$ rpki-client -vvf rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/4CA8BBE232CF11EBADB5497FC4F9AE02.roa File: 4CA8BBE232CF11EBADB5497FC4F9AE02.roa (raw, json) Hash identifier: 2uqYafN88TfsD3Ygt/Nku6GJ6HpfQm/lbxRdxC+igQo= Subject key identifier: 14:AC:2F:1B:F6:31:6A:72:A7:39:82:C4:0E:FC:02:76:22:7C:5D:3C Certificate issuer: /CN=A91FF74B/serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Certificate serial: 074C Authority key identifier: 54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/4CA8BBE232CF11EBADB5497FC4F9AE02.roa Signing time: Wed 23 Apr 2025 13:15:59 +0000 ROA not before: Wed 23 Apr 2025 13:15:59 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 56201 IP address blocks: 103.84.216.0/23 maxlen: 23 103.84.216.0/24 maxlen: 24 103.84.217.0/24 maxlen: 24 103.84.218.0/23 maxlen: 23 103.84.218.0/24 maxlen: 24 103.84.219.0/24 maxlen: 24 103.89.74.0/23 maxlen: 23 103.89.74.0/24 maxlen: 24 103.89.75.0/24 maxlen: 24 103.117.158.0/23 maxlen: 23 103.117.158.0/24 maxlen: 24 103.117.159.0/24 maxlen: 24 2001:df0:217::/48 maxlen: 48 2400:6d20::/47 maxlen: 47 2400:6d20::/48 maxlen: 48 2400:6d20:1::/48 maxlen: 48 2400:6d20:2::/47 maxlen: 47 2400:6d20:2::/48 maxlen: 48 2400:6d20:3::/48 maxlen: 48 2400:6d20:10::/47 maxlen: 47 2400:6d20:12::/47 maxlen: 47 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 21:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1868 (0x74c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FF74B, serialNumber=540DDAC668D8B50C96605712195A988A1CAD9E3F Validity Not Before: Apr 23 13:15:59 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=6808e80f-7ba0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:7c:71:b2:0f:17:4e:68:c0:cf:02:5b:c6: 4c:4f:25:c0:9f:e8:48:9c:c8:e0:74:ae:6a:64:d4: f4:09:1d:36:b0:a3:1c:00:82:a8:44:80:47:78:a2: 98:c8:e4:4d:42:ff:18:cb:70:21:9a:e6:16:2c:e4: af:54:e5:e8:15:f0:1e:c5:d9:36:d0:8c:0a:50:54: e7:16:7c:2b:3c:14:be:82:86:9d:d2:28:18:e8:5a: 60:13:f9:77:1d:13:80:9a:92:90:2e:51:00:3f:88: e5:80:4d:81:06:c4:83:7a:89:a6:81:a1:04:2e:a6: 25:ad:f7:18:8a:71:30:81:b3:96:b0:2d:18:6a:ab: dd:64:41:b8:46:49:c3:b5:ca:d9:d2:1c:d6:0e:3c: b6:78:8d:a1:00:81:fa:ac:93:af:c6:2b:31:2c:8a: 77:86:68:a0:8e:ea:c5:2b:31:48:4d:ea:29:99:dc: 97:7c:eb:36:6f:38:ab:d5:11:12:50:f5:4f:d1:7b: d5:03:dc:39:ad:79:6c:cc:37:94:a3:fc:7d:6c:23: db:2f:95:3b:7d:23:26:35:cf:87:86:32:03:4c:2b: 1f:89:b2:4b:8e:2b:bb:f6:21:3b:d5:28:5c:d0:ea: 7d:5c:13:50:74:33:12:cd:16:be:c5:e4:e0:b6:d6: f4:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:AC:2F:1B:F6:31:6A:72:A7:39:82:C4:0E:FC:02:76:22:7C:5D:3C X509v3 Authority Key Identifier: keyid:54:0D:DA:C6:68:D8:B5:0C:96:60:57:12:19:5A:98:8A:1C:AD:9E:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/VA3axmjYtQyWYFcSGVqYihytnj8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/VA3axmjYtQyWYFcSGVqYihytnj8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FF74B/094489FE32CE11EB9C143F7EC4F9AE02/4CA8BBE232CF11EBADB5497FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.216.0/22 103.89.74.0/23 103.117.158.0/23 IPv6: 2001:df0:217::/48 2400:6d20::/46 2400:6d20:10::/46 Signature Algorithm: sha256WithRSAEncryption bb:47:2c:6d:f4:7c:30:11:59:47:dd:22:ef:24:4a:70:10:e8: 92:45:be:0b:3d:a7:4e:bd:7e:c0:5e:6c:93:62:a8:8b:a8:2a: 3e:6f:0d:70:b3:b2:b3:c4:9e:bb:3a:a2:7e:a7:5b:ce:cf:c0: 07:12:b5:8c:74:3b:88:1c:0a:05:b4:08:56:c0:f5:a8:25:25: 49:01:5d:6f:4e:c2:5d:b5:21:30:4d:54:90:88:0c:8d:c6:fa: f3:dc:7a:93:26:a3:5b:e8:b2:dd:cc:35:25:2c:e0:c8:61:c8: 77:f3:60:d0:8e:c6:d5:86:2e:35:65:a1:db:a8:52:7c:2b:a2: f0:48:36:80:fb:a9:be:bf:1c:f0:43:80:c3:79:15:8a:06:71: fa:67:21:05:f9:f6:cc:5e:1b:0d:b9:d5:01:72:6c:d6:6d:d3: 6d:ec:81:6e:c7:13:54:a9:1d:5b:9f:56:85:55:4b:46:8b:5c: c7:ce:54:00:aa:03:59:ba:9d:1a:b6:30:65:68:7f:b4:d0:61: 1c:c7:0c:ef:ef:6f:c3:2e:fc:eb:52:35:87:dc:b4:96:da:82: 23:8b:3d:91:fc:37:42:96:f8:14:10:32:77:1e:38:bc:c5:65: ec:0d:88:a9:86:c1:62:f8:77:21:f0:f8:56:0e:47:4c:44:be: d9:e4:9c:e6 -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgICB0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkY3NEIxMTAvBgNVBAUTKDU0MEREQUM2NjhEOEI1MEM5NjYwNTcxMjE5NUE5ODhB MUNBRDlFM0YwHhcNMjUwNDIzMTMxNTU5WhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODA4ZTgwZi03YmEwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2PV8cbIPF05owM8CW8ZMTyXAn+hInMjgdK5qZNT0CR02sKMcAIKoRIBHeKKY yORNQv8Yy3AhmuYWLOSvVOXoFfAexdk20IwKUFTnFnwrPBS+goad0igY6FpgE/l3 HROAmpKQLlEAP4jlgE2BBsSDeommgaEELqYlrfcYinEwgbOWsC0YaqvdZEG4RknD tcrZ0hzWDjy2eI2hAIH6rJOvxisxLIp3hmigjurFKzFITeopmdyXfOs2bzir1RES UPVP0XvVA9w5rXlszDeUo/x9bCPbL5U7fSMmNc+HhjIDTCsfibJLjiu79iE71Shc 0Op9XBNQdDMSzRa+xeTgttb0hQIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFBSsLxv2 MWpypzmCxA78AnYifF08MB8GA1UdIwQYMBaAFFQN2sZo2LUMlmBXEhlamIocrZ4/ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGRjc0Qi8wOTQ0ODlGRTMy Q0UxMUVCOUMxNDNGN0VDNEY5QUUwMi9WQTNheG1qWXRReVdZRmNTR1ZxWWloeXRu ajguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1ZBM2F4bWpZdFF5V1lGY1NHVnFZaWh5dG5qOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkY3NEIvMDk0NDg5RkUzMkNFMTFFQjlDMTQzRjdFQzRGOUFFMDIvNENBOEJCRTIz MkNGMTFFQkFEQjU0OTdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E PzA9MBgEAgABMBIDBAJnVNgDBAFnWUoDBAFndZ4wIQQCAAIwGwMHACABDfACFwMH AiQAbSAAAAMHAiQAbSAAEDANBgkqhkiG9w0BAQsFAAOCAQEAu0csbfR8MBFZR90i 7yRKcBDokkW+Cz2nTr1+wF5sk2Koi6gqPm8NcLOys8Seuzqifqdbzs/ABxK1jHQ7 iBwKBbQIVsD1qCUlSQFdb07CXbUhME1UkIgMjcb689x6kyajW+iy3cw1JSzgyGHI d/Ng0I7G1YYuNWWh26hSfCui8Eg2gPupvr8c8EOAw3kVigZx+mchBfn2zF4bDbnV AXJs1m3TbeyBbscTVKkdW59WhVVLRotcx85UAKoDWbqdGrYwZWh/tNBhHMcM7+9v wy7861I1h9y0ltqCI4s9kfw3Qpb4FBAydx44vMVl7A2IqYbBYvh3IfD4Vg5HTES+ 2eSc5g== -----END CERTIFICATE-----Generated at Sat Apr 26 14:49:20 2025 by rpki-client