$ rpki-client -vvf rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/46602E62E99D11EFB8E6881DC4F9AE02.roa File: 46602E62E99D11EFB8E6881DC4F9AE02.roa (raw, json) Hash identifier: N2mU+Nf+OkWsydJNTigowac6C/kadZEo42ZXOPhaxXU= Subject key identifier: 16:E2:9E:34:AC:34:DF:DE:82:D5:0B:85:02:8B:44:0B:9F:62:23:52 Certificate issuer: /CN=A91D41AC/serialNumber=BF98688E98B01E84D7366F67864CE8F3EBBD4377 Certificate serial: 0D Authority key identifier: BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/46602E62E99D11EFB8E6881DC4F9AE02.roa Signing time: Thu 13 Feb 2025 00:17:38 +0000 ROA not before: Thu 13 Feb 2025 00:17:38 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135513 IP address blocks: 43.252.124.0/22 maxlen: 24 103.9.52.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13 (0xd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D41AC Validity Not Before: Feb 13 00:17:38 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67ad3a21-e6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:a6:57:a6:ee:88:7f:67:88:7e:8b:3a:9e: e6:8c:54:21:4a:b2:33:9c:88:11:d4:3f:29:82:f0: a5:30:f5:9e:fc:fb:20:7f:65:47:09:92:58:61:d1: 9b:45:d9:a4:a6:6c:c0:cf:84:51:18:40:ca:83:c2: 4a:94:fe:13:70:a2:6c:67:13:9d:cf:ad:ab:92:dc: 1e:6a:5a:eb:2b:cc:8a:c0:95:06:89:4e:60:dc:a7: 43:94:95:7c:88:48:25:5d:ca:aa:4a:bf:ee:fd:a4: 34:e5:8c:2e:b0:7d:d9:74:b3:62:36:b4:df:f0:65: 83:6c:f6:47:b8:71:e4:b0:8a:d2:6a:82:01:db:c9: 3c:39:c5:66:48:79:03:58:b6:bd:17:d2:3f:a9:09: 7f:c8:be:91:09:93:04:36:ea:ea:1f:71:bf:91:5f: 71:29:32:ed:88:f5:d5:83:4e:4c:bf:1a:10:b6:9a: 89:b9:63:84:fb:16:e8:7f:ae:46:ff:29:ce:35:91: 7d:ef:78:88:fe:3c:b1:f2:b5:ac:fc:8a:f9:e1:06: 3a:b0:3a:18:6b:0a:31:6f:68:09:cd:4d:81:b8:e4: 84:e3:35:2f:dc:ba:2f:03:0a:ea:95:dc:00:46:e3: 2d:d9:d9:14:0f:18:3e:56:a4:25:12:8a:d2:70:1d: c1:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E2:9E:34:AC:34:DF:DE:82:D5:0B:85:02:8B:44:0B:9F:62:23:52 X509v3 Authority Key Identifier: keyid:BF:98:68:8E:98:B0:1E:84:D7:36:6F:67:86:4C:E8:F3:EB:BD:43:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/v5hojpiwHoTXNm9nhkzo8-u9Q3c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/v5hojpiwHoTXNm9nhkzo8-u9Q3c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D41AC/2445BCE2E93F11EF8DF1E035C4F9AE02/46602E62E99D11EFB8E6881DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.124.0/22 103.9.52.0/22 Signature Algorithm: sha256WithRSAEncryption 77:15:0e:ee:52:47:44:ab:b8:c6:85:8e:dd:c3:f7:19:2b:be: 97:02:e0:a9:bc:78:56:9b:85:3c:42:5d:cc:82:ea:af:a4:0b: 0a:47:4e:c8:20:82:31:e4:ff:86:af:87:b5:c1:93:fd:18:29: b1:71:eb:e0:aa:e7:84:1f:cb:ec:9d:ed:55:85:83:fb:ad:d6: 64:66:df:23:5b:f5:74:2e:e5:03:29:77:f6:2c:82:63:59:f7: 2e:fb:4e:a2:eb:20:ae:61:33:16:fc:4e:c4:f5:55:72:77:26: a5:a4:2f:a7:87:0b:2a:ee:9a:bc:34:bc:69:c9:7a:f3:02:83: 5a:de:c5:5e:32:8a:09:87:a1:52:f3:58:28:ca:e9:b9:a2:55: aa:9a:0b:68:8e:23:ed:36:5b:1c:e7:97:00:29:24:2f:3f:1f: 98:b5:54:5c:0e:8d:47:9f:a2:f0:1a:df:26:a0:b5:ef:5d:ed: c5:4b:c9:63:70:6d:f6:73:36:e8:76:a5:05:fe:9c:cd:f5:ad: 80:a1:40:41:24:b0:c7:82:b2:9c:b5:52:d0:99:de:8b:55:24: 85:2c:a6:5e:92:12:c6:1f:0f:cc:12:9f:d0:1c:ba:04:c8:b9: 20:92:a9:9c:5f:5a:cb:1b:db:5b:91:37:47:3e:29:e5:8a:8a: 3b:39:ce:04 -----BEGIN CERTIFICATE----- MIIFdjCCBF6gAwIBAgIBDTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NDFBQzExMC8GA1UEBRMoQkY5ODY4OEU5OEIwMUU4NEQ3MzY2RjY3ODY0Q0U4RjNF QkJENDM3NzAeFw0yNTAyMTMwMDE3MzhaFw0yNjA1MjgwMDAwMDBaMBgxFjAUBgNV BAMTDTY3YWQzYTIxLWU2YzkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQDNH6ZXpu6If2eIfos6nuaMVCFKsjOciBHUPymC8KUw9Z78+yB/ZUcJklhh0ZtF 2aSmbMDPhFEYQMqDwkqU/hNwomxnE53PrauS3B5qWusrzIrAlQaJTmDcp0OUlXyI SCVdyqpKv+79pDTljC6wfdl0s2I2tN/wZYNs9ke4ceSwitJqggHbyTw5xWZIeQNY tr0X0j+pCX/IvpEJkwQ26uofcb+RX3EpMu2I9dWDTky/GhC2mom5Y4T7Fuh/rkb/ Kc41kX3veIj+PLHytaz8ivnhBjqwOhhrCjFvaAnNTYG45ITjNS/cui8DCuqV3ABG 4y3Z2RQPGD5WpCUSitJwHcEHAgMBAAGjggKbMIIClzAdBgNVHQ4EFgQUFuKeNKw0 396C1QuFAotEC59iI1IwHwYDVR0jBBgwFoAUv5hojpiwHoTXNm9nhkzo8+u9Q3cw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ0MUFDLzI0NDVCQ0UyRTkz RjExRUY4REYxRTAzNUM0RjlBRTAyL3Y1aG9qcGl3SG9UWE5tOW5oa3pvOC11OVEz Yy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvdjVob2pwaXdIb1RYTm05bmhrem84LXU5UTNjLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NDFBQy8yNDQ1QkNFMkU5M0YxMUVGOERGMUUwMzVDNEY5QUUwMi80NjYwMkU2MkU5 OUQxMUVGQjhFNjg4MURDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAlBggrBgEFBQcBBwEB/wQW MBQwEgQCAAEwDAMEAiv8fAMEAmcJNDANBgkqhkiG9w0BAQsFAAOCAQEAdxUO7lJH RKu4xoWO3cP3GSu+lwLgqbx4VpuFPEJdzILqr6QLCkdOyCCCMeT/hq+HtcGT/Rgp sXHr4KrnhB/L7J3tVYWD+63WZGbfI1v1dC7lAyl39iyCY1n3LvtOousgrmEzFvxO xPVVcncmpaQvp4cLKu6avDS8acl68wKDWt7FXjKKCYehUvNYKMrpuaJVqpoLaI4j 7TZbHOeXACkkLz8fmLVUXA6NR5+i8BrfJqC1713txUvJY3Bt9nM26HalBf6czfWt gKFAQSSwx4KynLVS0Jnei1UkhSymXpISxh8PzBKf0By6BMi5IJKpnF9ayxvbW5E3 Rz4p5YqKOznOBA== -----END CERTIFICATE-----Generated at Sat Apr 5 02:07:54 2025 by rpki-client