$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4283EC800E9A11F0A4CEB90AC4F9AE02.roa File: 4283EC800E9A11F0A4CEB90AC4F9AE02.roa (raw, json) Hash identifier: WaKafOz55Dy7N84Ha6z/9ygM1gQG3YThw4qCwUNSz/E= Subject key identifier: 31:E6:F1:69:42:CE:93:F7:46:E1:B2:7D:57:78:8D:D4:87:4C:82:B0 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0B9C Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4283EC800E9A11F0A4CEB90AC4F9AE02.roa Signing time: Tue 01 Apr 2025 01:40:15 +0000 ROA not before: Tue 01 Apr 2025 01:40:15 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 17408 IP address blocks: 43.251.185.0/24 maxlen: 24 43.251.187.0/24 maxlen: 24 45.115.33.0/24 maxlen: 24 45.115.35.0/24 maxlen: 24 103.15.76.0/24 maxlen: 24 103.15.77.0/24 maxlen: 24 103.15.78.0/24 maxlen: 24 103.21.105.0/24 maxlen: 24 103.21.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2972 (0xb9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402 Validity Not Before: Apr 1 01:40:15 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67eb43ff-3fa8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:98:cb:5c:68:c9:77:94:3f:4b:d3:65:35:61: ca:0c:95:bc:ed:f2:62:a2:6c:73:92:81:53:b3:3c: 88:73:e3:26:fe:23:0c:96:f6:a5:94:6c:60:ff:0f: d7:f6:b9:f3:24:9e:5d:d4:6a:d2:fb:06:17:30:d4: d9:81:35:16:e7:aa:ac:60:a2:8c:ac:0f:07:06:23: 2d:d8:7a:5d:86:7d:6b:03:fc:f9:6b:66:ec:71:ba: f5:75:f2:43:95:e0:82:b7:1b:73:ac:94:42:ed:66: 04:aa:b8:08:64:2b:2a:d3:28:d3:c6:1b:d5:0c:65: b4:e7:20:10:aa:fa:82:74:27:8d:10:75:58:88:82: d7:be:d9:93:f9:82:98:46:c9:07:8f:d8:ff:37:af: 50:42:5c:f1:62:2d:44:9b:ea:3d:58:fa:86:53:da: 50:98:21:35:3f:7d:99:20:c1:54:ab:af:78:23:21: aa:b6:f6:1f:27:d8:1f:ae:89:ac:86:6c:53:c4:5f: dc:10:78:90:59:96:bc:e9:d1:82:13:10:6c:35:f1: c3:f6:ea:64:75:2c:63:76:2d:0b:ff:9b:a6:c2:01: 9c:55:c9:de:11:39:e4:f6:23:11:14:76:bf:6d:85: a4:8c:60:29:58:d3:1f:91:0a:e1:17:65:25:42:d0: f8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E6:F1:69:42:CE:93:F7:46:E1:B2:7D:57:78:8D:D4:87:4C:82:B0 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4283EC800E9A11F0A4CEB90AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.251.185.0/24 43.251.187.0/24 45.115.33.0/24 45.115.35.0/24 103.15.76.0-103.15.78.255 103.21.105.0/24 103.21.107.0/24 Signature Algorithm: sha256WithRSAEncryption 87:d9:51:3f:e5:60:bd:9f:b0:c1:a3:1a:23:97:2c:73:91:74: 86:74:b1:56:98:55:c8:01:9d:81:7f:91:db:b5:a4:84:60:a4: cf:56:8b:a5:c9:77:19:69:c5:d7:c6:3f:1a:d7:b1:a3:6d:0e: e8:cb:4f:ec:57:18:ac:04:97:9e:45:6a:3d:67:cd:79:6f:e6: a0:4f:a0:84:e8:81:ea:97:97:ed:ed:d2:08:b9:e0:86:bc:6c: 87:3e:f4:6f:55:04:a0:0e:a2:87:b1:f1:e3:90:1f:af:36:3c: 8a:19:a6:65:57:6a:15:b6:27:61:ed:9e:54:d3:26:32:3e:1b: 57:fe:d6:c2:03:ec:7c:25:46:14:58:27:ac:0d:36:6e:c1:53: 58:5d:c1:04:53:8f:73:ff:31:13:52:bd:aa:82:a8:f2:81:3c: 3f:88:34:8e:6f:95:ae:a5:b9:4d:0a:2f:7c:ec:df:34:17:12: d0:f9:0d:09:98:b6:aa:ef:79:44:56:63:61:59:d5:81:a5:a9: 7b:da:74:93:02:de:2c:80:ba:b3:1b:fa:30:29:5f:12:6c:fe: 79:7b:57:37:86:d3:f1:cd:0c:bf:7e:0b:2b:cb:42:ba:dc:3c: 35:8a:00:2f:27:73:f7:68:62:01:75:ce:23:77:14:12:a6:b3: 08:8f:96:84 -----BEGIN CERTIFICATE----- MIIFnTCCBIWgAwIBAgICC5wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNDAxMDE0MDE1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2ViNDNmZi0zZmE4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0ZjLXGjJd5Q/S9NlNWHKDJW87fJiomxzkoFTszyIc+Mm/iMMlvallGxg/w/X 9rnzJJ5d1GrS+wYXMNTZgTUW56qsYKKMrA8HBiMt2Hpdhn1rA/z5a2bscbr1dfJD leCCtxtzrJRC7WYEqrgIZCsq0yjTxhvVDGW05yAQqvqCdCeNEHVYiILXvtmT+YKY RskHj9j/N69QQlzxYi1Em+o9WPqGU9pQmCE1P32ZIMFUq694IyGqtvYfJ9gfroms hmxTxF/cEHiQWZa86dGCExBsNfHD9upkdSxjdi0L/5umwgGcVcneETnk9iMRFHa/ bYWkjGApWNMfkQrhF2UlQtD4oQIDAQABo4ICwTCCAr0wHQYDVR0OBBYEFDHm8WlC zpP3RuGyfVd4jdSHTIKwMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNDI4M0VDODAw RTlBMTFGMEE0Q0VCOTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSwYIKwYBBQUHAQcBAf8E PDA6MDgEAgABMDIDBAAr+7kDBAAr+7sDBAAtcyEDBAAtcyMwDAMEAmcPTAMEAGcP TgMEAGcVaQMEAGcVazANBgkqhkiG9w0BAQsFAAOCAQEAh9lRP+VgvZ+wwaMaI5cs c5F0hnSxVphVyAGdgX+R27WkhGCkz1aLpcl3GWnF18Y/Gtexo20O6MtP7FcYrASX nkVqPWfNeW/moE+ghOiB6peX7e3SCLnghrxshz70b1UEoA6ih7Hx45AfrzY8ihmm ZVdqFbYnYe2eVNMmMj4bV/7WwgPsfCVGFFgnrA02bsFTWF3BBFOPc/8xE1K9qoKo 8oE8P4g0jm+VrqW5TQovfOzfNBcS0PkNCZi2qu95RFZjYVnVgaWpe9p0kwLeLIC6 sxv6MClfEmz+eXtXN4bT8c0Mv34LK8tCutw8NYoALydz92hiAXXOI3cUEqazCI+W hA== -----END CERTIFICATE-----Generated at Sat Apr 5 01:57:49 2025 by rpki-client