$ rpki-client -vvf rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/57FD28280C8311ECB6423427C4F9AE02.roa File: 57FD28280C8311ECB6423427C4F9AE02.roa (raw, json) Hash identifier: VQ08lsrIAC7+hSt1tyiXZprVNT7BGFg1ZEpgKiP2GBs= Subject key identifier: 4D:27:F2:1E:3F:9D:BD:F9:71:92:F1:33:49:57:B9:20:4F:CD:D7:4B Certificate issuer: /CN=A91676D4/serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D Certificate serial: 05AF Authority key identifier: 83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/57FD28280C8311ECB6423427C4F9AE02.roa Signing time: Thu 24 Jul 2025 16:43:01 +0000 ROA not before: Thu 24 Jul 2025 16:43:01 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 136041 IP address blocks: 101.234.4.0/24 maxlen: 24 101.234.5.0/24 maxlen: 24 101.234.10.0/24 maxlen: 24 101.234.12.0/24 maxlen: 24 101.234.13.0/24 maxlen: 24 101.234.27.0/24 maxlen: 24 101.234.28.0/24 maxlen: 24 101.234.33.0/24 maxlen: 24 101.234.43.0/24 maxlen: 24 183.81.224.0/24 maxlen: 24 183.81.225.0/24 maxlen: 24 183.81.226.0/24 maxlen: 24 183.81.227.0/24 maxlen: 24 183.81.228.0/24 maxlen: 24 183.81.229.0/24 maxlen: 24 183.81.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 23:23:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1455 (0x5af) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91676D4, serialNumber=835A6C96B20924C7E5D8F12F06DB9DD23E252F5D Validity Not Before: Jul 24 16:43:01 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68826295-bdc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d3:c4:79:53:8f:d6:7f:a1:08:ac:12:a0:20: d8:1a:65:fe:69:6a:f6:bd:4f:d2:73:3a:c7:e0:6c: 5a:bf:03:f7:7b:aa:df:62:6e:78:52:d1:43:52:e8: c2:5f:d4:f0:4f:b5:f0:5d:9c:ae:bc:45:5c:c8:4d: 1f:1f:b2:55:bb:ad:0a:15:75:e0:d9:fa:7a:38:6f: 31:7f:bd:45:d1:ea:cf:43:3e:ca:1e:ab:da:63:a8: 87:5d:ce:cb:16:89:9a:11:d7:08:fb:12:14:55:29: 9b:e2:03:18:12:17:3c:e1:ac:f4:e0:b1:54:06:be: 44:e1:68:3e:8e:bb:44:40:80:b7:3b:3d:ac:ff:42: 56:dd:59:d3:bd:44:0d:32:68:c5:31:10:2b:b1:48: 2b:a2:90:24:35:fa:dc:d5:77:ce:58:92:70:12:f6: 64:bc:6d:30:e5:cf:2b:b6:29:11:8b:7d:8f:67:8f: b3:a4:11:e4:12:75:f3:22:4f:7c:71:2f:5a:ce:fd: 5a:ee:4e:74:63:26:67:cf:fa:e6:3e:be:4f:83:7d: 8c:c0:c9:f1:47:20:a2:36:42:50:95:65:2b:62:82: 6e:41:cc:03:9a:13:74:25:76:7a:7d:4c:19:92:ea: 03:c3:82:e4:1c:71:9a:f2:6c:eb:d2:f7:98:86:37: 9d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:27:F2:1E:3F:9D:BD:F9:71:92:F1:33:49:57:B9:20:4F:CD:D7:4B X509v3 Authority Key Identifier: keyid:83:5A:6C:96:B2:09:24:C7:E5:D8:F1:2F:06:DB:9D:D2:3E:25:2F:5D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/g1pslrIJJMfl2PEvBtud0j4lL10.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1pslrIJJMfl2PEvBtud0j4lL10.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676D4/E17ECE2EE2E611EBB7596A75C4F9AE02/57FD28280C8311ECB6423427C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.234.4.0/23 101.234.10.0/24 101.234.12.0/23 101.234.27.0-101.234.28.255 101.234.33.0/24 101.234.43.0/24 183.81.224.0-183.81.230.255 Signature Algorithm: sha256WithRSAEncryption 94:e9:25:20:dc:b6:1b:6c:61:23:32:fc:7e:bb:ba:22:62:51: 83:6c:89:f5:ea:f6:45:cb:a0:e4:cd:95:2a:37:18:f4:ef:1f: a9:47:0f:9f:bb:64:63:b6:b1:29:49:53:9b:d5:41:2e:c8:d6: ad:be:14:fd:6b:99:3b:1f:85:2d:7d:8d:e7:b8:3d:ce:bb:b9: 04:a6:fe:3e:73:31:8d:e1:09:ea:da:21:73:75:03:d6:b9:f5: 47:54:c8:d7:e4:05:6c:c6:b7:63:76:96:94:fb:18:b1:71:e4: 28:e5:5f:e1:42:12:fe:7c:36:ea:df:a6:68:89:f9:97:6e:68: 54:ad:d7:1f:0d:09:93:b5:a5:c3:a5:e0:e2:28:c6:e0:68:d6: 73:e8:ad:34:91:36:48:5b:17:8d:4f:e7:9a:66:23:77:f8:2c: 74:eb:44:da:2a:a1:c2:1c:ad:25:49:b1:4e:fb:14:42:92:0c: de:05:3a:dc:07:a2:4b:5b:01:b5:8a:a8:a1:cd:91:8c:a2:2e: 4b:aa:68:d2:84:7f:78:f0:40:8e:23:75:af:7a:df:8b:2c:08: c8:04:09:e4:c5:d8:c4:c3:75:f3:4c:37:e6:72:92:3e:13:6b: 2b:b8:63:13:91:ec:77:a6:5a:b5:a7:50:c3:cc:1c:0b:3c:d4: 84:80:ce:48 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgICBa8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Njc2RDQxMTAvBgNVBAUTKDgzNUE2Qzk2QjIwOTI0QzdFNUQ4RjEyRjA2REI5REQy M0UyNTJGNUQwHhcNMjUwNzI0MTY0MzAxWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODgyNjI5NS1iZGM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0NPEeVOP1n+hCKwSoCDYGmX+aWr2vU/SczrH4GxavwP3e6rfYm54UtFDUujC X9TwT7XwXZyuvEVcyE0fH7JVu60KFXXg2fp6OG8xf71F0erPQz7KHqvaY6iHXc7L FomaEdcI+xIUVSmb4gMYEhc84az04LFUBr5E4Wg+jrtEQIC3Oz2s/0JW3VnTvUQN MmjFMRArsUgropAkNfrc1XfOWJJwEvZkvG0w5c8rtikRi32PZ4+zpBHkEnXzIk98 cS9azv1a7k50YyZnz/rmPr5Pg32MwMnxRyCiNkJQlWUrYoJuQcwDmhN0JXZ6fUwZ kuoDw4LkHHGa8mzr0veYhjedawIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFE0n8h4/ nb35cZLxM0lXuSBPzddLMB8GA1UdIwQYMBaAFINabJayCSTH5djxLwbbndI+JS9d MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2NzZENC9FMTdFQ0UyRUUy RTYxMUVCQjc1OTZBNzVDNEY5QUUwMi9nMXBzbHJJSkpNZmwyUEV2QnR1ZDBqNGxM MTAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2cxcHNscklKSk1mbDJQRXZCdHVkMGo0bEwxMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Njc2RDQvRTE3RUNFMkVFMkU2MTFFQkI3NTk2QTc1QzRGOUFFMDIvNTdGRDI4Mjgw QzgzMTFFQ0I2NDIzNDI3QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUwYIKwYBBQUHAQcBAf8E RDBCMEAEAgABMDoDBAFl6gQDBABl6goDBAFl6gwwDAMEAGXqGwMEAGXqHAMEAGXq IQMEAGXqKzAMAwQFt1HgAwQAt1HmMA0GCSqGSIb3DQEBCwUAA4IBAQCU6SUg3LYb bGEjMvx+u7oiYlGDbIn16vZFy6DkzZUqNxj07x+pRw+fu2RjtrEpSVOb1UEuyNat vhT9a5k7H4UtfY3nuD3Ou7kEpv4+czGN4Qnq2iFzdQPWufVHVMjX5AVsxrdjdpaU +xixceQo5V/hQhL+fDbq36ZoifmXbmhUrdcfDQmTtaXDpeDiKMbgaNZz6K00kTZI WxeNT+eaZiN3+Cx060TaKqHCHK0lSbFO+xRCkgzeBTrcB6JLWwG1iqihzZGMoi5L qmjShH948ECOI3Wvet+LLAjIBAnkxdjEw3XzTDfmcpI+E2sruGMTkex3plq1p1DD zBwLPNSEgM5I -----END CERTIFICATE-----Generated at Sat Aug 23 20:15:43 2025 by rpki-client