$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/6E491F58A79211EFABD45B2BC4F9AE02.roa File: 6E491F58A79211EFABD45B2BC4F9AE02.roa (raw, json) Hash identifier: 4yChjAOymmSkEPhh7M5JKpyE3kPRApCvS6UuytNeeUE= Subject key identifier: 9B:B7:13:55:D4:B8:40:82:E8:10:4B:2E:3B:05:D6:FC:BE:A6:E6:25 Certificate issuer: /CN=A91D6C1B/serialNumber=2CFB0CEF6D16D6676EEA211643EC8E85C25CF2FF Certificate serial: 2E Authority key identifier: 2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/6E491F58A79211EFABD45B2BC4F9AE02.roa Signing time: Wed 15 Jan 2025 06:09:25 +0000 ROA not before: Wed 15 Jan 2025 06:09:25 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 153451 IP address blocks: 203.23.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 05:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46 (0x2e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D6C1B Validity Not Before: Jan 15 06:09:25 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67875115-bcc5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:7c:37:cf:38:3e:9d:9b:ae:c6:ca:89:7c:cf: 4d:df:a7:93:fe:c6:56:88:6e:fc:2f:0a:75:d7:3b: b1:a5:d2:42:a6:74:2b:25:98:93:99:1c:27:e3:7f: 99:98:4a:ec:f5:89:58:ab:eb:9d:f5:15:41:2d:4c: 79:c6:73:87:1b:51:dd:7d:a3:f1:f6:81:97:e5:4b: 93:07:84:3c:1e:42:35:20:10:94:44:4f:f3:98:e6: 10:dd:ae:d8:33:8a:c3:03:7c:c9:f8:a1:20:14:cd: 25:3c:6f:2a:fd:84:71:88:10:4c:b5:a5:ed:e0:19: 9f:fe:89:cf:20:7c:ba:49:31:0d:85:13:86:a8:16: be:a2:0a:8b:4f:59:42:3a:c5:43:e2:45:16:00:da: 93:c7:2d:4b:fd:04:9e:28:b8:05:13:f2:33:5d:e9: 91:0d:90:5b:ca:10:b9:2d:f2:2f:d5:a3:92:09:89: 5c:23:b9:a4:92:fc:d3:36:e4:f9:25:63:08:9b:af: 35:5c:68:47:79:82:33:78:f6:93:28:22:13:57:dc: c9:0e:9b:96:be:bd:85:a4:11:95:c4:3a:24:7a:d6: af:83:f0:a0:7e:c4:c0:08:1c:d8:81:eb:a9:1f:65: 21:c2:3d:a9:cc:26:24:c5:5d:2c:60:50:c3:6a:9c: bc:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:B7:13:55:D4:B8:40:82:E8:10:4B:2E:3B:05:D6:FC:BE:A6:E6:25 X509v3 Authority Key Identifier: keyid:2C:FB:0C:EF:6D:16:D6:67:6E:EA:21:16:43:EC:8E:85:C2:5C:F2:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/LPsM720W1mdu6iEWQ-yOhcJc8v8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LPsM720W1mdu6iEWQ-yOhcJc8v8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6C1B/E57306CA9A7211EF8EB4162DC4F9AE02/6E491F58A79211EFABD45B2BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.23.36.0/24 Signature Algorithm: sha256WithRSAEncryption 46:df:09:80:83:97:38:e6:aa:ce:f5:fc:ef:17:1f:e1:3d:19: 07:07:8f:f9:eb:8c:3f:06:27:b6:d6:0c:4d:57:40:cc:a4:8f: 5f:24:c5:cf:3e:03:11:f4:c1:6c:dc:dc:85:80:17:44:e4:9a: 54:c3:61:8c:06:68:00:00:84:a3:13:11:6e:85:4c:a7:fa:38: c7:d2:2a:8b:bf:9e:a8:8e:61:04:e3:e6:72:4e:ec:24:21:2f: 38:f7:ca:9b:ad:c5:a3:e1:bb:5c:30:47:71:ab:60:41:ab:cb: 57:db:3f:a8:dd:67:0d:69:ab:89:6b:a0:33:cc:05:05:9f:21: e5:a9:f4:f6:0e:4b:ba:4a:b3:bf:3f:d9:ff:62:14:d3:d5:da: ad:87:73:21:db:6e:fb:d3:58:95:1a:50:01:a3:3d:49:68:d6: be:d6:50:60:d8:3b:a6:68:db:9a:81:aa:69:6a:70:76:7b:64: a8:12:03:be:8f:24:fc:89:93:28:04:80:38:73:8c:f3:5d:3d: 80:6e:61:95:01:44:f6:b9:d2:16:f7:25:f8:11:09:8b:ed:9b: 26:fd:41:c3:cd:5f:99:4f:95:96:2d:91:86:07:de:38:6d:70: c6:ac:9e:9e:de:a4:ae:fa:23:9f:fc:b1:8e:b3:64:32:2e:46: 9c:df:71:90 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE NkMxQjExMC8GA1UEBRMoMkNGQjBDRUY2RDE2RDY2NzZFRUEyMTE2NDNFQzhFODVD MjVDRjJGRjAeFw0yNTAxMTUwNjA5MjVaFw0yNjAzMzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY3ODc1MTE1LWJjYzUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCZfDfPOD6dm67Gyol8z03fp5P+xlaIbvwvCnXXO7Gl0kKmdCslmJOZHCfjf5mY Suz1iVir6531FUEtTHnGc4cbUd19o/H2gZflS5MHhDweQjUgEJRET/OY5hDdrtgz isMDfMn4oSAUzSU8byr9hHGIEEy1pe3gGZ/+ic8gfLpJMQ2FE4aoFr6iCotPWUI6 xUPiRRYA2pPHLUv9BJ4ouAUT8jNd6ZENkFvKELkt8i/Vo5IJiVwjuaSS/NM25Pkl YwibrzVcaEd5gjN49pMoIhNX3MkOm5a+vYWkEZXEOiR61q+D8KB+xMAIHNiB66kf ZSHCPanMJiTFXSxgUMNqnLyZAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUm7cTVdS4 QILoEEsuOwXW/L6m5iUwHwYDVR0jBBgwFoAULPsM720W1mdu6iEWQ+yOhcJc8v8w DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ2QzFCL0U1NzMwNkNBOUE3 MjExRUY4RUI0MTYyREM0RjlBRTAyL0xQc003MjBXMW1kdTZpRVdRLXlPaGNKYzh2 OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvTFBzTTcyMFcxbWR1NmlFV1EteU9oY0pjOHY4LmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE NkMxQi9FNTczMDZDQTlBNzIxMUVGOEVCNDE2MkRDNEY5QUUwMi82RTQ5MUY1OEE3 OTIxMUVGQUJENDVCMkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsXJDANBgkqhkiG9w0BAQsFAAOCAQEARt8JgIOXOOaqzvX8 7xcf4T0ZBweP+euMPwYnttYMTVdAzKSPXyTFzz4DEfTBbNzchYAXROSaVMNhjAZo AACEoxMRboVMp/o4x9Iqi7+eqI5hBOPmck7sJCEvOPfKm63Fo+G7XDBHcatgQavL V9s/qN1nDWmriWugM8wFBZ8h5an09g5Lukqzvz/Z/2IU09XarYdzIdtu+9NYlRpQ AaM9SWjWvtZQYNg7pmjbmoGqaWpwdntkqBIDvo8k/ImTKASAOHOM8109gG5hlQFE 9rnSFvcl+BEJi+2bJv1Bw81fmU+Vli2RhgfeOG1wxqyent6krvojn/yxjrNkMi5G nN9xkA== -----END CERTIFICATE-----Generated at Sat Apr 5 02:00:47 2025 by rpki-client