$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E5AB5A60546911EF9AE9DC1CC4F9AE02.roa File: E5AB5A60546911EF9AE9DC1CC4F9AE02.roa (raw, json) Hash identifier: bsOFqF88ssvO68Cm8Ame+jksnHjJ98Qo8WHk2fC18fw= Subject key identifier: F1:39:0C:B1:D6:BB:31:18:17:29:CA:EE:C8:D6:D7:14:30:F1:05:EC Certificate issuer: /CN=A91A5213/serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Certificate serial: BE Authority key identifier: BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E5AB5A60546911EF9AE9DC1CC4F9AE02.roa Signing time: Sat 19 Apr 2025 05:31:23 +0000 ROA not before: Sat 19 Apr 2025 05:31:23 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 45270 IP address blocks: 202.6.86.0/24 maxlen: 24 2001:df3:8ec0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:26:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 190 (0xbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A5213, serialNumber=BA5FB8591BFC0C450A4E44D6FC3E3BC7BE865416 Validity Not Before: Apr 19 05:31:23 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6803352b-525c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b9:da:5f:d4:b0:fc:50:d8:f1:18:84:ac:da: 2c:60:72:38:ee:4a:7e:7c:7d:c0:20:f6:f7:73:a6: 7f:37:ab:d1:9b:c6:a4:be:82:c9:00:b4:6e:70:06: 49:5b:33:8f:3a:7d:8e:11:82:df:e8:bc:a4:a4:d1: ae:49:87:96:bc:0a:02:66:1f:20:51:c5:7c:fc:85: 29:6e:e6:b2:9c:8e:02:c3:36:ca:81:ae:c4:21:e3: 1f:1c:5a:4b:95:04:d4:d7:94:33:ec:b7:ed:97:e2: 67:fd:d7:d7:50:a6:fa:3a:1b:7d:de:06:7c:ab:5e: 6e:ae:01:e5:6b:74:69:44:68:99:d7:cb:bc:be:86: 74:59:9f:ce:d0:5e:6c:3e:d8:e9:c8:97:2a:db:a0: fc:77:91:97:74:4b:fe:f6:f4:6b:e3:39:d7:47:68: 12:97:e9:cf:98:a8:34:de:b5:e3:c5:c3:ae:e0:2e: c6:96:2b:69:24:58:96:66:e8:d7:fe:d6:69:d3:ec: 20:c7:a8:52:ad:93:97:5a:3b:67:df:05:64:d0:37: ba:f5:b2:bd:79:bb:6f:d8:4c:16:e5:90:3b:38:74: d9:4c:44:54:0f:3f:6a:a7:ec:98:76:ca:46:12:df: 4c:31:7c:04:e6:93:45:b2:a6:08:e5:76:ba:32:24: 54:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:39:0C:B1:D6:BB:31:18:17:29:CA:EE:C8:D6:D7:14:30:F1:05:EC X509v3 Authority Key Identifier: keyid:BA:5F:B8:59:1B:FC:0C:45:0A:4E:44:D6:FC:3E:3B:C7:BE:86:54:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/ul-4WRv8DEUKTkTW_D47x76GVBY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ul-4WRv8DEUKTkTW_D47x76GVBY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5213/5543BCC405E511EFAB461C09C4F9AE02/E5AB5A60546911EF9AE9DC1CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.6.86.0/24 IPv6: 2001:df3:8ec0::/48 Signature Algorithm: sha256WithRSAEncryption 57:73:5e:9a:9c:e2:0c:a2:36:ef:2d:b1:ef:94:8c:89:cb:35: c5:fa:b3:70:2c:e3:52:e2:c3:59:58:27:ac:b6:c6:aa:fd:78: d3:7e:46:11:13:9f:2b:21:57:1e:98:43:d0:46:bc:fb:6e:64: 1b:dd:d4:a9:93:2d:9b:cf:17:30:e9:30:2e:af:63:5c:9c:b5: 37:9c:d3:eb:db:25:00:87:d1:b0:e4:45:95:d6:39:14:f7:0a: 97:c1:0c:f7:da:98:95:7c:6c:da:da:11:7d:76:47:e2:65:86: e2:53:27:2c:3f:3d:38:1f:c8:58:51:15:ad:f7:82:b4:e8:c0: 42:6b:90:a9:0f:71:b1:d9:ce:bd:f5:8a:80:87:82:a5:d6:4a: d5:1e:4c:b3:b1:ae:de:9e:e5:dd:47:80:0d:c0:98:8f:8b:22: 9c:5f:7c:1a:27:ed:78:22:40:65:81:54:bd:14:b6:a5:d7:b5: b2:5a:7f:8d:01:94:e7:e7:38:04:6c:17:4d:f9:f9:bb:34:ab: 8b:b1:51:4e:fe:8f:4a:3c:66:2d:30:27:2e:d5:83:ed:51:fd: 66:01:4a:f8:43:a2:53:f9:2e:c5:4f:a1:e6:f0:87:6e:38:f6: 3e:83:ad:85:39:74:87:65:9d:88:eb:12:dc:09:03:7c:7e:4f: aa:fb:ce:cf -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAL4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTUyMTMxMTAvBgNVBAUTKEJBNUZCODU5MUJGQzBDNDUwQTRFNDRENkZDM0UzQkM3 QkU4NjU0MTYwHhcNMjUwNDE5MDUzMTIzWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODAzMzUyYi01MjVjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvbnaX9Sw/FDY8RiErNosYHI47kp+fH3AIPb3c6Z/N6vRm8akvoLJALRucAZJ WzOPOn2OEYLf6LykpNGuSYeWvAoCZh8gUcV8/IUpbuaynI4CwzbKga7EIeMfHFpL lQTU15Qz7Lftl+Jn/dfXUKb6Oht93gZ8q15urgHla3RpRGiZ18u8voZ0WZ/O0F5s PtjpyJcq26D8d5GXdEv+9vRr4znXR2gSl+nPmKg03rXjxcOu4C7GlitpJFiWZujX /tZp0+wgx6hSrZOXWjtn3wVk0De69bK9ebtv2EwW5ZA7OHTZTERUDz9qp+yYdspG Et9MMXwE5pNFsqYI5Xa6MiRU5QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFPE5DLHW uzEYFynK7sjW1xQw8QXsMB8GA1UdIwQYMBaAFLpfuFkb/AxFCk5E1vw+O8e+hlQW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTIxMy81NTQzQkNDNDA1 RTUxMUVGQUI0NjFDMDlDNEY5QUUwMi91bC00V1J2OERFVUtUa1RXX0Q0N3g3NkdW QlkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3VsLTRXUnY4REVVS1RrVFdfRDQ3eDc2R1ZCWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTUyMTMvNTU0M0JDQzQwNUU1MTFFRkFCNDYxQzA5QzRGOUFFMDIvRTVBQjVBNjA1 NDY5MTFFRjlBRTlEQzFDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADKBlYwDwQCAAIwCQMHACABDfOOwDANBgkqhkiG9w0BAQsF AAOCAQEAV3NempziDKI27y2x75SMics1xfqzcCzjUuLDWVgnrLbGqv14035GEROf KyFXHphD0Ea8+25kG93UqZMtm88XMOkwLq9jXJy1N5zT69slAIfRsORFldY5FPcK l8EM99qYlXxs2toRfXZH4mWG4lMnLD89OB/IWFEVrfeCtOjAQmuQqQ9xsdnOvfWK gIeCpdZK1R5Ms7Gu3p7l3UeADcCYj4sinF98GifteCJAZYFUvRS2pde1slp/jQGU 5+c4BGwXTfn5uzSri7FRTv6PSjxmLTAnLtWD7VH9ZgFK+EOiU/kuxU+h5vCHbjj2 PoOthTl0h2WdiOsS3AkDfH5PqvvOzw== -----END CERTIFICATE-----Generated at Tue Jun 3 23:53:13 2025 by rpki-client