$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa File: 2CC5D50CDEC911EBA828524CC4F9AE02.roa (raw, json) Hash identifier: 6ikKO6mfXRBRmgTIVMuW6RtmQkhRBMlzw4JjoQkAAdA= Subject key identifier: EE:84:C0:7C:5E:7E:F4:E7:0F:22:02:A7:6C:B0:1C:70:7E:6D:4C:81 Certificate issuer: /CN=A91ACBB7/serialNumber=746241ADA77DDBDFEA0FE144EFE21391E3FC4FD9 Certificate serial: 0CB1 Authority key identifier: 74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa Signing time: Fri 28 Mar 2025 18:29:39 +0000 ROA not before: Fri 28 Mar 2025 18:29:39 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 63969 IP address blocks: 45.114.84.0/22 maxlen: 24 103.54.36.0/22 maxlen: 24 2403:41c0::/32 maxlen: 36 2403:41c0:1a::/48 maxlen: 48 2403:41c0:2a::/48 maxlen: 48 2403:41c0:3a::/48 maxlen: 48 2403:41c0:41::/48 maxlen: 48 2403:41c0:fc00::/48 maxlen: 48 2403:41c0:fc05::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:19:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3249 (0xcb1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ACBB7 Validity Not Before: Mar 28 18:29:39 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e6ea92-e320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d2:d0:d3:3d:7d:9f:f4:04:4a:f4:16:16:70: 37:d5:62:1d:3f:be:de:8b:a3:ce:a3:c6:12:2a:bc: 89:ff:f6:04:11:40:33:20:2b:1a:4e:78:17:5c:78: 9f:ca:c2:67:17:9d:c6:2c:9a:9d:eb:f8:65:5f:67: ea:6a:1f:94:62:74:4f:33:70:d7:7d:bb:40:ca:a3: 8d:11:11:39:dc:cd:23:d1:45:d7:78:2b:fe:91:ee: 36:ff:78:00:85:fc:79:89:89:9c:7e:a9:15:f3:98: 35:01:09:8e:39:0c:ef:51:74:f0:a0:74:df:7b:ad: db:b2:c0:28:11:33:67:22:af:5e:1a:76:5b:cb:3a: 15:6c:af:7f:5b:98:a9:3d:d0:d6:71:a9:64:fd:94: a2:ed:17:c0:22:cc:4b:1b:79:b3:88:b6:be:04:60: b3:7a:74:c2:74:e2:55:db:f7:73:ec:33:1a:df:7f: 06:73:88:10:b5:22:cf:d1:97:ae:d5:3b:56:17:4a: 60:d7:f0:ec:cc:b4:f6:66:65:c4:53:ab:9a:4f:3f: 87:38:39:62:8b:55:4a:3f:76:14:35:fa:79:85:e5: c6:5d:cd:71:60:3a:e2:db:aa:93:66:0f:74:d7:a8: 0c:56:79:26:60:2f:bf:7d:6d:dc:ba:74:0f:ee:b2: b3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:84:C0:7C:5E:7E:F4:E7:0F:22:02:A7:6C:B0:1C:70:7E:6D:4C:81 X509v3 Authority Key Identifier: keyid:74:62:41:AD:A7:7D:DB:DF:EA:0F:E1:44:EF:E2:13:91:E3:FC:4F:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/dGJBrad929_qD-FE7-ITkeP8T9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dGJBrad929_qD-FE7-ITkeP8T9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACBB7/5E1FCEBCF3F911E9B8A8310AC4F9AE02/2CC5D50CDEC911EBA828524CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.84.0/22 103.54.36.0/22 IPv6: 2403:41c0::/32 Signature Algorithm: sha256WithRSAEncryption 55:17:91:53:15:1b:8c:4a:58:a6:e1:24:8d:a3:76:b7:00:04: d9:db:21:a5:a1:d0:3a:66:db:04:1a:92:f6:dd:ec:82:08:d2: 7e:c5:52:12:d9:31:64:dc:b3:51:30:38:97:34:1d:1c:c0:f4: 71:39:5d:ca:2e:a4:3c:60:9d:55:bc:08:f3:23:38:12:bd:53: 63:0c:b7:6f:d1:c8:74:17:6b:01:65:0e:7e:79:3f:1e:03:f9: 4c:a8:79:8e:98:15:fb:23:b7:6f:45:ce:90:74:85:c4:4f:3a: e3:bb:b1:33:6f:c6:b4:bb:1c:1a:52:0b:b0:9c:bc:a8:bb:4e: 79:7f:ab:7a:82:68:65:c3:16:de:18:fb:99:9a:25:3c:50:21: a7:af:2b:b0:6b:09:24:0e:92:78:45:32:a6:71:22:d4:c1:54: 9f:80:6e:6d:77:ae:36:38:1d:66:0e:f6:41:62:80:37:19:e9: 59:0c:3a:4c:21:82:a2:48:b1:17:d6:a1:0a:b5:8b:0f:f4:67: 73:32:31:3c:6d:d2:ef:1c:6b:6c:6d:15:4d:ad:ac:7f:36:30: ca:a9:58:fc:96:cd:96:ec:85:12:ed:6c:01:41:a1:81:31:e0: 71:ee:fb:e3:ac:4d:55:a1:96:28:fe:e9:ef:cd:10:26:c5:55: eb:67:88:58 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICDLEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUNCQjcxMTAvBgNVBAUTKDc0NjI0MUFEQTc3RERCREZFQTBGRTE0NEVGRTIxMzkx RTNGQzRGRDkwHhcNMjUwMzI4MTgyOTM5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U2ZWE5Mi1lMzIwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA39LQ0z19n/QESvQWFnA31WIdP77ei6POo8YSKryJ//YEEUAzICsaTngXXHif ysJnF53GLJqd6/hlX2fqah+UYnRPM3DXfbtAyqONERE53M0j0UXXeCv+ke42/3gA hfx5iYmcfqkV85g1AQmOOQzvUXTwoHTfe63bssAoETNnIq9eGnZbyzoVbK9/W5ip PdDWcalk/ZSi7RfAIsxLG3mziLa+BGCzenTCdOJV2/dz7DMa338Gc4gQtSLP0Zeu 1TtWF0pg1/DszLT2ZmXEU6uaTz+HODlii1VKP3YUNfp5heXGXc1xYDri26qTZg90 16gMVnkmYC+/fW3cunQP7rKzkwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFO6EwHxe fvTnDyICp2ywHHB+bUyBMB8GA1UdIwQYMBaAFHRiQa2nfdvf6g/hRO/iE5Hj/E/Z MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQ0JCNy81RTFGQ0VCQ0Yz RjkxMUU5QjhBODMxMEFDNEY5QUUwMi9kR0pCcmFkOTI5X3FELUZFNy1JVGtlUDhU OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2RHSkJyYWQ5MjlfcUQtRkU3LUlUa2VQOFQ5ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUNCQjcvNUUxRkNFQkNGM0Y5MTFFOUI4QTgzMTBBQzRGOUFFMDIvMkNDNUQ1MENE RUM5MTFFQkE4Mjg1MjRDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItclQDBAJnNiQwDQQCAAIwBwMFACQDQcAwDQYJKoZIhvcN AQELBQADggEBAFUXkVMVG4xKWKbhJI2jdrcABNnbIaWh0Dpm2wQakvbd7III0n7F UhLZMWTcs1EwOJc0HRzA9HE5XcoupDxgnVW8CPMjOBK9U2MMt2/RyHQXawFlDn55 Px4D+UyoeY6YFfsjt29FzpB0hcRPOuO7sTNvxrS7HBpSC7CcvKi7Tnl/q3qCaGXD Ft4Y+5maJTxQIaevK7BrCSQOknhFMqZxItTBVJ+Abm13rjY4HWYO9kFigDcZ6VkM OkwhgqJIsRfWoQq1iw/0Z3MyMTxt0u8ca2xtFU2trH82MMqpWPyWzZbshRLtbAFB oYEx4HHu++OsTVWhlij+6e/NECbFVetniFg= -----END CERTIFICATE-----Generated at Sun Apr 6 00:34:09 2025 by rpki-client