$ rpki-client -vvf rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/75AB03A2870B11EB88E44876C4F9AE02.roa File: 75AB03A2870B11EB88E44876C4F9AE02.roa (raw, json) Hash identifier: 7qI+njWvbbh+KneeLcZmySdlxOhiGVsKeC65nMgeI7E= Subject key identifier: DE:FF:37:CF:11:62:F5:1C:92:B6:FD:CF:70:7F:0E:20:8A:A4:36:F5 Certificate issuer: /CN=A91F9605/serialNumber=681884C0C7557E526EF2BC4D1E5ABC336AE27F9E Certificate serial: 0626 Authority key identifier: 68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/75AB03A2870B11EB88E44876C4F9AE02.roa Signing time: Thu 06 Feb 2025 22:21:18 +0000 ROA not before: Thu 06 Feb 2025 22:21:18 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 17648 IP address blocks: 110.50.32.0/20 maxlen: 20 110.50.48.0/21 maxlen: 21 110.50.56.0/22 maxlen: 22 110.50.60.0/24 maxlen: 24 110.50.61.0/24 maxlen: 24 110.50.62.0/23 maxlen: 23 202.134.192.0/20 maxlen: 20 202.134.192.0/24 maxlen: 24 202.134.193.0/24 maxlen: 24 202.134.194.0/24 maxlen: 24 202.134.195.0/24 maxlen: 24 202.134.196.0/24 maxlen: 24 202.134.197.0/24 maxlen: 24 202.134.198.0/24 maxlen: 24 202.134.199.0/24 maxlen: 24 202.134.200.0/24 maxlen: 24 202.134.201.0/24 maxlen: 24 202.134.202.0/24 maxlen: 24 202.134.203.0/24 maxlen: 24 202.134.204.0/24 maxlen: 24 202.134.205.0/24 maxlen: 24 202.134.206.0/24 maxlen: 24 202.134.207.0/24 maxlen: 24 2406:2e00::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1574 (0x626) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F9605 Validity Not Before: Feb 6 22:21:18 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67a535de-4923 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:0c:d6:bf:52:69:c4:84:61:a3:e9:0e:1e:02: b6:f8:47:7f:5f:a1:d8:44:f7:7a:55:cb:95:09:99: 37:a8:b5:df:2b:8e:a4:06:cf:70:29:a8:bd:3d:fa: a7:95:4b:5f:b5:68:68:64:4e:2a:bf:d8:b9:de:bb: d8:26:a2:c9:ba:b7:31:c2:23:7f:97:93:94:39:e0: 98:49:cf:90:11:6e:f0:da:99:d2:9e:49:25:db:ba: 9b:7b:d7:72:7e:83:54:af:ef:d8:85:da:27:d7:69: 34:39:49:2f:cd:e4:3c:3c:b2:4a:f5:3f:0e:19:b0: 8e:75:b3:0e:df:c5:52:c9:14:1b:8e:c3:ad:39:66: 1e:52:72:e7:db:71:e4:8d:18:9c:55:ed:5e:38:0b: 43:91:15:e4:04:20:f3:f8:9a:fb:9f:26:d0:a8:6e: 7e:d7:89:fe:37:ea:05:2f:19:57:bf:1d:44:d4:7b: 01:fe:ca:18:c6:1e:d8:01:1b:73:b8:dd:8b:89:eb: 90:f5:ef:be:99:8c:69:8e:26:c0:c3:8b:2f:cc:63: 06:5f:f5:0f:59:9e:d5:9b:f4:59:92:62:59:7b:44: 04:c1:7b:29:6c:55:c6:d1:62:f0:67:86:69:7e:99: 37:6a:ac:7f:c9:54:25:4e:56:d2:fc:eb:b2:69:9a: 61:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:FF:37:CF:11:62:F5:1C:92:B6:FD:CF:70:7F:0E:20:8A:A4:36:F5 X509v3 Authority Key Identifier: keyid:68:18:84:C0:C7:55:7E:52:6E:F2:BC:4D:1E:5A:BC:33:6A:E2:7F:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/aBiEwMdVflJu8rxNHlq8M2rif54.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aBiEwMdVflJu8rxNHlq8M2rif54.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F9605/36666D6E870911EB823B3356C4F9AE02/75AB03A2870B11EB88E44876C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.50.32.0/19 202.134.192.0/20 IPv6: 2406:2e00::/32 Signature Algorithm: sha256WithRSAEncryption 5b:06:f6:4a:a7:14:be:c4:27:9d:76:01:2f:3b:75:ea:26:24: 2b:3d:96:83:2e:8a:eb:30:b8:bc:a2:5d:8e:5d:66:64:df:24: ac:dd:bc:38:7a:7d:5e:8b:31:89:2d:f0:40:70:9b:72:ef:52: 64:91:96:58:cb:7f:82:ed:5b:6c:39:f6:a7:7b:b1:19:9a:c6: b9:89:6c:a2:3f:c2:68:1c:04:e7:b9:0b:2e:a6:e4:35:13:d2: 9d:96:d8:59:b7:19:5b:a2:43:ff:b6:b9:5d:bf:5d:79:01:b2: 16:c8:4f:29:1e:88:57:f7:c2:75:98:81:7a:e6:27:e6:28:9e: 51:0a:b5:37:79:7b:d5:2a:07:0e:3d:f6:c3:c1:83:be:ed:ab: b3:b2:c9:ba:ab:4f:23:36:a6:78:af:e9:0d:43:63:20:07:64: 8b:4f:0e:5c:6f:84:48:1b:89:38:30:48:93:00:9c:c1:4f:cf: 5f:ca:e6:3d:b9:45:20:ca:03:ae:9b:9e:96:a1:62:c2:ab:64: e4:8c:85:3f:31:1c:26:c5:ba:b7:97:e2:f1:81:74:84:70:16: bc:92:a7:75:3e:7b:8c:5e:bd:68:3f:40:53:2f:7e:06:4b:f5: f8:9f:3b:b3:a3:d2:a8:32:9c:27:38:af:83:9a:cb:43:80:4a: 26:ac:0b:1e -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBiYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Rjk2MDUxMTAvBgNVBAUTKDY4MTg4NEMwQzc1NTdFNTI2RUYyQkM0RDFFNUFCQzMz NkFFMjdGOUUwHhcNMjUwMjA2MjIyMTE4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E1MzVkZS00OTIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1AzWv1JpxIRho+kOHgK2+Ed/X6HYRPd6VcuVCZk3qLXfK46kBs9wKai9Pfqn lUtftWhoZE4qv9i53rvYJqLJurcxwiN/l5OUOeCYSc+QEW7w2pnSnkkl27qbe9dy foNUr+/Yhdon12k0OUkvzeQ8PLJK9T8OGbCOdbMO38VSyRQbjsOtOWYeUnLn23Hk jRicVe1eOAtDkRXkBCDz+Jr7nybQqG5+14n+N+oFLxlXvx1E1HsB/soYxh7YARtz uN2LieuQ9e++mYxpjibAw4svzGMGX/UPWZ7Vm/RZkmJZe0QEwXspbFXG0WLwZ4Zp fpk3aqx/yVQlTlbS/OuyaZphkwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFN7/N88R YvUckrb9z3B/DiCKpDb1MB8GA1UdIwQYMBaAFGgYhMDHVX5SbvK8TR5avDNq4n+e MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGOTYwNS8zNjY2NkQ2RTg3 MDkxMUVCODIzQjMzNTZDNEY5QUUwMi9hQmlFd01kVmZsSnU4cnhOSGxxOE0ycmlm NTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2FCaUV3TWRWZmxKdThyeE5IbHE4TTJyaWY1NC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Rjk2MDUvMzY2NjZENkU4NzA5MTFFQjgyM0IzMzU2QzRGOUFFMDIvNzVBQjAzQTI4 NzBCMTFFQjg4RTQ0ODc2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAVuMiADBATKhsAwDQQCAAIwBwMFACQGLgAwDQYJKoZIhvcN AQELBQADggEBAFsG9kqnFL7EJ512AS87deomJCs9loMuiuswuLyiXY5dZmTfJKzd vDh6fV6LMYkt8EBwm3LvUmSRlljLf4LtW2w59qd7sRmaxrmJbKI/wmgcBOe5Cy6m 5DUT0p2W2Fm3GVuiQ/+2uV2/XXkBshbITykeiFf3wnWYgXrmJ+YonlEKtTd5e9Uq Bw499sPBg77tq7OyybqrTyM2pniv6Q1DYyAHZItPDlxvhEgbiTgwSJMAnMFPz1/K 5j25RSDKA66bnpahYsKrZOSMhT8xHCbFureX4vGBdIRwFrySp3U+e4xevWg/QFMv fgZL9fifO7Oj0qgynCc4r4Oay0OASiasCx4= -----END CERTIFICATE-----Generated at Sat Apr 5 06:09:00 2025 by rpki-client