$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D495A572799111EE806FBC0DC4F9AE02.roa File: D495A572799111EE806FBC0DC4F9AE02.roa (raw, json) Hash identifier: YBtYA9vd73NtkU0fGr9+a28eSDxPNtj5N04VqNvDV+8= Subject key identifier: FE:E1:5C:84:5F:49:4F:92:FB:7A:17:B8:A6:E8:20:05:2A:57:FA:2C Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4B28 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D495A572799111EE806FBC0DC4F9AE02.roa Signing time: Sat 17 May 2025 07:50:52 +0000 ROA not before: Sat 17 May 2025 07:50:52 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150895 IP address blocks: 103.67.162.0/23 maxlen: 23 103.72.56.0/23 maxlen: 23 103.75.76.0/23 maxlen: 23 103.78.2.0/23 maxlen: 23 103.116.52.0/23 maxlen: 24 103.237.86.0/23 maxlen: 24 163.223.210.0/23 maxlen: 23 163.227.230.0/23 maxlen: 24 2401:1760::/48 maxlen: 48 2401:37e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:35:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19240 (0x4b28) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: May 17 07:50:52 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=68283fdc-af85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e6:6c:d8:7b:2e:d4:83:e9:22:94:47:4c:47: 06:c3:d7:38:42:05:20:f5:ef:0e:10:06:2f:6c:c0: 31:a7:45:09:26:5e:4d:72:17:cf:f9:90:1e:8f:2c: 4b:49:08:47:67:3b:f0:8e:7f:62:6b:e3:c7:b5:b5: 3c:86:7b:16:cb:c3:a5:40:29:66:25:c1:b1:cb:95: 03:aa:49:2a:dc:d7:b3:b7:1b:47:5d:92:6d:00:89: 83:96:87:f8:53:9d:a5:42:ef:64:e0:3c:04:5c:57: 95:0d:54:06:8f:07:8b:02:1f:9e:f8:17:5a:c6:b1: 62:8d:0e:67:14:b8:22:03:d6:a6:65:1e:63:f0:f7: 88:3b:58:11:d2:a3:53:27:00:7c:7e:24:56:d5:36: e7:b5:11:6b:c7:83:24:46:f7:ae:a4:cf:db:92:7b: 8f:e6:63:ea:c7:db:4a:94:21:02:a3:5c:4a:53:01: 43:1f:a4:63:39:f1:0b:0a:3a:e7:e4:f3:fe:89:fe: ec:bf:cd:5d:c8:70:0c:f7:3e:02:e3:8b:03:22:5c: 8a:70:7a:9c:36:5b:11:8a:01:37:a2:f0:8f:c3:7d: 4a:d5:14:ae:22:69:79:1c:6e:c2:2f:b8:bb:0c:42: 71:9e:fc:31:92:e6:b8:75:9c:03:6f:15:00:09:38: 2b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:E1:5C:84:5F:49:4F:92:FB:7A:17:B8:A6:E8:20:05:2A:57:FA:2C X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D495A572799111EE806FBC0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.162.0/23 103.72.56.0/23 103.75.76.0/23 103.78.2.0/23 103.116.52.0/23 103.237.86.0/23 163.223.210.0/23 163.227.230.0/23 IPv6: 2401:1760::/48 2401:37e0::/48 Signature Algorithm: sha256WithRSAEncryption 50:91:61:cb:41:bc:d4:e2:b2:c4:a1:78:16:cf:9a:53:3f:0a: 34:81:74:e0:ce:43:87:85:7b:2b:d6:d8:ed:4a:4e:01:b6:a9: ee:2a:5f:17:7b:20:a6:a9:5f:72:36:2a:2e:81:ef:72:49:d8: d0:f6:70:ce:b4:3d:07:dc:dc:2b:c5:eb:2f:be:8c:9f:1c:23: bb:f0:06:a9:cf:da:96:23:88:de:da:dd:2c:46:03:89:83:8d: 8e:91:74:5d:96:34:64:e1:4c:64:bc:73:09:34:98:ff:63:85: 84:c7:7a:63:14:6c:41:72:77:30:72:8e:19:3f:63:9a:19:40: 78:98:1e:c6:63:df:7d:10:31:f4:7c:3b:7b:0f:71:02:71:e0: 72:08:f1:29:40:0e:2b:6c:8b:d5:e2:a1:e9:3c:6e:b0:5b:5c: 3f:43:b7:d0:27:e8:a5:43:d9:b7:db:82:48:79:49:1d:83:6b: 0b:8b:d8:91:fd:84:45:41:0d:51:ab:34:55:78:f1:21:2a:9f: a1:0c:48:a8:17:e7:f3:50:37:46:1c:a1:39:76:74:c1:e1:d1: a9:62:05:c0:3d:89:fd:fa:a0:08:a1:6b:55:74:e1:2f:75:e8: 1c:ca:8e:a4:af:2f:52:07:48:5b:73:6a:c1:1f:de:26:93:26: 28:fb:99:70 -----BEGIN CERTIFICATE----- MIIFtTCCBJ2gAwIBAgICSygwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwNTE3MDc1MDUyWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI4M2ZkYy1hZjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1eZs2Hsu1IPpIpRHTEcGw9c4QgUg9e8OEAYvbMAxp0UJJl5NchfP+ZAejyxL SQhHZzvwjn9ia+PHtbU8hnsWy8OlQClmJcGxy5UDqkkq3NeztxtHXZJtAImDlof4 U52lQu9k4DwEXFeVDVQGjweLAh+e+BdaxrFijQ5nFLgiA9amZR5j8PeIO1gR0qNT JwB8fiRW1TbntRFrx4MkRveupM/bknuP5mPqx9tKlCECo1xKUwFDH6RjOfELCjrn 5PP+if7sv81dyHAM9z4C44sDIlyKcHqcNlsRigE3ovCPw31K1RSuIml5HG7CL7i7 DEJxnvwxkua4dZwDbxUACTgrBwIDAQABo4IC2TCCAtUwHQYDVR0OBBYEFP7hXIRf SU+S+3oXuKboIAUqV/osMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDQ5NUE1NzI3 OTkxMTFFRTgwNkZCQzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwYwYIKwYBBQUHAQcBAf8E VDBSMDYEAgABMDADBAFnQ6IDBAFnSDgDBAFnS0wDBAFnTgIDBAFndDQDBAFn7VYD BAGj39IDBAGj4+YwGAQCAAIwEgMHACQBF2AAAAMHACQBN+AAADANBgkqhkiG9w0B AQsFAAOCAQEAUJFhy0G81OKyxKF4Fs+aUz8KNIF04M5Dh4V7K9bY7UpOAbap7ipf F3sgpqlfcjYqLoHvcknY0PZwzrQ9B9zcK8XrL76Mnxwju/AGqc/aliOI3trdLEYD iYONjpF0XZY0ZOFMZLxzCTSY/2OFhMd6YxRsQXJ3MHKOGT9jmhlAeJgexmPffRAx 9Hw7ew9xAnHgcgjxKUAOK2yL1eKh6TxusFtcP0O30CfopUPZt9uCSHlJHYNrC4vY kf2ERUENUas0VXjxISqfoQxIqBfn81A3RhyhOXZ0weHRqWIFwD2J/fqgCKFrVXTh L3XoHMqOpK8vUgdIW3NqwR/eJpMmKPuZcA== -----END CERTIFICATE-----Generated at Tue Jun 3 23:44:37 2025 by rpki-client