$ rpki-client -vvf rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/AECDA1B0448F11EDACC30815C4F9AE02.roa File: AECDA1B0448F11EDACC30815C4F9AE02.roa (raw, json) Hash identifier: xirIMjuaHIPZj6jpdJVKaFKfHlsVW3gI4qvEhU2Je88= Subject key identifier: 5E:EF:AE:B3:22:B7:45:34:70:04:D1:B7:D7:26:8A:E7:53:CA:C6:AE Certificate issuer: /CN=A91E66E5/serialNumber=5C395BA2CA0ABF65888726874C7824B69B789995 Certificate serial: 0E27 Authority key identifier: 5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/AECDA1B0448F11EDACC30815C4F9AE02.roa Signing time: Fri 28 Mar 2025 17:59:00 +0000 ROA not before: Fri 28 Mar 2025 17:59:00 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 35280 IP address blocks: 103.135.56.0/22 maxlen: 24 2404:75c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 17:54:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3623 (0xe27) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E66E5 Validity Not Before: Mar 28 17:59:00 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e6e363-6739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:a6:3b:f2:3b:9d:89:a1:09:f2:68:a3:19: 53:0f:f4:10:4d:f1:a7:cf:bc:79:4a:6b:6f:a7:37: 2c:68:f5:84:54:21:4c:c6:ad:50:bf:10:a2:3f:5f: cc:0e:e6:02:98:35:4d:ab:85:66:98:2a:fc:e5:c2: 4e:bf:bd:6a:64:41:e8:b7:2a:67:5d:23:b2:2f:57: f0:65:60:54:b7:f8:ec:77:6a:54:88:77:6c:78:21: 95:30:a5:73:75:99:d1:75:65:5c:29:ba:1b:65:b9: bb:e9:a3:37:c3:15:89:fa:cd:a7:a8:13:51:29:e7: 39:00:57:12:3d:4b:f5:b1:7b:5c:6f:d2:af:6f:66: 7e:6c:4e:dc:80:29:37:98:5d:4d:f3:a3:ea:9f:52: b4:c5:8a:20:15:f2:f5:3f:69:2e:7e:4c:f0:f0:a9: 8b:e5:80:57:9b:8a:ac:4b:49:94:e9:26:14:aa:01: 88:54:be:3e:d8:65:03:8e:f0:87:d3:29:e8:65:44: 72:c5:09:42:10:5e:5f:f7:53:bd:db:06:17:f8:d1: 66:13:6c:44:16:e7:15:9e:12:52:6c:cc:a5:b4:46: 24:ce:14:0d:be:53:3b:d4:53:c1:7d:7e:ff:ab:4f: 45:bd:f1:c5:96:75:0a:bd:61:49:ce:bb:02:a3:85: 5c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EF:AE:B3:22:B7:45:34:70:04:D1:B7:D7:26:8A:E7:53:CA:C6:AE X509v3 Authority Key Identifier: keyid:5C:39:5B:A2:CA:0A:BF:65:88:87:26:87:4C:78:24:B6:9B:78:99:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/XDlbosoKv2WIhyaHTHgktpt4mZU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XDlbosoKv2WIhyaHTHgktpt4mZU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E66E5/56430586A27511E9A74D4E82C4F9AE02/AECDA1B0448F11EDACC30815C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.135.56.0/22 IPv6: 2404:75c0::/32 Signature Algorithm: sha256WithRSAEncryption 29:97:f5:85:ab:84:49:a7:8b:6e:5d:00:c3:16:7d:17:5c:dc: 1f:9f:6d:7f:0c:18:0f:46:bb:f4:94:c2:99:08:63:9d:f8:b9: 85:30:a0:bd:15:e4:c8:db:ce:31:ab:1a:3d:da:39:00:75:c2: 30:f9:31:b3:d2:e8:2f:a6:f8:7d:ef:10:12:38:1a:60:ca:85: 61:f0:97:59:9a:93:70:73:07:f0:fb:aa:e9:c9:62:9f:ca:71: fe:8e:67:2a:2c:14:6b:33:7d:d9:44:2d:de:2b:a4:25:86:ec: 42:da:00:0d:c5:30:4a:12:5f:1a:95:25:40:fa:99:cf:7a:ac: ba:8e:eb:9a:ef:6a:db:c8:cd:9d:ee:1c:9c:0b:13:3e:8c:28: 1a:09:5a:bc:ca:2c:63:2a:e0:c2:16:3a:03:5a:b7:09:22:fd: a5:b9:8c:f0:58:87:7f:3e:23:f2:d4:49:ca:ac:fc:fb:98:7c: a1:a5:35:75:17:bf:fc:48:77:83:3f:e0:d3:55:3b:cc:50:8e: c0:f0:47:93:3f:a7:67:8c:38:1c:3a:44:ca:4b:0d:74:a2:81: 11:74:3b:d2:79:19:c8:2e:c9:da:4b:f2:25:17:97:af:db:f7: b2:64:e6:d1:d7:43:01:c4:be:8c:2a:62:8e:ed:85:4d:be:87: 08:c3:5f:5a -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDicwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTY2RTUxMTAvBgNVBAUTKDVDMzk1QkEyQ0EwQUJGNjU4ODg3MjY4NzRDNzgyNEI2 OUI3ODk5OTUwHhcNMjUwMzI4MTc1OTAwWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2U2ZTM2My02NzM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvXSmO/I7nYmhCfJooxlTD/QQTfGnz7x5SmtvpzcsaPWEVCFMxq1QvxCiP1/M DuYCmDVNq4VmmCr85cJOv71qZEHotypnXSOyL1fwZWBUt/jsd2pUiHdseCGVMKVz dZnRdWVcKbobZbm76aM3wxWJ+s2nqBNRKec5AFcSPUv1sXtcb9Kvb2Z+bE7cgCk3 mF1N86Pqn1K0xYogFfL1P2kufkzw8KmL5YBXm4qsS0mU6SYUqgGIVL4+2GUDjvCH 0ynoZURyxQlCEF5f91O92wYX+NFmE2xEFucVnhJSbMyltEYkzhQNvlM71FPBfX7/ q09FvfHFlnUKvWFJzrsCo4VcuQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFF7vrrMi t0U0cATRt9cmiudTysauMB8GA1UdIwQYMBaAFFw5W6LKCr9liIcmh0x4JLabeJmV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNjZFNS81NjQzMDU4NkEy NzUxMUU5QTc0RDRFODJDNEY5QUUwMi9YRGxib3NvS3YyV0loeWFIVEhna3RwdDRt WlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1hEbGJvc29LdjJXSWh5YUhUSGdrdHB0NG1aVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTY2RTUvNTY0MzA1ODZBMjc1MTFFOUE3NEQ0RTgyQzRGOUFFMDIvQUVDREExQjA0 NDhGMTFFREFDQzMwODE1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAJnhzgwDQQCAAIwBwMFACQEdcAwDQYJKoZIhvcNAQELBQAD ggEBACmX9YWrhEmni25dAMMWfRdc3B+fbX8MGA9Gu/SUwpkIY534uYUwoL0V5Mjb zjGrGj3aOQB1wjD5MbPS6C+m+H3vEBI4GmDKhWHwl1mak3BzB/D7qunJYp/Kcf6O ZyosFGszfdlELd4rpCWG7ELaAA3FMEoSXxqVJUD6mc96rLqO65rvatvIzZ3uHJwL Ez6MKBoJWrzKLGMq4MIWOgNatwki/aW5jPBYh38+I/LUScqs/PuYfKGlNXUXv/xI d4M/4NNVO8xQjsDwR5M/p2eMOBw6RMpLDXSigRF0O9J5GcguydpL8iUXl6/b97Jk 5tHXQwHEvowqYo7thU2+hwjDX1o= -----END CERTIFICATE-----Generated at Sun Apr 6 12:51:00 2025 by rpki-client