$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E50E6E14B63411EDB4416786C4F9AE02.roa File: E50E6E14B63411EDB4416786C4F9AE02.roa (raw, json) Hash identifier: FmtBKEomkwEsg09oOugyzChandkcrHCKNwzoO1agNsg= Subject key identifier: 1D:7A:6F:2A:3A:D9:F9:41:63:9F:03:4D:A0:DC:00:E6:2B:50:97:59 Certificate issuer: /CN=A91FDD4D/serialNumber=72AFBAEBC9ECDDA2EED2D49B13E6048EA3E41E60 Certificate serial: 217C Authority key identifier: 72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E50E6E14B63411EDB4416786C4F9AE02.roa Signing time: Tue 04 Mar 2025 16:33:16 +0000 ROA not before: Tue 04 Mar 2025 16:33:16 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 38330 IP address blocks: 103.232.252.0/22 maxlen: 22 125.214.80.0/21 maxlen: 21 203.83.4.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 15:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 8572 (0x217c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDD4D Validity Not Before: Mar 4 16:33:16 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67c72b4b-dcce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:37:6a:58:7f:0b:45:4f:18:cb:cb:dc:36: e9:21:99:79:54:b6:1a:70:15:f6:46:ba:51:a3:88: 16:40:33:cf:f5:4a:37:5b:d4:da:13:57:fe:34:35: e0:43:68:84:6a:24:bc:ab:c1:dc:56:0a:ce:8c:48: e2:83:83:df:0d:7c:73:39:7e:00:7a:93:f2:cd:89: 75:e6:33:82:a2:da:2c:0b:9a:52:05:e1:e5:b3:ce: fb:7f:f3:58:18:5d:fb:7a:e7:ed:f6:4b:45:c7:fe: 28:8b:17:ca:35:03:42:11:e0:7d:e2:ec:f1:9a:a5: e2:f1:ee:44:f0:91:be:b6:39:bb:33:9c:6c:42:42: f4:54:6c:f0:8c:6e:e7:71:c0:7a:d6:07:7e:41:ab: c0:c7:0c:6e:53:e9:f3:40:64:89:50:06:a0:c6:ec: 07:e7:37:ef:c4:00:1f:c5:c3:65:62:1f:7c:34:f1: 1b:09:8a:ec:b9:85:7b:ee:c3:db:8f:29:bb:45:d5: c4:03:f0:8d:d7:10:79:a1:a0:f8:0f:84:08:7a:1a: eb:06:e3:55:1c:14:14:af:9c:2f:d0:40:06:f9:28: 06:84:c5:e1:e0:e8:4f:99:e7:8b:e9:ca:c0:c8:6c: 9c:b8:d2:54:f9:d9:dc:04:75:8b:c2:db:c9:fd:5f: 18:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:7A:6F:2A:3A:D9:F9:41:63:9F:03:4D:A0:DC:00:E6:2B:50:97:59 X509v3 Authority Key Identifier: keyid:72:AF:BA:EB:C9:EC:DD:A2:EE:D2:D4:9B:13:E6:04:8E:A3:E4:1E:60 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/cq-668ns3aLu0tSbE-YEjqPkHmA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cq-668ns3aLu0tSbE-YEjqPkHmA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDD4D/BAE108C4EA6011E58815770CC4F9AE02/E50E6E14B63411EDB4416786C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.232.252.0/22 125.214.80.0/21 203.83.4.0/22 Signature Algorithm: sha256WithRSAEncryption 13:e9:44:fc:ee:1a:11:30:74:c1:d3:e3:c1:cc:23:b2:e4:4e: 2c:f2:bc:60:81:4e:03:26:77:2a:da:63:45:a8:5c:97:66:21: 4e:a2:8b:52:17:f2:0c:5d:29:56:ec:e7:06:ba:5a:a9:f9:c4: e3:7b:ed:c2:1e:91:ec:bf:76:2d:c5:b0:f1:c2:76:58:c8:3c: 60:80:d7:f3:27:49:64:29:a3:f3:ed:70:e8:01:30:09:31:3c: 6f:99:42:ac:56:4a:e3:51:49:a6:51:94:0a:03:7f:96:dc:c4: 70:3b:9f:69:0c:e9:17:e1:05:f0:6c:eb:a2:1b:5b:85:b0:00: 24:ef:ca:6a:5f:1c:b8:a7:5f:4b:ae:ab:88:5c:b7:d1:ab:35: 28:53:ef:65:28:75:10:4c:c5:51:6a:6a:14:ac:8b:fa:86:e8: de:2a:3f:4a:09:45:c7:53:83:b3:17:25:f8:c7:88:49:ca:ff: fb:9a:58:2b:f1:66:fb:c3:3a:77:94:c7:1a:2c:86:0c:61:da: 3c:40:d4:ee:06:e9:e3:d2:27:92:95:3d:24:ee:01:79:16:16: 3e:c8:36:c2:1d:66:ce:8e:95:44:bf:62:53:e1:9c:d0:49:ef: 4c:d6:34:c8:e4:83:c0:73:22:43:28:e6:88:4b:cc:a2:94:f5: 04:89:1a:48 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICIXwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRENEQxMTAvBgNVBAUTKDcyQUZCQUVCQzlFQ0REQTJFRUQyRDQ5QjEzRTYwNDhF QTNFNDFFNjAwHhcNMjUwMzA0MTYzMzE2WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M3MmI0Yi1kY2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2383alh/C0VPGMvL3DbpIZl5VLYacBX2RrpRo4gWQDPP9Uo3W9TaE1f+NDXg Q2iEaiS8q8HcVgrOjEjig4PfDXxzOX4AepPyzYl15jOCotosC5pSBeHls877f/NY GF37euft9ktFx/4oixfKNQNCEeB94uzxmqXi8e5E8JG+tjm7M5xsQkL0VGzwjG7n ccB61gd+QavAxwxuU+nzQGSJUAagxuwH5zfvxAAfxcNlYh98NPEbCYrsuYV77sPb jym7RdXEA/CN1xB5oaD4D4QIehrrBuNVHBQUr5wv0EAG+SgGhMXh4OhPmeeL6crA yGycuNJU+dncBHWLwtvJ/V8YGwIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFB16byo6 2flBY58DTaDcAOYrUJdZMB8GA1UdIwQYMBaAFHKvuuvJ7N2i7tLUmxPmBI6j5B5g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREQ0RC9CQUUxMDhDNEVB NjAxMUU1ODgxNTc3MENDNEY5QUUwMi9jcS02NjhuczNhTHUwdFNiRS1ZRWpxUGtI bUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2NxLTY2OG5zM2FMdTB0U2JFLVlFanFQa0htQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRENEQvQkFFMTA4QzRFQTYwMTFFNTg4MTU3NzBDQzRGOUFFMDIvRTUwRTZFMTRC NjM0MTFFREI0NDE2Nzg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJn6PwDBAN91lADBALLUwQwDQYJKoZIhvcNAQELBQADggEB ABPpRPzuGhEwdMHT48HMI7LkTizyvGCBTgMmdyraY0WoXJdmIU6ii1IX8gxdKVbs 5wa6Wqn5xON77cIekey/di3FsPHCdljIPGCA1/MnSWQpo/PtcOgBMAkxPG+ZQqxW SuNRSaZRlAoDf5bcxHA7n2kM6RfhBfBs66IbW4WwACTvympfHLinX0uuq4hct9Gr NShT72UodRBMxVFqahSsi/qG6N4qP0oJRcdTg7MXJfjHiEnK//uaWCvxZvvDOneU xxoshgxh2jxA1O4G6ePSJ5KVPSTuAXkWFj7INsIdZs6OlUS/YlPhnNBJ70zWNMjk g8BzIkMo5ohLzKKU9QSJGkg= -----END CERTIFICATE-----Generated at Thu Apr 10 10:51:23 2025 by rpki-client