$ rpki-client -vvf rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/57422FE8E0D111EAA04F6C2DC4F9AE02.roa File: 57422FE8E0D111EAA04F6C2DC4F9AE02.roa (raw, json) Hash identifier: azG9+zsiLDhAUqM7p+rm2GUFPqeXgedKf8uLYwG6GGQ= Subject key identifier: DD:91:9A:FC:5F:AF:D0:C4:3E:2C:35:B9:14:A4:29:FF:E1:EA:6E:C5 Certificate issuer: /CN=A91B7165/serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Certificate serial: 0A9C Authority key identifier: B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/57422FE8E0D111EAA04F6C2DC4F9AE02.roa Signing time: Thu 10 Apr 2025 19:58:48 +0000 ROA not before: Thu 10 Apr 2025 19:58:48 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 136267 IP address blocks: 103.85.196.0/22 maxlen: 24 2400:afc0::/32 maxlen: 32 2400:afc0:196::/48 maxlen: 48 2400:afc0:197::/48 maxlen: 48 2400:afc0:198::/48 maxlen: 48 2400:afc0:199::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 19:34:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2716 (0xa9c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B7165, serialNumber=B0A424CE39C78C65DBF2FFC02ADB8E354036C9C0 Validity Not Before: Apr 10 19:58:48 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67f822f8-9f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:1c:25:a5:73:c4:d3:83:bb:7d:21:a9:86:bb: 9b:75:e5:1a:de:06:0a:5b:6f:84:a0:70:04:fe:26: fd:5b:76:13:9c:aa:a9:3c:2e:46:d7:ec:8a:a0:85: 00:b7:dc:a5:09:6a:59:6d:8a:81:a1:28:0f:e5:79: 93:12:6a:5d:ee:f5:cc:be:89:f6:c7:a4:c2:2d:78: 58:da:36:ee:ca:f9:e2:36:58:ac:9a:8b:9e:6c:e0: d1:9a:7c:b5:fa:71:6a:89:f5:9e:5c:ee:6c:b8:8c: 86:27:6b:75:d5:d7:25:03:ca:af:c7:31:25:fd:9d: e0:fb:97:d1:93:29:04:b1:26:93:61:f4:89:00:d1: a6:20:c4:32:10:c9:26:80:1c:b3:fd:75:25:0d:ff: b1:79:cc:f0:dc:a8:3e:c6:10:1f:27:6a:85:d2:85: b7:d6:48:d6:91:11:45:01:e8:ff:92:d1:08:db:9c: 97:23:34:41:7e:06:03:7f:14:49:f4:62:50:fe:2c: 57:61:b0:7a:31:b1:b5:41:38:e0:6d:1a:c2:89:b4: f5:15:a1:d9:48:b6:22:88:c5:13:b7:5d:50:0c:01: 46:ce:7f:92:52:a1:34:7a:c9:0a:22:d0:c9:03:f2: e5:0c:15:c7:cc:c8:6c:b3:bd:03:bc:5f:ac:d0:a7: 6e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:91:9A:FC:5F:AF:D0:C4:3E:2C:35:B9:14:A4:29:FF:E1:EA:6E:C5 X509v3 Authority Key Identifier: keyid:B0:A4:24:CE:39:C7:8C:65:DB:F2:FF:C0:2A:DB:8E:35:40:36:C9:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/sKQkzjnHjGXb8v_AKtuONUA2ycA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sKQkzjnHjGXb8v_AKtuONUA2ycA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B7165/215FEFB455B211EA8F35BE44C4F9AE02/57422FE8E0D111EAA04F6C2DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.85.196.0/22 IPv6: 2400:afc0::/32 Signature Algorithm: sha256WithRSAEncryption 03:40:95:1d:bc:2f:00:63:52:4e:57:57:a1:e6:39:61:d9:6e: 5a:e9:cb:77:5c:46:6d:12:40:26:de:e8:f0:22:2c:c1:d7:30: 0b:cc:92:2f:0c:3d:38:a8:1c:50:13:9a:ea:b7:3b:11:a0:cf: af:ca:10:13:c3:a1:9f:65:aa:45:7a:86:e5:0a:3e:7a:7c:8a: 72:64:a9:a6:33:41:95:37:f9:58:0b:2a:2e:fd:d2:5f:75:82: 17:69:6a:f8:14:59:0c:0c:e7:cb:fd:d6:d9:1d:54:c1:16:78: c8:a8:11:7c:78:f4:a9:c2:40:22:73:7b:68:60:ba:53:0d:fb: 15:79:61:59:65:6b:a4:80:7c:54:53:96:e0:68:6a:7b:51:0e: bb:4a:db:38:07:2d:a1:b1:36:46:39:4b:53:e8:3f:48:8e:0c: 0f:f9:d6:7c:c5:5d:13:c9:6f:68:7f:54:02:7b:bc:6d:ba:d8: 1c:02:43:cb:c0:4b:9c:30:37:df:09:59:bf:78:e4:ad:c5:ac: f8:aa:16:96:c2:fd:a7:92:ff:f0:9e:e6:d0:19:24:0c:cc:77: f5:e4:b1:a0:4c:23:f3:d4:4b:6e:f9:a1:60:0d:82:cf:26:1d: 6e:c6:1f:f2:37:0f:7f:53:0a:ef:8e:b1:6d:a3:96:e1:aa:ed: 9e:b4:22:e0 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICCpwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjcxNjUxMTAvBgNVBAUTKEIwQTQyNENFMzlDNzhDNjVEQkYyRkZDMDJBREI4RTM1 NDAzNkM5QzAwHhcNMjUwNDEwMTk1ODQ4WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y4MjJmOC05ZjMzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2RwlpXPE04O7fSGphrubdeUa3gYKW2+EoHAE/ib9W3YTnKqpPC5G1+yKoIUA t9ylCWpZbYqBoSgP5XmTEmpd7vXMvon2x6TCLXhY2jbuyvniNlismouebODRmny1 +nFqifWeXO5suIyGJ2t11dclA8qvxzEl/Z3g+5fRkykEsSaTYfSJANGmIMQyEMkm gByz/XUlDf+xeczw3Kg+xhAfJ2qF0oW31kjWkRFFAej/ktEI25yXIzRBfgYDfxRJ 9GJQ/ixXYbB6MbG1QTjgbRrCibT1FaHZSLYiiMUTt11QDAFGzn+SUqE0eskKItDJ A/LlDBXHzMhss70DvF+s0KdudQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFN2Rmvxf r9DEPiw1uRSkKf/h6m7FMB8GA1UdIwQYMBaAFLCkJM45x4xl2/L/wCrbjjVANsnA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNzE2NS8yMTVGRUZCNDU1 QjIxMUVBOEYzNUJFNDRDNEY5QUUwMi9zS1FrempuSGpHWGI4dl9BS3R1T05VQTJ5 Y0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3NLUWt6am5IakdYYjh2X0FLdHVPTlVBMnljQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjcxNjUvMjE1RkVGQjQ1NUIyMTFFQThGMzVCRTQ0QzRGOUFFMDIvNTc0MjJGRThF MEQxMTFFQUEwNEY2QzJEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnVcQwDQQCAAIwBwMFACQAr8AwDQYJKoZIhvcNAQELBQAD ggEBAANAlR28LwBjUk5XV6HmOWHZblrpy3dcRm0SQCbe6PAiLMHXMAvMki8MPTio HFATmuq3OxGgz6/KEBPDoZ9lqkV6huUKPnp8inJkqaYzQZU3+VgLKi790l91ghdp avgUWQwM58v91tkdVMEWeMioEXx49KnCQCJze2hgulMN+xV5YVlla6SAfFRTluBo antRDrtK2zgHLaGxNkY5S1PoP0iODA/51nzFXRPJb2h/VAJ7vG262BwCQ8vAS5ww N98JWb945K3FrPiqFpbC/aeS//Ce5tAZJAzMd/XksaBMI/PUS275oWANgs8mHW7G H/I3D39TCu+OsW2jluGq7Z60IuA= -----END CERTIFICATE-----Generated at Mon Jun 2 07:20:50 2025 by rpki-client