$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/FA554EAC2A4811F0ABF04B60C4F9AE02.roa File: FA554EAC2A4811F0ABF04B60C4F9AE02.roa (raw, json) Hash identifier: MLNsSD6dOlTMYcdBTdYCv9621FGotk7zqsGI1IFd54I= Subject key identifier: DD:05:BD:62:37:09:FC:02:49:B3:AA:AB:33:6A:09:D7:43:D7:41:51 Certificate issuer: /CN=A91C1323/serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Certificate serial: 6069 Authority key identifier: 41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/FA554EAC2A4811F0ABF04B60C4F9AE02.roa Signing time: Sat 17 May 2025 20:37:21 +0000 ROA not before: Sat 17 May 2025 20:37:21 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 18116 IP address blocks: 118.143.54.0/24 maxlen: 24 118.143.169.0/24 maxlen: 24 118.143.176.0/24 maxlen: 24 118.143.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24681 (0x6069) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C1323, serialNumber=412A6511CFEDCFECB5590C96C8C361E2FED44857 Validity Not Before: May 17 20:37:21 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6828f381-49be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:f5:56:ce:c0:56:3e:b4:44:c6:6a:ab:ca:34: a3:a4:21:d4:80:fa:e3:db:eb:af:80:41:85:57:ca: 72:f0:67:69:a4:31:a7:bf:87:a8:01:89:7e:aa:ef: 3f:47:d2:da:fd:72:62:28:b3:eb:70:2c:66:cc:50: 2a:9d:de:9b:60:59:ea:5f:11:98:fb:2b:46:3f:06: 7c:fb:70:3b:66:59:e9:6d:c9:f4:5a:d5:b4:09:00: e8:73:4f:87:4d:23:1e:d2:22:5c:22:48:0c:1e:77: f6:dd:9a:5b:e5:4b:66:45:96:f1:99:98:84:88:4d: 25:b2:35:e0:91:49:2b:38:4e:05:19:f6:44:6a:b9: 45:7f:f6:97:60:41:1f:56:35:42:54:c0:b3:e3:19: 1f:dd:40:d0:c6:33:3b:56:26:9f:17:ee:1b:6f:5f: d3:4e:41:84:ce:ea:d8:7b:42:54:43:dc:5c:65:44: 96:85:ef:db:39:63:de:e9:87:f3:98:4f:59:be:7b: 39:92:2b:2a:04:c2:af:2d:e3:3f:02:6f:3c:8a:a2: 38:c3:d9:93:11:81:b7:e5:bc:6e:ae:27:da:d9:28: f4:9f:ab:58:11:62:5b:0a:c5:95:1e:b8:d2:1a:5b: 19:49:9a:bc:47:02:9f:2f:14:a4:d1:8a:74:ab:e5: f1:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:05:BD:62:37:09:FC:02:49:B3:AA:AB:33:6A:09:D7:43:D7:41:51 X509v3 Authority Key Identifier: keyid:41:2A:65:11:CF:ED:CF:EC:B5:59:0C:96:C8:C3:61:E2:FE:D4:48:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/QSplEc_tz-y1WQyWyMNh4v7USFc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QSplEc_tz-y1WQyWyMNh4v7USFc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1323/084D88D495B711EABB824F1BC4F9AE02/FA554EAC2A4811F0ABF04B60C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 118.143.54.0/24 118.143.169.0/24 118.143.176.0/23 Signature Algorithm: sha256WithRSAEncryption 41:c2:14:3d:ef:aa:b2:ce:c9:63:14:e3:3c:91:f9:d3:1a:4c: 8c:57:c8:fc:0c:45:26:a3:83:dc:da:f3:dd:e3:46:7f:ae:6a: 06:2f:eb:be:33:76:59:9a:2c:b3:65:f3:44:86:62:db:5c:4b: 49:ae:c5:6e:b1:f6:fb:08:d4:98:2b:61:c5:c3:9e:cb:09:4a: ba:79:52:74:39:33:bb:e8:af:a5:b5:71:10:47:86:b4:0c:69: 7a:a8:ec:53:d4:7a:3f:37:2b:5f:08:94:32:f1:09:62:78:f5: 94:69:31:3f:54:41:a8:aa:11:09:b0:b5:14:b4:87:be:87:44: 80:66:57:a9:7d:b4:10:82:0f:27:42:ef:dd:75:70:3a:05:98: 19:36:aa:b0:fa:f6:df:40:8a:2b:db:b8:57:3f:c9:05:48:a3: 60:06:b4:1a:52:e9:6d:c3:c7:0a:08:5a:86:04:be:5b:92:5e: 23:bc:81:05:e4:21:ab:b1:ec:b6:95:5a:c5:e9:1e:0c:57:4b: ca:e9:c9:86:ea:da:38:30:2f:fa:bc:e2:1b:55:3e:35:c7:9e: 3c:62:00:6e:ba:25:ed:94:d7:9b:81:ca:25:ad:b1:3a:fd:e7: b6:b2:05:2b:63:94:6c:32:1b:00:70:e0:d9:14:37:48:73:82: 5a:17:3e:93 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICYGkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzEzMjMxMTAvBgNVBAUTKDQxMkE2NTExQ0ZFRENGRUNCNTU5MEM5NkM4QzM2MUUy RkVENDQ4NTcwHhcNMjUwNTE3MjAzNzIxWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI4ZjM4MS00OWJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA7/VWzsBWPrRExmqryjSjpCHUgPrj2+uvgEGFV8py8GdppDGnv4eoAYl+qu8/ R9La/XJiKLPrcCxmzFAqnd6bYFnqXxGY+ytGPwZ8+3A7Zlnpbcn0WtW0CQDoc0+H TSMe0iJcIkgMHnf23Zpb5UtmRZbxmZiEiE0lsjXgkUkrOE4FGfZEarlFf/aXYEEf VjVCVMCz4xkf3UDQxjM7ViafF+4bb1/TTkGEzurYe0JUQ9xcZUSWhe/bOWPe6Yfz mE9Zvns5kisqBMKvLeM/Am88iqI4w9mTEYG35bxurifa2Sj0n6tYEWJbCsWVHrjS GlsZSZq8RwKfLxSk0Yp0q+XxqQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFN0FvWI3 CfwCSbOqqzNqCddD10FRMB8GA1UdIwQYMBaAFEEqZRHP7c/stVkMlsjDYeL+1EhX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMTMyMy8wODREODhENDk1 QjcxMUVBQkI4MjRGMUJDNEY5QUUwMi9RU3BsRWNfdHoteTFXUXlXeU1OaDR2N1VT RmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FTcGxFY190ei15MVdReVd5TU5oNHY3VVNGYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzEzMjMvMDg0RDg4RDQ5NUI3MTFFQUJCODI0RjFCQzRGOUFFMDIvRkE1NTRFQUMy QTQ4MTFGMEFCRjA0QjYwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAB2jzYDBAB2j6kDBAF2j7AwDQYJKoZIhvcNAQELBQADggEB AEHCFD3vqrLOyWMU4zyR+dMaTIxXyPwMRSajg9za893jRn+uagYv674zdlmaLLNl 80SGYttcS0muxW6x9vsI1JgrYcXDnssJSrp5UnQ5M7vor6W1cRBHhrQMaXqo7FPU ej83K18IlDLxCWJ49ZRpMT9UQaiqEQmwtRS0h76HRIBmV6l9tBCCDydC7911cDoF mBk2qrD69t9AiivbuFc/yQVIo2AGtBpS6W3DxwoIWoYEvluSXiO8gQXkIaux7LaV WsXpHgxXS8rpyYbq2jgwL/q84htVPjXHnjxiAG66Je2U15uByiWtsTr957ayBStj lGwyGwBw4NkUN0hzgloXPpM= -----END CERTIFICATE-----Generated at Mon Jun 2 06:28:32 2025 by rpki-client