$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/156CEB62DC6011ECB2698C14C4F9AE02.roa File: 156CEB62DC6011ECB2698C14C4F9AE02.roa (raw, json) Hash identifier: reuaGLtn1xD8mIcBhpyoMRgE/LzBHNExqumLX0mZnsc= Subject key identifier: 9E:01:72:2A:21:99:3F:3C:95:4F:36:A5:FB:E9:E5:51:1D:07:A3:06 Certificate issuer: /CN=A91EF554/serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Certificate serial: 0937 Authority key identifier: 1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/156CEB62DC6011ECB2698C14C4F9AE02.roa Signing time: Fri 16 May 2025 21:17:41 +0000 ROA not before: Fri 16 May 2025 21:17:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 61327 IP address blocks: 103.89.144.0/22 maxlen: 22 103.89.144.0/24 maxlen: 24 103.89.145.0/24 maxlen: 24 103.89.146.0/24 maxlen: 24 103.89.147.0/24 maxlen: 24 202.155.188.0/22 maxlen: 22 2400:7ca0::/36 maxlen: 36 2400:7ca0:1000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:20:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2359 (0x937) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EF554, serialNumber=1B91D5160F7D56B705A8516C6A1CF42F4967EF56 Validity Not Before: May 16 21:17:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6827ab75-e2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:c3:a2:c4:c6:b4:a2:08:ef:b1:85:61:cf: 3c:c4:65:12:8a:e5:15:a9:f7:9a:4c:35:11:ad:71: e3:d1:af:1f:ab:a5:bf:a4:ac:bf:78:b6:48:cb:25: 26:21:a9:3c:88:6b:a3:2e:1f:14:d8:fa:72:c5:44: 74:1d:a7:27:bd:5d:7e:98:21:2a:1d:02:3e:9c:a9: 38:2a:64:2e:35:77:cf:cb:c9:05:4b:73:8d:b5:8c: 8c:63:99:2a:88:e7:d5:c1:90:dd:f5:a2:12:2c:cf: b0:fa:e3:22:c7:a9:0a:e7:66:97:82:2e:74:64:fd: 08:d4:00:53:09:53:f2:d2:dc:64:12:aa:08:f6:0f: 42:92:22:13:0e:cd:39:c5:ca:ce:19:2f:b4:bb:19: 14:73:e2:90:3b:aa:f6:8d:76:b2:ee:ef:e3:8f:af: c5:00:e1:49:0d:2e:3c:a6:e0:26:70:2a:9e:43:db: cd:a1:a2:7b:4b:9f:68:ca:a2:96:fe:bf:0c:01:29: 05:2f:76:80:4b:0e:56:b5:ee:63:16:35:6a:9e:c3: 2a:8e:3e:96:dd:2a:4b:58:34:c8:7f:c4:cc:da:f3: a3:a7:13:85:d6:50:ed:25:10:35:b0:d8:5c:12:06: 3f:a1:d2:94:fa:57:4a:e1:1b:00:08:d7:96:e7:e2: 04:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:01:72:2A:21:99:3F:3C:95:4F:36:A5:FB:E9:E5:51:1D:07:A3:06 X509v3 Authority Key Identifier: keyid:1B:91:D5:16:0F:7D:56:B7:05:A8:51:6C:6A:1C:F4:2F:49:67:EF:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/G5HVFg99VrcFqFFsahz0L0ln71Y.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/G5HVFg99VrcFqFFsahz0L0ln71Y.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF554/EB1CBBE29E5B11EAB248FC51C4F9AE02/156CEB62DC6011ECB2698C14C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.89.144.0/22 202.155.188.0/22 IPv6: 2400:7ca0::/35 Signature Algorithm: sha256WithRSAEncryption 31:60:24:c2:7a:07:d2:0b:1b:27:cb:c6:aa:6a:fd:a8:ff:16: d7:e0:da:b2:58:c2:2b:f5:f9:31:d1:7e:da:bc:c6:9f:eb:5a: 6a:d2:71:c0:8a:f3:9a:f2:cc:9f:55:55:77:1c:44:59:bd:c7: 35:86:62:de:98:d2:65:79:99:2f:b6:d9:31:15:7b:e1:5c:91: 86:3c:52:52:49:c5:40:78:be:a2:be:87:ad:5c:03:e5:97:7a: d2:65:5c:d1:09:04:c5:54:fc:db:c8:b6:c6:ac:de:fd:7e:c3: 41:70:6b:87:f4:97:53:34:b4:14:69:9a:d3:c4:aa:56:10:c2: 6d:90:dd:5b:05:a7:9f:3e:32:a3:b4:25:bc:e8:dd:a3:46:9a: 40:74:07:bb:3a:89:82:f1:09:f4:7d:bc:99:4e:87:dd:6d:f2: 43:14:33:a0:40:6b:ec:09:0d:04:8d:08:ce:77:0a:ca:eb:ed: d6:fb:b2:71:4a:f0:58:fc:97:fc:d5:40:c5:ae:c9:2e:c1:8c: a9:04:dd:64:07:6a:2c:af:76:74:5b:c3:fd:03:1f:81:75:c3: 2f:20:9a:ad:bb:96:46:81:e7:de:60:e7:67:41:83:33:a5:f6: 07:58:42:94:1d:f9:1c:e3:83:ba:85:29:28:ee:65:0c:10:19: 39:a2:b7:bf -----BEGIN CERTIFICATE----- MIIFhzCCBG+gAwIBAgICCTcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUY1NTQxMTAvBgNVBAUTKDFCOTFENTE2MEY3RDU2QjcwNUE4NTE2QzZBMUNGNDJG NDk2N0VGNTYwHhcNMjUwNTE2MjExNzQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI3YWI3NS1lMmZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuETDosTGtKII77GFYc88xGUSiuUVqfeaTDURrXHj0a8fq6W/pKy/eLZIyyUm Iak8iGujLh8U2PpyxUR0HacnvV1+mCEqHQI+nKk4KmQuNXfPy8kFS3ONtYyMY5kq iOfVwZDd9aISLM+w+uMix6kK52aXgi50ZP0I1ABTCVPy0txkEqoI9g9CkiITDs05 xcrOGS+0uxkUc+KQO6r2jXay7u/jj6/FAOFJDS48puAmcCqeQ9vNoaJ7S59oyqKW /r8MASkFL3aASw5Wte5jFjVqnsMqjj6W3SpLWDTIf8TM2vOjpxOF1lDtJRA1sNhc EgY/odKU+ldK4RsACNeW5+IEAQIDAQABo4ICqzCCAqcwHQYDVR0OBBYEFJ4Bcioh mT88lU82pfvp5VEdB6MGMB8GA1UdIwQYMBaAFBuR1RYPfVa3BahRbGoc9C9JZ+9W MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRjU1NC9FQjFDQkJFMjlF NUIxMUVBQjI0OEZDNTFDNEY5QUUwMi9HNUhWRmc5OVZyY0ZxRkZzYWh6MEwwbG43 MVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0c1SFZGZzk5VnJjRnFGRnNhaHowTDBsbjcxWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUY1NTQvRUIxQ0JCRTI5RTVCMTFFQUIyNDhGQzUxQzRGOUFFMDIvMTU2Q0VCNjJE QzYwMTFFQ0IyNjk4QzE0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNQYIKwYBBQUHAQcBAf8E JjAkMBIEAgABMAwDBAJnWZADBALKm7wwDgQCAAIwCAMGBSQAfKAAMA0GCSqGSIb3 DQEBCwUAA4IBAQAxYCTCegfSCxsny8aqav2o/xbX4NqyWMIr9fkx0X7avMaf61pq 0nHAivOa8syfVVV3HERZvcc1hmLemNJleZkvttkxFXvhXJGGPFJSScVAeL6ivoet XAPll3rSZVzRCQTFVPzbyLbGrN79fsNBcGuH9JdTNLQUaZrTxKpWEMJtkN1bBaef PjKjtCW86N2jRppAdAe7OomC8Qn0fbyZTofdbfJDFDOgQGvsCQ0EjQjOdwrK6+3W +7JxSvBY/Jf81UDFrskuwYypBN1kB2osr3Z0W8P9Ax+BdcMvIJqtu5ZGgefeYOdn QYMzpfYHWEKUHfkc44O6hSko7mUMEBk5ore/ -----END CERTIFICATE-----Generated at Mon Jun 2 07:10:28 2025 by rpki-client