$ rpki-client -vvf rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/5740BDF8370111F094BF7862C4F9AE02.roa File: 5740BDF8370111F094BF7862C4F9AE02.roa (raw, json) Hash identifier: /GfdIIe6m1dYDx7Tm/mUgCqzxCNCLDFcedZ67s1StUY= Subject key identifier: D2:3E:3C:44:99:A4:CA:A6:A9:46:C4:4B:DE:69:78:73:76:BB:36:C8 Certificate issuer: /CN=A91ADD64/serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Certificate serial: C3 Authority key identifier: FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/5740BDF8370111F094BF7862C4F9AE02.roa Signing time: Thu 22 May 2025 11:38:55 +0000 ROA not before: Thu 22 May 2025 11:38:55 +0000 ROA not after: Thu 30 Dec 2027 00:00:00 +0000 asID: 132384 IP address blocks: 167.219.50.0/23 maxlen: 24 167.219.52.0/23 maxlen: 24 167.219.54.0/24 maxlen: 24 167.219.56.0/23 maxlen: 24 167.219.58.0/23 maxlen: 24 167.219.62.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:31:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 195 (0xc3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91ADD64, serialNumber=FCA9355C1ABE404F3F3CF5192FD34B125A00BF1B Validity Not Before: May 22 11:38:55 2025 GMT Not After : Dec 30 00:00:00 2027 GMT Subject: CN=682f0cce-954e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:52:34:b5:42:e4:3f:55:a9:6b:ae:c0:58:cf: 75:82:60:6c:4f:93:5b:63:21:bd:30:ae:4e:23:d3: 33:53:ce:96:42:dd:3a:57:c2:6c:5e:3b:3a:40:44: 41:2c:08:5a:cf:e4:13:50:d5:14:2f:38:f7:ed:8d: 8f:62:ac:35:c2:e0:af:7a:59:0a:ba:92:21:4b:5a: a2:8b:26:07:1e:e6:ce:51:e6:e1:f3:7c:42:48:08: 25:6f:79:1c:2e:be:d7:b9:23:31:03:fe:5d:13:ff: e5:4c:5c:17:f7:75:56:b2:6e:9a:4e:01:cd:b3:43: 85:5d:e0:e2:d6:4d:31:c1:5f:1b:41:d2:7d:0d:64: 24:8c:e7:d1:d5:d8:6f:86:3c:d0:c4:6b:7c:2a:9f: b5:5d:5d:af:85:c8:04:5b:5e:12:76:46:be:cc:75: 6e:4a:e6:1e:49:1c:67:67:a9:f9:03:e9:5f:49:2f: de:75:fd:e8:8f:a1:ea:94:6a:24:d7:2a:b7:de:a6: 9b:62:71:d8:9d:85:d4:fc:cf:94:fb:94:12:e6:77: 27:7c:31:0d:15:13:27:93:2e:e0:ec:52:3f:a7:ca: ec:51:15:61:f1:6e:33:e5:99:87:ee:ef:cc:46:16: 27:0a:40:2e:04:70:4d:f1:20:9a:3d:95:88:6e:c2: 5a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3E:3C:44:99:A4:CA:A6:A9:46:C4:4B:DE:69:78:73:76:BB:36:C8 X509v3 Authority Key Identifier: keyid:FC:A9:35:5C:1A:BE:40:4F:3F:3C:F5:19:2F:D3:4B:12:5A:00:BF:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/_Kk1XBq-QE8_PPUZL9NLEloAvxs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/_Kk1XBq-QE8_PPUZL9NLEloAvxs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ADD64/4EB2B428134B11EF94424D3DC4F9AE02/5740BDF8370111F094BF7862C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 167.219.50.0-167.219.54.255 167.219.56.0/22 167.219.62.0/23 Signature Algorithm: sha256WithRSAEncryption 7d:84:79:4c:6a:15:70:f2:de:c2:91:6f:66:5b:59:fa:be:f1: 1a:09:79:62:59:33:80:f2:44:96:98:40:a1:79:03:07:92:c6: 25:c2:66:fa:fe:8b:06:22:f3:be:0c:0e:b8:9c:5a:27:f2:e5: 1d:07:90:36:ae:61:39:8b:16:65:0d:b3:0a:3d:eb:a3:23:10: 8d:dc:6c:67:c9:3b:1e:81:04:e6:76:44:ab:40:bc:73:2b:8d: 86:f2:a0:a7:65:eb:57:81:4d:3a:6f:2f:4d:a5:a1:37:bf:fe: 8a:8d:cd:80:71:05:f8:98:18:6d:2d:1e:be:da:94:a0:df:d1: 38:c9:08:d0:28:ac:ff:be:ee:dd:1b:31:9a:64:7d:61:5c:84: 6c:03:e0:c9:ea:20:9e:34:f2:17:70:cb:92:53:23:f8:62:75: 87:97:ac:bb:b0:97:70:cc:95:6e:67:30:f3:a6:25:89:ad:82: a6:09:52:60:1e:16:88:ea:ff:49:a2:c8:c4:0a:5b:25:3e:a0: 51:a9:62:68:e2:de:4a:7f:b0:1b:cc:84:e6:75:e3:66:11:de: b4:be:19:6b:67:f6:3a:02:67:7a:6b:0d:1a:1b:42:17:f5:98: 65:cd:d5:3f:a1:4c:37:06:c9:14:b8:39:3d:b5:63:84:18:04: bb:ab:c6:88 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICAMMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QURENjQxMTAvBgNVBAUTKEZDQTkzNTVDMUFCRTQwNEYzRjNDRjUxOTJGRDM0QjEy NUEwMEJGMUIwHhcNMjUwNTIyMTEzODU1WhcNMjcxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJmMGNjZS05NTRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0FI0tULkP1Wpa67AWM91gmBsT5NbYyG9MK5OI9MzU86WQt06V8JsXjs6QERB LAhaz+QTUNUULzj37Y2PYqw1wuCvelkKupIhS1qiiyYHHubOUebh83xCSAglb3kc Lr7XuSMxA/5dE//lTFwX93VWsm6aTgHNs0OFXeDi1k0xwV8bQdJ9DWQkjOfR1dhv hjzQxGt8Kp+1XV2vhcgEW14Sdka+zHVuSuYeSRxnZ6n5A+lfSS/edf3oj6HqlGok 1yq33qabYnHYnYXU/M+U+5QS5ncnfDENFRMnky7g7FI/p8rsURVh8W4z5ZmH7u/M RhYnCkAuBHBN8SCaPZWIbsJa3QIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFNI+PESZ pMqmqUbES95peHN2uzbIMB8GA1UdIwQYMBaAFPypNVwavkBPPzz1GS/TSxJaAL8b MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBREQ2NC80RUIyQjQyODEz NEIxMUVGOTQ0MjREM0RDNEY5QUUwMi9fS2sxWEJxLVFFOF9QUFVaTDlOTEVsb0F2 eHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL19LazFYQnEtUUU4X1BQVVpMOU5MRWxvQXZ4cy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QURENjQvNEVCMkI0MjgxMzRCMTFFRjk0NDI0RDNEQzRGOUFFMDIvNTc0MEJERjgz NzAxMTFGMDk0QkY3ODYyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEAafbMgMEAKfbNgMEAqfbOAMEAafbPjANBgkqhkiG9w0B AQsFAAOCAQEAfYR5TGoVcPLewpFvZltZ+r7xGgl5YlkzgPJElphAoXkDB5LGJcJm +v6LBiLzvgwOuJxaJ/LlHQeQNq5hOYsWZQ2zCj3royMQjdxsZ8k7HoEE5nZEq0C8 cyuNhvKgp2XrV4FNOm8vTaWhN7/+io3NgHEF+JgYbS0evtqUoN/ROMkI0Cis/77u 3RsxmmR9YVyEbAPgyeognjTyF3DLklMj+GJ1h5esu7CXcMyVbmcw86Ylia2CpglS YB4WiOr/SaLIxApbJT6gUaliaOLeSn+wG8yE5nXjZhHetL4Za2f2OgJnemsNGhtC F/WYZc3VP6FMNwbJFLg5PbVjhBgEu6vGiA== -----END CERTIFICATE-----Generated at Wed Jun 4 12:21:48 2025 by rpki-client