$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89287E32057311EC988EF77BC4F9AE02.roa File: 89287E32057311EC988EF77BC4F9AE02.roa (raw, json) Hash identifier: o4945Qf6V0d4tp6Js7AEIjQiEZI/ToILhgXuVDvrFr4= Subject key identifier: 4C:4E:64:26:3F:F2:50:B9:F1:9D:27:32:09:69:88:1A:DF:2F:84:90 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4932 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89287E32057311EC988EF77BC4F9AE02.roa Signing time: Tue 07 Jan 2025 16:03:45 +0000 ROA not before: Tue 07 Jan 2025 16:03:45 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 24088 IP address blocks: 14.0.16.0/20 maxlen: 24 103.19.220.0/22 maxlen: 24 103.71.104.0/23 maxlen: 24 103.88.112.0/22 maxlen: 24 103.88.116.0/22 maxlen: 24 103.130.208.0/22 maxlen: 24 103.235.212.0/22 maxlen: 24 103.238.68.0/22 maxlen: 24 103.238.72.0/22 maxlen: 24 103.244.136.0/22 maxlen: 24 202.60.104.0/21 maxlen: 24 202.93.156.0/22 maxlen: 24 203.128.240.0/21 maxlen: 24 203.209.180.0/22 maxlen: 24 2001:df4:acc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18738 (0x4932) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Jan 7 16:03:45 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=677d5060-5bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f9:c4:d9:51:0e:70:12:93:28:8c:06:a1:13: 53:28:9b:de:be:66:0a:f9:4e:20:d3:a4:6c:6f:21: 61:95:27:22:34:3c:01:55:e0:4a:f6:b3:44:8c:5b: b0:e4:af:88:04:df:51:cf:cf:28:41:4c:78:ef:b5: ce:e6:ba:31:3a:7c:f2:60:64:86:6a:8c:58:32:1c: fe:66:ea:06:40:8a:37:e3:4b:7d:72:92:6b:51:28: 0f:b4:23:61:7c:5d:31:b2:bb:bf:02:2b:18:73:ae: 14:eb:26:84:9e:6c:cc:76:3e:66:ce:81:db:f2:fe: 15:9e:5f:3b:59:f0:af:30:96:09:c8:5b:67:95:d8: cc:da:c6:49:21:40:10:e4:39:b7:ca:20:b9:0e:e3: 82:d8:9d:f7:d7:1d:07:90:b5:33:1e:b5:16:a6:33: 68:96:13:f6:93:ca:cc:ad:74:3b:a3:18:ca:f9:16: 9a:31:0e:a0:a7:20:d4:a8:2c:56:ce:fb:5a:4e:80: 08:93:85:32:39:45:9c:dc:30:70:ce:a5:09:a6:62: 6f:34:2a:29:8f:0b:57:dc:3d:4f:53:d2:50:8c:71: 28:07:74:e9:a6:ec:c9:20:1e:d4:2f:2d:cc:12:bf: c8:a4:77:6f:5c:19:58:9e:88:97:1c:1a:1b:cc:b5: da:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:4E:64:26:3F:F2:50:B9:F1:9D:27:32:09:69:88:1A:DF:2F:84:90 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/89287E32057311EC988EF77BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.0.16.0/20 103.19.220.0/22 103.71.104.0/23 103.88.112.0/21 103.130.208.0/22 103.235.212.0/22 103.238.68.0-103.238.75.255 103.244.136.0/22 202.60.104.0/21 202.93.156.0/22 203.128.240.0/21 203.209.180.0/22 IPv6: 2001:df4:acc0::/48 Signature Algorithm: sha256WithRSAEncryption 59:df:85:29:76:e8:3d:4f:60:96:6e:1e:e5:93:20:47:3d:29: c0:24:97:ab:e2:b2:5d:8c:de:61:0e:05:63:03:ef:fe:47:12: 88:68:11:c8:e1:38:f8:55:31:36:6c:62:34:74:1a:d5:d5:7a: 47:d7:d1:cf:50:e7:e0:c9:88:e6:a8:34:4e:8f:1f:0a:9d:85: 16:64:bd:9d:c6:0c:2b:ea:3b:54:03:6a:3a:40:c2:4a:9a:38: a5:cc:7f:7b:aa:65:58:58:1b:5f:ce:57:e9:01:d1:82:b8:43: ad:a7:d0:5b:2c:6c:d4:70:bf:2c:50:60:8a:20:39:04:a2:f4: 42:99:c0:36:22:4f:e5:dc:c8:ae:7f:cb:45:e8:b9:df:e7:98: 50:f5:ed:b4:63:dc:b7:2c:d1:47:40:50:cc:a3:ad:51:88:ce: 53:37:c3:06:3a:7c:b3:54:d5:53:11:26:f2:97:6d:67:3d:7a: c5:48:c8:73:9f:75:8c:15:34:fd:59:4e:47:8b:ef:90:b9:3f: 81:21:cc:3e:41:9a:b7:dd:b9:bf:4f:5e:99:61:b6:1b:7c:95: f0:7e:fc:69:11:a3:fd:7c:5c:8b:04:1a:e8:cb:08:ef:41:98: 9a:59:9c:fa:eb:fd:cf:db:81:e0:76:1f:20:2a:d4:26:75:2b: 1f:2a:ad:e0 -----BEGIN CERTIFICATE----- MIIFzDCCBLSgAwIBAgICSTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwMTA3MTYwMzQ1WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzdkNTA2MC01YmVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0/nE2VEOcBKTKIwGoRNTKJvevmYK+U4g06RsbyFhlSciNDwBVeBK9rNEjFuw 5K+IBN9Rz88oQUx477XO5roxOnzyYGSGaoxYMhz+ZuoGQIo340t9cpJrUSgPtCNh fF0xsru/AisYc64U6yaEnmzMdj5mzoHb8v4Vnl87WfCvMJYJyFtnldjM2sZJIUAQ 5Dm3yiC5DuOC2J331x0HkLUzHrUWpjNolhP2k8rMrXQ7oxjK+RaaMQ6gpyDUqCxW zvtaToAIk4UyOUWc3DBwzqUJpmJvNCopjwtX3D1PU9JQjHEoB3TppuzJIB7ULy3M Er/IpHdvXBlYnoiXHBobzLXawQIDAQABo4IC8DCCAuwwHQYDVR0OBBYEFExOZCY/ 8lC58Z0nMglpiBrfL4SQMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvODkyODdFMzIw NTczMTFFQzk4OEVGNzdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwegYIKwYBBQUHAQcBAf8E azBpMFYEAgABMFADBAQOABADBAJnE9wDBAFnR2gDBANnWHADBAJngtADBAJn69Qw DAMEAmfuRAMEAmfuSAMEAmf0iAMEA8o8aAMEAspdnAMEA8uA8AMEAsvRtDAPBAIA AjAJAwcAIAEN9KzAMA0GCSqGSIb3DQEBCwUAA4IBAQBZ34Updug9T2CWbh7lkyBH PSnAJJer4rJdjN5hDgVjA+/+RxKIaBHI4Tj4VTE2bGI0dBrV1XpH19HPUOfgyYjm qDROjx8KnYUWZL2dxgwr6jtUA2o6QMJKmjilzH97qmVYWBtfzlfpAdGCuEOtp9Bb LGzUcL8sUGCKIDkEovRCmcA2Ik/l3Miuf8tF6Lnf55hQ9e20Y9y3LNFHQFDMo61R iM5TN8MGOnyzVNVTESbyl21nPXrFSMhzn3WMFTT9WU5Hi++QuT+BIcw+QZq33bm/ T16ZYbYbfJXwfvxpEaP9fFyLBBroywjvQZiaWZz66/3P24Hgdh8gKtQmdSsfKq3g -----END CERTIFICATE-----Generated at Sat Apr 5 14:43:45 2025 by rpki-client