$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa File: 5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa (raw, json) Hash identifier: JmWvpPercfkqhvzXl7X5hJ7qkUfM/tTFcEtxW3STQ8M= Subject key identifier: 5B:F6:69:0C:BE:04:65:E5:69:9E:E8:4B:19:09:2E:7F:C6:CD:A0:5E Certificate issuer: /CN=A91BF312/serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Certificate serial: 079F Authority key identifier: F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa Signing time: Fri 23 May 2025 11:52:16 +0000 ROA not before: Fri 23 May 2025 11:52:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 40605 IP address blocks: 139.5.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:31:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1951 (0x79f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF312, serialNumber=F0297D0E4531A1D62A95AF5D2F22EF2408DAD29C Validity Not Before: May 23 11:52:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6830616f-7f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1b:69:fa:37:23:bb:a9:4a:9f:cd:38:84:c5: b2:df:e3:3b:98:12:55:b4:5a:7d:af:34:e1:6b:72: 9c:9a:47:0c:89:e1:55:be:10:a0:c5:f5:bd:34:06: 47:a8:c6:a8:43:23:26:5e:75:25:3c:41:8b:76:17: 38:8d:a6:df:72:0d:35:42:4a:e9:6f:7b:1a:b8:5a: 44:9d:4e:82:79:a6:1c:25:e5:64:23:f4:fb:6d:0c: 28:75:48:7b:cc:4e:77:94:4d:83:a3:e2:b4:7d:c3: 78:3a:82:0b:12:83:8a:87:f0:b1:d5:22:fc:4b:63: c9:16:d5:52:85:d3:5b:cf:ac:9e:74:53:e3:76:e1: 97:5e:6e:a6:15:b6:80:59:23:53:75:ed:11:09:d6: 4e:12:ed:d0:3d:68:ee:e8:21:f5:94:6c:32:8d:a6: 23:30:16:bc:ec:1f:1a:fd:3e:e7:0f:5d:35:c9:9b: 85:f2:04:6c:b1:f5:e3:88:9e:a6:ac:b3:c2:0b:fd: fa:48:67:61:8c:11:d4:2d:1e:b6:c5:2d:0e:50:9d: 80:be:81:39:5c:01:f4:49:17:d5:46:60:2e:63:dc: 45:85:02:5f:87:36:ca:c4:b0:f5:9e:84:89:f5:21: 67:5e:47:1e:1e:ca:c8:76:c7:35:37:b5:47:32:52: 41:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:F6:69:0C:BE:04:65:E5:69:9E:E8:4B:19:09:2E:7F:C6:CD:A0:5E X509v3 Authority Key Identifier: keyid:F0:29:7D:0E:45:31:A1:D6:2A:95:AF:5D:2F:22:EF:24:08:DA:D2:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/8Cl9DkUxodYqla9dLyLvJAja0pw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8Cl9DkUxodYqla9dLyLvJAja0pw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF312/AA92B9780C2911EB9540DD61C4F9AE02/5ECF5AFE37CC11F0AE950A5FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 139.5.178.0/24 Signature Algorithm: sha256WithRSAEncryption 16:76:b3:d1:1a:ce:a7:eb:21:4f:bd:00:54:ae:d9:eb:1c:ac: c2:d2:5b:bd:18:7a:88:73:12:cc:c1:1a:d5:20:99:16:0c:86: 8f:52:17:3e:a5:3e:b6:87:d8:bd:0d:9f:bd:21:89:30:1d:b9: c8:60:d7:b0:5f:68:6a:0b:e5:0f:b6:0b:bb:0e:14:e0:1a:df: 36:7e:aa:ac:da:c3:95:6c:36:02:c4:14:09:5a:6f:f8:39:b9: 6b:95:4b:3f:40:33:c0:1a:10:37:b9:f5:04:3e:a9:43:f1:01: 68:5d:d2:d5:9e:91:4f:5a:c2:83:60:4d:12:10:3c:7f:c1:04: f9:bc:82:0a:43:a9:14:e8:8a:92:01:ac:77:40:9c:12:57:33: 54:ac:80:16:4d:05:22:93:73:f0:8f:24:d7:e5:99:25:22:01: 08:61:17:1d:e2:5b:6e:f9:50:48:49:0a:47:1c:75:b5:f9:5b: 5b:28:82:54:54:a1:72:c6:56:a1:8e:49:85:8b:d8:2e:1d:ca: f0:7f:7d:47:8d:38:dd:98:c0:24:23:eb:ab:69:9f:98:8d:ca: c5:71:9a:50:99:19:8b:f4:b1:0a:67:cf:01:7e:e3:95:19:8f: 20:9a:d7:ad:3a:41:54:be:f3:dc:c7:b6:9b:cf:72:b8:6d:4e: 9e:44:4e:b7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICB58wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYzMTIxMTAvBgNVBAUTKEYwMjk3RDBFNDUzMUExRDYyQTk1QUY1RDJGMjJFRjI0 MDhEQUQyOUMwHhcNMjUwNTIzMTE1MjE2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODMwNjE2Zi03ZjM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApRtp+jcju6lKn804hMWy3+M7mBJVtFp9rzTha3KcmkcMieFVvhCgxfW9NAZH qMaoQyMmXnUlPEGLdhc4jabfcg01Qkrpb3sauFpEnU6CeaYcJeVkI/T7bQwodUh7 zE53lE2Do+K0fcN4OoILEoOKh/Cx1SL8S2PJFtVShdNbz6yedFPjduGXXm6mFbaA WSNTde0RCdZOEu3QPWju6CH1lGwyjaYjMBa87B8a/T7nD101yZuF8gRssfXjiJ6m rLPCC/36SGdhjBHULR62xS0OUJ2AvoE5XAH0SRfVRmAuY9xFhQJfhzbKxLD1noSJ 9SFnXkceHsrIdsc1N7VHMlJBhwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFv2aQy+ BGXlaZ7oSxkJLn/GzaBeMB8GA1UdIwQYMBaAFPApfQ5FMaHWKpWvXS8i7yQI2tKc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjMxMi9BQTkyQjk3ODBD MjkxMUVCOTU0MERENjFDNEY5QUUwMi84Q2w5RGtVeG9kWXFsYTlkTHlMdkpBamEw cHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzhDbDlEa1V4b2RZcWxhOWRMeUx2SkFqYTBwdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkYzMTIvQUE5MkI5NzgwQzI5MTFFQjk1NDBERDYxQzRGOUFFMDIvNUVDRjVBRkUz N0NDMTFGMEFFOTUwQTVGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBACLBbIwDQYJKoZIhvcNAQELBQADggEBABZ2s9EazqfrIU+9 AFSu2escrMLSW70YeohzEszBGtUgmRYMho9SFz6lPraH2L0Nn70hiTAduchg17Bf aGoL5Q+2C7sOFOAa3zZ+qqzaw5VsNgLEFAlab/g5uWuVSz9AM8AaEDe59QQ+qUPx AWhd0tWekU9awoNgTRIQPH/BBPm8ggpDqRToipIBrHdAnBJXM1SsgBZNBSKTc/CP JNflmSUiAQhhFx3iW275UEhJCkccdbX5W1soglRUoXLGVqGOSYWL2C4dyvB/fUeN ON2YwCQj66tpn5iNysVxmlCZGYv0sQpnzwF+45UZjyCa1606QVS+89zHtpvPcrht Tp5ETrc= -----END CERTIFICATE-----Generated at Wed Jun 4 00:00:07 2025 by rpki-client