$ rpki-client -vvf rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/4EF1DE0E822A11EDB2081A49C4F9AE02.roa File: 4EF1DE0E822A11EDB2081A49C4F9AE02.roa (raw, json) Hash identifier: ccQHTXT/JWlYkUSlrHBZlxj0fPuZnF/MXZqxQxgBSSk= Subject key identifier: 41:1E:DA:BF:C4:51:23:C6:19:5F:29:7F:3D:33:9F:52:16:D3:F1:51 Certificate issuer: /CN=A91568F6/serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Certificate serial: 0D8D Authority key identifier: 1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/4EF1DE0E822A11EDB2081A49C4F9AE02.roa Signing time: Tue 06 May 2025 18:27:29 +0000 ROA not before: Tue 06 May 2025 18:27:29 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 134176 IP address blocks: 43.243.170.0/24 maxlen: 24 43.243.171.0/24 maxlen: 24 103.38.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 18:06:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3469 (0xd8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91568F6, serialNumber=1E329E98F67692E9B576023A2FBC557D57DD556C Validity Not Before: May 6 18:27:29 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681a5491-b735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b5:05:57:76:c8:29:f2:8a:9a:33:1d:db:73: 80:b9:b9:be:14:b0:5a:c8:29:2e:fe:74:98:74:86: b4:49:29:70:e0:17:e5:ff:38:cb:b8:b7:6c:27:bd: ee:de:55:b2:7a:9d:b6:82:a8:2a:9a:62:a6:3a:0d: 52:f4:6e:95:a3:cf:46:b8:b7:fa:23:c7:1c:f0:eb: d9:61:08:45:29:34:95:88:c1:ad:5e:c6:ed:b5:5c: ba:bb:60:70:11:22:8c:98:28:6d:2d:34:fb:f8:4a: 7f:80:3d:bb:ab:34:4c:d3:c6:11:5f:eb:fe:32:97: 29:50:91:62:42:cf:2f:da:5a:6e:f5:e6:78:f4:87: d3:19:7d:f4:0c:ba:5c:6c:04:f0:85:ef:38:24:d2: 36:c7:4a:a5:28:de:c2:7a:ae:79:58:f9:4d:63:5e: 9a:d5:24:59:32:a6:18:36:5c:bb:e0:fc:73:10:89: 26:be:47:e0:2a:79:da:0b:0f:85:c7:6b:a4:1b:c9: 6c:2d:b5:5f:fa:a2:36:0f:e5:73:d1:19:14:4d:97: 8a:a3:22:0e:1e:5b:3f:db:e7:af:47:bf:59:64:f8: 9e:88:1a:eb:59:7d:25:5b:ba:6f:5f:6c:5d:ee:e9: d8:c9:34:74:7f:ff:95:73:c6:c5:14:ee:3a:f0:80: e7:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:1E:DA:BF:C4:51:23:C6:19:5F:29:7F:3D:33:9F:52:16:D3:F1:51 X509v3 Authority Key Identifier: keyid:1E:32:9E:98:F6:76:92:E9:B5:76:02:3A:2F:BC:55:7D:57:DD:55:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/HjKemPZ2kum1dgI6L7xVfVfdVWw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HjKemPZ2kum1dgI6L7xVfVfdVWw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91568F6/37D03DF6CE2811E9A6B6C17BC4F9AE02/4EF1DE0E822A11EDB2081A49C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.170.0/23 103.38.254.0/24 Signature Algorithm: sha256WithRSAEncryption c4:c6:ea:fc:06:33:ab:af:2d:e2:f3:53:c8:93:41:6c:d8:1b: fb:51:f7:73:c3:78:bd:90:81:3a:9d:f5:ad:92:0e:4a:d6:48: 4e:23:39:ab:6c:8a:32:89:5d:be:bd:ba:08:2f:46:75:ec:2e: 42:a9:1b:f9:c5:ca:d1:b0:d7:a2:70:ce:04:a4:86:c6:18:f3: 19:2b:74:92:57:98:cc:cf:cf:96:48:c2:8e:7c:8e:60:9d:f3: 08:3a:61:60:e5:d8:bc:29:eb:c8:30:db:b6:45:95:c0:97:b4: 16:f8:b2:4c:66:c9:2f:be:f8:e6:9c:d3:80:35:5d:20:79:ce: d0:1e:de:30:14:08:be:99:0e:0f:6f:28:d8:b5:0d:81:c6:0a: b7:79:74:8c:75:17:65:a0:60:56:4b:b4:ce:ac:0d:b6:1d:f2: f2:ec:8f:6e:ec:11:c0:6a:42:0c:3e:2b:01:b8:8e:f3:5d:81: 7b:84:f8:21:df:52:2b:35:85:e7:de:90:5e:4a:b3:3d:18:28: 54:d1:c5:a1:56:91:d4:cb:0c:6e:58:5f:d9:37:16:91:0e:71: 65:86:83:17:f3:f0:c7:79:6a:00:81:84:a1:5d:58:86:1e:af: 52:24:92:12:8c:a8:e9:0e:1f:60:b2:df:1f:0b:59:94:83:3f: 05:ec:fd:ca -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDY0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NTY4RjYxMTAvBgNVBAUTKDFFMzI5RTk4RjY3NjkyRTlCNTc2MDIzQTJGQkM1NTdE NTdERDU1NkMwHhcNMjUwNTA2MTgyNzI5WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFhNTQ5MS1iNzM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsbUFV3bIKfKKmjMd23OAubm+FLBayCku/nSYdIa0SSlw4Bfl/zjLuLdsJ73u 3lWyep22gqgqmmKmOg1S9G6Vo89GuLf6I8cc8OvZYQhFKTSViMGtXsbttVy6u2Bw ESKMmChtLTT7+Ep/gD27qzRM08YRX+v+MpcpUJFiQs8v2lpu9eZ49IfTGX30DLpc bATwhe84JNI2x0qlKN7Ceq55WPlNY16a1SRZMqYYNly74PxzEIkmvkfgKnnaCw+F x2ukG8lsLbVf+qI2D+Vz0RkUTZeKoyIOHls/2+evR79ZZPieiBrrWX0lW7pvX2xd 7unYyTR0f/+Vc8bFFO468IDnoQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFEEe2r/E USPGGV8pfz0zn1IW0/FRMB8GA1UdIwQYMBaAFB4ynpj2dpLptXYCOi+8VX1X3VVs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1NjhGNi8zN0QwM0RGNkNF MjgxMUU5QTZCNkMxN0JDNEY5QUUwMi9IaktlbVBaMmt1bTFkZ0k2TDd4VmZWZmRW V3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0hqS2VtUFoya3VtMWRnSTZMN3hWZlZmZFZXdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NTY4RjYvMzdEMDNERjZDRTI4MTFFOUE2QjZDMTdCQzRGOUFFMDIvNEVGMURFMEU4 MjJBMTFFREIyMDgxQTQ5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAEr86oDBABnJv4wDQYJKoZIhvcNAQELBQADggEBAMTG6vwG M6uvLeLzU8iTQWzYG/tR93PDeL2QgTqd9a2SDkrWSE4jOatsijKJXb69uggvRnXs LkKpG/nFytGw16JwzgSkhsYY8xkrdJJXmMzPz5ZIwo58jmCd8wg6YWDl2Lwp68gw 27ZFlcCXtBb4skxmyS+++Oac04A1XSB5ztAe3jAUCL6ZDg9vKNi1DYHGCrd5dIx1 F2WgYFZLtM6sDbYd8vLsj27sEcBqQgw+KwG4jvNdgXuE+CHfUis1hefekF5Ksz0Y KFTRxaFWkdTLDG5YX9k3FpEOcWWGgxfz8Md5agCBhKFdWIYer1IkkhKMqOkOH2Cy 3x8LWZSDPwXs/co= -----END CERTIFICATE-----Generated at Thu May 15 16:39:45 2025 by rpki-client