$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EDFC6E02B6D411EFB03CBB66C4F9AE02.roa File: EDFC6E02B6D411EFB03CBB66C4F9AE02.roa (raw, json) Hash identifier: kq2iFQrfGbvAC4cIoTBQfCwPaS7M589P9fusrFvPSsI= Subject key identifier: 4C:B9:0A:47:84:DF:1B:A8:C8:69:29:44:ED:35:18:CF:6F:EB:C9:10 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4A17 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EDFC6E02B6D411EFB03CBB66C4F9AE02.roa Signing time: Fri 14 Mar 2025 06:48:38 +0000 ROA not before: Fri 14 Mar 2025 06:48:38 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 140825 IP address blocks: 59.153.216.0/22 maxlen: 24 103.12.76.0/23 maxlen: 24 103.81.84.0/22 maxlen: 24 103.173.154.0/23 maxlen: 24 103.173.254.0/23 maxlen: 24 103.180.132.0/23 maxlen: 23 103.180.134.0/23 maxlen: 23 103.183.112.0/23 maxlen: 24 103.184.112.0/23 maxlen: 24 103.186.146.0/23 maxlen: 24 2001:df0:5b40::/48 maxlen: 48 2001:df0:5bc0::/48 maxlen: 48 2001:df0:90c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18967 (0x4a17) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A Validity Not Before: Mar 14 06:48:38 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67d3d146-1c94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:39:1f:a5:42:9c:1e:a9:db:a6:4c:42:21: 2c:6a:91:d9:25:47:01:50:37:c9:62:47:53:7a:7f: a0:83:d4:76:fb:24:d2:f9:7f:a7:85:83:99:18:a6: b7:7a:84:36:41:7b:b2:5a:e4:ff:fb:53:86:66:2b: c7:e8:78:c8:dd:f3:88:38:88:d1:86:96:d1:b6:08: 5a:a9:3d:a0:84:22:38:48:53:fc:e2:09:67:7c:f3: 0f:d0:c1:b1:49:7b:c0:1c:a9:23:34:fd:51:9a:91: 62:e3:bc:de:cf:16:a2:6f:52:d7:72:d7:90:5c:06: 04:60:53:1d:9c:99:7d:5c:12:ee:0d:ed:f7:1b:a4: df:c2:50:be:79:ee:1b:e3:a2:92:58:f0:2c:08:4b: 28:ec:97:02:2a:35:7e:73:36:e7:be:25:08:7e:e1: 6e:5c:69:ab:b2:a9:1f:2d:1b:d8:fc:14:e5:fd:03: d3:9c:1d:fe:ed:7a:b5:b8:9f:e4:c3:d4:ca:7f:9b: 0e:09:db:9c:2d:d5:9a:9a:4a:bb:ca:61:5a:76:bb: be:17:6d:44:c8:14:67:d9:1d:bf:86:5c:41:aa:98: 74:e5:01:e5:be:b6:59:fa:66:47:af:69:de:4c:47: e5:2f:02:c1:fe:d2:83:33:51:1e:97:ce:4b:4c:96: d5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:B9:0A:47:84:DF:1B:A8:C8:69:29:44:ED:35:18:CF:6F:EB:C9:10 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EDFC6E02B6D411EFB03CBB66C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 59.153.216.0/22 103.12.76.0/23 103.81.84.0/22 103.173.154.0/23 103.173.254.0/23 103.180.132.0/22 103.183.112.0/23 103.184.112.0/23 103.186.146.0/23 IPv6: 2001:df0:5b40::/48 2001:df0:5bc0::/48 2001:df0:90c0::/48 Signature Algorithm: sha256WithRSAEncryption 50:80:3a:a3:0e:07:ea:46:de:87:af:fa:d6:26:05:c4:f7:26: 7a:1f:f1:a4:14:b4:8b:b9:fe:90:2d:69:58:20:43:de:7e:3c: fa:74:33:43:13:63:c1:aa:79:c7:bb:f3:eb:f5:b7:c1:51:27: 9a:a6:88:1d:9f:1e:88:47:87:0d:47:70:90:d5:cc:10:58:f8: bb:65:d6:c3:a7:75:ce:cb:1d:60:d1:79:0c:4d:f6:8f:0a:ca: f9:5b:26:04:db:7f:74:94:fd:77:2b:97:df:5e:9d:d9:99:67: bc:c8:79:c0:0e:06:70:88:85:f8:b6:21:7f:cb:c2:86:1b:e8: ec:86:74:1c:33:c6:5e:74:29:e5:2d:de:f0:1a:f2:73:2e:99: 08:b4:4d:d5:bd:22:24:8e:6a:33:5a:08:0f:7a:36:82:67:b0: 61:df:e9:0f:bd:8b:97:65:60:fd:21:2d:dd:bd:c7:b5:d0:25: 47:e0:2b:d3:eb:3e:00:d5:b6:1c:7e:49:9f:0f:f2:eb:4d:d2: 99:85:cb:f2:a9:c1:35:1f:12:49:1f:a4:c2:7c:99:7b:9f:c4: 91:69:39:c8:74:67:87:e2:64:6a:cc:b4:8b:85:1a:b3:e0:f3: ed:d6:8b:89:7d:d3:6b:73:eb:6f:79:d6:41:4f:b1:19:a9:87: 61:71:5d:c7 -----BEGIN CERTIFICATE----- MIIFxDCCBKygAwIBAgICShcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwMzE0MDY0ODM4WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QzZDE0Ni0xYzk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/E5H6VCnB6p26ZMQiEsapHZJUcBUDfJYkdTen+gg9R2+yTS+X+nhYOZGKa3 eoQ2QXuyWuT/+1OGZivH6HjI3fOIOIjRhpbRtghaqT2ghCI4SFP84glnfPMP0MGx SXvAHKkjNP1RmpFi47zezxaib1LXcteQXAYEYFMdnJl9XBLuDe33G6TfwlC+ee4b 46KSWPAsCEso7JcCKjV+czbnviUIfuFuXGmrsqkfLRvY/BTl/QPTnB3+7Xq1uJ/k w9TKf5sOCducLdWamkq7ymFadru+F21EyBRn2R2/hlxBqph05QHlvrZZ+mZHr2ne TEflLwLB/tKDM1Eel85LTJbVZwIDAQABo4IC6DCCAuQwHQYDVR0OBBYEFEy5CkeE 3xuoyGkpRO01GM9v68kQMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRURGQzZFMDJC NkQ0MTFFRkIwM0NCQjY2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwcgYIKwYBBQUHAQcBAf8E YzBhMDwEAgABMDYDBAI7mdgDBAFnDEwDBAJnUVQDBAFnrZoDBAFnrf4DBAJntIQD BAFnt3ADBAFnuHADBAFnupIwIQQCAAIwGwMHACABDfBbQAMHACABDfBbwAMHACAB DfCQwDANBgkqhkiG9w0BAQsFAAOCAQEAUIA6ow4H6kbeh6/61iYFxPcmeh/xpBS0 i7n+kC1pWCBD3n48+nQzQxNjwap5x7vz6/W3wVEnmqaIHZ8eiEeHDUdwkNXMEFj4 u2XWw6d1zssdYNF5DE32jwrK+VsmBNt/dJT9dyuX316d2ZlnvMh5wA4GcIiF+LYh f8vChhvo7IZ0HDPGXnQp5S3e8Brycy6ZCLRN1b0iJI5qM1oID3o2gmewYd/pD72L l2Vg/SEt3b3HtdAlR+Ar0+s+ANW2HH5Jnw/y603SmYXL8qnBNR8SSR+kwnyZe5/E kWk5yHRnh+Jkasy0i4Uas+Dz7daLiX3Ta3Prb3nWQU+xGamHYXFdxw== -----END CERTIFICATE-----Generated at Sat Apr 5 14:33:23 2025 by rpki-client