$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5E6FEE4E10F211F099F0EB23C4F9AE02.roa File: 5E6FEE4E10F211F099F0EB23C4F9AE02.roa (raw, json) Hash identifier: ttc58GD44+rNKx4WhezAJDFSUq09ANz6/3cUzbckXnM= Subject key identifier: BA:84:36:43:52:70:91:E6:8A:E4:AE:51:2E:C8:25:28:E3:11:44:17 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4A50 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5E6FEE4E10F211F099F0EB23C4F9AE02.roa Signing time: Fri 04 Apr 2025 01:16:00 +0000 ROA not before: Fri 04 Apr 2025 01:16:00 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 135951 IP address blocks: 103.130.216.0/22 maxlen: 23 103.142.24.0/23 maxlen: 24 103.142.26.0/23 maxlen: 24 103.155.162.0/23 maxlen: 24 103.161.178.0/23 maxlen: 23 103.162.14.0/23 maxlen: 24 103.162.20.0/23 maxlen: 24 103.162.22.0/23 maxlen: 23 103.164.154.0/23 maxlen: 24 103.177.110.0/23 maxlen: 24 103.179.184.0/23 maxlen: 24 116.118.44.0/22 maxlen: 24 180.93.136.0/22 maxlen: 24 2400:4de0::/48 maxlen: 48 2405:2840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19024 (0x4a50) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Apr 4 01:16:00 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67ef32d0-abca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9f:d5:3a:6e:f6:b8:c1:13:55:f8:3b:8c:93: b4:12:2f:a6:ae:fc:4a:6b:9f:0c:15:31:e6:cb:d9: 63:e8:7f:cf:63:8f:2b:60:86:b5:cc:39:13:59:3b: 6e:03:1a:77:ae:c2:c8:c8:64:e2:8d:49:6a:8a:04: 0e:83:d8:e9:03:16:1a:89:1c:2b:ba:9b:ce:bc:4c: 3d:71:f8:54:46:c3:0e:cd:0b:70:ba:d5:47:df:e3: d0:ea:47:d8:59:dc:88:6e:26:f6:01:4b:0b:cb:e0: 66:77:e2:5c:45:9e:43:38:70:a5:17:0d:2b:af:c9: c8:54:55:9b:28:69:07:a3:b6:48:a2:b7:f1:04:e9: 3a:93:d5:a1:eb:80:f5:2f:be:db:5a:97:ec:d3:ed: 93:bf:8c:66:75:f3:a0:1b:b5:c9:6a:4f:30:8c:62: 79:49:8d:34:11:9b:e8:d5:0f:3c:06:1c:ca:b9:91: f5:2d:45:73:9f:26:cf:ca:1c:85:d2:44:22:3a:4b: a6:8a:89:50:86:dc:87:b2:3d:de:b8:53:95:fa:ff: ad:62:58:89:c3:e3:c6:db:6b:2b:e9:ed:2c:51:c7: cf:65:64:2c:c8:a2:0b:0c:ca:6a:ba:4c:d8:e5:0d: 4b:1b:97:f0:b4:80:aa:98:c7:b8:70:fa:2a:cb:d8: 91:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:84:36:43:52:70:91:E6:8A:E4:AE:51:2E:C8:25:28:E3:11:44:17 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/5E6FEE4E10F211F099F0EB23C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.130.216.0/22 103.142.24.0/22 103.155.162.0/23 103.161.178.0/23 103.162.14.0/23 103.162.20.0/22 103.164.154.0/23 103.177.110.0/23 103.179.184.0/23 116.118.44.0/22 180.93.136.0/22 IPv6: 2400:4de0::/48 2405:2840::/48 Signature Algorithm: sha256WithRSAEncryption 97:9b:1c:4e:a0:71:65:22:57:8e:58:53:a1:e1:d3:e1:43:65: 98:7c:b8:22:4c:fa:4f:cd:ed:fe:52:f4:bd:20:9e:e7:e3:fc: 52:f7:ed:0a:6f:1e:5d:99:7d:dc:08:b5:d9:22:53:90:e6:63: a3:65:6e:ce:f5:3e:6c:2a:b8:05:43:2f:8e:f2:07:0d:a8:98: 8f:0a:82:01:82:1e:67:ed:49:33:d2:63:73:fc:87:b1:2f:ec: 75:cc:71:78:52:8a:0f:b7:ba:53:70:8a:ff:aa:76:28:5f:82: 97:09:71:d6:70:41:f2:cf:5c:80:d2:4b:c7:68:b0:d5:3f:83: 04:65:e1:9a:17:16:26:38:49:27:54:98:ab:61:db:28:83:a0: 53:fc:f3:b3:79:9c:da:52:99:33:20:fe:fa:2d:77:1b:ce:6c: 28:c9:db:02:24:5c:80:4d:43:fd:4b:4f:57:63:f6:a7:cd:65: 0c:41:10:74:ec:8e:79:57:d4:fa:e1:84:f5:0b:fa:b5:af:2c: 27:da:b2:2e:86:3c:c6:c1:08:49:68:87:6e:17:29:d0:18:64: 68:fe:29:a2:63:66:8e:bb:cf:b6:19:a9:6a:c4:ac:96:c1:f3: 03:ab:bc:5e:39:4d:f2:05:e4:01:ed:a4:e3:11:fb:f1:ff:a9: 59:b2:48:19 -----BEGIN CERTIFICATE----- MIIFxzCCBK+gAwIBAgICSlAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwNDA0MDExNjAwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VmMzJkMC1hYmNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJ/VOm72uMETVfg7jJO0Ei+mrvxKa58MFTHmy9lj6H/PY48rYIa1zDkTWTtu Axp3rsLIyGTijUlqigQOg9jpAxYaiRwrupvOvEw9cfhURsMOzQtwutVH3+PQ6kfY WdyIbib2AUsLy+Bmd+JcRZ5DOHClFw0rr8nIVFWbKGkHo7ZIorfxBOk6k9Wh64D1 L77bWpfs0+2Tv4xmdfOgG7XJak8wjGJ5SY00EZvo1Q88BhzKuZH1LUVznybPyhyF 0kQiOkumiolQhtyHsj3euFOV+v+tYliJw+PG22sr6e0sUcfPZWQsyKILDMpqukzY 5Q1LG5fwtICqmMe4cPoqy9iRXQIDAQABo4IC6zCCAucwHQYDVR0OBBYEFLqENkNS cJHmiuSuUS7IJSjjEUQXMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNUU2RkVFNEUx MEYyMTFGMDk5RjBFQjIzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwdQYIKwYBBQUHAQcBAf8E ZjBkMEgEAgABMEIDBAJngtgDBAJnjhgDBAFnm6IDBAFnobIDBAFnog4DBAJnohQD BAFnpJoDBAFnsW4DBAFns7gDBAJ0diwDBAK0XYgwGAQCAAIwEgMHACQATeAAAAMH ACQFKEAAADANBgkqhkiG9w0BAQsFAAOCAQEAl5scTqBxZSJXjlhToeHT4UNlmHy4 Ikz6T83t/lL0vSCe5+P8UvftCm8eXZl93Ai12SJTkOZjo2VuzvU+bCq4BUMvjvIH DaiYjwqCAYIeZ+1JM9Jjc/yHsS/sdcxxeFKKD7e6U3CK/6p2KF+Clwlx1nBB8s9c gNJLx2iw1T+DBGXhmhcWJjhJJ1SYq2HbKIOgU/zzs3mc2lKZMyD++i13G85sKMnb AiRcgE1D/UtPV2P2p81lDEEQdOyOeVfU+uGE9Qv6ta8sJ9qyLoY8xsEISWiHbhcp 0BhkaP4pomNmjrvPthmpasSslsHzA6u8XjlN8gXkAe2k4xH78f+pWbJIGQ== -----END CERTIFICATE-----Generated at Sat Apr 5 14:11:23 2025 by rpki-client