$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/8120226CBEE111ECBFC4F882C4F9AE02.roa File: 8120226CBEE111ECBFC4F882C4F9AE02.roa (raw, json) Hash identifier: X8UbCCq9WNbgn+zBad8J0ZOiCGTAAafiKf0ffwPz0jg= Subject key identifier: 27:E3:A5:19:62:AA:3D:23:3D:4C:EC:F1:F1:90:4E:18:42:58:26:09 Certificate issuer: /CN=A91E9467/serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Certificate serial: 0488 Authority key identifier: 52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/8120226CBEE111ECBFC4F882C4F9AE02.roa Signing time: Sun 01 Jun 2025 00:34:16 +0000 ROA not before: Sun 01 Jun 2025 00:34:16 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 56224 IP address blocks: 103.150.152.0/23 maxlen: 23 103.150.152.0/24 maxlen: 24 103.150.153.0/24 maxlen: 24 202.12.80.0/22 maxlen: 22 202.12.80.0/23 maxlen: 23 202.12.80.0/24 maxlen: 24 202.12.81.0/24 maxlen: 24 202.12.82.0/23 maxlen: 23 202.12.82.0/24 maxlen: 24 202.12.83.0/24 maxlen: 24 2405:3e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 00:24:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1160 (0x488) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E9467, serialNumber=52BE9DDE9568FE4ADCA0F345B3617A63C3075845 Validity Not Before: Jun 1 00:34:16 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=683ba008-c99e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d8:0a:8f:c4:b0:74:ea:2f:92:89:24:6b:75: 21:f9:af:32:11:53:47:f0:d2:5f:99:9a:5d:3c:21: 2d:37:3f:54:ec:6a:94:33:59:c7:4b:d4:af:58:d8: d4:f8:32:9c:3d:72:26:a7:fe:db:b8:14:47:ae:c2: 99:23:d8:a0:df:ed:1a:32:45:5a:51:4c:6e:d6:56: f6:33:82:d2:13:67:6f:d8:2d:49:8f:da:36:50:7f: ba:6a:39:dc:a8:6c:da:c0:52:e3:c4:92:67:b7:07: 0e:61:43:52:bd:3d:08:55:8c:66:87:69:55:be:f5: 1c:b7:f5:15:e4:48:3f:88:1f:08:62:b7:d8:69:4f: 79:5e:a9:55:a5:ab:66:9d:c9:26:be:be:32:f5:3f: 24:fb:08:ca:86:34:42:e0:f1:9f:ee:d9:4f:08:8b: 86:35:e8:82:a2:72:d6:d4:e8:9e:9f:37:1e:13:8f: c6:77:a4:28:0b:06:dd:dd:da:39:54:4e:08:7e:e7: 83:72:73:a4:6b:ed:d8:a6:37:20:40:ee:ba:10:4d: 51:5c:d6:0f:c3:5f:0c:33:ec:0a:5b:2b:d0:3f:1e: 51:09:71:7e:f1:dc:a8:a4:f7:01:40:ea:01:6d:46: b6:6e:82:3f:91:a8:8a:43:8b:9b:b8:64:af:eb:1a: bf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:E3:A5:19:62:AA:3D:23:3D:4C:EC:F1:F1:90:4E:18:42:58:26:09 X509v3 Authority Key Identifier: keyid:52:BE:9D:DE:95:68:FE:4A:DC:A0:F3:45:B3:61:7A:63:C3:07:58:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ur6d3pVo_krcoPNFs2F6Y8MHWEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9467/770B4F1A526F11ECBC50EB17C4F9AE02/8120226CBEE111ECBFC4F882C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.150.152.0/23 202.12.80.0/22 IPv6: 2405:3e40::/32 Signature Algorithm: sha256WithRSAEncryption 8e:5e:dd:e3:8a:a4:20:b9:5b:1d:79:a1:03:dd:84:20:5f:0c: b5:1a:7d:e1:0e:83:f6:03:e6:19:12:3e:59:d0:96:03:0c:e2: 35:b2:fe:c0:99:0e:3a:e6:c0:93:18:06:e6:ea:ae:9a:4a:8b: 74:09:50:9a:dc:3f:8d:d8:43:e2:98:35:2f:69:c2:e2:cc:6d: 11:fb:94:27:43:f9:1c:af:99:80:1e:fc:97:78:71:d7:3a:ba: 3a:79:ec:f2:ba:cf:4f:ef:dc:8f:af:f3:90:b6:bd:ec:2f:61: d4:ee:ca:2f:55:ae:ad:29:b1:74:b2:d6:9d:ea:3b:d1:df:8a: d1:01:b6:bc:48:13:d8:a2:79:af:6b:35:d8:96:dd:ad:e1:cb: 0e:9c:8d:73:62:e8:75:6c:42:09:5b:39:02:be:17:8a:1d:4a: 6e:37:fc:22:13:bc:ba:d7:8d:af:53:44:52:76:81:55:24:96: e7:a7:96:60:a9:a5:4e:32:c9:64:07:96:02:c4:5b:d1:b0:32: 2c:53:53:8a:bd:46:b9:8c:34:2f:82:a0:e5:a4:fa:fc:4f:b5: 43:6b:8d:e4:4f:09:80:ea:a2:9f:34:2d:ac:e0:5c:65:c0:04: e0:96:cf:46:4a:bf:95:17:53:62:27:06:25:28:fb:5c:bb:a5: 83:10:be:b5 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICBIgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTk0NjcxMTAvBgNVBAUTKDUyQkU5RERFOTU2OEZFNEFEQ0EwRjM0NUIzNjE3QTYz QzMwNzU4NDUwHhcNMjUwNjAxMDAzNDE2WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODNiYTAwOC1jOTllMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwNgKj8SwdOovkokka3Uh+a8yEVNH8NJfmZpdPCEtNz9U7GqUM1nHS9SvWNjU +DKcPXImp/7buBRHrsKZI9ig3+0aMkVaUUxu1lb2M4LSE2dv2C1Jj9o2UH+6ajnc qGzawFLjxJJntwcOYUNSvT0IVYxmh2lVvvUct/UV5Eg/iB8IYrfYaU95XqlVpatm nckmvr4y9T8k+wjKhjRC4PGf7tlPCIuGNeiConLW1OienzceE4/Gd6QoCwbd3do5 VE4IfueDcnOka+3YpjcgQO66EE1RXNYPw18MM+wKWyvQPx5RCXF+8dyopPcBQOoB bUa2boI/kaiKQ4ubuGSv6xq/NwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCfjpRli qj0jPUzs8fGQThhCWCYJMB8GA1UdIwQYMBaAFFK+nd6VaP5K3KDzRbNhemPDB1hF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFOTQ2Ny83NzBCNEYxQTUy NkYxMUVDQkM1MEVCMTdDNEY5QUUwMi9VcjZkM3BWb19rcmNvUE5GczJGNlk4TUhX RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1VyNmQzcFZvX2tyY29QTkZzMkY2WThNSFdFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTk0NjcvNzcwQjRGMUE1MjZGMTFFQ0JDNTBFQjE3QzRGOUFFMDIvODEyMDIyNkNC RUUxMTFFQ0JGQzRGODgyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnlpgDBALKDFAwDQQCAAIwBwMFACQFPkAwDQYJKoZIhvcN AQELBQADggEBAI5e3eOKpCC5Wx15oQPdhCBfDLUafeEOg/YD5hkSPlnQlgMM4jWy /sCZDjrmwJMYBubqrppKi3QJUJrcP43YQ+KYNS9pwuLMbRH7lCdD+RyvmYAe/Jd4 cdc6ujp57PK6z0/v3I+v85C2vewvYdTuyi9Vrq0psXSy1p3qO9HfitEBtrxIE9ii ea9rNdiW3a3hyw6cjXNi6HVsQglbOQK+F4odSm43/CITvLrXja9TRFJ2gVUkluen lmCppU4yyWQHlgLEW9GwMixTU4q9RrmMNC+CoOWk+vxPtUNrjeRPCYDqop80Lazg XGXABOCWz0ZKv5UXU2InBiUo+1y7pYMQvrU= -----END CERTIFICATE-----Generated at Wed Jun 4 00:10:59 2025 by rpki-client