$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69F00404BCFE11EFBD130355C4F9AE02.roa File: 69F00404BCFE11EFBD130355C4F9AE02.roa (raw, json) Hash identifier: bkaUG/tozfmm5pTntJVKcbWn4QlVBHJXY0SRDkkYsts= Subject key identifier: CA:B8:46:B3:25:3A:79:18:C7:33:CF:8F:71:4B:29:AF:2D:3E:46:D3 Certificate issuer: /CN=A91E6134/serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Certificate serial: 276B Authority key identifier: 83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69F00404BCFE11EFBD130355C4F9AE02.roa Signing time: Mon 02 Jun 2025 21:07:29 +0000 ROA not before: Mon 02 Jun 2025 21:07:29 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 7018 IP address blocks: 43.254.12.0/22 maxlen: 24 115.167.68.0/22 maxlen: 24 115.167.108.0/22 maxlen: 24 175.110.76.0/22 maxlen: 24 175.110.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 21:07:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10091 (0x276b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E6134, serialNumber=8308087911EA49E215DC4926B0226A521E5B39C4 Validity Not Before: Jun 2 21:07:29 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683e1290-337f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:71:03:cf:3a:63:37:47:33:d4:a2:87:41:f4: 7e:03:1f:26:d1:a9:c6:7d:4d:81:57:f6:29:b1:a2: 24:a9:10:07:86:c0:b6:88:93:b0:f2:f0:16:4a:b9: d9:8d:c5:7d:bd:eb:5e:2c:c0:e4:29:3c:99:ef:7f: d5:29:b2:2f:38:8f:83:03:9f:59:9f:d3:4e:19:b9: ce:81:83:29:31:2b:fe:62:e0:3a:eb:83:a7:f4:06: 5c:18:bf:de:db:f0:b9:d0:ef:fc:d1:42:1b:ce:2a: ed:be:1c:7e:9b:4f:2a:1f:72:d7:9b:46:28:8e:b0: 82:b9:17:62:76:54:a7:5f:e1:da:dc:02:05:75:fd: dc:95:53:80:c4:d0:d7:59:dd:97:1d:67:07:18:7a: 85:69:f7:5f:f0:ab:52:eb:e0:17:d6:e7:bf:87:20: 19:c1:59:a1:ed:64:cd:d9:0c:46:1c:f0:d7:e0:62: 5a:87:26:06:d6:f6:77:bc:2b:8d:c0:79:b4:6c:05: 56:bc:0b:3b:07:a3:cb:29:8d:7c:10:0d:7c:8a:ea: 63:fb:3c:02:d7:24:67:c1:21:bc:45:42:4b:4c:d6: 0b:e8:ca:59:29:62:2a:57:de:3a:a8:37:a9:4d:8a: a4:ab:12:23:11:ff:b6:81:40:1a:d8:66:8c:0b:a9: 34:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:B8:46:B3:25:3A:79:18:C7:33:CF:8F:71:4B:29:AF:2D:3E:46:D3 X509v3 Authority Key Identifier: keyid:83:08:08:79:11:EA:49:E2:15:DC:49:26:B0:22:6A:52:1E:5B:39:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gwgIeRHqSeIV3EkmsCJqUh5bOcQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6134/5F9AA4BEC2A811EAA7918A2EC4F9AE02/69F00404BCFE11EFBD130355C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.254.12.0/22 115.167.68.0/22 115.167.108.0/22 175.110.76.0/22 175.110.92.0/22 Signature Algorithm: sha256WithRSAEncryption 78:df:9f:40:e3:3f:fb:1e:ae:25:11:1a:ec:90:2f:12:94:77: 28:22:7c:c4:d3:17:43:0e:1c:76:0a:f3:d0:b8:bc:d7:93:81: 11:2c:c7:4a:83:f5:1b:cd:bf:02:ea:4f:a0:74:3f:91:6d:6a: fa:00:48:69:63:24:50:4d:0c:67:51:32:99:da:d7:bc:3d:7c: 9c:be:71:42:e1:fa:0e:94:89:23:c6:8d:62:64:c3:0f:65:8d: 88:ce:dc:1a:4d:a9:e6:0f:4e:18:ca:72:20:3b:3a:c0:bb:c1: 80:76:cf:f7:26:16:99:a8:dd:f3:06:30:23:26:90:66:43:63: 33:0a:9f:8d:b5:bf:29:ee:e4:f2:95:88:bb:3e:19:9c:02:b1: d6:1d:93:86:c2:90:fd:63:c0:30:07:5b:08:50:f7:47:df:4f: 71:0e:3b:2f:ff:a2:e1:22:0a:c3:51:ef:aa:ba:16:af:21:9e: 17:46:47:f9:c2:0e:38:7a:cf:56:2f:c4:42:44:ce:ad:11:9e: 9c:58:04:43:e3:45:20:20:67:ee:07:02:54:c5:a9:6f:17:62: 0e:90:6b:f0:84:61:4e:34:88:3b:b0:14:72:3c:db:b0:d7:e1: b0:1e:e5:76:41:05:64:58:be:b1:97:91:eb:0f:3f:84:71:ee: 98:35:d6:96 -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICJ2swDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTYxMzQxMTAvBgNVBAUTKDgzMDgwODc5MTFFQTQ5RTIxNURDNDkyNkIwMjI2QTUy MUU1QjM5QzQwHhcNMjUwNjAyMjEwNzI5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNlMTI5MC0zMzdmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAunEDzzpjN0cz1KKHQfR+Ax8m0anGfU2BV/YpsaIkqRAHhsC2iJOw8vAWSrnZ jcV9veteLMDkKTyZ73/VKbIvOI+DA59Zn9NOGbnOgYMpMSv+YuA664On9AZcGL/e 2/C50O/80UIbzirtvhx+m08qH3LXm0YojrCCuRdidlSnX+Ha3AIFdf3clVOAxNDX Wd2XHWcHGHqFafdf8KtS6+AX1ue/hyAZwVmh7WTN2QxGHPDX4GJahyYG1vZ3vCuN wHm0bAVWvAs7B6PLKY18EA18iupj+zwC1yRnwSG8RUJLTNYL6MpZKWIqV946qDep TYqkqxIjEf+2gUAa2GaMC6k0tQIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFMq4RrMl OnkYxzPPj3FLKa8tPkbTMB8GA1UdIwQYMBaAFIMICHkR6kniFdxJJrAialIeWznE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjEzNC81RjlBQTRCRUMy QTgxMUVBQTc5MThBMkVDNEY5QUUwMi9nd2dJZVJIcVNlSVYzRWttc0NKcVVoNWJP Y1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2d3Z0llUkhxU2VJVjNFa21zQ0pxVWg1Yk9jUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTYxMzQvNUY5QUE0QkVDMkE4MTFFQUE3OTE4QTJFQzRGOUFFMDIvNjlGMDA0MDRC Q0ZFMTFFRkJEMTMwMzU1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAIr/gwDBAJzp0QDBAJzp2wDBAKvbkwDBAKvblwwDQYJKoZI hvcNAQELBQADggEBAHjfn0DjP/seriURGuyQLxKUdygifMTTF0MOHHYK89C4vNeT gREsx0qD9RvNvwLqT6B0P5FtavoASGljJFBNDGdRMpna17w9fJy+cULh+g6UiSPG jWJkww9ljYjO3BpNqeYPThjKciA7OsC7wYB2z/cmFpmo3fMGMCMmkGZDYzMKn421 vynu5PKViLs+GZwCsdYdk4bCkP1jwDAHWwhQ90ffT3EOOy//ouEiCsNR76q6Fq8h nhdGR/nCDjh6z1YvxEJEzq0RnpxYBEPjRSAgZ+4HAlTFqW8XYg6Qa/CEYU40iDuw FHI827DX4bAe5XZBBWRYvrGXkesPP4Rx7pg11pY= -----END CERTIFICATE-----Generated at Wed Jun 4 00:02:00 2025 by rpki-client