$ rpki-client -vvf rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/5A0EFF08D55011EF9880B254C4F9AE02.roa File: 5A0EFF08D55011EF9880B254C4F9AE02.roa (raw, json) Hash identifier: 7tRXe0RCYJtYetkPzXHwKI+UWg4HugV8cA+U6bVnlYk= Subject key identifier: 91:79:28:CD:36:2E:63:C9:1E:90:25:4A:1C:C4:BE:EB:42:A7:3C:9F Certificate issuer: /CN=A91400CC/serialNumber=2758C6CF8B528966D43713BB1BCE8E03DCA61B1C Certificate serial: 02F1 Authority key identifier: 27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/5A0EFF08D55011EF9880B254C4F9AE02.roa Signing time: Sat 18 Jan 2025 03:57:36 +0000 ROA not before: Sat 18 Jan 2025 03:57:36 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 153494 IP address blocks: 43.248.60.0/22 maxlen: 24 103.39.148.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:19:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 753 (0x2f1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91400CC Validity Not Before: Jan 18 03:57:36 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=678b26af-9a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:2e:d3:5c:83:c6:3c:96:9f:d0:3b:fc:d6: 76:88:22:0d:46:9b:3e:76:cc:ad:9e:96:ff:c5:2b: 6e:91:0f:3e:8e:ef:4b:5d:b8:74:e9:e2:f1:eb:28: 99:53:d9:37:5b:49:39:f6:a0:e4:ec:bd:6f:ee:ae: 30:55:e9:f9:62:69:51:51:26:e9:09:57:01:a2:2d: 9c:25:87:d5:8d:ce:88:48:ee:83:37:ea:c3:b8:0a: 6b:6a:42:de:73:5e:5d:e3:49:f9:71:17:0a:9e:f3: e2:ee:ae:d8:da:7f:ce:81:2a:63:56:f7:96:02:73: 3e:fa:2a:9d:2a:a5:64:af:1a:51:04:1b:0f:f8:27: 0c:d4:19:0d:14:9d:de:6e:ad:28:9b:05:f3:43:32: 40:46:e5:eb:51:81:2a:09:76:2a:d2:4e:3c:fe:f7: d4:97:a6:4c:d6:a5:0f:dc:80:98:5e:09:47:3c:5a: a4:84:0f:50:59:b0:c6:40:82:38:0b:41:f1:e2:2d: 8b:96:b0:8d:59:11:e4:84:b5:6b:09:9f:69:97:94: c0:43:1e:8a:9d:33:7b:ba:c6:13:a9:ed:b3:a1:09: c3:e0:d4:73:bf:60:eb:49:16:74:a4:54:e6:ac:b0: ae:4d:91:28:83:2a:e8:27:8a:10:a9:e0:aa:b0:d6: c6:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:79:28:CD:36:2E:63:C9:1E:90:25:4A:1C:C4:BE:EB:42:A7:3C:9F X509v3 Authority Key Identifier: keyid:27:58:C6:CF:8B:52:89:66:D4:37:13:BB:1B:CE:8E:03:DC:A6:1B:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/J1jGz4tSiWbUNxO7G86OA9ymGxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J1jGz4tSiWbUNxO7G86OA9ymGxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91400CC/B4A7CCE8C60211ECBEB9BF3AC4F9AE02/5A0EFF08D55011EF9880B254C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.248.60.0/22 103.39.148.0/22 Signature Algorithm: sha256WithRSAEncryption 54:4e:8b:e7:b1:3d:ce:f2:de:a9:34:34:e0:7f:ea:b9:bc:78: 3c:a1:ec:9c:97:a3:5b:b5:c9:63:8b:74:7a:a7:8c:e0:6d:91: 82:77:21:75:fc:51:3a:4f:fe:b9:58:2d:f0:c8:9b:fc:ff:45: 56:bf:34:e4:e0:9c:b7:8b:fd:13:e3:e0:ac:6d:cb:b4:f8:fb: 51:1b:7a:66:b0:7a:85:0b:14:9f:74:a5:bb:94:91:2c:8d:00: f0:31:ce:65:12:30:92:d4:b5:52:de:b1:20:cf:e9:bf:91:17: e4:c4:fe:e6:50:e4:ef:36:db:33:cf:d6:3f:c3:00:2d:ad:f1: 46:04:37:c6:11:53:3f:ca:8f:38:f2:60:dc:b8:7f:67:bb:d2: cf:35:bf:5d:53:e9:a4:1e:53:6f:87:bc:d6:6e:94:13:75:2f: b4:ef:9b:a8:64:38:0a:c0:87:95:b1:ed:87:1b:01:88:b3:7b: e7:c0:9a:b3:ef:40:aa:f2:63:4a:0f:49:14:1a:32:43:be:0e: e2:c1:b0:ac:9a:ad:fd:0d:fe:46:4d:b2:f8:21:f9:88:71:32: 48:39:59:b2:b8:4c:84:f3:eb:55:d2:af:f0:8d:e1:3f:f7:f8: b8:e9:b8:a8:be:f7:c0:40:10:42:7f:c8:04:93:4d:29:55:25: e0:c0:65:e0 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAvEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NDAwQ0MxMTAvBgNVBAUTKDI3NThDNkNGOEI1Mjg5NjZENDM3MTNCQjFCQ0U4RTAz RENBNjFCMUMwHhcNMjUwMTE4MDM1NzM2WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02NzhiMjZhZi05YTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsnIu01yDxjyWn9A7/NZ2iCINRps+dsytnpb/xStukQ8+ju9LXbh06eLx6yiZ U9k3W0k59qDk7L1v7q4wVen5YmlRUSbpCVcBoi2cJYfVjc6ISO6DN+rDuAprakLe c15d40n5cRcKnvPi7q7Y2n/OgSpjVveWAnM++iqdKqVkrxpRBBsP+CcM1BkNFJ3e bq0omwXzQzJARuXrUYEqCXYq0k48/vfUl6ZM1qUP3ICYXglHPFqkhA9QWbDGQII4 C0Hx4i2LlrCNWRHkhLVrCZ9pl5TAQx6KnTN7usYTqe2zoQnD4NRzv2DrSRZ0pFTm rLCuTZEogyroJ4oQqeCqsNbGTwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFJF5KM02 LmPJHpAlShzEvutCpzyfMB8GA1UdIwQYMBaAFCdYxs+LUolm1DcTuxvOjgPcphsc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0MDBDQy9CNEE3Q0NFOEM2 MDIxMUVDQkVCOUJGM0FDNEY5QUUwMi9KMWpHejR0U2lXYlVOeE83Rzg2T0E5eW1H eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0oxakd6NHRTaVdiVU54TzdHODZPQTl5bUd4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NDAwQ0MvQjRBN0NDRThDNjAyMTFFQ0JFQjlCRjNBQzRGOUFFMDIvNUEwRUZGMDhE NTUwMTFFRjk4ODBCMjU0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr+DwDBAJnJ5QwDQYJKoZIhvcNAQELBQADggEBAFROi+ex Pc7y3qk0NOB/6rm8eDyh7JyXo1u1yWOLdHqnjOBtkYJ3IXX8UTpP/rlYLfDIm/z/ RVa/NOTgnLeL/RPj4Kxty7T4+1EbemaweoULFJ90pbuUkSyNAPAxzmUSMJLUtVLe sSDP6b+RF+TE/uZQ5O822zPP1j/DAC2t8UYEN8YRUz/KjzjyYNy4f2e70s81v11T 6aQeU2+HvNZulBN1L7Tvm6hkOArAh5Wx7YcbAYize+fAmrPvQKryY0oPSRQaMkO+ DuLBsKyarf0N/kZNsvgh+YhxMkg5WbK4TITz61XSr/CN4T/3+LjpuKi+98BAEEJ/ yASTTSlVJeDAZeA= -----END CERTIFICATE-----Generated at Sun Apr 6 02:45:01 2025 by rpki-client