$ rpki-client -vvf rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4BD764E8AA6511EC9A354C33C4F9AE02.roa File: 4BD764E8AA6511EC9A354C33C4F9AE02.roa (raw, json) Hash identifier: +7SXGk64WdhbzbBHPQcKc3z8KwO03i6JIK3eFusKvxk= Subject key identifier: 29:5B:20:22:67:51:3C:B3:34:CC:F4:A1:4B:E2:57:14:81:0E:7C:A8 Certificate issuer: /CN=A91BAE1C/serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Certificate serial: 0376 Authority key identifier: E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4BD764E8AA6511EC9A354C33C4F9AE02.roa Signing time: Sun 25 May 2025 01:07:16 +0000 ROA not before: Sun 25 May 2025 01:07:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 149649 IP address blocks: 103.184.94.0/23 maxlen: 23 103.184.94.0/24 maxlen: 24 103.184.95.0/24 maxlen: 24 2001:df0:8f40::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 12 Jun 2025 00:45:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 886 (0x376) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BAE1C, serialNumber=E2E043A932ECE0439E2A8EF1DC4064D3214C27E6 Validity Not Before: May 25 01:07:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68326d44-de8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:27:b0:73:3d:50:34:f7:6c:09:4b:91:d1:0d: 11:8e:45:2a:2f:ba:4c:f0:c0:8a:92:07:1f:dd:1a: 8f:f0:89:49:e4:c3:48:1e:99:08:73:a5:53:e4:69: 9a:fe:66:16:c9:f9:24:9c:85:a4:fb:bb:a0:e0:4e: 3d:76:64:99:16:a4:47:a9:f0:86:12:cb:3c:cb:51: 13:01:6b:94:a4:2b:3b:de:1b:09:b8:97:ba:2b:fb: 2c:b8:f5:1e:2a:95:99:64:ba:e5:0d:bd:de:90:41: ad:00:e0:ee:45:60:9c:60:45:14:d6:61:ad:da:51: 00:32:46:ba:7d:71:d1:6c:40:a6:19:89:f6:36:27: 39:e3:35:3a:0c:29:0f:57:6a:4d:98:67:5a:8a:62: b5:14:1d:02:cc:71:f0:ba:f6:f5:4a:75:c7:13:03: 11:16:d2:3a:58:d4:d1:3c:90:02:d4:12:6a:81:8e: b6:59:43:e8:9d:0e:f0:79:16:08:d5:e7:ab:0d:92: cb:2e:89:66:4b:20:5e:00:24:73:a0:c2:98:27:11: aa:58:a7:f4:2a:4d:d7:74:6e:a5:bf:77:5c:80:e2: 4a:b1:38:14:2a:0d:2f:a8:19:e4:ca:bf:e8:38:ef: 2c:cf:26:a3:51:59:e7:d3:b4:13:69:ab:d5:0f:84: cf:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5B:20:22:67:51:3C:B3:34:CC:F4:A1:4B:E2:57:14:81:0E:7C:A8 X509v3 Authority Key Identifier: keyid:E2:E0:43:A9:32:EC:E0:43:9E:2A:8E:F1:DC:40:64:D3:21:4C:27:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4uBDqTLs4EOeKo7x3EBk0yFMJ-Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BAE1C/F07473AEAA6211ECB8E11832C4F9AE02/4BD764E8AA6511EC9A354C33C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.184.94.0/23 IPv6: 2001:df0:8f40::/48 Signature Algorithm: sha256WithRSAEncryption 71:5e:d3:81:66:e3:24:1c:4e:24:a7:19:b4:9d:f3:71:0c:1e: 70:c1:f0:a2:5b:e4:6d:00:61:c3:5a:0f:2c:f1:40:40:7e:0b: 62:3c:1e:10:4d:be:aa:bc:2b:ad:bf:ba:af:1c:86:ad:32:00: 5e:5a:19:26:cf:f7:3b:06:8e:9a:70:ad:ef:02:0e:86:1a:0e: 25:ad:d3:8f:76:54:cb:c1:fc:41:68:96:c9:63:87:f1:c2:90: ab:13:cb:d9:0a:cc:79:5a:6b:26:56:2e:58:59:6f:62:fe:6f: 4e:de:81:6d:53:13:22:41:7c:14:a7:20:c0:d6:a3:41:26:cd: c7:f6:0e:60:65:a5:7d:34:69:5f:3a:54:0c:37:53:af:dd:cb: 5b:a4:6a:33:19:92:46:91:a5:2a:32:79:00:00:b4:e1:9c:f2: fe:4a:cd:32:db:70:9f:cb:f4:3a:cb:f9:b0:12:40:63:4d:79: ff:8f:cc:8f:21:63:b1:3e:69:ea:a7:e8:73:ec:99:0d:36:a8: 57:b8:d3:ac:46:58:8c:4b:3a:b6:b7:75:5d:57:4f:52:6f:72: 7a:41:7a:54:54:1e:04:8e:2c:e9:b0:26:e4:30:82:e6:e5:07: 65:d3:b7:ff:6c:1c:50:58:90:52:b0:05:2f:67:e3:98:67:f6: 3f:a8:80:c0 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA3YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkFFMUMxMTAvBgNVBAUTKEUyRTA0M0E5MzJFQ0UwNDM5RTJBOEVGMURDNDA2NEQz MjE0QzI3RTYwHhcNMjUwNTI1MDEwNzE2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODMyNmQ0NC1kZThmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxiewcz1QNPdsCUuR0Q0RjkUqL7pM8MCKkgcf3RqP8IlJ5MNIHpkIc6VT5Gma /mYWyfkknIWk+7ug4E49dmSZFqRHqfCGEss8y1ETAWuUpCs73hsJuJe6K/ssuPUe KpWZZLrlDb3ekEGtAODuRWCcYEUU1mGt2lEAMka6fXHRbECmGYn2Nic54zU6DCkP V2pNmGdaimK1FB0CzHHwuvb1SnXHEwMRFtI6WNTRPJAC1BJqgY62WUPonQ7weRYI 1eerDZLLLolmSyBeACRzoMKYJxGqWKf0Kk3XdG6lv3dcgOJKsTgUKg0vqBnkyr/o OO8szyajUVnn07QTaavVD4TPRwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFClbICJn UTyzNMz0oUviVxSBDnyoMB8GA1UdIwQYMBaAFOLgQ6ky7OBDniqO8dxAZNMhTCfm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQUUxQy9GMDc0NzNBRUFB NjIxMUVDQjhFMTE4MzJDNEY5QUUwMi80dUJEcVRMczRFT2VLbzd4M0VCazB5Rk1K LVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzR1QkRxVExzNEVPZUtvN3gzRUJrMHlGTUotWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkFFMUMvRjA3NDczQUVBQTYyMTFFQ0I4RTExODMyQzRGOUFFMDIvNEJENzY0RThB QTY1MTFFQzlBMzU0QzMzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnuF4wDwQCAAIwCQMHACABDfCPQDANBgkqhkiG9w0BAQsF AAOCAQEAcV7TgWbjJBxOJKcZtJ3zcQwecMHwolvkbQBhw1oPLPFAQH4LYjweEE2+ qrwrrb+6rxyGrTIAXloZJs/3OwaOmnCt7wIOhhoOJa3Tj3ZUy8H8QWiWyWOH8cKQ qxPL2QrMeVprJlYuWFlvYv5vTt6BbVMTIkF8FKcgwNajQSbNx/YOYGWlfTRpXzpU DDdTr93LW6RqMxmSRpGlKjJ5AAC04Zzy/krNMttwn8v0Osv5sBJAY015/4/MjyFj sT5p6qfoc+yZDTaoV7jTrEZYjEs6trd1XVdPUm9yekF6VFQeBI4s6bAm5DCC5uUH ZdO3/2wcUFiQUrAFL2fjmGf2P6iAwA== -----END CERTIFICATE-----Generated at Thu Jun 5 20:02:41 2025 by rpki-client