$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/CFB6C2ECB55511EFB8F19317C4F9AE02.roa File: CFB6C2ECB55511EFB8F19317C4F9AE02.roa (raw, json) Hash identifier: E9DNWqzp2wZLkwnC6xw9jZ+NrMoV73xye7vJhI3lWVs= Subject key identifier: 7B:33:5E:C1:67:83:66:E8:C6:F4:76:A0:F9:59:65:02:6C:70:C7:9F Certificate issuer: /CN=A91C6BB2/serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Certificate serial: 0299 Authority key identifier: 03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/CFB6C2ECB55511EFB8F19317C4F9AE02.roa Signing time: Wed 21 May 2025 11:54:46 +0000 ROA not before: Wed 21 May 2025 11:54:46 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 134186 IP address blocks: 45.117.60.0/24 maxlen: 24 103.57.120.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 01:52:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 665 (0x299) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C6BB2, serialNumber=03BC749AC1682C4B46DA259AB7EB662AA225B0EE Validity Not Before: May 21 11:54:46 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=682dbf05-fb81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e5:ce:e0:41:3d:83:73:81:f1:fd:d6:27:ad: b4:6a:28:da:de:e5:df:24:98:dd:1a:ae:9a:78:7b: eb:4a:fb:f9:2c:53:ce:8e:51:64:4f:46:7f:aa:73: 94:35:39:b7:a2:83:f6:f6:2a:c2:90:c7:46:4f:93: d7:4c:7e:9c:9d:ad:d1:df:ab:4c:c9:86:2e:89:9d: 19:b8:60:52:58:6f:06:97:38:f8:6e:f7:a7:90:3f: b9:78:3e:b6:f8:7b:f9:84:87:94:ec:d7:54:fa:2a: 39:7b:6a:a7:32:d1:08:53:f3:06:b2:18:c1:fb:cf: eb:3c:2c:24:a0:43:6f:82:84:2e:03:0d:3a:2a:bf: e6:0f:34:c8:24:c7:9a:02:f1:fc:37:5c:83:6e:41: 6f:31:d8:f8:86:38:cf:b6:ba:13:ea:81:0f:9a:be: 75:88:a1:cf:76:51:6d:db:af:f0:01:59:f5:5e:2d: 77:cf:df:01:bb:83:38:34:e4:9f:0b:26:ad:4d:80: d0:92:8a:3d:64:56:37:af:a5:94:93:4e:8d:18:5a: f1:38:a9:17:b0:a3:82:30:54:31:43:2c:29:95:d1: 2d:74:3c:25:00:82:60:81:b0:27:be:2d:73:1d:02: 3f:97:79:0e:e8:47:21:fa:1b:0a:16:b9:20:e1:12: c5:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:33:5E:C1:67:83:66:E8:C6:F4:76:A0:F9:59:65:02:6C:70:C7:9F X509v3 Authority Key Identifier: keyid:03:BC:74:9A:C1:68:2C:4B:46:DA:25:9A:B7:EB:66:2A:A2:25:B0:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/A7x0msFoLEtG2iWat-tmKqIlsO4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A7x0msFoLEtG2iWat-tmKqIlsO4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB2/5D4CC2F608C811ED944F2566C4F9AE02/CFB6C2ECB55511EFB8F19317C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.117.60.0/24 103.57.120.0/22 Signature Algorithm: sha256WithRSAEncryption 3e:8f:47:2f:07:cf:04:47:65:17:74:d5:d1:5c:e7:be:86:c5: 27:55:66:76:99:60:f4:4e:df:2d:a6:2d:7d:70:d4:31:3d:7e: 4a:a2:7a:b8:dd:2e:fb:1c:0f:45:d8:08:df:20:0e:9a:f8:5e: 2e:80:56:cc:d1:b4:c3:8f:49:18:22:cc:8c:39:ae:f9:cd:7e: 3d:f2:8f:61:2e:0c:cd:13:22:c7:6e:c4:6b:38:87:2a:e7:20: 85:b9:e8:d2:af:b8:c5:27:c1:d0:1f:02:f5:2a:bd:70:ac:e7: 12:dc:f5:70:c4:ed:b9:00:d5:22:13:9e:a3:28:82:5e:ae:e4: 46:ea:65:1b:5e:a0:cb:33:da:f0:3e:3e:9f:e3:2f:d1:dc:ce: 23:50:94:92:72:74:67:b4:4b:62:4d:bb:af:87:2a:8f:d1:e0: 47:aa:1d:c4:02:68:9f:3b:e8:99:09:b6:12:97:55:b3:79:60: 81:87:b5:dd:9d:76:65:1f:ea:e9:88:79:4b:b9:a7:0e:8a:d4: a2:a4:87:d9:46:77:65:ce:81:e3:f7:7e:b8:52:fa:e2:53:83: 3a:7b:9c:6a:24:b5:49:09:ef:48:75:e0:da:19:cf:47:18:b8: c7:c8:d6:06:9e:3e:a3:fb:14:1a:c8:02:c7:bc:91:8a:2a:13: 62:2c:5a:bd -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICApkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzZCQjIxMTAvBgNVBAUTKDAzQkM3NDlBQzE2ODJDNEI0NkRBMjU5QUI3RUI2NjJB QTIyNUIwRUUwHhcNMjUwNTIxMTE1NDQ2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODJkYmYwNS1mYjgxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAluXO4EE9g3OB8f3WJ620aija3uXfJJjdGq6aeHvrSvv5LFPOjlFkT0Z/qnOU NTm3ooP29irCkMdGT5PXTH6cna3R36tMyYYuiZ0ZuGBSWG8Glzj4bvenkD+5eD62 +Hv5hIeU7NdU+io5e2qnMtEIU/MGshjB+8/rPCwkoENvgoQuAw06Kr/mDzTIJMea AvH8N1yDbkFvMdj4hjjPtroT6oEPmr51iKHPdlFt26/wAVn1Xi13z98Bu4M4NOSf CyatTYDQkoo9ZFY3r6WUk06NGFrxOKkXsKOCMFQxQywpldEtdDwlAIJggbAnvi1z HQI/l3kO6Ech+hsKFrkg4RLFbQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFHszXsFn g2boxvR2oPlZZQJscMefMB8GA1UdIwQYMBaAFAO8dJrBaCxLRtolmrfrZiqiJbDu MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNkJCMi81RDRDQzJGNjA4 QzgxMUVEOTQ0RjI1NjZDNEY5QUUwMi9BN3gwbXNGb0xFdEcyaVdhdC10bUtxSWxz TzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0E3eDBtc0ZvTEV0RzJpV2F0LXRtS3FJbHNPNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzZCQjIvNUQ0Q0MyRjYwOEM4MTFFRDk0NEYyNTY2QzRGOUFFMDIvQ0ZCNkMyRUNC NTU1MTFFRkI4RjE5MzE3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAAtdTwDBAJnOXgwDQYJKoZIhvcNAQELBQADggEBAD6PRy8H zwRHZRd01dFc576GxSdVZnaZYPRO3y2mLX1w1DE9fkqierjdLvscD0XYCN8gDpr4 Xi6AVszRtMOPSRgizIw5rvnNfj3yj2EuDM0TIsduxGs4hyrnIIW56NKvuMUnwdAf AvUqvXCs5xLc9XDE7bkA1SITnqMogl6u5EbqZRteoMsz2vA+Pp/jL9HcziNQlJJy dGe0S2JNu6+HKo/R4EeqHcQCaJ876JkJthKXVbN5YIGHtd2ddmUf6umIeUu5pw6K 1KKkh9lGd2XOgeP3frhS+uJTgzp7nGoktUkJ70h14NoZz0cYuMfI1gaePqP7FBrI Ase8kYoqE2IsWr0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:45:23 2025 by rpki-client