$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/E8E88010F2C811EA914D710EC4F9AE02.roa File: E8E88010F2C811EA914D710EC4F9AE02.roa (raw, json) Hash identifier: IFWas/rgHa7uSrgJAOPof+Srn7iqSkG+8jyeDB/7tHw= Subject key identifier: 36:0C:62:A5:8B:81:29:71:DB:1B:13:E6:A8:BA:E6:BA:88:11:9A:94 Certificate issuer: /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83 Certificate serial: 0C59 Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/E8E88010F2C811EA914D710EC4F9AE02.roa Signing time: Mon 24 Mar 2025 18:27:58 +0000 ROA not before: Mon 24 Mar 2025 18:27:57 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136429 IP address blocks: 103.87.212.0/22 maxlen: 22 103.87.212.0/23 maxlen: 23 103.87.212.0/24 maxlen: 24 103.87.213.0/24 maxlen: 24 103.87.214.0/23 maxlen: 23 103.87.214.0/24 maxlen: 24 103.87.215.0/24 maxlen: 24 2404:4e40::/32 maxlen: 32 2404:4e40:1::/48 maxlen: 48 2404:4e40:2::/48 maxlen: 48 2404:4e40:3::/48 maxlen: 48 2404:4e40:4::/48 maxlen: 48 2404:4e40:5::/48 maxlen: 48 2404:4e40:6::/48 maxlen: 48 2404:4e40:7::/48 maxlen: 48 2404:4e40:8::/48 maxlen: 48 2404:4e40:9::/48 maxlen: 48 2404:4e40:a::/48 maxlen: 48 2404:4e40:b::/48 maxlen: 48 2404:4e40:c::/48 maxlen: 48 2404:4e40:d::/48 maxlen: 48 2404:4e40:e::/48 maxlen: 48 2404:4e40:f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 18:11:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3161 (0xc59) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9888 Validity Not Before: Mar 24 18:27:57 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e1a42d-e053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:91:6b:32:46:95:2b:b9:65:1a:ec:e9:d6:f7: 57:94:22:e2:11:0e:f7:94:9c:3d:16:ce:7a:7b:35: a8:6a:f5:93:ae:af:7f:33:dc:5b:3a:57:69:97:cb: 2d:c2:89:41:b8:de:3a:2f:87:9e:bd:df:18:ba:80: 24:45:ee:86:90:08:13:9e:b3:d4:d4:1b:0e:22:f2: a2:23:bd:df:76:15:0f:cb:53:7d:8f:29:d4:3e:37: 42:7a:a8:da:ff:a6:99:b5:52:a4:3c:39:89:02:b7: c8:9e:44:19:38:60:3a:d4:99:c7:74:af:06:6e:be: 82:a8:34:7d:e5:80:d5:72:1b:d1:79:67:19:98:f9: dc:36:ee:c5:5b:ed:f7:d7:a9:1c:45:78:4a:45:ee: 5a:d9:36:94:3d:dc:6e:3c:82:2d:02:c1:e6:6d:0f: 44:14:4b:ea:63:87:f0:78:79:e7:c6:4a:57:87:85: 66:d4:af:2f:b3:36:a6:22:9f:09:2f:b3:4f:76:b7: 32:84:69:a0:9f:b4:99:32:a5:37:c0:5e:25:ae:55: 87:6a:f6:d3:8a:48:90:26:18:4c:51:e9:83:cb:40: 1d:85:54:c9:1a:b1:a3:3f:3a:de:f8:3c:13:e8:c2: 95:ad:54:da:77:90:50:a7:32:67:ba:81:3c:e6:1d: 78:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0C:62:A5:8B:81:29:71:DB:1B:13:E6:A8:BA:E6:BA:88:11:9A:94 X509v3 Authority Key Identifier: keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/E8E88010F2C811EA914D710EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.87.212.0/22 IPv6: 2404:4e40::/32 Signature Algorithm: sha256WithRSAEncryption 15:22:08:6a:65:25:5b:f4:81:95:c9:f0:f9:1e:1b:74:55:69: 0d:a2:2b:b5:a4:c6:8c:eb:2a:87:56:93:e1:20:31:6e:e9:0a: 2f:66:85:59:46:8d:4c:db:c4:7d:14:7f:fd:6f:77:f9:a6:91: 5f:ff:6d:07:45:d6:91:ab:d2:46:81:85:29:75:6e:b8:d8:b3: ee:90:a6:29:9f:ea:fc:a4:f4:e6:a5:40:40:42:06:ef:be:2d: 1b:3a:8c:89:45:83:b4:f7:b9:a6:66:e8:a9:7a:5e:b2:ab:b8: 0b:ed:8a:9e:cf:46:5e:60:a2:17:2f:1b:dc:83:cd:9b:2e:f5: 4a:05:f3:9f:7f:3e:01:a6:81:fe:5d:8a:2b:1c:f3:fa:d4:25: b7:43:e1:58:1e:15:c4:0a:90:3e:c9:aa:ec:d7:36:1a:e1:02: 40:7c:33:a7:75:0a:05:6e:08:cf:b0:04:c2:77:2a:c1:44:11: c4:5e:50:41:9e:c9:d4:b2:62:c0:8a:9f:3a:e4:58:3f:5e:65: b4:5e:2d:03:f1:42:3c:b7:80:dd:26:a2:ab:fd:48:2a:75:1e: 4d:a7:bf:43:bf:c4:b0:ba:1d:de:1a:06:b3:a9:63:c1:6d:82: 83:91:00:da:e7:e9:11:fc:5f:25:f4:fc:fe:a9:fa:93:45:0c: 31:8a:6b:84 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDFkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk4ODgxMTAvBgNVBAUTKDExRjVBNzA3M0FDMjFBRkY1Q0M0RDNCQkJENjU4REVB MzkzMkNCODMwHhcNMjUwMzI0MTgyNzU3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2UxYTQyZC1lMDUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvpFrMkaVK7llGuzp1vdXlCLiEQ73lJw9Fs56ezWoavWTrq9/M9xbOldpl8st wolBuN46L4eevd8YuoAkRe6GkAgTnrPU1BsOIvKiI73fdhUPy1N9jynUPjdCeqja /6aZtVKkPDmJArfInkQZOGA61JnHdK8Gbr6CqDR95YDVchvReWcZmPncNu7FW+33 16kcRXhKRe5a2TaUPdxuPIItAsHmbQ9EFEvqY4fweHnnxkpXh4Vm1K8vszamIp8J L7NPdrcyhGmgn7SZMqU3wF4lrlWHavbTikiQJhhMUemDy0AdhVTJGrGjPzre+DwT 6MKVrVTad5BQpzJnuoE85h14RwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFDYMYqWL gSlx2xsT5qi65rqIEZqUMB8GA1UdIwQYMBaAFBH1pwc6whr/XMTTu71ljeo5MsuD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTg4OC82RjU0RDEwRUZG RjMxMUU5ODc5QjE0NzlDNEY5QUUwMi9FZlduQnpyQ0d2OWN4Tk83dldXTjZqa3l5 NE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VmV25CenJDR3Y5Y3hOTzd2V1dONmpreXk0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk4ODgvNkY1NEQxMEVGRkYzMTFFOTg3OUIxNDc5QzRGOUFFMDIvRThFODgwMTBG MkM4MTFFQTkxNEQ3MTBFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnV9QwDQQCAAIwBwMFACQETkAwDQYJKoZIhvcNAQELBQAD ggEBABUiCGplJVv0gZXJ8PkeG3RVaQ2iK7WkxozrKodWk+EgMW7pCi9mhVlGjUzb xH0Uf/1vd/mmkV//bQdF1pGr0kaBhSl1brjYs+6Qpimf6vyk9OalQEBCBu++LRs6 jIlFg7T3uaZm6Kl6XrKruAvtip7PRl5gohcvG9yDzZsu9UoF859/PgGmgf5diisc 8/rUJbdD4VgeFcQKkD7JquzXNhrhAkB8M6d1CgVuCM+wBMJ3KsFEEcReUEGeydSy YsCKnzrkWD9eZbReLQPxQjy3gN0moqv9SCp1Hk2nv0O/xLC6Hd4aBrOpY8FtgoOR ANrn6RH8XyX0/P6p+pNFDDGKa4Q= -----END CERTIFICATE-----Generated at Mon Apr 7 00:50:13 2025 by rpki-client