$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa File: 7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa (raw, json) Hash identifier: 2NaxlTHYd6MEuRAwmR/NbDxlzDuoh6+UPW32rgLTzuw= Subject key identifier: 27:79:AD:67:47:6E:EE:62:33:A3:C7:7A:60:E3:77:D1:CD:9E:F7:8C Certificate issuer: /CN=A91EC9A5/serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640 Certificate serial: 0897 Authority key identifier: E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa Signing time: Wed 14 May 2025 20:58:08 +0000 ROA not before: Wed 14 May 2025 20:58:08 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136246 IP address blocks: 14.128.12.0/24 maxlen: 24 14.128.13.0/24 maxlen: 24 14.128.14.0/24 maxlen: 24 14.128.15.0/24 maxlen: 24 103.84.173.0/24 maxlen: 24 103.84.174.0/24 maxlen: 24 103.84.175.0/24 maxlen: 24 2400:a2c0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 20:36:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2199 (0x897) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EC9A5, serialNumber=E83FCF4C6FC8D74F3B6AB425606E2BC7746D6640 Validity Not Before: May 14 20:58:08 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=682503e0-8639 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6d:81:4c:f1:de:04:f6:85:6d:a7:7b:e3:80: d7:ee:bf:06:42:ed:58:ce:57:d9:e7:4c:94:dd:82: 02:d6:8c:08:c8:90:83:ca:3a:a4:00:3a:94:4f:b0: 31:f6:02:90:49:ef:e8:70:7a:1a:f2:52:93:88:43: 07:d2:e2:14:d3:12:5b:90:a2:7e:62:6f:d5:af:fb: b2:2a:3f:17:85:ce:e7:c0:ba:16:35:74:57:55:96: 6d:69:85:e4:b2:e6:ae:e4:e9:18:e2:14:75:28:0a: 1b:fd:56:b7:4a:b0:b7:3b:47:7e:c5:17:8e:36:91: 0e:72:36:03:bb:f4:80:86:a4:ab:8a:e4:ac:81:ca: 22:5f:1a:33:36:92:e0:06:02:9d:41:11:80:60:19: 53:8f:bf:00:dc:02:0a:c2:17:e8:65:ef:df:de:45: f6:69:09:84:eb:48:48:b2:81:c5:ea:59:40:a2:a5: bc:b9:7f:a5:52:c2:bf:57:e1:bc:bc:ba:cc:dd:61: 38:2a:f5:3b:d9:5a:65:5d:7e:27:86:d4:06:4a:76: 78:cb:b1:41:ef:91:5f:a3:c3:6f:7c:b4:19:b2:63: 23:42:b3:89:eb:6e:9a:91:02:3e:af:b1:43:12:a6: a5:f1:2c:08:c2:71:d0:cc:48:7f:1e:2b:a9:4a:80: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:79:AD:67:47:6E:EE:62:33:A3:C7:7A:60:E3:77:D1:CD:9E:F7:8C X509v3 Authority Key Identifier: keyid:E8:3F:CF:4C:6F:C8:D7:4F:3B:6A:B4:25:60:6E:2B:C7:74:6D:66:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/6D_PTG_I1087arQlYG4rx3RtZkA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/6D_PTG_I1087arQlYG4rx3RtZkA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9A5/0E82C2ECC4F011EA91DCDF77C4F9AE02/7ABC3AE8E3DF11EF83DCFB09C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.128.12.0/22 103.84.173.0-103.84.175.255 IPv6: 2400:a2c0::/32 Signature Algorithm: sha256WithRSAEncryption cc:6c:6a:5f:49:33:80:bf:24:34:ee:da:27:6e:4f:04:02:92: 37:80:b0:5c:2a:60:c5:f5:55:d6:8f:15:aa:22:37:3d:99:bb: 88:b2:f6:43:f5:d5:b5:27:4f:64:a8:5f:3b:e7:06:b3:4b:a5: d0:54:2b:9e:51:05:35:ae:d1:2a:a0:91:4c:f1:b0:ad:7d:a8: 67:f5:37:26:08:21:dd:12:5b:a4:96:f0:19:a2:68:94:27:d3: ce:4b:30:09:7d:cf:d2:30:06:83:51:31:72:a3:e7:aa:6a:90: 2e:b0:43:46:2d:6b:44:08:2f:58:54:d8:43:41:16:9f:ff:60: a1:fc:15:74:30:76:dd:d9:e4:8f:f8:0e:4e:28:2a:2b:ee:8c: 44:99:5e:8f:fb:a1:07:41:c8:17:e7:6c:11:69:e8:de:45:a5: 48:f8:9c:06:2f:95:96:e1:37:8d:33:8a:44:c3:df:d2:a4:e0: 6d:a9:92:65:82:42:32:a8:b5:8d:5b:3b:1e:1e:ce:02:79:81: d8:e9:e2:aa:71:c4:d7:dd:31:98:26:53:f6:04:a5:3c:6e:a4: b0:43:99:2c:88:bd:99:a1:72:c0:c5:2a:a5:51:36:01:c7:4e: b6:74:78:36:cb:e9:ec:75:aa:d2:18:8e:e9:3d:2d:b7:3c:b6: 6e:4e:a9:01 -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICCJcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUM5QTUxMTAvBgNVBAUTKEU4M0ZDRjRDNkZDOEQ3NEYzQjZBQjQyNTYwNkUyQkM3 NzQ2RDY2NDAwHhcNMjUwNTE0MjA1ODA4WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI1MDNlMC04NjM5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqG2BTPHeBPaFbad744DX7r8GQu1YzlfZ50yU3YIC1owIyJCDyjqkADqUT7Ax 9gKQSe/ocHoa8lKTiEMH0uIU0xJbkKJ+Ym/Vr/uyKj8Xhc7nwLoWNXRXVZZtaYXk suau5OkY4hR1KAob/Va3SrC3O0d+xReONpEOcjYDu/SAhqSriuSsgcoiXxozNpLg BgKdQRGAYBlTj78A3AIKwhfoZe/f3kX2aQmE60hIsoHF6llAoqW8uX+lUsK/V+G8 vLrM3WE4KvU72VplXX4nhtQGSnZ4y7FB75Ffo8NvfLQZsmMjQrOJ626akQI+r7FD Eqal8SwIwnHQzEh/HiupSoCB+wIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFCd5rWdH bu5iM6PHemDjd9HNnveMMB8GA1UdIwQYMBaAFOg/z0xvyNdPO2q0JWBuK8d0bWZA MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBNS8wRTgyQzJFQ0M0 RjAxMUVBOTFEQ0RGNzdDNEY5QUUwMi82RF9QVEdfSTEwODdhclFsWUc0cngzUnRa a0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzZEX1BUR19JMTA4N2FyUWxZRzRyeDNSdFprQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUM5QTUvMEU4MkMyRUNDNEYwMTFFQTkxRENERjc3QzRGOUFFMDIvN0FCQzNBRThF M0RGMTFFRjgzRENGQjA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBoEAgABMBQDBAIOgAwwDAMEAGdUrQMEBGdUoDANBAIAAjAHAwUAJACiwDAN BgkqhkiG9w0BAQsFAAOCAQEAzGxqX0kzgL8kNO7aJ25PBAKSN4CwXCpgxfVV1o8V qiI3PZm7iLL2Q/XVtSdPZKhfO+cGs0ul0FQrnlEFNa7RKqCRTPGwrX2oZ/U3Jggh 3RJbpJbwGaJolCfTzkswCX3P0jAGg1ExcqPnqmqQLrBDRi1rRAgvWFTYQ0EWn/9g ofwVdDB23dnkj/gOTigqK+6MRJlej/uhB0HIF+dsEWno3kWlSPicBi+VluE3jTOK RMPf0qTgbamSZYJCMqi1jVs7Hh7OAnmB2OniqnHE190xmCZT9gSlPG6ksEOZLIi9 maFywMUqpVE2AcdOtnR4Nsvp7HWq0hiO6T0ttzy2bk6pAQ== -----END CERTIFICATE-----Generated at Thu Jun 5 19:13:41 2025 by rpki-client