$ rpki-client -vvf rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F8D520505D0E11EA89C55D65C4F9AE02.roa File: F8D520505D0E11EA89C55D65C4F9AE02.roa (raw, json) Hash identifier: jh4/v+GyjU9Au0Vxs0XDzRjJtWql8kiBFNvqkmZsApQ= Subject key identifier: 67:89:74:AC:A9:D0:9C:25:8F:35:81:96:1F:51:E1:A6:0A:96:A4:ED Certificate issuer: /CN=A91112BC/serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Certificate serial: 119D Authority key identifier: 6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F8D520505D0E11EA89C55D65C4F9AE02.roa Signing time: Fri 06 Jun 2025 17:30:00 +0000 ROA not before: Fri 06 Jun 2025 17:30:00 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 13444 IP address blocks: 45.119.6.0/24 maxlen: 24 45.119.7.0/24 maxlen: 24 103.49.92.0/22 maxlen: 24 103.84.92.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 17:26:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4509 (0x119d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91112BC, serialNumber=6FF31B0659A6AE16C7A0A4EE0EE6A22910EC2E00 Validity Not Before: Jun 6 17:30:00 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68432597-aeb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:95:48:1a:3d:a1:f4:b3:5e:85:d1:8a:5a:fa: 19:4c:65:ae:69:84:94:b8:a3:2c:40:1e:eb:19:fa: d2:9b:9c:ae:91:92:2e:35:fd:7e:87:ee:9a:5a:b8: 26:db:1a:1d:3b:3b:7a:d2:68:ba:49:02:72:8b:02: d2:c8:09:dc:78:a5:fa:a8:29:04:0f:81:a4:be:a1: a9:d0:9b:e6:13:a3:15:9a:20:db:0f:65:fa:d1:1a: bc:ac:f5:8d:c5:b8:06:7f:6b:09:2b:02:7e:ae:87: 40:4d:d1:3c:cc:95:53:af:bd:c0:98:fb:37:0c:c2: 95:4d:d3:a8:e5:0c:02:1b:a1:2d:ab:b7:70:07:fa: 45:d9:c1:5e:3c:98:f0:79:ff:9d:2f:bf:15:00:b7: 35:0f:ef:54:71:9d:c5:b3:9f:c6:39:dc:f0:1f:7e: f6:5e:25:40:a9:8a:00:76:a2:6c:44:9e:b8:b5:1a: 54:17:5e:0f:2b:c7:5e:f5:43:b4:57:fb:95:85:af: 06:32:c1:b6:bd:9d:14:6a:36:a2:6a:15:0f:90:0b: f3:52:c0:05:4b:80:62:ad:3f:d6:de:5f:5c:68:89: 0e:33:21:45:5e:d8:8a:6e:41:92:3e:f2:30:3e:8f: 63:5a:a1:9e:48:16:f6:b5:35:e7:0d:20:41:58:33: 04:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:89:74:AC:A9:D0:9C:25:8F:35:81:96:1F:51:E1:A6:0A:96:A4:ED X509v3 Authority Key Identifier: keyid:6F:F3:1B:06:59:A6:AE:16:C7:A0:A4:EE:0E:E6:A2:29:10:EC:2E:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/b_MbBlmmrhbHoKTuDuaiKRDsLgA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_MbBlmmrhbHoKTuDuaiKRDsLgA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91112BC/EBCF168204F811E9BA502431C4F9AE02/F8D520505D0E11EA89C55D65C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.6.0/23 103.49.92.0/22 103.84.92.0/22 Signature Algorithm: sha256WithRSAEncryption 18:df:9b:5d:72:72:23:69:92:0c:d0:4b:59:fc:0c:fd:e8:2e: 36:26:10:bf:ff:3d:c8:9d:89:50:09:dc:64:23:c3:31:8f:78: 39:be:8f:8a:67:56:1e:9e:cd:70:6c:c0:2d:a0:23:21:3b:31: 35:3f:85:1e:c7:52:44:63:10:82:9f:a5:cf:ff:8c:6c:6a:9a: f0:6e:90:60:c4:0d:ac:1a:d6:b6:12:57:63:67:bc:5e:f5:85: 49:9c:d8:6f:1d:a8:fc:aa:71:cb:de:49:84:12:d7:06:0f:85: d6:36:16:e9:68:3d:d5:f7:8e:5a:35:72:19:be:6e:e1:58:7e: 8d:2a:0b:48:72:44:93:46:57:68:e4:2d:2f:4c:cc:4d:28:a1: 1f:42:48:3f:14:af:74:03:22:d1:0b:d7:70:f7:f9:50:6e:c8: 5d:46:f4:8d:c4:71:8a:db:f5:74:7a:41:b9:75:27:38:f7:ae: 88:19:67:2d:d5:f5:21:8a:dc:0c:3d:6b:0c:89:2c:f9:d7:51: b9:9f:44:8d:8f:9a:9b:74:ef:d8:ea:38:07:12:2b:19:e6:f2: a6:d3:01:91:b3:f6:b3:6c:f3:b1:de:5e:77:3b:99:af:1b:c1: f5:36:8f:2b:01:a9:6f:50:50:20:a6:8b:e1:ce:f4:54:6e:6e: d3:4a:9d:74 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICEZ0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MTEyQkMxMTAvBgNVBAUTKDZGRjMxQjA2NTlBNkFFMTZDN0EwQTRFRTBFRTZBMjI5 MTBFQzJFMDAwHhcNMjUwNjA2MTczMDAwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQzMjU5Ny1hZWI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA6pVIGj2h9LNehdGKWvoZTGWuaYSUuKMsQB7rGfrSm5yukZIuNf1+h+6aWrgm 2xodOzt60mi6SQJyiwLSyAnceKX6qCkED4GkvqGp0JvmE6MVmiDbD2X60Rq8rPWN xbgGf2sJKwJ+rodATdE8zJVTr73AmPs3DMKVTdOo5QwCG6Etq7dwB/pF2cFePJjw ef+dL78VALc1D+9UcZ3Fs5/GOdzwH372XiVAqYoAdqJsRJ64tRpUF14PK8de9UO0 V/uVha8GMsG2vZ0UajaiahUPkAvzUsAFS4BirT/W3l9caIkOMyFFXtiKbkGSPvIw Po9jWqGeSBb2tTXnDSBBWDMExQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFGeJdKyp 0JwljzWBlh9R4aYKlqTtMB8GA1UdIwQYMBaAFG/zGwZZpq4Wx6Ck7g7moikQ7C4A MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExMTJCQy9FQkNGMTY4MjA0 RjgxMUU5QkE1MDI0MzFDNEY5QUUwMi9iX01iQmxtbXJoYkhvS1R1RHVhaUtSRHNM Z0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfTWJCbG1tcmhiSG9LVHVEdWFpS1JEc0xnQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MTEyQkMvRUJDRjE2ODIwNEY4MTFFOUJBNTAyNDMxQzRGOUFFMDIvRjhENTIwNTA1 RDBFMTFFQTg5QzU1RDY1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEtdwYDBAJnMVwDBAJnVFwwDQYJKoZIhvcNAQELBQADggEB ABjfm11yciNpkgzQS1n8DP3oLjYmEL//PcidiVAJ3GQjwzGPeDm+j4pnVh6ezXBs wC2gIyE7MTU/hR7HUkRjEIKfpc//jGxqmvBukGDEDawa1rYSV2NnvF71hUmc2G8d qPyqccveSYQS1wYPhdY2FuloPdX3jlo1chm+buFYfo0qC0hyRJNGV2jkLS9MzE0o oR9CSD8Ur3QDItEL13D3+VBuyF1G9I3EcYrb9XR6Qbl1Jzj3rogZZy3V9SGK3Aw9 awyJLPnXUbmfRI2Pmpt079jqOAcSKxnm8qbTAZGz9rNs87HeXnc7ma8bwfU2jysB qW9QUCCmi+HO9FRubtNKnXQ= -----END CERTIFICATE-----Generated at Thu Jul 3 01:16:44 2025 by rpki-client