31:1b:e5: 5f:96:0f:63:44:a0:41:19:3f:00:66:2c:b4:1c:0d:88:97:a0: c7:e0:6b:68:1d:fd:b8:31:4b:e5:68:d4:13:ca:0f:a2:5c:7a: 12:40:b4:7b:3c:27:21:c3:59:98:f2:82:aa:e5:91:f8:17:1e: b4:45:16:d6:7e:ab:45:76:6e:ba:6e:3e:3d:b2:d0:97:f2:83: 6b:e3:b3:b0 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDyMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjIyMzAxMTAvBgNVBAUTKDE3NkE0RTAzQjU0MEFGMjUxNEE4QkM3MTlDMkJBMEY5 Rjc2RkZCMkYwHhcNMjUwNDA0MTc0ODA5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwMWI1OS1jNGI3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA+PFGwoCuq7blEcfZTFpSQpdnLijgE3JEuLskYGb02UM6NOLm1GzTK4RJC4Of WiA5T/d8bEJ6L5VGNZVWLwTZLWfcyZxU1vorgBcWo84cSlTOpgLm2IbnxemDdTD8 waA9ayhMCAhJNPqqlro8nFEoSTEp+C6ujpYGg0I42U3d4TyH5W07efFwei+gBgX3 5LUso8XxCGaEm6q/IDobskFUr7MeQiDICyppEghJ94gvo+1DLQpDvkOe+JHXy/Em LdilS1mIsMqvmGbEvsP0VDibBJ8pQBnMbFYl2HVN5khYxTq4lQIoaSEFy9VDNlIa K0X4Eb+oOF+WecTxbtBndCsM6QIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFPoV0365 m812wJvaTUEbmFyhI0W6MB8GA1UdIwQYMBaAFBdqTgO1QK8lFKi8cZwroPn3b/sv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMjIzMC9BREZBNTU0Qzcw ODIxMUU5QjdCQzM5MEFDNEY5QUUwMi9GMnBPQTdWQXJ5VVVxTHh4bkN1Zy1mZHYt eTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YycE9BN1ZBcnlVVXFMeHhuQ3VnLWZkdi15OC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjIyMzAvQURGQTU1NEM3MDgyMTFFOUI3QkMzOTBBQzRGOUFFMDIvMDlDRUY0RDA3 MDg0MTFFOUFDOUVBOTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAIr4wwDBAJnWbAwDQQCAAIwBwMFACQA8cAwDQYJKoZIhvcN AQELBQADggEBABWugd7XIYYJqx9wTTALkuicdeFq07tiYFZzNo1I31QZcCIYMUv6 8eixm4gc/DwcqHSv8q9+huhLX2auTM4Ypt1nl2GPaK51WPyCFGCRBmK17/Laa/nX Swnccfp5KxORZZ9/011gdjEsfN84rOL4Y6YxWCHdqp0ezXj5evcqMiRHygmq4t9e zdNdx4al3Ej8T3nugz+phZR3Jb+VU4Y9jLzHbFmxqqGAVf0mKcYNdue5iTEb5V+W D2NEoEEZPwBmLLQcDYiXoMfga2gd/bgxS+Vo1BPKD6JcehJAtHs8JyHDWZjygqrl kfgXHrRFFtZ+q0V2brpuPj2y0Jfyg2vjs7A= -----END CERTIFICATE-----Generated at Sat Apr 26 16:57:54 2025 by rpki-client