$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/1D45733C9AAB11ECBDD79E1EC4F9AE02.roa File: 1D45733C9AAB11ECBDD79E1EC4F9AE02.roa (raw, json) Hash identifier: IDcKfjrcD970kwyhuo4LacbpxchYwfNjnBXBdXrdXbs= Subject key identifier: 6E:2D:B3:E7:05:6E:DD:B8:61:5D:61:E5:D2:81:62:D0:80:1C:81:5C Certificate issuer: /CN=A91EF5AE/serialNumber=05938655CB4A129E8FDDFB0942C20203E37E1BC1 Certificate serial: 0381 Authority key identifier: 05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/1D45733C9AAB11ECBDD79E1EC4F9AE02.roa Signing time: Thu 27 Mar 2025 01:07:07 +0000 ROA not before: Thu 27 Mar 2025 01:07:07 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 139922 IP address blocks: 103.182.174.0/23 maxlen: 24 2001:df0:7dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 897 (0x381) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF5AE Validity Not Before: Mar 27 01:07:07 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e4a4bb-ff12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:bf:ea:b3:eb:2d:8f:3f:84:5d:0b:f7:0b:f3: 89:9c:13:05:6f:9c:1c:5c:45:f5:16:59:49:5f:db: d7:22:ca:05:40:d8:9e:c0:48:d4:a2:ed:c2:e5:e0: a0:fc:eb:ce:ae:d8:65:25:ee:c4:cd:5b:61:f2:6c: 1b:c1:a9:48:b1:d7:39:ef:a1:be:d4:46:1b:53:af: 6b:a1:a2:7d:b4:90:50:aa:19:8c:46:d8:9e:62:48: de:ec:bf:0f:99:08:65:97:02:25:16:35:13:77:79: 47:88:e1:93:69:8b:2d:bc:8b:49:6c:15:49:d9:2a: 08:bb:db:8c:71:48:e5:c9:cb:c8:e7:0b:0f:0d:67: 06:2d:3b:9c:19:bb:a4:18:f1:63:88:7d:d6:9d:69: 14:0c:7b:8c:a0:cc:1f:e4:94:1a:0a:24:85:76:62: 6a:19:2b:99:73:58:4f:a8:2a:7b:54:25:f1:d2:d0: e7:a4:58:71:37:b1:b0:4d:e6:15:0d:14:08:75:bb: e4:08:29:97:02:04:28:a6:b6:80:d8:c2:f2:82:e0: d1:33:a6:a0:af:dc:c1:95:ab:f3:f8:20:fc:d6:3a: b2:93:d8:40:7b:69:59:b8:b6:b6:b9:05:2d:9d:e8: 18:73:61:e7:fa:20:10:a4:bb:49:dd:97:84:ba:9c: 27:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:2D:B3:E7:05:6E:DD:B8:61:5D:61:E5:D2:81:62:D0:80:1C:81:5C X509v3 Authority Key Identifier: keyid:05:93:86:55:CB:4A:12:9E:8F:DD:FB:09:42:C2:02:03:E3:7E:1B:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/BZOGVctKEp6P3fsJQsICA-N-G8E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BZOGVctKEp6P3fsJQsICA-N-G8E.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF5AE/5E6E20789AA811EC89D42474C4F9AE02/1D45733C9AAB11ECBDD79E1EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.174.0/23 IPv6: 2001:df0:7dc0::/48 Signature Algorithm: sha256WithRSAEncryption b7:d9:31:9c:0a:19:ad:12:c4:0d:61:c2:76:55:54:38:09:04: 41:be:31:da:68:00:e0:0b:c3:69:7b:2f:6d:72:5a:f1:05:b1: 7d:fb:03:73:4d:8b:e9:f2:2b:36:81:19:94:9a:2a:f2:e9:c2: 28:70:ea:90:53:b0:7f:53:6a:22:47:78:52:ff:14:34:89:af: 86:75:1e:2f:e4:f7:39:41:72:c6:9d:63:52:9b:62:e3:b9:6b: ad:eb:3d:db:67:cb:25:9f:5f:65:20:e0:93:da:2f:a5:73:df: 5f:ae:49:9c:65:e2:c4:dc:9d:05:00:d1:73:22:56:f7:20:0b: 5b:91:da:6a:0d:f6:71:2f:3c:6b:9b:6e:05:1b:ee:7a:01:98: ac:17:32:18:83:56:e8:76:99:69:91:3e:8d:a2:fa:3b:53:19: cd:6a:d8:a7:40:ca:3b:79:c8:17:b0:e2:5b:8a:ab:b8:bb:68: b0:87:19:ec:63:8a:50:72:af:34:92:86:29:29:b7:74:a6:0b: ca:84:bd:5d:1c:47:49:6e:f8:7c:57:37:6a:a5:a8:6d:c3:65: cd:76:2a:96:c6:87:1e:91:6e:13:9d:9d:9e:98:c8:0e:72:d6: d7:52:ef:c4:31:df:fe:34:01:88:2e:52:f7:4b:fe:b4:3c:4a: f5:ab:2c:77 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA4EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1QUUxMTAvBgNVBAUTKDA1OTM4NjU1Q0I0QTEyOUU4RkRERkIwOTQyQzIwMjAz RTM3RTFCQzEwHhcNMjUwMzI3MDEwNzA3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U0YTRiYi1mZjEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA5L/qs+stjz+EXQv3C/OJnBMFb5wcXEX1FllJX9vXIsoFQNiewEjUou3C5eCg /OvOrthlJe7EzVth8mwbwalIsdc576G+1EYbU69roaJ9tJBQqhmMRtieYkje7L8P mQhllwIlFjUTd3lHiOGTaYstvItJbBVJ2SoIu9uMcUjlycvI5wsPDWcGLTucGbuk GPFjiH3WnWkUDHuMoMwf5JQaCiSFdmJqGSuZc1hPqCp7VCXx0tDnpFhxN7GwTeYV DRQIdbvkCCmXAgQopraA2MLyguDRM6agr9zBlavz+CD81jqyk9hAe2lZuLa2uQUt negYc2Hn+iAQpLtJ3ZeEupwn/wIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFG4ts+cF bt24YV1h5dKBYtCAHIFcMB8GA1UdIwQYMBaAFAWThlXLShKej937CULCAgPjfhvB MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjVBRS81RTZFMjA3ODlB QTgxMUVDODlENDI0NzRDNEY5QUUwMi9CWk9HVmN0S0VwNlAzZnNKUXNJQ0EtTi1H OEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JaT0dWY3RLRXA2UDNmc0pRc0lDQS1OLUc4RS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUY1QUUvNUU2RTIwNzg5QUE4MTFFQzg5RDQyNDc0QzRGOUFFMDIvMUQ0NTczM0M5 QUFCMTFFQ0JERDc5RTFFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntq4wDwQCAAIwCQMHACABDfB9wDANBgkqhkiG9w0BAQsF AAOCAQEAt9kxnAoZrRLEDWHCdlVUOAkEQb4x2mgA4AvDaXsvbXJa8QWxffsDc02L 6fIrNoEZlJoq8unCKHDqkFOwf1NqIkd4Uv8UNImvhnUeL+T3OUFyxp1jUpti47lr res922fLJZ9fZSDgk9ovpXPfX65JnGXixNydBQDRcyJW9yALW5Haag32cS88a5tu BRvuegGYrBcyGINW6HaZaZE+jaL6O1MZzWrYp0DKO3nIF7DiW4qruLtosIcZ7GOK UHKvNJKGKSm3dKYLyoS9XRxHSW74fFc3aqWobcNlzXYqlsaHHpFuE52dnpjIDnLW 11LvxDHf/jQBiC5S90v+tDxK9assdw== -----END CERTIFICATE-----Generated at Sat Apr 5 02:08:02 2025 by rpki-client