$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/710575A2635611ED90FD8A69C4F9AE02.roa File: 710575A2635611ED90FD8A69C4F9AE02.roa (raw, json) Hash identifier: jQL/fiO/nnfKq4pv4enzbX7soonmf0Sd8syRd3Z9270= Subject key identifier: E5:B3:5F:5C:59:A1:5E:11:2C:E1:3B:FB:F5:EE:95:86:D1:FE:AD:B9 Certificate issuer: /CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445 Certificate serial: 0871 Authority key identifier: 8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/710575A2635611ED90FD8A69C4F9AE02.roa Signing time: Sat 31 May 2025 16:56:59 +0000 ROA not before: Sat 31 May 2025 16:56:59 +0000 ROA not after: Wed 01 Oct 2025 00:00:00 +0000 asID: 134116 IP address blocks: 45.114.88.0/22 maxlen: 22 45.114.88.0/23 maxlen: 23 45.114.88.0/24 maxlen: 24 45.114.89.0/24 maxlen: 24 45.114.90.0/23 maxlen: 23 45.114.90.0/24 maxlen: 24 45.114.91.0/24 maxlen: 24 103.54.40.0/22 maxlen: 22 103.54.40.0/23 maxlen: 23 103.54.40.0/24 maxlen: 24 103.54.41.0/24 maxlen: 24 103.54.42.0/23 maxlen: 23 103.54.42.0/24 maxlen: 24 103.54.43.0/24 maxlen: 24 2402:3280::/32 maxlen: 32 2402:3280::/34 maxlen: 40 2402:3280::/128 maxlen: 128 2402:3280:4000::/34 maxlen: 40 2402:3280:8000::/34 maxlen: 40 2402:3280:c000::/34 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:47:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2161 (0x871) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF026, serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445 Validity Not Before: May 31 16:56:59 2025 GMT Not After : Oct 1 00:00:00 2025 GMT Subject: CN=683b34db-9c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6b:11:aa:46:6e:92:5d:c3:7c:72:c9:b3:fd: 78:b1:3f:eb:44:39:99:e8:66:82:be:ac:d0:5e:f9: 68:fe:27:22:02:99:1a:af:bd:2c:91:d2:9d:04:d0: b3:fc:93:cd:f6:a4:6c:a6:7e:01:89:37:d6:e1:0b: dc:be:c7:5f:17:65:72:11:54:6c:9e:8d:88:bc:1a: 1e:69:e1:ea:68:54:bd:96:20:be:b5:31:89:1a:3f: 0d:69:c4:01:c5:bc:58:0a:f9:91:6a:b3:13:5d:a6: b4:86:16:33:8e:e5:ba:8f:78:57:46:99:6f:f5:4f: b4:e9:a2:b8:34:44:b7:c9:3c:8b:00:c8:06:5d:7e: 6e:4e:5b:73:87:65:6a:89:b3:16:ed:86:b0:6e:84: d8:9a:c3:6c:16:b7:2b:5b:8e:f0:84:10:a5:c1:40: 83:50:14:7f:f7:55:2e:8d:87:f0:37:31:96:9b:3f: 7d:a1:23:59:59:8f:16:4a:44:09:9d:a6:01:d3:99: 09:d0:bb:71:d4:4b:a0:09:15:9e:8e:5c:d5:ac:b4: 6f:d0:29:11:98:09:e1:48:86:ba:e6:70:76:45:f1: 93:9e:c1:f7:c5:bd:0b:18:96:17:9b:e9:5b:07:5a: ca:8c:e1:1c:97:d5:92:33:4c:95:24:ef:61:3c:9a: 29:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:B3:5F:5C:59:A1:5E:11:2C:E1:3B:FB:F5:EE:95:86:D1:FE:AD:B9 X509v3 Authority Key Identifier: keyid:8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/710575A2635611ED90FD8A69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.88.0/22 103.54.40.0/22 IPv6: 2402:3280::/32 Signature Algorithm: sha256WithRSAEncryption 30:4a:7d:37:9e:9a:6b:d2:3a:2d:69:c3:a8:99:66:95:e6:6b: b2:00:df:17:fe:2a:6f:ca:57:1c:05:d4:fa:ab:a8:21:28:4a: b9:85:d7:76:45:45:a9:b0:32:6f:1d:7a:5e:cf:43:fc:51:6c: e3:af:ae:a8:43:22:56:d1:4f:b1:90:de:5f:22:f5:8d:5d:65: b5:70:0b:28:d5:e2:c1:5d:ae:29:c1:98:0c:4c:60:76:4c:b9: 8a:13:c2:f9:07:e4:11:aa:64:71:3f:a2:cf:11:42:94:97:1d: 19:7b:3b:c1:bc:72:eb:b4:7c:2b:a0:f7:9b:84:ac:1d:80:11: f3:47:02:a4:87:57:f2:2d:e1:82:3f:f5:2c:15:3a:b2:88:e6: 20:fc:70:bc:e1:5c:22:fc:d6:ae:6d:9a:f0:db:e9:fa:fc:76: 00:fa:7c:5f:cc:9d:74:e3:bb:1e:bd:58:f5:fb:42:94:fe:c0: 05:a8:9f:14:de:06:69:45:b0:87:dd:31:d1:eb:ca:43:c2:c7: 3a:a9:90:3f:b6:54:5a:f0:ac:6c:a8:15:92:bb:ed:e0:61:14: df:80:b2:ad:9f:5f:3d:01:8d:e9:20:e9:3b:ce:3e:75:84:2d: e3:28:31:15:72:60:95:1d:4e:98:af:79:67:bd:8c:39:ad:6f: 3c:e2:02:18 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCHEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMjYxMTAvBgNVBAUTKDhBQzc5RUIyRUI3RjZCNTdBRERFMUNCQTQwM0M2RTU4 MjM2RDM0NDUwHhcNMjUwNTMxMTY1NjU5WhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiMzRkYi05YzZlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz2sRqkZukl3DfHLJs/14sT/rRDmZ6GaCvqzQXvlo/iciApkar70skdKdBNCz /JPN9qRspn4BiTfW4QvcvsdfF2VyEVRsno2IvBoeaeHqaFS9liC+tTGJGj8NacQB xbxYCvmRarMTXaa0hhYzjuW6j3hXRplv9U+06aK4NES3yTyLAMgGXX5uTltzh2Vq ibMW7YawboTYmsNsFrcrW47whBClwUCDUBR/91UujYfwNzGWmz99oSNZWY8WSkQJ naYB05kJ0Ltx1EugCRWejlzVrLRv0CkRmAnhSIa65nB2RfGTnsH3xb0LGJYXm+lb B1rKjOEcl9WSM0yVJO9hPJoptQIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFOWzX1xZ oV4RLOE7+/XulYbR/q25MB8GA1UdIwQYMBaAFIrHnrLrf2tXrd4cukA8blgjbTRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9pc2Vlc3V0X2ExZXQzaHk2UUR4dVdDTnRO RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lzZWVzdXRfYTFldDNoeTZRRHh1V0NOdE5FVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkYwMjYvMDMyOEE4NUNEREUwMTFFN0IyODEwNzU3QzRGOUFFMDIvNzEwNTc1QTI2 MzU2MTFFRDkwRkQ4QTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItclgDBAJnNigwDQQCAAIwBwMFACQCMoAwDQYJKoZIhvcN AQELBQADggEBADBKfTeemmvSOi1pw6iZZpXma7IA3xf+Km/KVxwF1PqrqCEoSrmF 13ZFRamwMm8del7PQ/xRbOOvrqhDIlbRT7GQ3l8i9Y1dZbVwCyjV4sFdrinBmAxM YHZMuYoTwvkH5BGqZHE/os8RQpSXHRl7O8G8cuu0fCug95uErB2AEfNHAqSHV/It 4YI/9SwVOrKI5iD8cLzhXCL81q5tmvDb6fr8dgD6fF/MnXTjux69WPX7QpT+wAWo nxTeBmlFsIfdMdHrykPCxzqpkD+2VFrwrGyoFZK77eBhFN+Asq2fXz0Bjekg6TvO PnWELeMoMRVyYJUdTpiveWe9jDmtbzziAhg= -----END CERTIFICATE-----Generated at Wed Jun 4 00:14:26 2025 by rpki-client