$ rpki-client -vvf rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/6521A70C395411F0AF136459C4F9AE02.roa File: 6521A70C395411F0AF136459C4F9AE02.roa (raw, json) Hash identifier: 4Idad4dFmk8KzOmK1O+klRuBqcKZ7Fg2fSUd52ueJnE= Subject key identifier: 38:19:8B:1D:4E:A8:65:BA:B4:BF:84:1C:89:61:4E:33:7C:43:BB:CE Certificate issuer: /CN=A91E57DC/serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Certificate serial: 1114 Authority key identifier: 22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/6521A70C395411F0AF136459C4F9AE02.roa Signing time: Sun 25 May 2025 10:38:29 +0000 ROA not before: Sun 25 May 2025 10:38:29 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137048 IP address blocks: 220.152.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 17:23:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4372 (0x1114) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E57DC, serialNumber=22B1A7175E75FFD847391F2C2E9665E4EEE1B742 Validity Not Before: May 25 10:38:29 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=6832f324-eeb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:89:36:92:57:de:4e:79:ad:2a:2e:95:14:a4: e8:83:76:07:b8:0e:90:4c:b6:3d:4c:ce:64:49:1d: 66:8a:22:52:ac:47:53:8b:9d:4e:35:c2:b7:01:5b: 07:58:ab:8c:51:95:ef:ce:92:bf:e3:5b:0f:76:d8: 81:90:5f:44:bc:38:d4:d8:ba:db:19:78:98:98:23: df:2c:f0:92:c7:69:57:64:95:f3:4f:09:48:e0:79: 31:dc:e1:fe:36:05:41:80:d8:a9:2a:fc:99:0a:48: 99:3d:22:c6:2e:79:f3:84:ca:7f:23:13:2c:04:a7: 96:fb:5e:7b:da:09:ad:d8:54:f4:47:61:ba:a6:3f: 73:cd:ae:a2:08:31:63:f0:84:56:07:f8:db:be:fa: 3f:0e:39:de:c2:83:59:5d:91:fa:6b:6d:6c:17:b6: f5:fa:5b:c4:65:97:cb:7b:f6:26:49:12:d9:ee:12: 45:a7:90:76:49:0f:e2:31:89:7e:fa:66:a2:06:50: cd:b2:07:ee:68:0c:ec:bc:cf:a0:4c:61:ad:b5:43: 47:89:31:e7:cf:a3:77:25:5c:c4:cc:7a:76:2e:bd: 4d:b0:e9:75:8b:cf:2d:12:61:49:97:1f:e0:21:80: d3:ea:dc:8e:98:6e:a2:c9:3c:62:00:ae:cb:2d:7c: d8:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:19:8B:1D:4E:A8:65:BA:B4:BF:84:1C:89:61:4E:33:7C:43:BB:CE X509v3 Authority Key Identifier: keyid:22:B1:A7:17:5E:75:FF:D8:47:39:1F:2C:2E:96:65:E4:EE:E1:B7:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/IrGnF151_9hHOR8sLpZl5O7ht0I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IrGnF151_9hHOR8sLpZl5O7ht0I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E57DC/35F798661F0111E9B1AA9436C4F9AE02/6521A70C395411F0AF136459C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 220.152.113.0/24 Signature Algorithm: sha256WithRSAEncryption 08:e0:39:53:e4:6f:f5:25:21:6c:cb:4f:41:b7:a7:80:94:f5: c1:95:34:0b:ce:7c:f7:7c:e4:aa:57:6c:66:7c:e9:3a:cd:99: ed:b4:52:54:b2:08:6a:c5:df:6f:7e:60:1e:25:17:42:94:fc: e4:3b:a4:6c:17:be:23:11:9d:63:6c:d5:21:6e:ad:98:6d:89: 60:82:6e:1d:87:47:96:c2:77:0b:f5:d0:be:6e:89:ce:6a:69: 00:21:80:87:bf:9b:a4:e8:43:17:22:65:b5:6d:22:31:17:68: e2:44:fd:3c:50:93:22:eb:d4:8d:ee:69:3c:50:43:f0:06:9b: 19:92:ff:69:40:26:c8:1e:66:6e:f7:f0:9b:05:25:34:aa:8f: e0:7f:98:93:af:0d:b1:56:34:aa:f4:67:e8:3d:de:bd:6a:ab: 71:92:51:30:31:e4:78:2b:88:0e:39:de:ad:89:ff:46:b0:40: d1:de:0d:59:c5:ed:11:54:48:33:aa:4d:9d:f3:6b:58:3d:52: c7:7c:42:0e:35:ab:f0:b3:28:e9:8f:5c:b9:bd:d8:04:b5:d9: 29:1a:8a:33:4b:0c:62:b2:79:80:99:e9:6e:79:b7:a4:65:fc: b8:d9:d5:7a:b6:1c:da:99:02:f1:92:80:95:a0:39:ae:e0:7a: 57:32:0f:33 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICERQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTU3REMxMTAvBgNVBAUTKDIyQjFBNzE3NUU3NUZGRDg0NzM5MUYyQzJFOTY2NUU0 RUVFMUI3NDIwHhcNMjUwNTI1MTAzODI5WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODMyZjMyNC1lZWIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2Yk2klfeTnmtKi6VFKTog3YHuA6QTLY9TM5kSR1miiJSrEdTi51ONcK3AVsH WKuMUZXvzpK/41sPdtiBkF9EvDjU2LrbGXiYmCPfLPCSx2lXZJXzTwlI4Hkx3OH+ NgVBgNipKvyZCkiZPSLGLnnzhMp/IxMsBKeW+1572gmt2FT0R2G6pj9zza6iCDFj 8IRWB/jbvvo/DjnewoNZXZH6a21sF7b1+lvEZZfLe/YmSRLZ7hJFp5B2SQ/iMYl+ +maiBlDNsgfuaAzsvM+gTGGttUNHiTHnz6N3JVzEzHp2Lr1NsOl1i88tEmFJlx/g IYDT6tyOmG6iyTxiAK7LLXzY8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFDgZix1O qGW6tL+EHIlhTjN8Q7vOMB8GA1UdIwQYMBaAFCKxpxdedf/YRzkfLC6WZeTu4bdC MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNTdEQy8zNUY3OTg2NjFG MDExMUU5QjFBQTk0MzZDNEY5QUUwMi9JckduRjE1MV85aEhPUjhzTHBabDVPN2h0 MEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lyR25GMTUxXzloSE9SOHNMcFpsNU83aHQwSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTU3REMvMzVGNzk4NjYxRjAxMTFFOUIxQUE5NDM2QzRGOUFFMDIvNjUyMUE3MEMz OTU0MTFGMEFGMTM2NDU5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBADcmHEwDQYJKoZIhvcNAQELBQADggEBAAjgOVPkb/UlIWzL T0G3p4CU9cGVNAvOfPd85KpXbGZ86TrNme20UlSyCGrF329+YB4lF0KU/OQ7pGwX viMRnWNs1SFurZhtiWCCbh2HR5bCdwv10L5uic5qaQAhgIe/m6ToQxciZbVtIjEX aOJE/TxQkyLr1I3uaTxQQ/AGmxmS/2lAJsgeZm738JsFJTSqj+B/mJOvDbFWNKr0 Z+g93r1qq3GSUTAx5HgriA453q2J/0awQNHeDVnF7RFUSDOqTZ3za1g9Usd8Qg41 q/CzKOmPXLm92AS12SkaijNLDGKyeYCZ6W55t6Rl/LjZ1Xq2HNqZAvGSgJWgOa7g elcyDzM= -----END CERTIFICATE-----Generated at Mon Jun 2 06:00:08 2025 by rpki-client