$ rpki-client -vvf rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/B55EC19EAC2B11E996F6E511C4F9AE02.roa File: B55EC19EAC2B11E996F6E511C4F9AE02.roa (raw, json) Hash identifier: IPMEsK43QEDeAXz8+s8RcYoTW9W3k8flG+M7sbwxamA= Subject key identifier: B6:68:65:34:E5:A8:11:6B:94:CE:E7:36:08:40:32:CA:CA:8F:46:A4 Certificate issuer: /CN=A91957C9/serialNumber=4F315EEF5ACB2EDA7A3729E79E135990C01E7074 Certificate serial: 0DE3 Authority key identifier: 4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/B55EC19EAC2B11E996F6E511C4F9AE02.roa Signing time: Thu 27 Feb 2025 17:45:56 +0000 ROA not before: Thu 27 Feb 2025 17:45:56 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 45668 IP address blocks: 103.232.48.0/22 maxlen: 24 110.74.128.0/19 maxlen: 24 110.74.160.0/19 maxlen: 24 2403:bc00::/32 maxlen: 32 2403:bc00:1::/48 maxlen: 48 2403:bc00:adc::/48 maxlen: 48 2403:bc00:7fff::/48 maxlen: 48 2403:bc00:8000::/48 maxlen: 48 2403:bc00:8001::/48 maxlen: 48 2403:bc00:8002::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3555 (0xde3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91957C9 Validity Not Before: Feb 27 17:45:56 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67c0a4d3-3418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0f:af:6b:7a:58:b5:3a:94:0e:e9:d1:08:cc: d0:4f:26:2c:ac:e2:d5:ea:d4:93:99:0c:2a:68:f5: 5a:12:5e:03:bb:d3:cd:e4:a9:58:a8:3f:3d:e1:b0: 10:a1:c5:18:dd:fa:d2:b4:cd:67:72:28:9e:dd:df: 9f:75:53:38:dd:f5:f6:8c:04:84:d6:6f:e2:29:48: bb:49:77:36:75:cd:b2:a7:e8:6c:69:99:7c:22:ef: 13:ae:8c:5b:68:b5:0a:9d:b9:62:97:37:9b:70:ac: d3:44:92:e1:71:90:e8:0b:7c:9e:f1:0c:9d:66:f6: 9a:cc:6b:1c:ee:32:e1:1e:e2:ec:8b:65:87:00:b6: 07:06:5d:15:b7:17:b9:58:1c:c9:e7:e6:da:29:c9: 55:57:ec:00:1e:7d:23:82:ff:00:c8:bf:7a:06:11: 1d:68:4a:9b:cc:eb:d7:96:13:84:0b:da:cb:53:31: 9d:88:1d:08:94:22:98:bc:8b:a7:7f:f7:e2:03:df: b4:a3:2c:6a:e6:56:29:b1:6e:b9:2f:d6:df:3f:c5: d8:c9:a6:b0:f4:8f:b0:e9:29:1b:d2:94:08:a2:48: 5a:f7:da:e5:6c:6b:de:9f:b3:5f:ab:fa:b4:8b:22: ea:d0:a5:9b:c8:2e:00:d4:80:ed:71:ee:91:4d:5c: f5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:68:65:34:E5:A8:11:6B:94:CE:E7:36:08:40:32:CA:CA:8F:46:A4 X509v3 Authority Key Identifier: keyid:4F:31:5E:EF:5A:CB:2E:DA:7A:37:29:E7:9E:13:59:90:C0:1E:70:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/TzFe71rLLtp6NynnnhNZkMAecHQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/TzFe71rLLtp6NynnnhNZkMAecHQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91957C9/C359E75EAC1911E983F2FC62C4F9AE02/B55EC19EAC2B11E996F6E511C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.232.48.0/22 110.74.128.0/18 IPv6: 2403:bc00::/32 Signature Algorithm: sha256WithRSAEncryption a1:6c:cf:f6:c5:fb:57:36:5e:5f:4b:eb:e1:e8:35:51:52:83: 06:8a:65:47:a8:f1:d5:64:38:a0:1f:5d:f9:f5:06:9d:e7:e6: ef:20:41:39:29:93:59:a1:2b:e7:81:9d:59:e8:a5:4a:3a:cb: 4a:b6:07:33:42:5b:1a:14:8f:0b:63:ba:7d:71:e1:80:aa:22: ff:cf:bb:5b:69:13:33:0b:ca:c6:f7:6d:79:78:23:1a:3a:b8: 8b:f4:30:3e:69:cf:86:24:7b:e2:47:c8:3d:f1:43:51:20:6e: bf:27:5a:fd:5f:48:d6:9e:ee:08:49:cb:33:5e:c1:91:73:40: e1:31:06:43:0f:0c:76:25:a8:84:73:74:2e:2c:88:fc:9e:e3: 45:54:60:d4:6b:91:8c:97:b1:01:14:37:f6:06:7f:f6:0d:32: af:fe:d8:cd:25:f3:8b:d1:ef:99:8a:f3:1f:27:59:e7:06:7d: 8f:bf:70:f3:38:a2:ce:ee:ce:0b:7f:79:c5:58:b5:0c:89:f8: 4a:f9:84:89:9a:64:d2:07:46:43:2a:4c:65:c0:6f:57:dd:57: bf:0a:1d:b4:0d:e2:ae:2a:82:9d:de:51:08:17:b1:32:d9:40: 08:b4:12:ae:01:9f:0c:8c:49:a1:20:1d:9c:1a:b9:26:2d:7f: 0f:66:3a:aa -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDeMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTU3QzkxMTAvBgNVBAUTKDRGMzE1RUVGNUFDQjJFREE3QTM3MjlFNzlFMTM1OTkw QzAxRTcwNzQwHhcNMjUwMjI3MTc0NTU2WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MwYTRkMy0zNDE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyQ+va3pYtTqUDunRCMzQTyYsrOLV6tSTmQwqaPVaEl4Du9PN5KlYqD894bAQ ocUY3frStM1nciie3d+fdVM43fX2jASE1m/iKUi7SXc2dc2yp+hsaZl8Iu8Troxb aLUKnblilzebcKzTRJLhcZDoC3ye8QydZvaazGsc7jLhHuLsi2WHALYHBl0Vtxe5 WBzJ5+baKclVV+wAHn0jgv8AyL96BhEdaEqbzOvXlhOEC9rLUzGdiB0IlCKYvIun f/fiA9+0oyxq5lYpsW65L9bfP8XYyaaw9I+w6Skb0pQIokha99rlbGven7Nfq/q0 iyLq0KWbyC4A1IDtce6RTVz1BwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFLZoZTTl qBFrlM7nNghAMsrKj0akMB8GA1UdIwQYMBaAFE8xXu9ayy7aejcp554TWZDAHnB0 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NTdDOS9DMzU5RTc1RUFD MTkxMUU5ODNGMkZDNjJDNEY5QUUwMi9UekZlNzFyTEx0cDZOeW5ubmhOWmtNQWVj SFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1R6RmU3MXJMTHRwNk55bm5uaE5aa01BZWNIUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OTU3QzkvQzM1OUU3NUVBQzE5MTFFOTgzRjJGQzYyQzRGOUFFMDIvQjU1RUMxOUVB QzJCMTFFOTk2RjZFNTExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn6DADBAZuSoAwDQQCAAIwBwMFACQDvAAwDQYJKoZIhvcN AQELBQADggEBAKFsz/bF+1c2Xl9L6+HoNVFSgwaKZUeo8dVkOKAfXfn1Bp3n5u8g QTkpk1mhK+eBnVnopUo6y0q2BzNCWxoUjwtjun1x4YCqIv/Pu1tpEzMLysb3bXl4 Ixo6uIv0MD5pz4Yke+JHyD3xQ1Egbr8nWv1fSNae7ghJyzNewZFzQOExBkMPDHYl qIRzdC4siPye40VUYNRrkYyXsQEUN/YGf/YNMq/+2M0l84vR75mK8x8nWecGfY+/ cPM4os7uzgt/ecVYtQyJ+Er5hImaZNIHRkMqTGXAb1fdV78KHbQN4q4qgp3eUQgX sTLZQAi0Eq4BnwyMSaEgHZwauSYtfw9mOqo= -----END CERTIFICATE-----Generated at Sat Apr 5 07:08:32 2025 by rpki-client