$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4353C2FC0E9A11F0A4CEB90AC4F9AE02.roa File: 4353C2FC0E9A11F0A4CEB90AC4F9AE02.roa (raw, json) Hash identifier: 0+sKDOBipHkQz4nFhrXYbndaiKHptrj+HuFFMm1OOrQ= Subject key identifier: 7D:E9:78:61:9D:9C:35:FB:31:CA:7B:F0:7F:9B:DA:22:DC:F1:BD:68 Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0BC5 Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4353C2FC0E9A11F0A4CEB90AC4F9AE02.roa Signing time: Mon 05 May 2025 06:02:12 +0000 ROA not before: Mon 05 May 2025 06:02:12 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 9311 IP address blocks: 43.246.128.0/24 maxlen: 24 43.246.129.0/24 maxlen: 24 43.246.130.0/24 maxlen: 24 43.246.131.0/24 maxlen: 24 103.15.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3013 (0xbc5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: May 5 06:02:12 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68185464-d078 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7f:cb:5b:69:87:16:fb:0e:2d:38:c0:ce:4c: b1:aa:43:38:75:a0:e1:6a:88:d0:1b:36:3a:e9:f7: 54:e3:4b:d5:ce:ab:65:7a:c7:a2:b6:ef:39:59:da: d0:64:1f:a5:fb:62:3f:d2:ce:ca:4a:ec:b1:a6:0e: 9c:4d:98:a1:7e:47:5b:57:c9:0d:5f:3a:c3:a7:dd: aa:ab:8e:03:a4:53:33:93:04:7b:11:60:e9:36:23: 5a:ca:b2:1d:33:17:3e:36:21:3a:35:4d:b8:e0:69: 3b:c1:c5:12:ed:e2:05:99:c6:9e:37:27:23:95:81: 6d:0c:34:a0:ac:ed:11:7f:20:ce:8b:f2:98:bb:c1: a3:7b:8f:5d:4a:c6:c6:ae:a8:d5:70:8f:72:65:ab: db:32:35:c5:d0:48:e8:79:d7:0f:64:21:69:6b:f3: a2:ef:29:4b:d9:a1:fc:34:68:20:5c:05:14:67:c7: 48:12:9f:04:a7:a5:91:37:64:79:92:02:f9:b8:c6: 09:c8:5d:32:b4:82:e0:dc:94:22:30:44:db:d4:23: fb:39:9e:25:03:46:d0:d4:3a:ad:1d:55:ac:f2:3e: af:34:43:24:f8:0e:cf:c6:39:78:8c:5b:16:4a:fe: a6:ec:85:3b:59:82:93:eb:ca:0b:82:a4:e6:55:76: f6:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E9:78:61:9D:9C:35:FB:31:CA:7B:F0:7F:9B:DA:22:DC:F1:BD:68 X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/4353C2FC0E9A11F0A4CEB90AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.246.128.0/22 103.15.79.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:8a:d1:12:0e:9c:d5:1e:c0:20:a3:00:17:88:99:fd:8f:90: 43:96:bb:a4:97:54:04:41:c3:e9:87:03:d0:e5:a8:a5:8c:7f: 03:fa:c9:00:94:b4:65:48:7a:b1:ff:c4:72:ec:91:bc:e5:63: 72:2d:9a:f8:e7:a1:d1:f1:53:44:60:6d:1a:ba:99:21:a2:da: 6c:3e:93:5f:a2:96:23:66:77:1e:e7:fd:1d:a4:4a:45:3e:b7: c4:1a:e5:cb:3a:81:ee:c2:ca:85:82:5f:c8:a8:78:8c:b6:73: 07:3a:6f:97:d0:81:2d:69:66:b2:59:df:82:64:ac:f6:11:bb: 2e:d2:23:7d:e2:18:8f:b6:c9:bf:f3:fa:2b:0e:d3:85:cd:63: 3b:09:57:60:b6:d6:55:33:fe:2d:3d:39:48:8e:2a:15:8b:db: 4c:8e:4d:2f:16:9d:54:59:0c:4c:70:36:82:a7:54:38:13:94: 98:59:ed:65:19:a2:0b:71:2a:4a:f3:d5:56:50:a9:1b:fd:7d: c9:59:f5:30:a1:d7:5d:a9:d6:a8:cf:0f:9a:16:e2:9c:00:a8: 1d:c8:b8:87:be:c8:38:f9:61:35:47:bb:fa:f6:4d:f8:40:95: 0b:03:b6:f8:09:09:5a:21:91:6f:ea:a8:f8:1f:76:02:dc:7c: 1b:42:d8:c6 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICC8UwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNTA1MDYwMjEyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODE4NTQ2NC1kMDc4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvn/LW2mHFvsOLTjAzkyxqkM4daDhaojQGzY66fdU40vVzqtleseitu85WdrQ ZB+l+2I/0s7KSuyxpg6cTZihfkdbV8kNXzrDp92qq44DpFMzkwR7EWDpNiNayrId Mxc+NiE6NU244Gk7wcUS7eIFmcaeNycjlYFtDDSgrO0RfyDOi/KYu8Gje49dSsbG rqjVcI9yZavbMjXF0EjoedcPZCFpa/Oi7ylL2aH8NGggXAUUZ8dIEp8Ep6WRN2R5 kgL5uMYJyF0ytILg3JQiMETb1CP7OZ4lA0bQ1DqtHVWs8j6vNEMk+A7Pxjl4jFsW Sv6m7IU7WYKT68oLgqTmVXb2HQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFH3peGGd nDX7Mcp78H+b2iLc8b1oMB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvNDM1M0MyRkMw RTlBMTFGMEE0Q0VCOTBBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAIr9oADBABnD08wDQYJKoZIhvcNAQELBQADggEBADuK0RIO nNUewCCjABeImf2PkEOWu6SXVARBw+mHA9DlqKWMfwP6yQCUtGVIerH/xHLskbzl Y3ItmvjnodHxU0RgbRq6mSGi2mw+k1+iliNmdx7n/R2kSkU+t8Qa5cs6ge7CyoWC X8ioeIy2cwc6b5fQgS1pZrJZ34JkrPYRuy7SI33iGI+2yb/z+isO04XNYzsJV2C2 1lUz/i09OUiOKhWL20yOTS8WnVRZDExwNoKnVDgTlJhZ7WUZogtxKkrz1VZQqRv9 fclZ9TCh112p1qjPD5oW4pwAqB3IuIe+yDj5YTVHu/r2TfhAlQsDtvgJCVohkW/q qPgfdgLcfBtC2MY= -----END CERTIFICATE-----Generated at Sun May 11 16:41:07 2025 by rpki-client