$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A87393C8F86B11EF86A73884C4F9AE02.roa File: A87393C8F86B11EF86A73884C4F9AE02.roa (raw, json) Hash identifier: eBd+WTeQJfulzr+N4ZQ9C6nPwSI+gB9hl5tWkJOTaS8= Subject key identifier: 70:B6:90:AA:E5:EC:A3:3A:B3:29:76:D3:6E:F0:A9:9E:C3:EC:0D:F2 Certificate issuer: /CN=A91DEC12/serialNumber=05070BF9AD930449FB3B69B8691CF20C012779B9 Certificate serial: 0C08 Authority key identifier: 05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A87393C8F86B11EF86A73884C4F9AE02.roa Signing time: Mon 03 Mar 2025 20:11:15 +0000 ROA not before: Mon 03 Mar 2025 20:11:15 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 136555 IP address blocks: 103.92.152.0/22 maxlen: 22 103.92.152.0/23 maxlen: 23 103.92.152.0/24 maxlen: 24 103.92.154.0/23 maxlen: 23 103.92.154.0/24 maxlen: 24 103.92.155.0/24 maxlen: 24 2403:bb40::/32 maxlen: 32 2403:bb40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 18:50:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3080 (0xc08) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91DEC12 Validity Not Before: Mar 3 20:11:15 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=67c60ce2-b6a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:8f:3c:83:df:c1:bb:63:03:c1:73:c6:3f:ec: f1:a8:37:31:9e:86:7f:9f:72:b6:56:73:c5:7c:7a: b4:90:34:8d:4d:d9:d7:92:a3:6a:21:4d:29:aa:a7: a0:3b:06:3b:3c:9a:84:aa:6e:33:34:b8:69:87:b7: c1:0f:69:43:57:4d:b6:98:56:da:27:e9:97:10:81: 18:fb:c6:4e:f8:25:61:db:08:ff:2b:13:16:73:79: d2:6c:fb:07:b3:64:1e:d9:2a:b2:a4:fc:55:ad:39: 14:81:97:e9:fd:c9:30:eb:3a:a6:11:93:83:af:9a: 00:6e:3d:32:76:04:91:fb:9f:75:7b:67:6a:31:c1: cd:46:4e:eb:e4:1b:9e:19:f8:51:19:ed:d4:26:1f: 97:dd:22:f9:10:a1:d4:76:f1:88:e8:fc:e9:df:5a: db:4a:3d:83:6d:a7:14:6b:f5:a1:3d:69:c4:78:65: f6:d9:0b:0f:d8:fa:2d:ad:7c:f0:1c:07:28:ed:c3: 50:94:b4:d9:c8:4d:d8:c0:e4:3e:b3:fe:13:5f:b9: 56:6a:da:3c:dc:1d:93:61:51:5c:51:2d:1b:42:0b: de:cc:2d:0c:9e:fe:b6:65:eb:b7:b0:a3:b0:9b:98: 8a:14:43:eb:e8:50:77:b6:e8:b4:61:4f:ab:6a:64: 0c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:B6:90:AA:E5:EC:A3:3A:B3:29:76:D3:6E:F0:A9:9E:C3:EC:0D:F2 X509v3 Authority Key Identifier: keyid:05:07:0B:F9:AD:93:04:49:FB:3B:69:B8:69:1C:F2:0C:01:27:79:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/BQcL-a2TBEn7O2m4aRzyDAEnebk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BQcL-a2TBEn7O2m4aRzyDAEnebk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEC12/8592E4880F6611EAAF51C646C4F9AE02/A87393C8F86B11EF86A73884C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.92.152.0/22 IPv6: 2403:bb40::/32 Signature Algorithm: sha256WithRSAEncryption 55:81:1c:83:8f:f0:02:f5:76:8f:c5:2a:28:31:e1:e9:b0:51: b4:a5:6e:35:ad:d9:34:b2:a0:a0:4d:53:f3:ed:f4:22:a0:4f: f6:78:d8:fa:36:7d:cb:cd:a2:6d:26:bd:d9:90:e7:c5:06:0a: 54:45:8a:09:3a:a3:cc:10:44:d6:e1:f0:fc:61:56:e9:62:d0: d1:fb:34:c1:24:99:2c:ea:02:42:01:8b:37:6f:58:05:6f:37: ad:98:f4:e1:fc:83:bb:64:9b:53:e7:73:40:2a:14:e6:45:0f: c8:3a:95:0d:7b:f9:c1:86:bc:f1:93:a7:d1:47:0b:00:b8:06: 4c:48:2a:05:55:2a:e8:83:c7:00:11:50:15:d0:3c:c1:5e:8c: 27:33:c3:c1:a8:e5:2c:a5:66:8a:5a:49:cd:14:c2:f9:30:b7: b8:d2:d2:03:07:e5:97:94:35:63:6f:ce:5f:9f:31:00:2c:9f: 84:d6:eb:94:3c:30:43:f1:b8:50:87:d3:ce:15:77:d4:52:1f: f1:92:7a:8d:15:e0:d8:93:a0:7f:5e:e5:f2:25:2c:3c:19:27: 36:66:8a:f5:93:20:5b:bf:8c:32:3e:ae:c3:e2:ba:ca:5d:df: 75:21:84:a6:a3:cd:a8:98:9a:16:6b:99:04:b1:e1:a2:3d:dc: 59:30:b1:02 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDAgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx REVDMTIxMTAvBgNVBAUTKDA1MDcwQkY5QUQ5MzA0NDlGQjNCNjlCODY5MUNGMjBD MDEyNzc5QjkwHhcNMjUwMzAzMjAxMTE1WhcNMjUwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M2MGNlMi1iNmE1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxI88g9/Bu2MDwXPGP+zxqDcxnoZ/n3K2VnPFfHq0kDSNTdnXkqNqIU0pqqeg OwY7PJqEqm4zNLhph7fBD2lDV022mFbaJ+mXEIEY+8ZO+CVh2wj/KxMWc3nSbPsH s2Qe2SqypPxVrTkUgZfp/ckw6zqmEZODr5oAbj0ydgSR+591e2dqMcHNRk7r5Bue GfhRGe3UJh+X3SL5EKHUdvGI6Pzp31rbSj2DbacUa/WhPWnEeGX22QsP2PotrXzw HAco7cNQlLTZyE3YwOQ+s/4TX7lWato83B2TYVFcUS0bQgvezC0Mnv62Zeu3sKOw m5iKFEPr6FB3tui0YU+ramQMpwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFHC2kKrl 7KM6syl2027wqZ7D7A3yMB8GA1UdIwQYMBaAFAUHC/mtkwRJ+ztpuGkc8gwBJ3m5 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFERUMxMi84NTkyRTQ4ODBG NjYxMUVBQUY1MUM2NDZDNEY5QUUwMi9CUWNMLWEyVEJFbjdPMm00YVJ6eURBRW5l YmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JRY0wtYTJUQkVuN08ybTRhUnp5REFFbmViay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx REVDMTIvODU5MkU0ODgwRjY2MTFFQUFGNTFDNjQ2QzRGOUFFMDIvQTg3MzkzQzhG ODZCMTFFRjg2QTczODg0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnXJgwDQQCAAIwBwMFACQDu0AwDQYJKoZIhvcNAQELBQAD ggEBAFWBHIOP8AL1do/FKigx4emwUbSlbjWt2TSyoKBNU/Pt9CKgT/Z42Po2fcvN om0mvdmQ58UGClRFigk6o8wQRNbh8PxhVuli0NH7NMEkmSzqAkIBizdvWAVvN62Y 9OH8g7tkm1Pnc0AqFOZFD8g6lQ17+cGGvPGTp9FHCwC4BkxIKgVVKuiDxwARUBXQ PMFejCczw8Go5SylZopaSc0Uwvkwt7jS0gMH5ZeUNWNvzl+fMQAsn4TW65Q8MEPx uFCH084Vd9RSH/GSeo0V4NiToH9e5fIlLDwZJzZmivWTIFu/jDI+rsPiuspd33Uh hKajzaiYmhZrmQSx4aI93FkwsQI= -----END CERTIFICATE-----Generated at Sun Apr 6 06:37:13 2025 by rpki-client