$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/0AC13D943C5711F0BFBB572EC4F9AE02.roa File: 0AC13D943C5711F0BFBB572EC4F9AE02.roa (raw, json) Hash identifier: o0ChCLIPHM8nd8JoYhOYYDjMTFndJtBeuXYBvBkCdkM= Subject key identifier: F1:A8:AE:21:14:E1:BB:F9:AA:6E:45:E1:E6:66:39:89:F5:89:72:14 Certificate issuer: /CN=A91C7AA5/serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Certificate serial: 2F Authority key identifier: F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/0AC13D943C5711F0BFBB572EC4F9AE02.roa Signing time: Thu 29 May 2025 06:34:59 +0000 ROA not before: Thu 29 May 2025 06:34:59 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 8075 IP address blocks: 203.2.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:38:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47 (0x2f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C7AA5, serialNumber=F7267E80BE817F043D28FB7E7305F4C488A8391A Validity Not Before: May 29 06:34:59 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=68380013-be3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:65:19:92:09:f0:cf:f5:5e:c8:52:0d:d2:91: 16:8e:b0:dc:83:76:84:6e:8d:a8:a1:47:98:26:59: c4:0f:05:56:5c:ef:62:2c:87:d4:03:4a:d1:80:a3: 82:a2:06:d9:da:d8:02:b2:dd:fc:83:aa:03:fc:ed: 3f:f8:b5:2c:00:70:a6:c5:80:d6:06:88:ca:7b:92: 35:b7:3a:2f:94:16:de:f0:37:e8:49:f2:9d:0d:8d: 8f:1a:f4:b5:b8:7b:fd:75:70:e6:bd:68:61:93:f6: 59:cd:b1:09:ea:e2:a4:7e:8f:57:eb:55:3b:ad:9c: 40:c2:27:be:60:2f:8c:7a:d7:15:81:dd:46:57:31: c0:ed:2b:08:07:6b:57:4a:bb:82:08:6d:f8:6e:79: 63:a9:db:db:ca:22:9f:37:de:84:66:bc:a9:ae:82: 6a:01:83:cc:de:67:04:f7:6f:ed:c7:16:4d:30:17: 23:a6:7f:a0:fd:ca:c0:fc:c8:6f:26:f4:04:4c:8a: 1c:c7:b1:63:0f:ab:9a:e2:51:ad:8d:85:dc:f6:1c: f1:a1:d9:bc:1b:39:6b:13:21:df:85:b4:43:a6:9a: 24:f8:cd:53:e4:f6:a7:51:24:91:b4:2f:1c:37:82: 1c:43:bf:b1:a8:e1:14:18:40:09:0f:7c:f2:3d:d4: d7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A8:AE:21:14:E1:BB:F9:AA:6E:45:E1:E6:66:39:89:F5:89:72:14 X509v3 Authority Key Identifier: keyid:F7:26:7E:80:BE:81:7F:04:3D:28:FB:7E:73:05:F4:C4:88:A8:39:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/9yZ-gL6BfwQ9KPt-cwX0xIioORo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9yZ-gL6BfwQ9KPt-cwX0xIioORo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7AA5/BAFB357415BB11F0BFD54881C4F9AE02/0AC13D943C5711F0BFBB572EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.2.220.0/24 Signature Algorithm: sha256WithRSAEncryption b2:e1:9a:a1:2d:cc:a4:88:14:59:8d:0b:2b:a0:67:ab:c8:35: 4a:0c:72:26:ac:6f:4c:f1:39:0d:3f:a3:1f:f5:3b:b0:37:5d: 7d:e5:55:61:0e:15:b2:d9:db:ac:df:2e:72:0a:3f:8c:66:63: e7:f4:f8:0f:89:e4:16:a2:e5:25:ec:89:4c:9f:7c:72:69:d1: 05:fa:f8:0d:98:7f:c4:42:3b:8c:77:8a:f7:a7:a8:cc:01:65: 00:2e:9d:41:98:e7:9b:64:56:e1:fb:01:ca:df:1d:da:74:c6: 4e:78:57:85:34:d5:5d:8d:bf:59:01:9a:b7:98:65:e1:93:f4: 33:c3:d0:ce:a9:93:2a:9d:19:51:28:36:89:fb:00:5f:52:4a: a7:ff:33:f6:c1:38:06:6e:84:74:3c:c6:08:71:c1:f3:65:79: 2c:04:35:8e:b3:e4:91:61:5d:5f:5b:2c:bc:86:98:eb:bd:54: 63:5f:f0:01:92:d2:dc:81:e9:21:e7:1a:a5:40:57:6e:62:07: 56:12:e4:5a:19:f8:96:15:29:66:5c:b2:9b:c7:b4:c5:64:a4: ac:30:85:a8:33:23:71:ef:65:91:6d:b2:25:56:11:a2:1a:32: f8:b9:96:eb:c6:02:36:d2:b6:1b:b0:30:c7:e6:3d:69:0a:07: 57:a2:77:d7 -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBLzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFD N0FBNTExMC8GA1UEBRMoRjcyNjdFODBCRTgxN0YwNDNEMjhGQjdFNzMwNUY0QzQ4 OEE4MzkxQTAeFw0yNTA1MjkwNjM0NTlaFw0yNTA4MzEwMDAwMDBaMBgxFjAUBgNV BAMTDTY4MzgwMDEzLWJlM2QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC1ZRmSCfDP9V7IUg3SkRaOsNyDdoRujaihR5gmWcQPBVZc72Ish9QDStGAo4Ki Btna2AKy3fyDqgP87T/4tSwAcKbFgNYGiMp7kjW3Oi+UFt7wN+hJ8p0NjY8a9LW4 e/11cOa9aGGT9lnNsQnq4qR+j1frVTutnEDCJ75gL4x61xWB3UZXMcDtKwgHa1dK u4IIbfhueWOp29vKIp833oRmvKmugmoBg8zeZwT3b+3HFk0wFyOmf6D9ysD8yG8m 9ARMihzHsWMPq5riUa2Nhdz2HPGh2bwbOWsTId+FtEOmmiT4zVPk9qdRJJG0Lxw3 ghxDv7Go4RQYQAkPfPI91NfhAgMBAAGjggKVMIICkTAdBgNVHQ4EFgQU8aiuIRTh u/mqbkXh5mY5ifWJchQwHwYDVR0jBBgwFoAU9yZ+gL6BfwQ9KPt+cwX0xIioORow DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUM3QUE1L0JBRkIzNTc0MTVC QjExRjBCRkQ1NDg4MUM0RjlBRTAyLzl5Wi1nTDZCZndROUtQdC1jd1gweElpb09S by5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvOXlaLWdMNkJmd1E5S1B0LWN3WDB4SWlvT1JvLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD N0FBNS9CQUZCMzU3NDE1QkIxMUYwQkZENTQ4ODFDNEY5QUUwMi8wQUMxM0Q5NDND NTcxMUYwQkZCQjU3MkVDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAMsC3DANBgkqhkiG9w0BAQsFAAOCAQEAsuGaoS3MpIgUWY0L K6Bnq8g1SgxyJqxvTPE5DT+jH/U7sDddfeVVYQ4VstnbrN8ucgo/jGZj5/T4D4nk FqLlJeyJTJ98cmnRBfr4DZh/xEI7jHeK96eozAFlAC6dQZjnm2RW4fsByt8d2nTG TnhXhTTVXY2/WQGat5hl4ZP0M8PQzqmTKp0ZUSg2ifsAX1JKp/8z9sE4Bm6EdDzG CHHB82V5LAQ1jrPkkWFdX1ssvIaY671UY1/wAZLS3IHpIecapUBXbmIHVhLkWhn4 lhUpZlyym8e0xWSkrDCFqDMjce9lkW2yJVYRohoy+LmW68YCNtK2G7Awx+Y9aQoH V6J31w== -----END CERTIFICATE-----Generated at Mon Jun 2 06:36:32 2025 by rpki-client