$ rpki-client -vvf rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/105CF2182FEE11F0A3938C3BC4F9AE02.roa File: 105CF2182FEE11F0A3938C3BC4F9AE02.roa (raw, json) Hash identifier: 59eyuT2URuKIljZ2Lh3Qk0mAQWOkmIViAcmW+OHdvw4= Subject key identifier: F3:3E:47:0A:76:B0:26:B9:DD:FD:6E:A5:34:2B:C7:8C:2E:98:48:6D Certificate issuer: /CN=A91E015D/serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Certificate serial: 026B Authority key identifier: 25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/105CF2182FEE11F0A3938C3BC4F9AE02.roa Signing time: Tue 13 May 2025 11:33:17 +0000 ROA not before: Tue 13 May 2025 11:33:17 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 215939 IP address blocks: 110.44.108.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 02:38:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 619 (0x26b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E015D, serialNumber=257A9E6914D58A745B0EE6ABE548CDBE020488D4 Validity Not Before: May 13 11:33:17 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68232dfd-6062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5f:c2:31:85:0d:4f:7c:60:3d:29:ce:cf:fd: ff:e9:e3:23:7e:3b:68:4d:75:05:9f:13:14:70:bf: 1c:cb:8c:b3:88:38:6a:77:e1:53:b4:b8:23:7f:c6: 7a:9f:64:c9:0b:42:9f:1f:08:11:93:f4:44:5b:cc: 19:e3:c3:94:2c:4b:55:c2:2a:fe:80:e2:29:6c:95: 54:23:cd:bd:c5:58:02:e5:6c:9f:d6:5f:d9:94:fa: 82:43:c6:72:dd:a7:b0:19:15:dd:fb:05:a3:35:37: ae:26:44:94:3d:c9:9a:d4:24:f1:88:b4:16:d8:ce: 16:b6:e9:f1:65:b6:41:e3:b6:3b:c8:59:7e:ac:75: cb:e1:8f:1d:5a:c7:20:23:ba:fe:da:c7:72:d2:ec: 33:5c:6f:54:7f:94:88:3b:8a:bb:0c:24:b8:ad:75: b1:aa:31:88:b8:c4:67:4f:4d:0a:8f:ac:bf:3c:50: 7d:22:39:b1:23:27:4d:ec:13:23:65:0c:92:c0:73: e9:60:ee:01:5e:e4:ef:f1:e5:ee:21:79:42:e8:87: 2d:3b:fe:2f:f8:24:56:da:5f:16:66:7c:c3:df:c4: 69:fa:e2:e2:37:de:82:d1:fb:b4:72:41:d6:2f:ad: b7:11:5b:c0:b7:52:58:1f:d3:2a:74:02:be:36:68: 3d:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3E:47:0A:76:B0:26:B9:DD:FD:6E:A5:34:2B:C7:8C:2E:98:48:6D X509v3 Authority Key Identifier: keyid:25:7A:9E:69:14:D5:8A:74:5B:0E:E6:AB:E5:48:CD:BE:02:04:88:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/JXqeaRTVinRbDuar5UjNvgIEiNQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JXqeaRTVinRbDuar5UjNvgIEiNQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E015D/6C474920731211EDB70BCE33C4F9AE02/105CF2182FEE11F0A3938C3BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 110.44.108.0/22 Signature Algorithm: sha256WithRSAEncryption 2b:d6:01:be:56:9d:70:62:9f:c4:ca:e1:85:d0:bd:6b:7f:8e: 12:aa:5d:58:8b:ac:6a:73:02:51:ae:aa:9d:65:fd:10:e6:0c: c9:55:bd:d8:fd:33:90:24:01:4c:83:6f:1a:e3:1b:7b:2e:04: 27:5d:37:5d:8b:8d:8c:22:7c:70:6b:e8:c9:a9:78:d9:f7:a0: 77:5a:46:80:0b:4f:d5:10:54:c6:5c:07:62:d8:78:8e:5c:63: 87:88:7a:3c:f5:fa:b0:b4:00:a3:75:71:92:66:47:cb:60:2a: 55:e4:02:e6:33:e4:a2:b2:7a:d9:8d:4e:b2:00:dd:93:14:dd: 48:71:a6:40:c9:f5:d1:d6:8d:eb:ee:3f:4b:45:6c:20:37:63: 96:21:07:ee:98:e4:65:69:25:fe:dc:59:d9:d7:2b:b9:15:aa: 69:dd:5e:09:5b:04:0e:bb:b5:1d:c1:6b:63:de:40:b9:6a:a2: 77:c0:1e:37:2b:5a:93:15:f5:e0:97:37:1e:c1:0f:c0:b8:e2: 30:0a:d3:28:aa:10:d5:ad:33:6a:2e:3e:1a:27:90:bd:7b:cd: 31:ff:75:48:2e:6d:67:06:19:8e:d4:e6:8a:96:5e:27:ac:34: 47:2e:9a:61:03:b9:e3:8b:22:f0:2a:da:b3:36:fc:27:47:11: 3a:14:b2:7a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAmswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTAxNUQxMTAvBgNVBAUTKDI1N0E5RTY5MTRENThBNzQ1QjBFRTZBQkU1NDhDREJF MDIwNDg4RDQwHhcNMjUwNTEzMTEzMzE3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODIzMmRmZC02MDYyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxF/CMYUNT3xgPSnOz/3/6eMjfjtoTXUFnxMUcL8cy4yziDhqd+FTtLgjf8Z6 n2TJC0KfHwgRk/REW8wZ48OULEtVwir+gOIpbJVUI829xVgC5Wyf1l/ZlPqCQ8Zy 3aewGRXd+wWjNTeuJkSUPcma1CTxiLQW2M4WtunxZbZB47Y7yFl+rHXL4Y8dWscg I7r+2sdy0uwzXG9Uf5SIO4q7DCS4rXWxqjGIuMRnT00Kj6y/PFB9IjmxIydN7BMj ZQySwHPpYO4BXuTv8eXuIXlC6IctO/4v+CRW2l8WZnzD38Rp+uLiN96C0fu0ckHW L623EVvAt1JYH9MqdAK+Nmg9XQIDAQABo4IClTCCApEwHQYDVR0OBBYEFPM+Rwp2 sCa53f1upTQrx4wumEhtMB8GA1UdIwQYMBaAFCV6nmkU1Yp0Ww7mq+VIzb4CBIjU MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDE1RC82QzQ3NDkyMDcz MTIxMUVEQjcwQkNFMzNDNEY5QUUwMi9KWHFlYVJUVmluUmJEdWFyNVVqTnZnSUVp TlEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0pYcWVhUlRWaW5SYkR1YXI1VWpOdmdJRWlOUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTAxNUQvNkM0NzQ5MjA3MzEyMTFFREI3MEJDRTMzQzRGOUFFMDIvMTA1Q0YyMTgy RkVFMTFGMEEzOTM4QzNCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJuLGwwDQYJKoZIhvcNAQELBQADggEBACvWAb5WnXBin8TK 4YXQvWt/jhKqXViLrGpzAlGuqp1l/RDmDMlVvdj9M5AkAUyDbxrjG3suBCddN12L jYwifHBr6MmpeNn3oHdaRoALT9UQVMZcB2LYeI5cY4eIejz1+rC0AKN1cZJmR8tg KlXkAuYz5KKyetmNTrIA3ZMU3UhxpkDJ9dHWjevuP0tFbCA3Y5YhB+6Y5GVpJf7c WdnXK7kVqmndXglbBA67tR3Ba2PeQLlqonfAHjcrWpMV9eCXNx7BD8C44jAK0yiq ENWtM2ouPhonkL17zTH/dUgubWcGGY7U5oqWXiesNEcummEDueOLIvAq2rM2/CdH EToUsno= -----END CERTIFICATE-----Generated at Tue Jun 3 23:50:00 2025 by rpki-client