$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/1DDB4F803AE711F09B94E47FC4F9AE02.roa File: 1DDB4F803AE711F09B94E47FC4F9AE02.roa (raw, json) Hash identifier: jKGh7qYB9/mjUAeo3pLPwOPzfnYdxhoTS9Mo108a0Ok= Subject key identifier: DF:D9:88:46:0C:18:F5:99:E7:0A:A1:39:A4:B7:B3:5E:6F:60:D0:08 Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 0668 Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/1DDB4F803AE711F09B94E47FC4F9AE02.roa Signing time: Tue 27 May 2025 10:41:16 +0000 ROA not before: Tue 27 May 2025 10:41:16 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 55954 IP address blocks: 125.214.88.0/21 maxlen: 21 125.214.88.0/24 maxlen: 24 125.214.89.0/24 maxlen: 24 125.214.90.0/24 maxlen: 24 125.214.91.0/24 maxlen: 24 125.214.92.0/24 maxlen: 24 125.214.93.0/24 maxlen: 24 125.214.94.0/24 maxlen: 24 125.214.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 22:38:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1640 (0x668) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: May 27 10:41:16 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=683596cc-7b38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f6:eb:8d:ff:ed:bb:f2:86:e7:18:13:a9:b7: d9:8f:2a:a1:3e:69:a6:d9:39:5b:67:e4:0a:2c:e4: 06:a0:84:d5:27:8a:75:3e:40:02:26:d2:6e:4c:df: bd:ff:a6:1d:81:87:46:45:48:96:40:49:b5:34:e5: 86:ea:31:08:a7:a4:f3:1b:11:31:3e:a9:38:0f:14: a9:ec:7b:ae:81:98:76:6f:8d:e0:39:47:0f:10:05: 1e:bc:0a:28:0a:ac:e1:66:d4:92:50:d4:dd:c7:b0: a7:c7:d7:6f:c3:9d:ed:70:8d:7d:b8:84:b9:6d:f6: e5:6a:5e:31:46:aa:c4:86:0c:66:af:e0:24:cd:bc: 8f:28:70:6c:81:c5:f9:b8:23:59:8c:63:fc:f8:b1: cf:e2:e5:90:6d:4a:64:a5:d1:48:3b:99:81:e6:d5: 69:41:63:f2:cc:f3:31:91:b8:f1:a5:5c:07:f5:87: 2b:45:96:68:a7:c7:45:0d:ec:b3:70:df:c0:bd:e7: 7a:55:3d:9f:af:85:39:93:d2:f9:21:3a:d9:52:ab: e7:02:31:8c:ed:82:13:c0:81:8b:4d:b1:80:bb:35: c3:fc:9a:0a:30:d7:77:02:92:d3:87:7b:21:c0:07: 82:11:08:59:c7:b9:ec:89:33:2f:d0:b0:d6:37:24: 5b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:D9:88:46:0C:18:F5:99:E7:0A:A1:39:A4:B7:B3:5E:6F:60:D0:08 X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/1DDB4F803AE711F09B94E47FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 125.214.88.0/21 Signature Algorithm: sha256WithRSAEncryption 6b:6d:5c:68:25:7f:51:09:2a:e2:a5:62:12:2a:03:86:e0:88: 0e:64:54:5d:44:a4:46:b0:9b:6c:66:2a:55:01:2c:e9:01:24: 71:42:3e:ff:30:92:6e:5b:6a:e7:bd:a4:80:e2:27:cb:7d:a4: ec:61:bf:07:d4:a5:a3:12:24:9b:97:51:c6:80:55:55:2b:af: fb:a2:9e:2b:90:93:48:c8:67:86:42:38:d2:48:2c:1d:d8:57: f3:89:c1:7b:7b:16:eb:64:e8:a8:61:49:ab:5e:99:fb:3a:3c: f6:ca:51:b5:01:f2:4c:8d:3d:f9:24:8a:1d:bc:1c:a2:96:a0: 25:10:37:55:ad:01:19:2d:f1:ee:7c:0c:33:7f:a1:ef:a5:e8: e2:7d:96:25:78:49:5a:4e:f3:03:0e:83:7f:69:b5:49:a1:2e: ae:8e:6a:95:88:af:b0:26:36:b9:fb:51:eb:c4:55:fa:f7:0e: 42:f8:9c:75:24:c6:1f:58:4c:ae:ad:0e:49:6d:32:f7:5f:25: 3d:88:5c:9b:fb:87:45:cf:50:7b:f8:37:a5:9f:c9:2a:d4:cb: c7:db:b9:0e:03:69:9e:9d:a2:c3:2a:0c:0e:55:3a:68:13:be: ff:38:5f:d2:63:ed:88:93:3d:96:85:51:50:35:61:55:57:1f: f4:45:41:bd -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBmgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjUwNTI3MTA0MTE2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM1OTZjYy03YjM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp/brjf/tu/KG5xgTqbfZjyqhPmmm2TlbZ+QKLOQGoITVJ4p1PkACJtJuTN+9 /6YdgYdGRUiWQEm1NOWG6jEIp6TzGxExPqk4DxSp7HuugZh2b43gOUcPEAUevAoo CqzhZtSSUNTdx7Cnx9dvw53tcI19uIS5bfblal4xRqrEhgxmr+AkzbyPKHBsgcX5 uCNZjGP8+LHP4uWQbUpkpdFIO5mB5tVpQWPyzPMxkbjxpVwH9YcrRZZop8dFDeyz cN/Aved6VT2fr4U5k9L5ITrZUqvnAjGM7YITwIGLTbGAuzXD/JoKMNd3ApLTh3sh wAeCEQhZx7nsiTMv0LDWNyRbCwIDAQABo4IClTCCApEwHQYDVR0OBBYEFN/ZiEYM GPWZ5wqhOaS3s15vYNAIMB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE5RUQvNTRCOTdBMjY4QUI2MTFFQjgzMkYwMzE0QzRGOUFFMDIvMUREQjRGODAz QUU3MTFGMDlCOTRFNDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAN91lgwDQYJKoZIhvcNAQELBQADggEBAGttXGglf1EJKuKl YhIqA4bgiA5kVF1EpEawm2xmKlUBLOkBJHFCPv8wkm5baue9pIDiJ8t9pOxhvwfU paMSJJuXUcaAVVUrr/uiniuQk0jIZ4ZCONJILB3YV/OJwXt7Futk6KhhSatemfs6 PPbKUbUB8kyNPfkkih28HKKWoCUQN1WtARkt8e58DDN/oe+l6OJ9liV4SVpO8wMO g39ptUmhLq6OapWIr7AmNrn7UevEVfr3DkL4nHUkxh9YTK6tDkltMvdfJT2IXJv7 h0XPUHv4N6WfySrUy8fbuQ4DaZ6dosMqDA5VOmgTvv84X9Jj7YiTPZaFUVA1YVVX H/RFQb0= -----END CERTIFICATE-----Generated at Mon Jun 2 06:35:44 2025 by rpki-client