$ rpki-client -vvf rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/277D6F8A92FC11EE9104E34AC4F9AE02.roa File: 277D6F8A92FC11EE9104E34AC4F9AE02.roa (raw, json) Hash identifier: Wi7YvY+uqX26r+/0mhOYTiciDH+ePecBn6bvYqY4Xgw= Subject key identifier: 1F:C6:46:3E:CE:12:F1:00:08:DE:A0:B8:7A:64:FB:2B:9C:A2:C5:BD Certificate issuer: /CN=A91C911D/serialNumber=475B62A5F233ED05AC72D8781234E109BF3A908C Certificate serial: 06C8 Authority key identifier: 47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/277D6F8A92FC11EE9104E34AC4F9AE02.roa Signing time: Wed 02 Apr 2025 22:23:58 +0000 ROA not before: Wed 02 Apr 2025 22:23:58 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 45158 IP address blocks: 103.251.172.0/22 maxlen: 23 120.29.240.0/21 maxlen: 21 120.29.245.0/24 maxlen: 24 120.29.246.0/24 maxlen: 24 2407:1e00::/32 maxlen: 32 2407:1e00::/33 maxlen: 40 2407:1e00:1003::/48 maxlen: 48 2407:1e00:8000::/33 maxlen: 37 2407:1e00:8000::/34 maxlen: 40 2407:1e00:c000::/35 maxlen: 40 2407:1e00:e000::/36 maxlen: 40 2407:1e00:f000::/37 maxlen: 40 2407:1e00:f800::/38 maxlen: 38 2407:1e00:f800::/39 maxlen: 39 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:25:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1736 (0x6c8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C911D Validity Not Before: Apr 2 22:23:58 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67edb8fe-d856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:74:ee:06:e0:ad:76:fd:86:8b:65:c3:4a: a4:14:84:6f:ab:89:03:cf:d9:44:6f:ee:54:b8:f8: f0:1a:a1:3b:30:47:e5:07:2b:31:95:fd:ae:05:e9: 3c:43:f5:66:bb:b4:b5:ca:c8:f5:b3:f1:c2:6c:df: 0d:7f:6f:fd:5f:61:4b:fa:4c:25:ff:92:59:eb:31: 83:d2:61:14:07:d7:6f:c6:08:3b:3e:da:f3:4d:90: 15:92:cc:83:71:30:78:2c:cb:3b:94:e7:d4:c7:db: 08:e2:c4:3c:5b:ae:10:ea:54:41:fd:02:b4:61:a0: 4b:07:51:78:c7:55:f1:a2:5d:1a:71:37:16:4f:13: f4:80:b9:86:d7:0b:f2:fe:6d:3a:6d:10:41:b4:e7: 82:8e:c5:48:7b:46:5c:ef:d9:43:e1:a0:e1:d7:71: 27:24:45:57:5c:22:9b:a8:46:bd:fc:58:21:87:a3: 9d:ee:37:ab:fb:52:53:89:cc:10:42:6e:f3:e3:46: d5:f9:68:8e:14:b3:49:ec:08:e8:4c:b1:98:4d:47: 0d:75:fb:59:b1:b1:03:d7:71:dd:34:88:a6:8d:03: 59:37:3d:2e:72:ba:1e:dd:fa:03:3b:05:c8:eb:7f: af:85:5c:54:8c:eb:52:27:53:97:32:64:5a:fd:09: 9c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:C6:46:3E:CE:12:F1:00:08:DE:A0:B8:7A:64:FB:2B:9C:A2:C5:BD X509v3 Authority Key Identifier: keyid:47:5B:62:A5:F2:33:ED:05:AC:72:D8:78:12:34:E1:09:BF:3A:90:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/R1tipfIz7QWscth4EjThCb86kIw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1tipfIz7QWscth4EjThCb86kIw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C911D/7B13B3846C0311EB8844784BC4F9AE02/277D6F8A92FC11EE9104E34AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.251.172.0/22 120.29.240.0/21 IPv6: 2407:1e00::/32 Signature Algorithm: sha256WithRSAEncryption 68:8f:2f:83:82:6e:9a:89:f2:48:e0:d4:46:de:2b:9f:89:fb: 76:c9:5f:13:fd:6f:15:80:84:19:ff:8a:ec:e4:30:be:b4:db: 0c:ab:85:22:8f:51:b0:dc:7c:a4:b6:ee:da:13:a2:f2:b7:54: e9:e0:5d:ee:f8:45:84:d0:7e:f4:ef:c5:b2:ed:0f:c3:68:6f: 1f:1a:40:0d:d2:df:9c:46:72:29:55:9f:ee:da:6d:40:ae:f7: 64:7b:dc:80:14:20:58:bf:d3:f6:e4:15:55:d0:40:4f:0c:82: 63:8d:b4:53:8a:ba:07:c0:f7:b4:e6:3f:9b:09:72:ca:69:95: 82:21:a7:2d:ca:de:60:2f:77:2d:e4:ca:f9:fb:0c:be:a7:7b: 45:7a:3a:bb:58:d8:34:d8:2b:28:ed:f5:ac:41:26:7e:46:b3: b7:9d:5f:3e:18:99:08:4c:78:f1:5e:fe:39:64:ee:7d:ce:82: e1:48:05:23:8c:0e:c8:49:8c:23:b4:fc:38:0f:bd:cb:fc:da: b2:e1:8d:50:b1:89:b5:48:e1:06:70:84:54:1b:f6:36:cc:b0: 9c:eb:70:3b:19:8b:12:dd:1f:a8:11:5f:63:de:84:55:62:47: 9a:78:84:74:2f:fc:71:86:af:05:1d:ab:9c:75:06:92:3b:5e: 1a:01:52:0c -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBsgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzkxMUQxMTAvBgNVBAUTKDQ3NUI2MkE1RjIzM0VEMDVBQzcyRDg3ODEyMzRFMTA5 QkYzQTkwOEMwHhcNMjUwNDAyMjIyMzU4WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkYjhmZS1kODU2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxjp07gbgrXb9hotlw0qkFIRvq4kDz9lEb+5UuPjwGqE7MEflBysxlf2uBek8 Q/Vmu7S1ysj1s/HCbN8Nf2/9X2FL+kwl/5JZ6zGD0mEUB9dvxgg7PtrzTZAVksyD cTB4LMs7lOfUx9sI4sQ8W64Q6lRB/QK0YaBLB1F4x1Xxol0acTcWTxP0gLmG1wvy /m06bRBBtOeCjsVIe0Zc79lD4aDh13EnJEVXXCKbqEa9/Fghh6Od7jer+1JTicwQ Qm7z40bV+WiOFLNJ7AjoTLGYTUcNdftZsbED13HdNIimjQNZNz0ucroe3foDOwXI 63+vhVxUjOtSJ1OXMmRa/QmcSwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFB/GRj7O EvEACN6guHpk+yucosW9MB8GA1UdIwQYMBaAFEdbYqXyM+0FrHLYeBI04Qm/OpCM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDOTExRC83QjEzQjM4NDZD MDMxMUVCODg0NDc4NEJDNEY5QUUwMi9SMXRpcGZJejdRV3NjdGg0RWpUaENiODZr SXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1IxdGlwZkl6N1FXc2N0aDRFalRoQ2I4NmtJdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzkxMUQvN0IxM0IzODQ2QzAzMTFFQjg4NDQ3ODRCQzRGOUFFMDIvMjc3RDZGOEE5 MkZDMTFFRTkxMDRFMzRBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAJn+6wDBAN4HfAwDQQCAAIwBwMFACQHHgAwDQYJKoZIhvcN AQELBQADggEBAGiPL4OCbpqJ8kjg1EbeK5+J+3bJXxP9bxWAhBn/iuzkML602wyr hSKPUbDcfKS27toTovK3VOngXe74RYTQfvTvxbLtD8Nobx8aQA3S35xGcilVn+7a bUCu92R73IAUIFi/0/bkFVXQQE8MgmONtFOKugfA97TmP5sJcspplYIhpy3K3mAv dy3kyvn7DL6ne0V6OrtY2DTYKyjt9axBJn5Gs7edXz4YmQhMePFe/jlk7n3OguFI BSOMDshJjCO0/DgPvcv82rLhjVCxibVI4QZwhFQb9jbMsJzrcDsZixLdH6gRX2Pe hFViR5p4hHQv/HGGrwUdq5x1BpI7XhoBUgw= -----END CERTIFICATE-----Generated at Sun Apr 6 16:35:21 2025 by rpki-client