$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/64EC59CEDF2411EFA00BDB4FC4F9AE02.roa File: 64EC59CEDF2411EFA00BDB4FC4F9AE02.roa (raw, json) Hash identifier: H1HWzgut8lU0XPCnQedAM4t9+dOyXy6ARxEEQgc3WGQ= Subject key identifier: 7D:0F:3B:D7:0A:4D:D4:AC:12:A1:E4:A6:A3:B6:1C:9D:B8:58:8B:EA Certificate issuer: /CN=A91A6F68/serialNumber=620D39B3A1837973BD13269F2B06AC9B2738820D Certificate serial: 02 Authority key identifier: 62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/64EC59CEDF2411EFA00BDB4FC4F9AE02.roa Signing time: Thu 30 Jan 2025 16:08:08 +0000 ROA not before: Thu 30 Jan 2025 16:08:08 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 18381 IP address blocks: 43.250.52.0/22 maxlen: 22 103.41.176.0/22 maxlen: 22 2406:4fc0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 07:04:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2 (0x2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A6F68 Validity Not Before: Jan 30 16:08:08 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=679ba3e7-64b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:8f:22:f3:9b:94:d7:5a:4c:a5:e4:48:0a:a4: 76:2c:a3:92:52:a0:b3:bb:4d:d5:55:e5:00:eb:98: 04:c7:74:f7:a1:93:f2:14:05:e8:19:5b:f1:37:c3: 38:50:7a:6c:b2:24:8d:a3:2c:6f:9d:66:75:f4:38: 22:fa:f0:e2:8f:a9:59:3b:06:ba:68:a2:6a:76:54: 6b:2b:2c:c9:c5:e7:c8:ba:5c:93:9a:3e:26:58:12: 3f:c1:73:20:89:fc:f3:59:64:d0:b6:10:07:d0:d5: b9:86:f9:d0:b6:d6:56:1c:a3:9b:fb:4c:21:a4:38: 3b:32:85:1e:8f:7f:05:e7:8a:85:68:71:40:db:69: 6a:7d:45:27:af:d5:a6:48:8b:1d:1d:88:b5:7b:11: 4b:0f:8c:fd:3e:0a:55:c5:0a:ee:27:fc:10:46:4b: 17:d6:ff:39:be:4d:7d:f2:94:0c:2e:3a:39:f9:ed: b4:ef:70:95:11:39:f9:c2:9b:23:42:b6:0e:b2:aa: 35:33:90:f1:ff:1d:47:72:e8:cf:13:c3:51:38:d3: f2:28:25:66:6e:a8:81:39:b9:d0:b3:91:f3:06:56: 73:9d:3f:8e:73:e2:de:e8:4b:29:12:8c:c0:65:f7: 6f:1a:2c:9e:cc:8f:0b:5c:b4:16:e0:20:df:30:e2: a3:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:0F:3B:D7:0A:4D:D4:AC:12:A1:E4:A6:A3:B6:1C:9D:B8:58:8B:EA X509v3 Authority Key Identifier: keyid:62:0D:39:B3:A1:83:79:73:BD:13:26:9F:2B:06:AC:9B:27:38:82:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/Yg05s6GDeXO9EyafKwasmyc4gg0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Yg05s6GDeXO9EyafKwasmyc4gg0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6F68/92E25962DF2111EF833F4F2CC4F9AE02/64EC59CEDF2411EFA00BDB4FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.52.0/22 103.41.176.0/22 IPv6: 2406:4fc0::/32 Signature Algorithm: sha256WithRSAEncryption 3f:68:e0:c5:ef:67:c5:72:7e:1f:0e:4c:c5:b2:e4:02:4f:e6: c6:8e:d4:7a:c0:7e:be:2c:c8:59:3f:08:98:18:c8:80:b7:c9: 6d:66:c2:17:e9:45:81:ed:ec:79:3a:35:07:6d:cc:00:8c:42: f4:bc:5c:1b:fb:02:de:cb:49:7d:d5:64:66:8c:a2:a9:2a:5b: d6:e5:6a:32:f5:02:0b:f3:f5:8b:69:a6:91:14:f8:94:40:ef: 9e:ff:e4:5c:4a:64:a5:9a:49:aa:5e:0b:d1:b3:0c:5d:e4:de: e2:32:92:1c:89:e7:ff:16:58:4f:f4:20:de:24:9f:1c:90:4b: 32:07:e9:7b:37:be:3b:29:7d:38:92:b1:f1:ab:c8:ac:4d:d5: 55:60:e3:99:f5:67:df:75:a7:6e:f5:40:79:07:1b:0a:3e:6c: 15:ee:1c:95:b2:c9:a6:15:2b:90:d3:75:02:82:66:ee:c3:72: 2d:03:db:fc:1a:e9:55:ca:a1:23:7e:2f:34:40:ba:89:22:25: ee:86:12:ec:08:64:31:2a:04:82:62:0e:a8:58:4c:8c:d5:e7: d9:54:f5:ab:9b:ea:c0:47:06:e2:78:9a:cb:92:a5:d2:0a:17: 3c:96:c2:52:e1:a0:d8:74:d8:2e:9b:09:1f:0b:9f:38:63:08: 72:5c:07:c6 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgIBAjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFB NkY2ODExMC8GA1UEBRMoNjIwRDM5QjNBMTgzNzk3M0JEMTMyNjlGMkIwNkFDOUIy NzM4ODIwRDAeFw0yNTAxMzAxNjA4MDhaFw0yNTEyMzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3OWJhM2U3LTY0YjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDijyLzm5TXWkyl5EgKpHYso5JSoLO7TdVV5QDrmATHdPehk/IUBegZW/E3wzhQ emyyJI2jLG+dZnX0OCL68OKPqVk7Brpoomp2VGsrLMnF58i6XJOaPiZYEj/BcyCJ /PNZZNC2EAfQ1bmG+dC21lYco5v7TCGkODsyhR6PfwXnioVocUDbaWp9RSev1aZI ix0diLV7EUsPjP0+ClXFCu4n/BBGSxfW/zm+TX3ylAwuOjn57bTvcJUROfnCmyNC tg6yqjUzkPH/HUdy6M8Tw1E40/IoJWZuqIE5udCzkfMGVnOdP45z4t7oSykSjMBl 928aLJ7MjwtctBbgIN8w4qOlAgMBAAGjggKqMIICpjAdBgNVHQ4EFgQUfQ871wpN 1KwSoeSmo7YcnbhYi+owHwYDVR0jBBgwFoAUYg05s6GDeXO9EyafKwasmyc4gg0w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUE2RjY4LzkyRTI1OTYyREYy MTExRUY4MzNGNEYyQ0M0RjlBRTAyL1lnMDVzNkdEZVhPOUV5YWZLd2FzbXljNGdn MC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvWWcwNXM2R0RlWE85RXlhZkt3YXNteWM0Z2cwLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NkY2OC85MkUyNTk2MkRGMjExMUVGODMzRjRGMkNDNEY5QUUwMi82NEVDNTlDRURG MjQxMUVGQTAwQkRCNEZDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDA0BggrBgEFBQcBBwEB/wQl MCMwEgQCAAEwDAMEAiv6NAMEAmcpsDANBAIAAjAHAwUAJAZPwDANBgkqhkiG9w0B AQsFAAOCAQEAP2jgxe9nxXJ+Hw5MxbLkAk/mxo7UesB+vizIWT8ImBjIgLfJbWbC F+lFge3seTo1B23MAIxC9LxcG/sC3stJfdVkZoyiqSpb1uVqMvUCC/P1i2mmkRT4 lEDvnv/kXEpkpZpJql4L0bMMXeTe4jKSHInn/xZYT/Qg3iSfHJBLMgfpeze+Oyl9 OJKx8avIrE3VVWDjmfVn33WnbvVAeQcbCj5sFe4clbLJphUrkNN1AoJm7sNyLQPb /BrpVcqhI34vNEC6iSIl7oYS7AhkMSoEgmIOqFhMjNXn2VT1q5vqwEcG4niay5Kl 0goXPJbCUuGg2HTYLpsJHwufOGMIclwHxg== -----END CERTIFICATE-----Generated at Sat Apr 5 04:15:41 2025 by rpki-client