$ rpki-client -vvf rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa File: 45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa (raw, json) Hash identifier: CcUp55XuDgPxaWMypNloisBK2Ub48xmWh//qSjTOE5A= Subject key identifier: 0F:65:67:1A:61:EE:86:4D:A9:53:28:EB:15:CD:B7:96:AD:F7:D1:81 Certificate issuer: /CN=A91D65E6/serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985 Certificate serial: C1 Authority key identifier: EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa Signing time: Fri 11 Apr 2025 05:11:26 +0000 ROA not before: Fri 11 Apr 2025 05:11:25 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152675 IP address blocks: 203.62.244.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 05:11:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 193 (0xc1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D65E6, serialNumber=EBF775FB6B2D2B3F803C3F336B8300A8BE6BE985 Validity Not Before: Apr 11 05:11:25 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f8a47d-23b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:bb:29:45:e8:87:4b:f1:38:21:53:17:ad:5a: bd:b1:7a:84:2b:45:f3:a1:6f:1c:63:a6:58:e1:0e: fd:85:8a:a3:8f:f0:13:56:e2:5f:2e:53:29:c2:89: 7e:15:c9:79:28:d0:48:33:b7:d1:e3:1e:a0:4d:e2: 53:84:49:a7:51:8d:b5:0b:48:ca:93:3d:92:70:aa: ff:b0:9b:9f:66:f0:60:f4:19:1a:69:a8:d8:cd:bd: f6:1f:ec:f1:42:bf:be:8d:9a:48:a1:f5:1d:cb:7d: 59:49:3c:57:5b:31:3b:41:b3:33:2c:50:1c:d3:7a: 3d:22:24:3e:00:b6:61:bb:fd:b9:fa:fe:5e:5d:c4: 8e:c5:33:a3:63:ca:e0:4f:34:df:d4:6b:3b:e2:23: 51:86:ba:cd:04:2d:a3:d2:2d:35:b4:17:3b:b7:4c: 0c:26:3e:a5:46:41:cf:ea:44:71:f6:75:ba:e2:c2: 32:ad:a3:57:ed:03:fc:ae:b7:f0:c0:84:9f:8e:47: ff:ad:51:2a:54:b7:35:f6:d9:ce:81:6a:0f:16:35: 1c:2c:68:0b:61:5e:dc:b1:e6:36:32:d7:d2:c3:61: 9d:e3:73:88:28:0b:50:3a:eb:c2:81:45:d9:3f:c7: bf:89:c8:60:5f:03:da:23:2c:eb:35:66:66:5f:ae: db:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:65:67:1A:61:EE:86:4D:A9:53:28:EB:15:CD:B7:96:AD:F7:D1:81 X509v3 Authority Key Identifier: keyid:EB:F7:75:FB:6B:2D:2B:3F:80:3C:3F:33:6B:83:00:A8:BE:6B:E9:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/6_d1-2stKz-APD8za4MAqL5r6YU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6_d1-2stKz-APD8za4MAqL5r6YU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D65E6/A84BC3B8F0A911EEAE72F02EC4F9AE02/45BE9530F0AA11EE8FBA4E4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.62.244.0/23 Signature Algorithm: sha256WithRSAEncryption 35:be:be:f6:fe:4c:1f:76:7a:82:7a:25:d7:20:6a:a8:2b:06: 73:72:fe:09:a8:65:4b:1f:5b:48:27:25:7e:63:8f:c6:1d:be: cc:ef:b6:b4:22:1e:29:c2:68:26:76:b7:ea:2b:77:9b:f8:df: 01:3d:38:a1:07:00:2f:9d:31:de:42:4e:0e:b1:a9:2c:55:ad: 1f:63:a3:ee:01:3d:ad:f2:66:69:65:98:8f:74:40:1b:d2:f9: d0:58:54:c8:18:63:ae:b5:09:94:89:7e:b1:59:90:bc:7e:26: 1c:08:1d:52:ef:98:36:7b:32:4c:41:c4:86:0c:e2:6d:75:13: 87:d5:4c:9f:b6:f4:3f:87:9d:24:ea:a3:1f:eb:cb:35:79:47: 91:d4:06:ce:4a:43:da:0e:de:ac:48:ce:d4:05:13:79:92:86: 32:6b:51:99:11:a4:1c:0a:b3:46:f5:c8:40:43:cb:8a:f7:81: 6c:ec:bc:39:1d:6e:4f:a4:16:ed:a1:b4:4d:c0:b7:a9:97:65: 22:77:07:93:16:1a:ca:e8:a5:a7:aa:93:db:b6:62:2a:e0:c7: a1:d7:b2:3d:71:08:6e:e0:23:63:87:5b:b7:35:82:8d:6a:f0: 15:69:65:48:b6:23:1a:81:dc:ad:12:2b:96:dc:88:f1:96:9d: 8d:0b:fc:b6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDY1RTYxMTAvBgNVBAUTKEVCRjc3NUZCNkIyRDJCM0Y4MDNDM0YzMzZCODMwMEE4 QkU2QkU5ODUwHhcNMjUwNDExMDUxMTI1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y4YTQ3ZC0yM2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzrspReiHS/E4IVMXrVq9sXqEK0XzoW8cY6ZY4Q79hYqjj/ATVuJfLlMpwol+ Fcl5KNBIM7fR4x6gTeJThEmnUY21C0jKkz2ScKr/sJufZvBg9BkaaajYzb32H+zx Qr++jZpIofUdy31ZSTxXWzE7QbMzLFAc03o9IiQ+ALZhu/25+v5eXcSOxTOjY8rg TzTf1Gs74iNRhrrNBC2j0i01tBc7t0wMJj6lRkHP6kRx9nW64sIyraNX7QP8rrfw wISfjkf/rVEqVLc19tnOgWoPFjUcLGgLYV7cseY2MtfSw2Gd43OIKAtQOuvCgUXZ P8e/ichgXwPaIyzrNWZmX67b6wIDAQABo4IClTCCApEwHQYDVR0OBBYEFA9lZxph 7oZNqVMo6xXNt5at99GBMB8GA1UdIwQYMBaAFOv3dftrLSs/gDw/M2uDAKi+a+mF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENjVFNi9BODRCQzNCOEYw QTkxMUVFQUU3MkYwMkVDNEY5QUUwMi82X2QxLTJzdEt6LUFQRDh6YTRNQXFMNXI2 WVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZfZDEtMnN0S3otQVBEOHphNE1BcUw1cjZZVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDY1RTYvQTg0QkMzQjhGMEE5MTFFRUFFNzJGMDJFQzRGOUFFMDIvNDVCRTk1MzBG MEFBMTFFRThGQkE0RTREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAHLPvQwDQYJKoZIhvcNAQELBQADggEBADW+vvb+TB92eoJ6 JdcgaqgrBnNy/gmoZUsfW0gnJX5jj8YdvszvtrQiHinCaCZ2t+ord5v43wE9OKEH AC+dMd5CTg6xqSxVrR9jo+4BPa3yZmllmI90QBvS+dBYVMgYY661CZSJfrFZkLx+ JhwIHVLvmDZ7MkxBxIYM4m11E4fVTJ+29D+HnSTqox/ryzV5R5HUBs5KQ9oO3qxI ztQFE3mShjJrUZkRpBwKs0b1yEBDy4r3gWzsvDkdbk+kFu2htE3At6mXZSJ3B5MW Gsropaeqk9u2Yirgx6HXsj1xCG7gI2OHW7c1go1q8BVpZUi2IxqB3K0SK5bciPGW nY0L/LY= -----END CERTIFICATE-----Generated at Sat Apr 12 20:47:41 2025 by rpki-client