$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa File: FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa (raw, json) Hash identifier: ui7/XclXiZW0cPIdTnmCwn+c4uoenWF6KTBq9pEuR7M= Subject key identifier: 8E:52:51:D4:A9:94:80:D9:3B:27:0F:C4:08:01:8E:0D:DF:B5:A5:26 Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 0669 Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa Signing time: Tue 27 May 2025 10:41:17 +0000 ROA not before: Tue 27 May 2025 10:41:17 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133739 IP address blocks: 43.243.236.0/23 maxlen: 24 103.24.240.0/23 maxlen: 24 103.39.60.0/22 maxlen: 22 103.39.60.0/23 maxlen: 24 103.39.62.0/24 maxlen: 24 103.39.63.0/24 maxlen: 24 103.224.208.0/24 maxlen: 24 103.224.209.0/24 maxlen: 24 103.224.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:48:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1641 (0x669) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: May 27 10:41:17 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=683596cd-c5f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:57:02:66:fe:b6:4a:b1:34:c5:e3:a5:8f: 41:d4:fc:d2:db:bf:e1:ef:2c:04:6f:e1:67:30:b7: 41:90:22:e3:8c:e4:b1:ab:33:a0:3c:eb:fe:23:05: f5:03:f1:8b:7d:e0:eb:82:ae:cb:ca:dc:4e:88:95: 61:b8:60:c6:65:21:c5:20:67:c3:61:31:02:c7:4a: e8:f9:e1:17:a5:45:54:10:e0:b9:c4:c9:45:53:fc: 8c:83:ee:8a:c0:bd:98:97:2a:bf:12:50:16:6b:81: 0b:bb:a1:cb:dd:7a:c1:1f:60:54:c4:d7:da:5f:78: 5a:04:91:ac:68:e1:e7:b3:a0:db:e2:4b:9a:78:be: 89:ce:4e:33:78:d3:5d:72:3f:6c:e5:66:e2:b9:2d: 5b:f7:fd:e8:23:44:12:8d:f2:ee:fc:e6:5c:98:8b: d4:98:09:71:9d:ec:1f:fb:a3:44:26:5e:51:12:7e: 26:04:7d:26:87:9c:8d:88:72:78:a9:95:e8:5a:56: 9c:ef:4d:0f:79:ac:ff:e1:b4:25:24:02:1b:c8:fc: cc:2a:9a:0b:19:cc:73:7f:05:74:7a:d2:b7:e9:69: 3f:8f:cc:21:3d:cb:13:04:e9:44:36:d6:bb:82:08: 9c:56:5c:10:3a:ff:9c:72:07:54:85:af:66:ea:d0: cf:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:52:51:D4:A9:94:80:D9:3B:27:0F:C4:08:01:8E:0D:DF:B5:A5:26 X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.236.0/23 103.24.240.0/23 103.39.60.0/22 103.224.208.0/23 103.224.211.0/24 Signature Algorithm: sha256WithRSAEncryption 85:44:d2:11:77:2f:83:9b:d0:20:b8:e8:07:4f:66:18:d6:19: b5:07:92:b6:17:3c:bf:a5:05:66:03:2e:fc:81:ce:32:20:a5: 97:f5:4e:8a:80:a3:12:50:09:29:38:5a:87:59:49:b3:ba:48: 88:d2:46:2c:40:f3:47:cc:78:92:8c:76:b7:67:1d:47:1a:5e: 4a:9f:9c:77:12:ed:25:ea:0f:1b:c7:88:64:9c:d8:89:b0:6d: 71:03:2e:b4:9b:d4:5a:63:b0:62:b7:7d:06:0b:6f:2d:6d:fb: 6f:52:f4:2a:9d:2c:ae:e9:e1:c6:5b:4a:2c:7d:42:10:ee:15: fb:0b:1b:ec:09:1e:9c:c9:1d:40:e3:20:37:8e:5b:95:a4:d2: 32:e6:3f:15:30:91:24:2d:73:b0:f2:a3:b7:7e:d8:0c:0e:3a: 14:2b:cc:66:c4:a4:56:2a:00:8b:7a:b3:26:9a:d4:ee:7e:b1: 28:02:f5:fd:b4:4e:73:be:d1:fc:e6:85:d0:6a:49:95:c9:6b: 34:e9:d4:3b:5f:81:5f:14:4f:73:81:96:75:2c:88:1f:99:60: 26:2c:6d:8e:1f:66:ed:da:35:6c:42:fc:79:8d:ec:d9:50:f6: f6:82:80:54:10:bc:9b:56:1e:e1:f8:c8:a4:5a:fe:42:c2:58: c1:81:e8:34 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBmkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjUwNTI3MTA0MTE3WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODM1OTZjZC1jNWY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuO9XAmb+tkqxNMXjpY9B1PzS27/h7ywEb+FnMLdBkCLjjOSxqzOgPOv+IwX1 A/GLfeDrgq7LytxOiJVhuGDGZSHFIGfDYTECx0ro+eEXpUVUEOC5xMlFU/yMg+6K wL2Ylyq/ElAWa4ELu6HL3XrBH2BUxNfaX3haBJGsaOHns6Db4kuaeL6Jzk4zeNNd cj9s5WbiuS1b9/3oI0QSjfLu/OZcmIvUmAlxnewf+6NEJl5REn4mBH0mh5yNiHJ4 qZXoWlac700Peaz/4bQlJAIbyPzMKpoLGcxzfwV0etK36Wk/j8whPcsTBOlENta7 ggicVlwQOv+ccgdUha9m6tDP3QIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFI5SUdSp lIDZOycPxAgBjg3ftaUmMB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE5RUQvNTRCOTdBMjY4QUI2MTFFQjgzMkYwMzE0QzRGOUFFMDIvRkY3QUJFMkMz QUU2MTFGMDgzRDZBRDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAEr8+wDBAFnGPADBAJnJzwDBAFn4NADBABn4NMwDQYJKoZI hvcNAQELBQADggEBAIVE0hF3L4Ob0CC46AdPZhjWGbUHkrYXPL+lBWYDLvyBzjIg pZf1ToqAoxJQCSk4WodZSbO6SIjSRixA80fMeJKMdrdnHUcaXkqfnHcS7SXqDxvH iGSc2ImwbXEDLrSb1FpjsGK3fQYLby1t+29S9CqdLK7p4cZbSix9QhDuFfsLG+wJ HpzJHUDjIDeOW5Wk0jLmPxUwkSQtc7Dyo7d+2AwOOhQrzGbEpFYqAIt6syaa1O5+ sSgC9f20TnO+0fzmhdBqSZXJazTp1DtfgV8UT3OBlnUsiB+ZYCYsbY4fZu3aNWxC /HmN7NlQ9vaCgFQQvJtWHuH4yKRa/kLCWMGB6DQ= -----END CERTIFICATE-----Generated at Wed Jun 4 00:03:49 2025 by rpki-client