$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa File: DD46BB92EDAB11EDBE91BB82C4F9AE02.roa (raw, json) Hash identifier: 1NiFRWSUDBEKjygUm/VPv7UX405Nm7i1bZRm8rES/iU= Subject key identifier: 37:2B:1B:9D:C2:83:B4:39:4C:46:16:12:A4:F7:AF:24:6D:F6:6A:60 Certificate issuer: /CN=A91BE146/serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Certificate serial: 05E2 Authority key identifier: 43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa Signing time: Wed 07 May 2025 08:56:25 +0000 ROA not before: Wed 07 May 2025 08:56:25 +0000 ROA not after: Mon 01 Dec 2025 00:00:00 +0000 asID: 11158 IP address blocks: 117.103.120.0/24 maxlen: 24 117.103.121.0/24 maxlen: 24 117.103.122.0/24 maxlen: 24 117.103.123.0/24 maxlen: 24 117.103.127.0/24 maxlen: 24 119.31.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 23:12:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1506 (0x5e2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BE146, serialNumber=43EA3A2DC08C5E1F2CD68411644A05C076E88C08 Validity Not Before: May 7 08:56:25 2025 GMT Not After : Dec 1 00:00:00 2025 GMT Subject: CN=681b2039-8aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:81:fe:66:9d:da:2f:fe:db:9f:49:35:6c:67: 93:da:05:6d:6b:ad:d9:83:dd:05:ab:85:af:39:ac: 3f:b4:97:52:a3:8d:d7:a3:08:f0:43:c1:06:99:c9: 56:93:55:0e:5a:76:fa:3c:23:15:f8:9c:a0:e9:c7: e3:3a:73:31:8f:7d:94:7e:a5:83:c7:f1:10:5c:f9: c1:af:1b:5c:26:a0:c7:1f:af:bb:d0:06:b8:52:9b: 43:ad:58:b3:1a:21:35:5f:ca:11:57:43:0e:27:c0: 68:17:3a:77:4a:db:1b:71:73:15:4e:7a:b4:1c:1f: 5a:e0:b6:f2:4b:57:04:2a:6f:3c:e2:4f:b0:42:7e: 8c:6a:8e:9a:bb:4c:a4:bf:99:18:69:82:18:5a:d7: e3:1c:93:9b:04:62:01:50:e2:c7:99:3b:e3:09:8d: 76:34:b0:15:83:28:d3:0d:5c:4b:4f:37:d8:08:5b: e2:2a:99:2d:5f:cc:a3:ef:f3:f6:46:d7:a8:35:1e: 9b:7a:7b:09:f1:8d:4f:87:30:e8:67:03:47:7a:e8: d9:cb:6d:37:cc:61:fd:8b:3b:25:4c:db:97:a9:79: ca:a1:ef:9e:27:98:a4:48:e5:a4:0c:25:ad:ac:54: 98:7d:d2:c9:ee:1e:3a:ec:33:c0:f5:09:83:2d:66: 2e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:2B:1B:9D:C2:83:B4:39:4C:46:16:12:A4:F7:AF:24:6D:F6:6A:60 X509v3 Authority Key Identifier: keyid:43:EA:3A:2D:C0:8C:5E:1F:2C:D6:84:11:64:4A:05:C0:76:E8:8C:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/Q-o6LcCMXh8s1oQRZEoFwHbojAg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Q-o6LcCMXh8s1oQRZEoFwHbojAg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE146/E41AB42ABD3111EBBFC3F921C4F9AE02/DD46BB92EDAB11EDBE91BB82C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 117.103.120.0/22 117.103.127.0/24 119.31.160.0/24 Signature Algorithm: sha256WithRSAEncryption 5e:67:eb:f9:55:95:77:10:ed:4d:14:9c:76:a0:91:f6:a0:14: 28:b1:9f:23:07:ae:8d:85:8c:56:94:64:79:ae:f7:56:f3:5c: 89:dd:26:23:e3:28:fa:81:20:50:ef:49:67:ef:1e:84:34:51: 80:20:a2:92:b7:00:f9:17:18:10:d8:46:a6:1b:08:fd:f9:bc: 2b:16:13:13:a6:4d:ff:12:7c:e5:ee:cc:55:04:09:8e:cb:e5: 70:0b:02:94:94:3c:95:85:97:96:4c:30:ad:1a:9b:88:fa:0a: 7e:9f:d9:e6:f7:2d:ff:7d:3a:b7:06:da:ae:03:ef:de:3e:09: 12:9d:c2:43:ca:19:bb:12:d0:f5:b0:cd:fa:b3:ce:d5:36:42: 87:1f:97:8e:04:2c:6e:13:9a:63:e3:32:5c:86:62:c0:15:4d: c3:17:fd:cd:91:9f:cc:cc:4e:b9:ba:5f:26:60:62:fb:66:70: 96:66:cf:a5:15:fd:54:89:0e:7f:4d:8f:13:6a:61:c6:f4:aa: 07:d2:df:51:e6:af:b0:87:0a:94:6e:fd:e7:b8:70:5d:45:50: 61:49:71:ea:24:29:8b:43:6c:94:46:ea:10:f1:af:fd:bc:4a: 3e:59:83:89:ce:cf:11:d6:f5:be:ec:f3:af:13:d4:e4:9d:14: fc:f4:7d:f3 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICBeIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkUxNDYxMTAvBgNVBAUTKDQzRUEzQTJEQzA4QzVFMUYyQ0Q2ODQxMTY0NEEwNUMw NzZFODhDMDgwHhcNMjUwNTA3MDg1NjI1WhcNMjUxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFiMjAzOS04YWNhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv4H+Zp3aL/7bn0k1bGeT2gVta63Zg90Fq4WvOaw/tJdSo43XowjwQ8EGmclW k1UOWnb6PCMV+Jyg6cfjOnMxj32UfqWDx/EQXPnBrxtcJqDHH6+70Aa4UptDrViz GiE1X8oRV0MOJ8BoFzp3StsbcXMVTnq0HB9a4LbyS1cEKm884k+wQn6Mao6au0yk v5kYaYIYWtfjHJObBGIBUOLHmTvjCY12NLAVgyjTDVxLTzfYCFviKpktX8yj7/P2 RteoNR6bensJ8Y1PhzDoZwNHeujZy203zGH9izslTNuXqXnKoe+eJ5ikSOWkDCWt rFSYfdLJ7h467DPA9QmDLWYuEQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFDcrG53C g7Q5TEYWEqT3ryRt9mpgMB8GA1UdIwQYMBaAFEPqOi3AjF4fLNaEEWRKBcB26IwI MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTE0Ni9FNDFBQjQyQUJE MzExMUVCQkZDM0Y5MjFDNEY5QUUwMi9RLW82TGNDTVhoOHMxb1FSWkVvRndIYm9q QWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1EtbzZMY0NNWGg4czFvUVJaRW9Gd0hib2pBZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkUxNDYvRTQxQUI0MkFCRDMxMTFFQkJGQzNGOTIxQzRGOUFFMDIvREQ0NkJCOTJF REFCMTFFREJFOTFCQjgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAJ1Z3gDBAB1Z38DBAB3H6AwDQYJKoZIhvcNAQELBQADggEB AF5n6/lVlXcQ7U0UnHagkfagFCixnyMHro2FjFaUZHmu91bzXIndJiPjKPqBIFDv SWfvHoQ0UYAgopK3APkXGBDYRqYbCP35vCsWExOmTf8SfOXuzFUECY7L5XALApSU PJWFl5ZMMK0am4j6Cn6f2eb3Lf99OrcG2q4D794+CRKdwkPKGbsS0PWwzfqzztU2 Qocfl44ELG4TmmPjMlyGYsAVTcMX/c2Rn8zMTrm6XyZgYvtmcJZmz6UV/VSJDn9N jxNqYcb0qgfS31Hmr7CHCpRu/ee4cF1FUGFJceokKYtDbJRG6hDxr/28Sj5Zg4nO zxHW9b7s868T1OSdFPz0ffM= -----END CERTIFICATE-----Generated at Mon Jun 2 05:56:13 2025 by rpki-client