$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/B264EB66A30911ED99A82087C4F9AE02.roa File: B264EB66A30911ED99A82087C4F9AE02.roa (raw, json) Hash identifier: tZEzhiKfHDteKh17cCbwci/tZYnVymPaW90yd5ZJ1q4= Subject key identifier: 65:BA:95:04:0E:C5:7E:5A:42:A9:A6:18:F4:EE:EF:D0:D2:F0:F6:74 Certificate issuer: /CN=A91DE5E8/serialNumber=E5B1CE1D453918195BEB5CD90F6D879EFE9910A2 Certificate serial: 018A Authority key identifier: E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/B264EB66A30911ED99A82087C4F9AE02.roa Signing time: Sat 01 Mar 2025 05:26:06 +0000 ROA not before: Sat 01 Mar 2025 05:26:06 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 17539 IP address blocks: 103.84.148.0/24 maxlen: 24 103.84.149.0/24 maxlen: 24 103.84.150.0/24 maxlen: 24 103.84.151.0/24 maxlen: 24 139.5.116.0/24 maxlen: 24 139.5.117.0/24 maxlen: 24 139.5.118.0/24 maxlen: 24 139.5.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:45:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 394 (0x18a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DE5E8 Validity Not Before: Mar 1 05:26:06 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c29a6e-9cc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d7:a5:4c:26:85:79:b7:da:0e:62:ad:96:83: 00:eb:db:eb:8b:7d:e2:d3:9e:93:03:6d:32:3a:30: 82:8f:1f:32:5d:90:91:3c:f6:84:f9:de:4b:32:f8: 71:6a:95:df:14:c5:ab:3d:bb:3e:8b:27:33:ea:e3: 24:3d:c3:24:66:7b:f6:4d:b5:5b:8c:10:0e:10:bf: 84:ed:a1:90:82:b4:6d:fa:cb:fc:7a:0e:4d:5a:21: 1a:da:f7:cc:b5:17:b1:90:a7:c2:3d:41:89:7d:6b: 36:30:46:b2:d6:0f:83:2f:a2:6a:1b:de:83:01:42: 01:d7:7d:bb:d8:f5:09:1e:68:64:e8:f2:34:17:cf: d4:b0:64:3c:2a:d7:91:a4:78:64:c2:36:37:b9:2f: 82:81:6e:d7:56:0a:42:44:05:19:36:7e:d4:b3:09: d5:d6:1f:f6:7e:8e:c0:97:58:2b:6b:e6:8e:79:8f: 00:e0:92:bc:36:62:d6:0e:55:c0:a7:a4:ee:b6:59: a2:bf:35:af:c1:11:2e:79:0e:28:82:f9:b4:15:5f: e8:07:65:1a:1a:a3:66:94:15:e7:1f:fa:68:c4:26: 34:12:cc:72:2a:c7:30:94:b5:1c:c9:72:b8:80:cf: 8d:68:39:fd:35:12:be:69:8a:56:e7:90:0e:e0:9f: 79:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:BA:95:04:0E:C5:7E:5A:42:A9:A6:18:F4:EE:EF:D0:D2:F0:F6:74 X509v3 Authority Key Identifier: keyid:E5:B1:CE:1D:45:39:18:19:5B:EB:5C:D9:0F:6D:87:9E:FE:99:10:A2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/5bHOHUU5GBlb61zZD22Hnv6ZEKI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5bHOHUU5GBlb61zZD22Hnv6ZEKI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE5E8/E9E1BF28A30511EDAC14EE6CC4F9AE02/B264EB66A30911ED99A82087C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.148.0/22 139.5.116.0/22 Signature Algorithm: sha256WithRSAEncryption 58:5c:9e:e8:e8:4e:e9:11:67:65:ec:27:68:8b:9f:03:7c:de: 2b:cb:23:2b:4a:38:2b:24:6c:a8:62:5a:dc:9f:fb:de:29:7d: 84:5f:40:9e:53:7a:e0:bb:a3:e5:42:74:93:6e:bc:8c:71:a6: 43:c7:5b:95:fe:5c:d6:35:5e:c3:f8:21:be:7a:73:99:7e:df: d8:24:6c:31:8c:2e:22:5e:ff:de:12:4a:d1:90:cf:b0:92:61: f1:5b:c6:b7:a0:03:55:7b:3f:80:34:de:97:95:cd:e8:a8:ef: be:ec:56:34:44:b0:8e:32:66:3c:5b:07:91:fe:8b:30:3e:55: c0:b8:9e:ed:b9:68:9a:b9:73:ac:1d:47:dd:c4:99:b8:c6:6f: 8f:f9:35:07:73:82:4a:5e:03:b9:61:b7:2f:33:df:31:ef:da: f2:2c:05:a2:d4:a1:56:d2:2e:ec:eb:2b:fb:5f:9d:1e:5f:ce: 9b:a1:5e:a7:34:b6:b5:40:b7:ac:23:5c:7f:b3:04:f9:3e:4e: f0:24:6e:02:62:3d:ad:44:41:a7:34:b2:c5:3a:b8:fd:ac:a5: a8:20:3c:0f:a9:25:79:b2:b7:a4:c8:5f:3f:ca:7a:e2:9b:30: 94:69:d5:b3:a9:be:4a:44:5d:a6:22:53:e2:f5:a4:9f:8e:53: 18:27:ab:07 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICAYowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REU1RTgxMTAvBgNVBAUTKEU1QjFDRTFENDUzOTE4MTk1QkVCNUNEOTBGNkQ4NzlF RkU5OTEwQTIwHhcNMjUwMzAxMDUyNjA2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2MyOWE2ZS05Y2M2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4NelTCaFebfaDmKtloMA69vri33i056TA20yOjCCjx8yXZCRPPaE+d5LMvhx apXfFMWrPbs+iycz6uMkPcMkZnv2TbVbjBAOEL+E7aGQgrRt+sv8eg5NWiEa2vfM tRexkKfCPUGJfWs2MEay1g+DL6JqG96DAUIB13272PUJHmhk6PI0F8/UsGQ8KteR pHhkwjY3uS+CgW7XVgpCRAUZNn7UswnV1h/2fo7Al1gra+aOeY8A4JK8NmLWDlXA p6TutlmivzWvwREueQ4ogvm0FV/oB2UaGqNmlBXnH/poxCY0EsxyKscwlLUcyXK4 gM+NaDn9NRK+aYpW55AO4J95mQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFGW6lQQO xX5aQqmmGPTu79DS8PZ0MB8GA1UdIwQYMBaAFOWxzh1FORgZW+tc2Q9th57+mRCi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERTVFOC9FOUUxQkYyOEEz MDUxMUVEQUMxNEVFNkNDNEY5QUUwMi81YkhPSFVVNUdCbGI2MXpaRDIySG52NlpF S0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzViSE9IVVU1R0JsYjYxelpEMjJIbnY2WkVLSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REU1RTgvRTlFMUJGMjhBMzA1MTFFREFDMTRFRTZDQzRGOUFFMDIvQjI2NEVCNjZB MzA5MTFFRDk5QTgyMDg3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnVJQDBAKLBXQwDQYJKoZIhvcNAQELBQADggEBAFhcnujo TukRZ2XsJ2iLnwN83ivLIytKOCskbKhiWtyf+94pfYRfQJ5TeuC7o+VCdJNuvIxx pkPHW5X+XNY1XsP4Ib56c5l+39gkbDGMLiJe/94SStGQz7CSYfFbxregA1V7P4A0 3peVzeio777sVjREsI4yZjxbB5H+izA+VcC4nu25aJq5c6wdR93EmbjGb4/5NQdz gkpeA7lhty8z3zHv2vIsBaLUoVbSLuzrK/tfnR5fzpuhXqc0trVAt6wjXH+zBPk+ TvAkbgJiPa1EQac0ssU6uP2spaggPA+pJXmyt6TIXz/KeuKbMJRp1bOpvkpEXaYi U+L1pJ+OUxgnqwc= -----END CERTIFICATE-----Generated at Sat Apr 5 02:00:27 2025 by rpki-client