$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DC4A492A4E6311EEBED9743CC4F9AE02.roa File: DC4A492A4E6311EEBED9743CC4F9AE02.roa (raw, json) Hash identifier: GMZ//QDkBiynojhpbrl7EytSa00iqEIB/AB0/Z7GlXI= Subject key identifier: 8A:F7:7F:D3:79:64:2E:09:40:EF:D5:FA:1E:37:C8:4A:01:6E:DC:E6 Certificate issuer: /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Certificate serial: 0A66 Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DC4A492A4E6311EEBED9743CC4F9AE02.roa Signing time: Wed 26 Mar 2025 19:59:56 +0000 ROA not before: Wed 26 Mar 2025 19:59:56 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 38566 IP address blocks: 203.78.204.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:32:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2662 (0xa66) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867 Validity Not Before: Mar 26 19:59:56 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e45cbc-90e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:70:b4:6d:8d:62:27:13:e9:57:db:6b:76:aa: 0d:6a:ad:33:82:2d:5f:59:2d:49:6d:4a:45:b4:3d: 0c:71:c0:bf:83:31:f7:fe:07:de:c4:a0:37:37:4c: 15:f5:f6:76:ba:82:0d:55:09:bc:fa:8b:cc:0b:8f: 28:ee:99:b8:c2:10:78:b2:79:4c:22:20:b7:f6:43: 26:c5:78:40:53:12:d7:9f:99:0c:16:50:f5:db:12: 2e:b2:cd:d5:87:64:47:af:de:dc:85:d0:f9:e2:ef: 48:77:9c:7f:24:b6:04:38:c7:ac:4d:c6:4b:39:9d: 79:c3:78:e7:39:59:c0:db:aa:87:52:97:22:37:ef: 24:bc:36:32:86:d2:b0:ee:c7:27:2e:3f:3b:99:59: 8c:9b:ea:42:ef:80:bb:f5:da:05:1a:fb:be:17:c3: 31:1e:68:d3:19:b1:74:7c:29:41:14:d2:30:bc:7b: a7:fc:a4:0b:78:18:db:05:25:a9:6e:44:c8:46:5a: 75:34:50:10:73:ef:fc:ed:35:b9:74:ac:8b:43:32: 1a:df:fb:a2:e9:1f:da:5e:a0:8e:be:6c:55:88:2a: 04:eb:ff:45:48:c1:1a:91:4e:d8:2b:c9:89:b2:f9: 32:ae:33:79:07:96:34:92:2d:2b:1e:9a:5e:27:ac: 7b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F7:7F:D3:79:64:2E:09:40:EF:D5:FA:1E:37:C8:4A:01:6E:DC:E6 X509v3 Authority Key Identifier: keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/DC4A492A4E6311EEBED9743CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.78.204.0/22 Signature Algorithm: sha256WithRSAEncryption 63:40:c9:76:2e:d9:6b:d9:36:9c:c3:8c:9f:8a:0d:75:53:05: 8b:7c:17:57:8f:c4:77:e0:47:07:40:e4:ad:ef:57:fb:aa:75: 56:dd:4e:63:ae:87:18:44:1b:ec:73:40:1a:36:49:9b:d4:de: 4a:2a:ce:7c:e0:fc:36:86:a3:ab:ec:bc:30:59:b9:94:40:05: c6:b7:03:26:e8:5e:bf:5c:b8:84:1c:5c:20:4f:16:13:0d:83: 14:42:d2:ba:32:cb:83:66:e3:18:9b:98:5e:f3:cf:44:0d:e6: 09:29:67:f3:0a:fa:d0:b6:ab:ef:e8:35:98:5c:b8:e3:4c:b4: 20:d7:14:d8:c7:85:d0:26:40:3e:1a:f5:5d:3f:e4:82:bf:cf: 94:fd:09:7a:87:ab:4f:e3:5c:ba:4e:74:eb:7d:a7:d0:29:ec: cf:c4:97:32:07:eb:33:c7:65:a1:8b:4f:1d:38:c3:25:bf:8e: 65:28:12:d8:07:74:9e:18:64:99:0e:a9:ab:56:c8:55:b0:d7: 56:e1:2d:c5:36:bf:10:57:c8:90:63:8d:1d:ca:3c:56:74:bf: ca:c6:dc:f1:c1:2f:dc:50:a5:21:9c:7f:9d:36:40:98:c8:a9: 33:d2:42:2c:a1:f3:dc:5c:c2:57:77:84:51:7c:ba:6a:da:e6: a8:25:2e:9a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCmYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkI0OTMxMTAvBgNVBAUTKDlBM0ZFNTQxMjJBNTA5NkQzRUREODgwNjBFRDREOTE4 M0NCRTE4NjcwHhcNMjUwMzI2MTk1OTU2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0NWNiYy05MGUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA23C0bY1iJxPpV9trdqoNaq0zgi1fWS1JbUpFtD0MccC/gzH3/gfexKA3N0wV 9fZ2uoINVQm8+ovMC48o7pm4whB4snlMIiC39kMmxXhAUxLXn5kMFlD12xIuss3V h2RHr97chdD54u9Id5x/JLYEOMesTcZLOZ15w3jnOVnA26qHUpciN+8kvDYyhtKw 7scnLj87mVmMm+pC74C79doFGvu+F8MxHmjTGbF0fClBFNIwvHun/KQLeBjbBSWp bkTIRlp1NFAQc+/87TW5dKyLQzIa3/ui6R/aXqCOvmxViCoE6/9FSMEakU7YK8mJ svkyrjN5B5Y0ki0rHppeJ6x7+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFIr3f9N5 ZC4JQO/V+h43yEoBbtzmMB8GA1UdIwQYMBaAFJo/5UEipQltPt2IBg7U2Rg8vhhn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQjQ5My81RkNBQjY3MjY4 RjMxMUVBODMyRERCMzdDNEY5QUUwMi9tal9sUVNLbENXMC0zWWdHRHRUWkdEeS1H R2MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL21qX2xRU0tsQ1cwLTNZZ0dEdFRaR0R5LUdHYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkI0OTMvNUZDQUI2NzI2OEYzMTFFQTgzMkREQjM3QzRGOUFFMDIvREM0QTQ5MkE0 RTYzMTFFRUJFRDk3NDNDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBALLTswwDQYJKoZIhvcNAQELBQADggEBAGNAyXYu2WvZNpzD jJ+KDXVTBYt8F1ePxHfgRwdA5K3vV/uqdVbdTmOuhxhEG+xzQBo2SZvU3koqznzg /DaGo6vsvDBZuZRABca3AyboXr9cuIQcXCBPFhMNgxRC0royy4Nm4xibmF7zz0QN 5gkpZ/MK+tC2q+/oNZhcuONMtCDXFNjHhdAmQD4a9V0/5IK/z5T9CXqHq0/jXLpO dOt9p9Ap7M/ElzIH6zPHZaGLTx04wyW/jmUoEtgHdJ4YZJkOqatWyFWw11bhLcU2 vxBXyJBjjR3KPFZ0v8rG3PHBL9xQpSGcf502QJjIqTPSQiyh89xcwld3hFF8umra 5qglLpo= -----END CERTIFICATE-----Generated at Tue Apr 22 13:43:24 2025 by rpki-client