$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/855AECF29B3A11EB9B73EB7BC4F9AE02.roa File: 855AECF29B3A11EB9B73EB7BC4F9AE02.roa (raw, json) Hash identifier: R3iQDjS1xmyA/Ti9pGMuv3ByraTjewOpXnxZ6reYInQ= Subject key identifier: 7F:69:76:A9:15:FE:4B:E9:F5:0C:DA:69:C1:2B:0C:37:39:02:4D:D8 Certificate issuer: /CN=A91F7DCD/serialNumber=3BD302FA7A2E866A679B1B6096DB67453A03AB86 Certificate serial: 0A03 Authority key identifier: 3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/855AECF29B3A11EB9B73EB7BC4F9AE02.roa Signing time: Wed 12 Mar 2025 07:41:48 +0000 ROA not before: Wed 12 Mar 2025 07:41:48 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 141768 IP address blocks: 39.109.92.0/22 maxlen: 22 39.109.92.0/24 maxlen: 24 39.109.93.0/24 maxlen: 24 39.109.94.0/24 maxlen: 24 39.109.95.0/24 maxlen: 24 103.120.228.0/23 maxlen: 23 103.120.228.0/24 maxlen: 24 103.120.229.0/24 maxlen: 24 103.227.128.0/24 maxlen: 24 103.227.129.0/24 maxlen: 24 103.227.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 20:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2563 (0xa03) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F7DCD Validity Not Before: Mar 12 07:41:48 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=67d13abb-e18b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:ac:6e:c3:18:e9:b8:62:26:fe:be:c4:5e: de:7c:d4:d5:da:8d:bc:72:cd:77:ff:f5:c1:3c:37: db:5d:10:69:9e:c5:a2:a5:f7:65:13:e4:b5:e2:ce: 25:e3:bd:db:0d:12:9c:d3:a3:9e:ae:ee:26:e5:7d: ee:44:11:0e:e3:25:a8:55:a7:5d:fa:2d:89:31:af: e5:ab:59:60:c3:7d:05:24:a2:ee:c7:9d:06:67:bc: 2c:56:7d:0f:26:6b:31:53:8f:be:f9:ac:8b:6b:01: 89:98:26:21:41:a0:68:b6:5f:59:42:08:55:a8:30: ce:32:03:10:2b:04:88:6c:95:2b:29:87:5d:2e:95: 8e:7f:bb:fb:54:3e:2b:85:ba:1f:cd:60:e9:e2:ca: cf:f1:06:d0:fb:eb:23:6a:2d:70:45:62:52:40:cf: 41:e8:22:5d:54:1b:1e:db:33:6b:17:11:a4:f3:04: 3c:47:60:3d:1d:91:40:32:eb:82:16:a5:83:fa:cd: 27:e7:fc:6e:30:2a:cf:13:bf:6c:16:91:16:90:79: 80:b8:9b:f1:98:4f:2f:59:01:24:d5:4e:b9:6c:46: 5d:52:6f:f5:86:b5:59:44:5b:63:fc:9e:e8:93:b2: bd:0c:24:fe:c4:c6:c6:46:f7:85:1b:b5:b0:ff:ac: cc:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:69:76:A9:15:FE:4B:E9:F5:0C:DA:69:C1:2B:0C:37:39:02:4D:D8 X509v3 Authority Key Identifier: keyid:3B:D3:02:FA:7A:2E:86:6A:67:9B:1B:60:96:DB:67:45:3A:03:AB:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/O9MC-nouhmpnmxtglttnRToDq4Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/O9MC-nouhmpnmxtglttnRToDq4Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7DCD/84428B0E73D111EA9CDEC534C4F9AE02/855AECF29B3A11EB9B73EB7BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 39.109.92.0/22 103.120.228.0/23 103.227.128.0/23 103.227.131.0/24 Signature Algorithm: sha256WithRSAEncryption 3d:01:db:59:2b:57:08:c1:37:a2:1e:dc:79:d6:36:94:95:25: 6d:90:f5:56:a7:ac:e7:28:99:f7:18:02:6a:f6:8b:02:3a:ed: 2f:31:d6:08:f1:26:f3:cb:20:a9:8f:bb:be:c3:60:df:c4:61: 1f:b1:87:46:22:63:22:f5:3d:26:1c:09:e8:95:88:41:42:e4: 0b:2c:a6:cc:4f:a0:f6:92:4e:9b:8c:7f:84:27:82:77:c5:75: ed:23:44:82:2e:80:eb:c8:d1:40:06:d1:92:a8:17:b5:e2:74: 7d:50:55:3d:2b:06:e4:23:c5:48:75:a8:d2:79:6f:61:58:50: 44:55:6b:4c:b0:25:9a:69:f1:3f:20:90:a0:3e:cf:26:63:5b: 58:48:64:67:f8:57:c5:7b:5d:75:a1:3d:cf:c1:dc:00:6c:54: 55:dd:e6:79:99:6f:01:9c:16:7b:93:35:54:b0:3d:27:1a:ef: 82:71:57:9b:b4:cc:9f:a1:d1:7e:a5:b0:a4:c6:29:90:25:64: 1e:0d:04:a9:68:62:a2:4a:eb:76:45:55:34:a6:f0:12:11:95: 3a:68:92:6c:b6:78:68:58:97:ca:b5:75:70:1e:3d:06:a0:22: eb:40:f5:12:d9:19:8c:1a:23:3e:83:bf:61:07:c0:f7:c2:1e: 9a:7e:59:58 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgICCgMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjdEQ0QxMTAvBgNVBAUTKDNCRDMwMkZBN0EyRTg2NkE2NzlCMUI2MDk2REI2NzQ1 M0EwM0FCODYwHhcNMjUwMzEyMDc0MTQ4WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2QxM2FiYi1lMThiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvGisbsMY6bhiJv6+xF7efNTV2o28cs13//XBPDfbXRBpnsWipfdlE+S14s4l 473bDRKc06Oeru4m5X3uRBEO4yWoVadd+i2JMa/lq1lgw30FJKLux50GZ7wsVn0P JmsxU4+++ayLawGJmCYhQaBotl9ZQghVqDDOMgMQKwSIbJUrKYddLpWOf7v7VD4r hbofzWDp4srP8QbQ++sjai1wRWJSQM9B6CJdVBse2zNrFxGk8wQ8R2A9HZFAMuuC FqWD+s0n5/xuMCrPE79sFpEWkHmAuJvxmE8vWQEk1U65bEZdUm/1hrVZRFtj/J7o k7K9DCT+xMbGRveFG7Ww/6zM/wIDAQABo4ICpzCCAqMwHQYDVR0OBBYEFH9pdqkV /kvp9QzaacErDDc5Ak3YMB8GA1UdIwQYMBaAFDvTAvp6LoZqZ5sbYJbbZ0U6A6uG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGN0RDRC84NDQyOEIwRTcz RDExMUVBOUNERUM1MzRDNEY5QUUwMi9POU1DLW5vdWhtcG5teHRnbHR0blJUb0Rx NFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL085TUMtbm91aG1wbm14dGdsdHRuUlRvRHE0WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjdEQ0QvODQ0MjhCMEU3M0QxMTFFQTlDREVDNTM0QzRGOUFFMDIvODU1QUVDRjI5 QjNBMTFFQjlCNzNFQjdCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMQYIKwYBBQUHAQcBAf8E IjAgMB4EAgABMBgDBAInbVwDBAFneOQDBAFn44ADBABn44MwDQYJKoZIhvcNAQEL BQADggEBAD0B21krVwjBN6Ie3HnWNpSVJW2Q9VanrOcomfcYAmr2iwI67S8x1gjx JvPLIKmPu77DYN/EYR+xh0YiYyL1PSYcCeiViEFC5AsspsxPoPaSTpuMf4QngnfF de0jRIIugOvI0UAG0ZKoF7XidH1QVT0rBuQjxUh1qNJ5b2FYUERVa0ywJZpp8T8g kKA+zyZjW1hIZGf4V8V7XXWhPc/B3ABsVFXd5nmZbwGcFnuTNVSwPSca74JxV5u0 zJ+h0X6lsKTGKZAlZB4NBKloYqJK63ZFVTSm8BIRlTpokmy2eGhYl8q1dXAePQag IutA9RLZGYwaIz6Dv2EHwPfCHpp+WVg= -----END CERTIFICATE-----Generated at Sat Apr 5 01:42:44 2025 by rpki-client