$ rpki-client -vvf rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/65D8867E28C511F09C2CD74EC4F9AE02.roa File: 65D8867E28C511F09C2CD74EC4F9AE02.roa (raw, json) Hash identifier: TcTPd4eMMCcLVW+z/Iz5N+6zNNeINdC8gkRR70FihUk= Subject key identifier: BD:2E:9D:BF:93:0B:A2:60:EF:FA:D4:BE:D4:87:53:24:1C:34:4D:BA Certificate issuer: /CN=A91510AD/serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Certificate serial: 3630 Authority key identifier: E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/65D8867E28C511F09C2CD74EC4F9AE02.roa Signing time: Sun 04 May 2025 08:54:33 +0000 ROA not before: Sun 04 May 2025 08:54:33 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 3356 IP address blocks: 175.29.22.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 14:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13872 (0x3630) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91510AD, serialNumber=E1E6908A16EC813DAA0BD64797AE9DBDEB092257 Validity Not Before: May 4 08:54:33 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=68172b49-15b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d3:f1:21:8f:a7:36:7e:02:81:e2:f1:75:33: 8e:03:7e:46:a6:30:31:34:14:21:a4:32:dd:74:db: 3e:1b:92:7a:0f:23:0b:8a:51:b7:99:97:7b:86:8a: f3:09:1e:fd:d6:d8:56:26:0a:e9:b6:ee:ce:b9:13: d1:29:5e:5c:1b:c4:54:df:7a:50:c3:a3:00:fb:42: 04:23:a3:d5:c9:4c:d8:a3:4b:35:84:79:07:1a:d7: 36:3d:dc:ed:a2:96:5a:4d:76:ed:7d:ea:3a:32:3d: ad:80:c2:54:d0:32:4b:d6:12:8e:d7:62:bd:65:91: 1b:48:db:44:5d:39:a0:da:cf:f9:29:97:32:9e:05: 4e:37:e7:91:e2:b2:28:b6:bb:e8:1b:38:61:39:3e: a5:91:e9:13:63:af:cf:c1:5b:db:1b:81:bd:b9:ae: 57:d2:37:c1:c7:76:cb:58:ed:eb:64:b4:f9:e6:3e: 4f:17:59:d3:02:01:b0:8d:4a:2e:d9:44:8a:59:bc: b8:a1:4a:94:dd:25:03:9e:89:21:9c:97:cc:86:85: 7a:c4:07:db:46:24:80:24:ed:fc:4e:52:13:ae:88: ce:4a:af:f4:f8:97:85:72:56:24:49:7d:2d:cc:c1: 42:a3:f8:6d:e7:17:fb:4f:d6:8f:48:0d:40:4e:9a: 90:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:2E:9D:BF:93:0B:A2:60:EF:FA:D4:BE:D4:87:53:24:1C:34:4D:BA X509v3 Authority Key Identifier: keyid:E1:E6:90:8A:16:EC:81:3D:AA:0B:D6:47:97:AE:9D:BD:EB:09:22:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/4eaQihbsgT2qC9ZHl66dvesJIlc.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4eaQihbsgT2qC9ZHl66dvesJIlc.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91510AD/8B5E75FE1D8711E284B383DF08B02CD2/65D8867E28C511F09C2CD74EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 175.29.22.0/23 Signature Algorithm: sha256WithRSAEncryption aa:a4:8c:03:21:8c:74:67:11:8e:27:a3:f3:e1:a3:e8:00:5a: ca:2c:58:7f:8e:03:13:69:7c:97:7b:2a:dc:25:ce:a8:cf:5f: fe:78:c1:d4:e9:e0:07:23:1c:f0:ce:f5:67:74:6f:54:c6:45: 64:fb:11:bc:ba:88:89:4c:e7:2c:84:6f:eb:5e:b1:00:2b:af: 50:ee:d1:9e:b9:e4:7d:38:35:d7:15:77:4f:4e:48:ae:b4:f1: 59:ef:38:b7:6d:16:d2:c1:e1:9f:a5:91:2c:73:96:8b:9d:a1: 72:ba:86:7e:f2:aa:a9:6f:cc:28:59:ff:bd:95:76:5a:b3:d4: 56:dc:80:c7:40:22:35:89:70:e1:9e:b7:22:1d:db:2c:39:98: 02:f9:71:33:97:a8:ed:d6:6c:e3:f2:46:72:ba:cf:e2:c8:0a: 8e:6c:55:48:50:b4:ef:0c:fa:50:3a:62:2d:d4:69:f3:5a:88: 36:f4:3f:69:b8:52:e7:fd:1c:24:55:8f:4a:e6:ef:a9:68:06: c0:43:de:f8:03:c3:32:05:41:8f:7c:3e:bf:b6:02:d0:04:10: d4:c6:8e:1e:18:93:01:3a:c6:79:50:01:39:89:d1:2b:2b:c7: 72:c5:f9:a7:d9:b2:b4:e3:ac:4f:a8:1d:af:21:15:e0:fb:70: 3d:de:6d:98 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICNjAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTEwQUQxMTAvBgNVBAUTKEUxRTY5MDhBMTZFQzgxM0RBQTBCRDY0Nzk3QUU5REJE RUIwOTIyNTcwHhcNMjUwNTA0MDg1NDMzWhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE3MmI0OS0xNWI4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAotPxIY+nNn4CgeLxdTOOA35GpjAxNBQhpDLddNs+G5J6DyMLilG3mZd7horz CR791thWJgrptu7OuRPRKV5cG8RU33pQw6MA+0IEI6PVyUzYo0s1hHkHGtc2Pdzt opZaTXbtfeo6Mj2tgMJU0DJL1hKO12K9ZZEbSNtEXTmg2s/5KZcyngVON+eR4rIo trvoGzhhOT6lkekTY6/PwVvbG4G9ua5X0jfBx3bLWO3rZLT55j5PF1nTAgGwjUou 2USKWby4oUqU3SUDnokhnJfMhoV6xAfbRiSAJO38TlITrojOSq/0+JeFclYkSX0t zMFCo/ht5xf7T9aPSA1ATpqQowIDAQABo4IClTCCApEwHQYDVR0OBBYEFL0unb+T C6Jg7/rUvtSHUyQcNE26MB8GA1UdIwQYMBaAFOHmkIoW7IE9qgvWR5eunb3rCSJX MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MTBBRC84QjVFNzVGRTFE ODcxMUUyODRCMzgzREYwOEIwMkNEMi80ZWFRaWhic2dUMnFDOVpIbDY2ZHZlc0pJ bGMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRlYVFpaGJzZ1QycUM5WkhsNjZkdmVzSklsYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTEwQUQvOEI1RTc1RkUxRDg3MTFFMjg0QjM4M0RGMDhCMDJDRDIvNjVEODg2N0Uy OEM1MTFGMDlDMkNENzRFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAGvHRYwDQYJKoZIhvcNAQELBQADggEBAKqkjAMhjHRnEY4n o/Pho+gAWsosWH+OAxNpfJd7KtwlzqjPX/54wdTp4AcjHPDO9Wd0b1TGRWT7Eby6 iIlM5yyEb+tesQArr1Du0Z655H04NdcVd09OSK608VnvOLdtFtLB4Z+lkSxzloud oXK6hn7yqqlvzChZ/72Vdlqz1FbcgMdAIjWJcOGetyId2yw5mAL5cTOXqO3WbOPy RnK6z+LICo5sVUhQtO8M+lA6Yi3UafNaiDb0P2m4Uuf9HCRVj0rm76loBsBD3vgD wzIFQY98Pr+2AtAEENTGjh4YkwE6xnlQATmJ0Ssrx3LF+afZsrTjrE+oHa8hFeD7 cD3ebZg= -----END CERTIFICATE-----Generated at Mon May 5 14:29:27 2025 by rpki-client