$ rpki-client -vvf rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/65135058B2EF11EFA714C563C4F9AE02.roa File: 65135058B2EF11EFA714C563C4F9AE02.roa (raw, json) Hash identifier: 62l/l8lU212iq+Roz9xTejUk0OohrGP7WWkt2KZcnc8= Subject key identifier: DA:40:BD:D5:FC:DD:F3:98:BD:33:F6:58:5D:A9:C1:CA:FB:84:D2:A5 Certificate issuer: /CN=A91C55CE/serialNumber=828A47D3AC6E6B036011C23323170A9731BAD224 Certificate serial: 58 Authority key identifier: 82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/65135058B2EF11EFA714C563C4F9AE02.roa Signing time: Mon 24 Feb 2025 12:23:31 +0000 ROA not before: Mon 24 Feb 2025 12:23:31 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 62610 IP address blocks: 45.121.212.0/24 maxlen: 24 45.121.213.0/24 maxlen: 24 103.62.52.0/24 maxlen: 24 103.62.53.0/24 maxlen: 24 103.62.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 06:24:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 88 (0x58) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C55CE Validity Not Before: Feb 24 12:23:31 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67bc64c3-67e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:b1:80:52:32:7d:d6:6c:d3:75:cf:0f:eb:63: bf:91:43:12:8d:9b:ed:0c:df:1d:61:db:df:26:31: 3e:44:ea:1e:00:d7:0b:52:70:d8:0f:28:e3:ab:d2: 24:cd:ea:ab:00:94:be:22:aa:ff:64:30:91:93:d3: 6d:be:ac:75:f6:d7:40:1e:86:4f:45:09:bf:73:0a: ab:08:30:bf:42:bb:32:81:cb:00:3c:62:9f:e0:6e: 9f:4b:e6:37:b2:4f:86:e7:f6:38:74:aa:29:e8:00: 7a:f9:3b:08:7b:df:4e:ce:ca:e2:ea:62:16:6f:10: 09:e0:ec:41:85:26:e0:d4:c7:c4:a2:81:46:cb:be: 0d:b2:9b:ee:49:1e:43:36:45:e7:1b:52:5c:15:aa: f7:73:79:80:90:f3:a8:31:bb:f5:00:46:29:ee:ac: bb:58:a8:a9:29:e2:47:05:2b:98:aa:ec:3e:7e:9a: 34:35:c4:ff:4f:f0:cc:39:5c:0f:72:8a:fb:10:95: e9:3e:a5:a8:53:b4:77:26:fe:4c:f4:e5:15:e0:b3: 23:75:d9:d3:3b:df:f8:f0:8b:4f:04:90:78:6f:1b: c8:d9:08:7e:28:f2:56:51:2b:75:b6:66:da:a4:66: 4d:55:b9:1e:a4:c7:f1:a2:32:56:2e:f9:61:c3:d0: bf:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:40:BD:D5:FC:DD:F3:98:BD:33:F6:58:5D:A9:C1:CA:FB:84:D2:A5 X509v3 Authority Key Identifier: keyid:82:8A:47:D3:AC:6E:6B:03:60:11:C2:33:23:17:0A:97:31:BA:D2:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/gopH06xuawNgEcIzIxcKlzG60iQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gopH06xuawNgEcIzIxcKlzG60iQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C55CE/451A823A8B7B11EF8290327FC4F9AE02/65135058B2EF11EFA714C563C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.121.212.0/23 103.62.52.0-103.62.54.255 Signature Algorithm: sha256WithRSAEncryption 1e:7b:2b:e0:3e:61:aa:f4:78:2a:22:30:a4:b8:d8:a0:25:9d: ed:77:ae:10:b1:0a:25:48:46:74:63:03:42:b1:4f:7a:56:2f: bf:62:2b:61:e8:de:64:d6:4a:ad:1c:7b:54:10:de:c2:10:b3: 54:0c:d7:06:76:c0:7c:46:81:ea:38:f7:fc:8f:db:89:5d:d5: 2d:ae:64:f1:7a:b0:d3:2f:96:4a:74:95:ab:03:6c:31:47:70: 99:bd:eb:f4:72:7e:ac:4a:f0:3c:60:d8:64:f5:8c:bd:30:cc: 87:e7:69:b5:66:e6:4b:80:87:58:ce:fe:56:98:ea:67:7b:80: 56:80:47:17:a6:5a:e8:5b:d5:ea:b1:1f:91:2c:2b:64:67:61: 02:98:f9:e6:d2:fc:d0:ee:20:3d:61:cd:bd:33:8d:6e:ca:c5: 88:82:4e:1b:6e:45:41:a0:a8:c0:ea:2d:f8:03:4b:8a:43:2b: 28:9b:d7:c0:c3:6e:d4:2b:5b:6c:d9:81:84:1c:b4:96:6d:94: dc:06:56:50:46:99:69:b4:52:8b:3b:96:ab:79:27:d6:8f:32: 94:f8:a8:ad:7a:2e:4e:3a:1d:3b:d7:36:99:7d:35:36:e8:7a: 44:2d:02:b0:3e:11:4b:75:dd:b2:11:a8:f0:9e:7c:93:5f:34: f7:56:02:d2 -----BEGIN CERTIFICATE----- MIIFfjCCBGagAwIBAgIBWDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD NTVDRTExMC8GA1UEBRMoODI4QTQ3RDNBQzZFNkIwMzYwMTFDMjMzMjMxNzBBOTcz MUJBRDIyNDAeFw0yNTAyMjQxMjIzMzFaFw0yNTEwMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YmM2NGMzLTY3ZTgwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDgsYBSMn3WbNN1zw/rY7+RQxKNm+0M3x1h298mMT5E6h4A1wtScNgPKOOr0iTN 6qsAlL4iqv9kMJGT022+rHX210Aehk9FCb9zCqsIML9CuzKBywA8Yp/gbp9L5jey T4bn9jh0qinoAHr5Owh7307OyuLqYhZvEAng7EGFJuDUx8SigUbLvg2ym+5JHkM2 RecbUlwVqvdzeYCQ86gxu/UARinurLtYqKkp4kcFK5iq7D5+mjQ1xP9P8Mw5XA9y ivsQlek+pahTtHcm/kz05RXgsyN12dM73/jwi08EkHhvG8jZCH4o8lZRK3W2Ztqk Zk1VuR6kx/GiMlYu+WHD0L9dAgMBAAGjggKjMIICnzAdBgNVHQ4EFgQU2kC91fzd 85i9M/ZYXanByvuE0qUwHwYDVR0jBBgwFoAUgopH06xuawNgEcIzIxcKlzG60iQw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM1NUNFLzQ1MUE4MjNBOEI3 QjExRUY4MjkwMzI3RkM0RjlBRTAyL2dvcEgwNnh1YXdOZ0VjSXpJeGNLbHpHNjBp US5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZ29wSDA2eHVhd05nRWNJekl4Y0tsekc2MGlRLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD NTVDRS80NTFBODIzQThCN0IxMUVGODI5MDMyN0ZDNEY5QUUwMi82NTEzNTA1OEIy RUYxMUVGQTcxNEM1NjNDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAtBggrBgEFBQcBBwEB/wQe MBwwGgQCAAEwFAMEAS151DAMAwQCZz40AwQAZz42MA0GCSqGSIb3DQEBCwUAA4IB AQAeeyvgPmGq9HgqIjCkuNigJZ3td64QsQolSEZ0YwNCsU96Vi+/Yith6N5k1kqt HHtUEN7CELNUDNcGdsB8RoHqOPf8j9uJXdUtrmTxerDTL5ZKdJWrA2wxR3CZvev0 cn6sSvA8YNhk9Yy9MMyH52m1ZuZLgIdYzv5WmOpne4BWgEcXplroW9XqsR+RLCtk Z2ECmPnm0vzQ7iA9Yc29M41uysWIgk4bbkVBoKjA6i34A0uKQysom9fAw27UK1ts 2YGEHLSWbZTcBlZQRplptFKLO5areSfWjzKU+Kitei5OOh071zaZfTU26HpELQKw PhFLdd2yEajwnnyTXzT3VgLS -----END CERTIFICATE-----Generated at Sat Apr 5 19:23:20 2025 by rpki-client