$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4C9159E069E211EFB237DF77C4F9AE02.roa File: 4C9159E069E211EFB237DF77C4F9AE02.roa (raw, json) Hash identifier: wYnH5v2DIdORXEXaLAomIOMBUwEf/aMgXBzbya/y4hk= Subject key identifier: CE:BD:C6:38:0D:A4:47:DF:E3:05:E5:C2:2D:A2:A1:2D:67:10:AA:BE Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 2763 Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4C9159E069E211EFB237DF77C4F9AE02.roa Signing time: Mon 02 Jun 2025 21:07:22 +0000 ROA not before: Mon 02 Jun 2025 21:07:22 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 38547 IP address blocks: 115.167.72.0/24 maxlen: 24 115.167.74.0/24 maxlen: 24 115.167.75.0/24 maxlen: 24 202.92.16.0/24 maxlen: 24 202.92.17.0/24 maxlen: 24 202.92.23.0/24 maxlen: 24 202.92.24.0/24 maxlen: 24 202.92.24.32/27 maxlen: 27 202.92.25.0/24 maxlen: 24 202.92.27.0/24 maxlen: 24 202.92.28.0/24 maxlen: 24 202.92.29.0/24 maxlen: 24 202.92.30.0/24 maxlen: 24 202.92.31.0/24 maxlen: 24 2400:9560:1::/48 maxlen: 48 2400:9560:5::/48 maxlen: 48 2400:9560:9::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10083 (0x2763) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Jun 2 21:07:22 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683e128a-9914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:47:d5:43:d9:72:d5:4f:95:55:24:cb:61:55: 81:d6:eb:d9:ef:70:2c:ee:9f:dc:11:65:97:43:3f: 09:7f:6b:c2:1e:a9:bb:3e:b0:03:c3:18:97:68:b1: 2b:0b:05:4f:72:94:23:24:3b:5e:66:19:86:5c:ea: 25:3f:71:d2:db:c0:71:25:7c:22:78:50:eb:1f:38: 8a:87:cf:e0:9b:81:4a:0e:b4:b3:a8:5f:17:66:78: 7a:a5:5b:ce:0d:30:ee:ee:b0:43:14:16:9e:8a:33: 5a:9d:9f:a8:f3:e3:5e:75:eb:db:0c:03:0a:44:54: 5c:8b:e0:59:ce:bf:64:2d:75:63:38:ee:9f:21:3d: e6:6c:b8:06:f3:e0:08:fd:19:c2:a7:7b:f7:c0:16: 87:4e:d9:44:18:71:5c:cc:a8:a2:20:98:f0:08:83: f0:30:e7:66:84:45:e8:b9:bb:af:09:f9:27:c7:15: 92:e2:db:d1:90:b3:9d:f1:66:d5:ac:17:29:68:cd: dc:04:5c:87:b3:5b:3f:63:0f:da:d9:fe:a0:d8:44: ba:f9:72:58:1a:55:42:44:59:b0:c7:4f:f0:bb:e2: bf:ff:6d:0d:1a:ac:86:44:75:09:29:2f:03:5e:09: d5:3d:74:ba:fe:ff:4b:03:10:f0:bc:55:86:0f:62: bb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BD:C6:38:0D:A4:47:DF:E3:05:E5:C2:2D:A2:A1:2D:67:10:AA:BE X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/4C9159E069E211EFB237DF77C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 115.167.72.0/24 115.167.74.0/23 202.92.16.0/23 202.92.23.0-202.92.25.255 202.92.27.0-202.92.31.255 IPv6: 2400:9560:1::/48 2400:9560:5::/48 2400:9560:9::/48 Signature Algorithm: sha256WithRSAEncryption 05:75:4b:61:c4:ab:af:7e:88:23:6e:96:40:2e:da:94:c8:53: 00:3a:0e:22:68:ec:53:2b:76:3f:ff:b4:a9:c3:fa:ff:7b:ff: 86:11:e1:ff:28:84:79:23:11:d2:bd:ce:17:e6:06:43:2d:b9: 6f:33:7d:3e:b9:67:e1:8d:d3:ea:a9:9a:20:7f:a4:f4:59:b1: 83:9d:ad:ad:14:51:9a:9e:66:e1:ce:71:84:f0:37:ec:13:29: 3c:35:d4:41:eb:46:6c:5d:4f:2a:79:fd:c3:59:0a:58:76:dc: 99:0d:21:e4:66:46:fd:a4:3e:64:85:e3:ad:c5:0a:f1:10:ad: 36:b3:66:05:79:e8:31:b9:29:ca:49:0b:8b:4d:58:dc:94:a0: f0:ad:a3:ba:cd:d6:2d:44:7e:22:ed:16:56:57:aa:a5:f4:67: 70:06:db:6f:cc:1c:00:f5:d8:1d:b4:08:43:ed:bf:a6:7a:9e: 7b:cd:04:9f:af:b2:0e:76:a1:4c:19:6b:e9:28:b0:60:30:a1: 51:13:c6:48:30:61:38:05:f3:3f:da:b7:98:a8:79:94:a2:84: 6f:03:29:ca:04:fa:75:7d:58:5c:5a:a1:33:67:38:ed:82:56: ea:76:dc:67:86:b8:b5:f0:ef:57:25:94:bd:93:4e:fe:9d:a7: cf:fa:69:09 -----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgICJ2MwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwNjAyMjEwNzIyWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlMTI4YS05OTE0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApUfVQ9ly1U+VVSTLYVWB1uvZ73As7p/cEWWXQz8Jf2vCHqm7PrADwxiXaLEr CwVPcpQjJDteZhmGXOolP3HS28BxJXwieFDrHziKh8/gm4FKDrSzqF8XZnh6pVvO DTDu7rBDFBaeijNanZ+o8+NedevbDAMKRFRci+BZzr9kLXVjOO6fIT3mbLgG8+AI /RnCp3v3wBaHTtlEGHFczKiiIJjwCIPwMOdmhEXoubuvCfknxxWS4tvRkLOd8WbV rBcpaM3cBFyHs1s/Yw/a2f6g2ES6+XJYGlVCRFmwx0/wu+K//20NGqyGRHUJKS8D XgnVPXS6/v9LAxDwvFWGD2K7XwIDAQABo4IC4DCCAtwwHQYDVR0OBBYEFM69xjgN pEff4wXlwi2ioS1nEKq+MB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNEM5MTU5RTA2 OUUyMTFFRkIyMzdERjc3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwagYIKwYBBQUHAQcBAf8E WzBZMDQEAgABMC4DBABzp0gDBAFzp0oDBAHKXBAwDAMEAMpcFwMEAcpcGDAMAwQA ylwbAwQFylwAMCEEAgACMBsDBwAkAJVgAAEDBwAkAJVgAAUDBwAkAJVgAAkwDQYJ KoZIhvcNAQELBQADggEBAAV1S2HEq69+iCNulkAu2pTIUwA6DiJo7FMrdj//tKnD +v97/4YR4f8ohHkjEdK9zhfmBkMtuW8zfT65Z+GN0+qpmiB/pPRZsYOdra0UUZqe ZuHOcYTwN+wTKTw11EHrRmxdTyp5/cNZClh23JkNIeRmRv2kPmSF463FCvEQrTaz ZgV56DG5KcpJC4tNWNyUoPCto7rN1i1EfiLtFlZXqqX0Z3AG22/MHAD12B20CEPt v6Z6nnvNBJ+vsg52oUwZa+kosGAwoVETxkgwYTgF8z/at5ioeZSihG8DKcoE+nV9 WFxaoTNnOO2CVup23GeGuLXw71cllL2TTv6dp8/6aQk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:48:42 2025 by rpki-client