$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/54467164E0A711EC8F4D5B5FC4F9AE02.roa File: 54467164E0A711EC8F4D5B5FC4F9AE02.roa (raw, json) Hash identifier: HwkSTw7raizrXpljDXnHXfZQCr+VPlFOvS2ci48bY0A= Subject key identifier: B7:0C:85:89:33:CA:3A:8E:D3:C8:58:59:EC:93:0B:08:E2:0D:11:C0 Certificate issuer: /CN=A91A2F88/serialNumber=3694283D213A5E567958E46CDBD812B5CC729D71 Certificate serial: 02EC Authority key identifier: 36:94:28:3D:21:3A:5E:56:79:58:E4:6C:DB:D8:12:B5:CC:72:9D:71 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/54467164E0A711EC8F4D5B5FC4F9AE02.roa Signing time: Thu 15 May 2025 01:57:56 +0000 ROA not before: Thu 15 May 2025 01:57:56 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 149848 IP address blocks: 103.188.86.0/23 maxlen: 23 103.188.86.0/24 maxlen: 24 103.188.87.0/24 maxlen: 24 2400:a1a0::/32 maxlen: 32 2400:a1a0:1000::/36 maxlen: 36 2400:a1a0:2000::/36 maxlen: 36 2400:a1a0:3000::/36 maxlen: 36 2400:a1a0:4000::/36 maxlen: 36 2400:a1a0:5000::/36 maxlen: 36 2400:a1a0:6000::/36 maxlen: 36 2400:a1a0:8000::/36 maxlen: 36 2400:a1a0:9000::/36 maxlen: 36 2400:a1a0:a000::/36 maxlen: 36 2400:a1a0:b000::/36 maxlen: 36 2400:a1a0:c000::/36 maxlen: 36 2400:a1a0:d000::/36 maxlen: 36 2400:a1a0:e000::/36 maxlen: 36 2400:a1a0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.crl rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Jun 2025 23:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 748 (0x2ec) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A2F88, serialNumber=3694283D213A5E567958E46CDBD812B5CC729D71 Validity Not Before: May 15 01:57:56 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68254a23-c485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b8:4d:15:62:0f:56:92:2c:76:3d:e4:cc:30: 21:88:f3:3f:99:aa:32:8e:1a:79:7f:85:0b:0e:bf: 2b:be:cd:71:e6:3d:f6:b2:32:bd:ff:86:c2:84:09: 18:c8:9c:cf:f3:70:52:e7:70:f1:03:91:f9:96:bd: 1e:99:d4:f1:38:cc:f2:c7:ac:ec:89:4b:03:a1:6d: 58:22:9d:16:b3:fd:64:88:49:2a:3f:27:b4:55:7a: b8:64:c9:05:c7:12:c7:33:89:ae:22:b1:c6:c0:66: 42:0e:22:a0:3a:c1:71:dc:b8:20:b1:bd:11:f6:24: c9:c1:c4:30:4e:06:7d:44:6f:54:7a:7e:06:79:1b: 79:be:1b:ec:ca:b8:53:7f:23:1c:e2:be:77:1b:56: 3e:1f:27:b7:f9:23:c7:08:51:76:25:fc:b1:81:7c: a4:89:df:0f:ff:3a:ae:10:fe:aa:18:32:17:ba:b1: 7b:8d:39:55:5a:f4:77:68:95:b6:48:23:3a:ca:b8: 8c:3f:e1:17:d8:9c:7c:08:b2:dd:41:39:3f:41:d2: 96:5c:53:1d:93:37:69:af:b2:47:fc:08:52:d9:02: 85:0b:8a:f1:77:1b:b1:c5:63:25:75:8e:18:05:01: ef:48:d3:2c:09:97:18:2a:5b:d0:6c:5a:46:ae:7a: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0C:85:89:33:CA:3A:8E:D3:C8:58:59:EC:93:0B:08:E2:0D:11:C0 X509v3 Authority Key Identifier: keyid:36:94:28:3D:21:3A:5E:56:79:58:E4:6C:DB:D8:12:B5:CC:72:9D:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/NpQoPSE6XlZ5WORs29gStcxynXE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NpQoPSE6XlZ5WORs29gStcxynXE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2F88/4C7DA3C0E0A311EC8F9C0E58C4F9AE02/54467164E0A711EC8F4D5B5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.188.86.0/23 IPv6: 2400:a1a0::/32 Signature Algorithm: sha256WithRSAEncryption 6b:c7:de:47:5a:85:ca:74:fe:a6:52:c6:d4:a3:29:53:31:a6: 8a:5d:2a:f5:0c:43:01:27:f6:83:96:08:fc:8b:e7:b9:d9:8a: 30:32:d2:ca:ae:3e:9c:e6:da:3b:49:14:43:f8:87:95:64:26: 03:1f:06:1a:2f:45:b5:fe:bf:dc:1f:03:2e:11:60:21:64:ba: 0e:8a:55:98:23:30:b2:c1:4f:6c:f0:ae:3d:9d:b2:c0:77:be: b6:72:9e:29:23:ed:a1:62:ec:06:e3:1a:bf:f9:66:f7:b2:95: 97:ec:6d:90:ef:8e:95:26:ad:a2:13:c3:01:d1:91:96:34:94: c9:86:db:ca:11:1e:09:52:ad:f1:e5:82:fa:3b:44:cf:c7:94: e6:15:5c:55:95:f9:19:80:f9:dc:1b:6a:31:72:8b:bc:19:53: 03:58:11:4c:0f:b9:0c:15:ce:73:1b:d9:fd:36:3a:56:2c:1b: 49:6e:a8:74:74:31:3a:20:d5:d6:7a:fe:e3:3e:bd:4a:fa:d3: 3b:e3:4e:61:dd:c4:26:c0:45:9e:8a:08:02:f3:ff:72:91:2b: 7f:ab:1e:02:9a:04:01:00:21:30:96:1d:d8:37:3b:c5:8d:33: 14:5a:d3:c6:fb:e8:5b:a3:8a:2a:fd:b8:b5:71:fd:47:09:99: ae:af:65:09 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAuwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTJGODgxMTAvBgNVBAUTKDM2OTQyODNEMjEzQTVFNTY3OTU4RTQ2Q0RCRDgxMkI1 Q0M3MjlENzEwHhcNMjUwNTE1MDE1NzU2WhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI1NGEyMy1jNDg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbhNFWIPVpIsdj3kzDAhiPM/maoyjhp5f4ULDr8rvs1x5j32sjK9/4bChAkY yJzP83BS53DxA5H5lr0emdTxOMzyx6zsiUsDoW1YIp0Ws/1kiEkqPye0VXq4ZMkF xxLHM4muIrHGwGZCDiKgOsFx3Lggsb0R9iTJwcQwTgZ9RG9Uen4GeRt5vhvsyrhT fyMc4r53G1Y+Hye3+SPHCFF2JfyxgXykid8P/zquEP6qGDIXurF7jTlVWvR3aJW2 SCM6yriMP+EX2Jx8CLLdQTk/QdKWXFMdkzdpr7JH/AhS2QKFC4rxdxuxxWMldY4Y BQHvSNMsCZcYKlvQbFpGrnqN7wIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLcMhYkz yjqO08hYWeyTCwjiDRHAMB8GA1UdIwQYMBaAFDaUKD0hOl5WeVjkbNvYErXMcp1x MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMkY4OC80QzdEQTNDMEUw QTMxMUVDOEY5QzBFNThDNEY5QUUwMi9OcFFvUFNFNlhsWjVXT1JzMjlnU3RjeHlu WEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL05wUW9QU0U2WGxaNVdPUnMyOWdTdGN4eW5YRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTJGODgvNEM3REEzQzBFMEEzMTFFQzhGOUMwRTU4QzRGOUFFMDIvNTQ0NjcxNjRF MEE3MTFFQzhGNEQ1QjVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnvFYwDQQCAAIwBwMFACQAoaAwDQYJKoZIhvcNAQELBQAD ggEBAGvH3kdahcp0/qZSxtSjKVMxpopdKvUMQwEn9oOWCPyL57nZijAy0squPpzm 2jtJFEP4h5VkJgMfBhovRbX+v9wfAy4RYCFkug6KVZgjMLLBT2zwrj2dssB3vrZy nikj7aFi7AbjGr/5ZveylZfsbZDvjpUmraITwwHRkZY0lMmG28oRHglSrfHlgvo7 RM/HlOYVXFWV+RmA+dwbajFyi7wZUwNYEUwPuQwVznMb2f02OlYsG0luqHR0MTog 1dZ6/uM+vUr60zvjTmHdxCbARZ6KCALz/3KRK3+rHgKaBAEAITCWHdg3O8WNMxRa 08b76Fujiir9uLVx/UcJma6vZQk= -----END CERTIFICATE-----Generated at Mon Jun 9 03:09:38 2025 by rpki-client