$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa File: 9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa (raw, json) Hash identifier: jBGax67dZ7Be4xOtq1IYUGU9Zdm42t4E1Zwu/lYqets= Subject key identifier: E3:0E:E4:62:60:C0:2F:CF:A8:C1:A3:0B:FB:7E:B4:76:EA:9C:CB:EE Certificate issuer: /CN=A91C8530/serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4 Certificate serial: 08D4 Authority key identifier: DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa Signing time: Sat 31 May 2025 21:06:46 +0000 ROA not before: Sat 31 May 2025 21:06:46 +0000 ROA not after: Wed 01 Oct 2025 00:00:00 +0000 asID: 45918 IP address blocks: 116.193.10.0/23 maxlen: 23 116.193.12.0/23 maxlen: 23 116.193.14.0/23 maxlen: 23 116.193.14.0/24 maxlen: 24 116.193.15.0/24 maxlen: 24 2401:9100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:36:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2260 (0x8d4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8530, serialNumber=DF8A4E6117BCA368940D68E9854798B966609DD4 Validity Not Before: May 31 21:06:46 2025 GMT Not After : Oct 1 00:00:00 2025 GMT Subject: CN=683b6f66-6ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:47:35:ce:20:82:ff:fb:8c:64:09:46:20: 62:d1:4b:43:40:29:eb:de:61:54:b1:a3:60:3b:c6: e6:b9:9a:ed:ae:62:14:dd:0e:47:78:5e:9a:44:a1: 5a:6a:47:91:55:bf:57:df:f2:1a:b5:5a:69:32:77: 82:77:c8:da:a3:1d:75:08:75:f0:81:5b:a3:97:d7: 3b:91:c7:d5:fe:30:4d:c7:4f:6a:27:fb:39:14:bc: 84:65:f2:34:92:d1:cf:8a:3f:53:f9:3d:71:63:70: 53:fc:b2:01:91:9c:43:08:42:01:fb:f6:9a:ff:4a: a4:cb:15:14:a2:17:75:26:ec:63:80:62:b3:99:40: 6c:2c:45:e3:89:34:cf:43:67:fc:53:79:0b:5a:fd: f7:3a:2d:98:b7:46:40:e8:74:46:b6:d1:0f:b1:e3: 13:76:1b:30:8c:03:49:48:d3:10:c2:be:db:8d:b3: 2b:50:dd:2f:ce:43:60:67:28:bf:02:f4:66:49:09: cb:97:a0:1d:49:1e:ef:56:7b:01:c2:4d:47:81:f6: 53:a1:96:9a:ee:60:00:81:fb:3c:08:21:dc:f4:83: a9:38:53:b6:c2:f8:94:24:a9:09:e8:f1:41:d9:54: a7:09:5f:f6:e8:03:cc:4a:67:c3:33:9c:5b:ed:c8: 60:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:0E:E4:62:60:C0:2F:CF:A8:C1:A3:0B:FB:7E:B4:76:EA:9C:CB:EE X509v3 Authority Key Identifier: keyid:DF:8A:4E:61:17:BC:A3:68:94:0D:68:E9:85:47:98:B9:66:60:9D:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/34pOYRe8o2iUDWjphUeYuWZgndQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/34pOYRe8o2iUDWjphUeYuWZgndQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8530/18F66D86B1E611EAAA91335AC4F9AE02/9BD30C5EB1E711EA86EFFD5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 116.193.10.0-116.193.15.255 IPv6: 2401:9100::/32 Signature Algorithm: sha256WithRSAEncryption 0f:2b:7e:97:cc:7f:2d:33:4e:8c:e1:75:8c:1d:fa:93:c0:8f: b1:ba:cd:e4:b6:2e:cc:7a:21:f4:27:e4:9b:a9:2b:a4:df:75: 6e:80:91:df:e6:87:b0:01:d8:f3:37:06:d0:b5:09:f6:46:40: a4:ca:5f:d5:cd:90:72:60:b9:d0:57:61:c4:4f:3c:7e:dd:53: 87:03:cf:42:d6:d2:d1:c7:fd:e9:e6:84:3b:60:ea:91:cb:1e: 6f:7c:68:33:a9:cb:45:0a:db:fb:45:eb:d4:6d:49:15:12:e5: 08:99:3d:77:e1:5c:d5:b7:d8:68:1a:9b:05:5b:4e:7f:9a:07: f0:f9:0d:f7:93:25:28:ed:4f:10:79:48:7b:ef:00:e2:c7:a6: 91:53:fa:48:66:14:8c:a3:8b:d6:62:4b:68:5d:e7:f4:ee:9a: 76:5e:2f:f8:fe:c2:85:a2:f5:77:33:3c:8f:76:c8:61:4b:83: c6:08:c5:21:57:70:27:58:59:78:60:1b:04:27:04:d4:73:bb: fc:9e:bc:7e:d4:3c:66:6c:e0:9d:d5:13:70:be:1f:4d:82:86: dd:10:6d:e9:81:e6:f6:2c:a8:d1:05:fa:7a:6b:77:9b:81:9c: 26:48:3c:3d:fa:d0:cd:b6:0f:35:b6:9b:ff:b9:10:04:80:2b: e7:37:95:7d -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICCNQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Qzg1MzAxMTAvBgNVBAUTKERGOEE0RTYxMTdCQ0EzNjg5NDBENjhFOTg1NDc5OEI5 NjY2MDlERDQwHhcNMjUwNTMxMjEwNjQ2WhcNMjUxMDAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiNmY2Ni02ZWNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA1J9HNc4ggv/7jGQJRiBi0UtDQCnr3mFUsaNgO8bmuZrtrmIU3Q5HeF6aRKFa akeRVb9X3/IatVppMneCd8jaox11CHXwgVujl9c7kcfV/jBNx09qJ/s5FLyEZfI0 ktHPij9T+T1xY3BT/LIBkZxDCEIB+/aa/0qkyxUUohd1JuxjgGKzmUBsLEXjiTTP Q2f8U3kLWv33Oi2Yt0ZA6HRGttEPseMTdhswjANJSNMQwr7bjbMrUN0vzkNgZyi/ AvRmSQnLl6AdSR7vVnsBwk1HgfZToZaa7mAAgfs8CCHc9IOpOFO2wviUJKkJ6PFB 2VSnCV/26APMSmfDM5xb7chgpQIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFOMO5GJg wC/PqMGjC/t+tHbqnMvuMB8GA1UdIwQYMBaAFN+KTmEXvKNolA1o6YVHmLlmYJ3U MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODUzMC8xOEY2NkQ4NkIx RTYxMUVBQUE5MTMzNUFDNEY5QUUwMi8zNHBPWVJlOG8yaVVEV2pwaFVlWXVXWmdu ZFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzM0cE9ZUmU4bzJpVURXanBoVWVZdVdaZ25kUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Qzg1MzAvMThGNjZEODZCMUU2MTFFQUFBOTEzMzVBQzRGOUFFMDIvOUJEMzBDNUVC MUU3MTFFQTg2RUZGRDVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBQEAgABMA4wDAMEAXTBCgMEBHTBADANBAIAAjAHAwUAJAGRADANBgkqhkiG 9w0BAQsFAAOCAQEADyt+l8x/LTNOjOF1jB36k8CPsbrN5LYuzHoh9Cfkm6krpN91 boCR3+aHsAHY8zcG0LUJ9kZApMpf1c2QcmC50FdhxE88ft1ThwPPQtbS0cf96eaE O2Dqkcseb3xoM6nLRQrb+0Xr1G1JFRLlCJk9d+Fc1bfYaBqbBVtOf5oH8PkN95Ml KO1PEHlIe+8A4semkVP6SGYUjKOL1mJLaF3n9O6adl4v+P7ChaL1dzM8j3bIYUuD xgjFIVdwJ1hZeGAbBCcE1HO7/J68ftQ8ZmzgndUTcL4fTYKG3RBt6YHm9iyo0QX6 emt3m4GcJkg8PfrQzbYPNbab/7kQBIAr5zeVfQ== -----END CERTIFICATE-----Generated at Wed Jun 4 00:07:12 2025 by rpki-client