$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/AFB0F1260F5E11F0ABB59D3DC4F9AE02.roa File: AFB0F1260F5E11F0ABB59D3DC4F9AE02.roa (raw, json) Hash identifier: 5O0YXigo9eoWRtsR3EdxzwNwkKAx4QzihBZErFieQHg= Subject key identifier: 15:FB:00:6F:CD:2B:80:59:2A:99:8D:7B:7A:86:18:6D:88:78:02:3E Certificate issuer: /CN=A91A4402/serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Certificate serial: 0BBE Authority key identifier: B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/AFB0F1260F5E11F0ABB59D3DC4F9AE02.roa Signing time: Mon 28 Apr 2025 04:31:56 +0000 ROA not before: Mon 28 Apr 2025 04:31:56 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 395793 IP address blocks: 43.230.54.0/24 maxlen: 24 43.230.55.0/24 maxlen: 24 103.12.52.0/24 maxlen: 24 103.248.148.0/24 maxlen: 24 103.248.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 18:59:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3006 (0xbbe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4402, serialNumber=B4116A8E6DA991FDCF71626E7BEA11FF69CBA846 Validity Not Before: Apr 28 04:31:56 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=680f04bc-4ddc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:2d:b6:60:4c:20:4c:d6:9a:19:61:7b:c3: 10:18:dc:a4:24:ee:94:3a:93:3f:68:a0:27:9e:ee: 6b:77:91:28:a0:e0:14:17:c3:29:f4:77:d2:f2:9a: 39:c0:05:1f:60:17:97:bf:b1:4b:96:d6:87:34:d6: b7:6e:3e:0d:e5:9a:aa:ed:7c:68:ee:c5:90:e5:08: e4:7a:6f:3b:b9:c8:cd:23:b2:2c:db:19:3b:e5:1c: 31:ed:26:ec:34:3e:98:83:ea:a5:0e:eb:53:b0:bd: 8e:3c:47:d0:c3:9c:97:0f:41:75:ba:0c:9c:a9:40: e3:77:5e:9f:57:82:f1:b8:1a:05:fd:16:a1:e3:d7: 85:b1:ea:41:98:c0:11:c8:ff:02:a9:36:ea:b0:4a: d8:36:9a:a5:87:19:ec:b2:30:d7:26:91:c0:08:ca: e3:3c:3e:5a:38:d3:7f:ef:7a:57:13:62:01:89:4b: 08:95:cf:3d:8e:13:25:da:8e:ae:2b:57:07:6f:93: c4:af:93:25:26:04:50:34:0a:af:21:14:5d:1c:c5: 33:72:72:a1:c9:0f:33:6a:06:02:24:93:00:fa:e1: 81:59:63:47:69:b1:e8:ff:8e:87:36:76:7d:d4:0c: fb:8b:09:f1:e5:ee:2c:17:dd:1e:4f:f9:f8:76:df: 10:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:FB:00:6F:CD:2B:80:59:2A:99:8D:7B:7A:86:18:6D:88:78:02:3E X509v3 Authority Key Identifier: keyid:B4:11:6A:8E:6D:A9:91:FD:CF:71:62:6E:7B:EA:11:FF:69:CB:A8:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/tBFqjm2pkf3PcWJue-oR_2nLqEY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tBFqjm2pkf3PcWJue-oR_2nLqEY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4402/FDBFD0203D9611EA8EA0702FC4F9AE02/AFB0F1260F5E11F0ABB59D3DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.230.54.0/23 103.12.52.0/24 103.248.148.0/23 Signature Algorithm: sha256WithRSAEncryption 02:88:30:ce:3c:e4:51:aa:fd:e9:70:de:ba:17:e9:96:d5:3b: 3c:96:f9:6d:51:44:b3:05:4b:5c:94:40:9a:32:7a:a8:fe:d2: 6d:ee:ff:df:08:02:93:87:26:3f:f9:ef:72:db:f9:57:61:7b: 12:30:4a:b7:35:33:82:a6:e7:31:9e:85:6b:43:60:c2:8f:2d: 1f:dc:9a:05:92:fd:b6:47:50:a2:e9:d2:71:bd:dd:79:d1:d9: 55:3d:35:86:dc:7f:8e:34:b8:ac:cc:d6:9a:a9:67:c2:e6:a7: 5f:b5:f1:7c:b8:71:ef:37:4d:40:84:d7:0c:11:39:7c:c8:b1: f3:e1:c1:bf:15:2d:82:cd:37:d1:83:2f:7d:83:76:f8:a9:d9: 7f:00:aa:f6:41:50:be:96:bf:16:a1:5f:53:4b:b2:2e:c7:55: cf:69:b9:23:da:ca:53:e0:03:bb:79:93:ac:fe:a9:c8:f8:5a: ed:9c:92:9b:92:de:a4:af:79:b2:32:4a:08:d3:e1:6c:25:ad: 87:46:69:34:09:a1:17:58:a5:c3:7a:85:02:94:78:97:d0:7d: 47:40:8e:db:d5:fb:08:a4:ba:10:44:7e:c0:39:de:69:75:0d: 0b:cd:90:2a:0c:ae:a3:3b:3e:53:b4:d7:2c:bc:8d:6a:68:b0: 1b:b2:3b:25 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICC74wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ0MDIxMTAvBgNVBAUTKEI0MTE2QThFNkRBOTkxRkRDRjcxNjI2RTdCRUExMUZG NjlDQkE4NDYwHhcNMjUwNDI4MDQzMTU2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODBmMDRiYy00ZGRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsLIttmBMIEzWmhlhe8MQGNykJO6UOpM/aKAnnu5rd5EooOAUF8Mp9HfS8po5 wAUfYBeXv7FLltaHNNa3bj4N5Zqq7Xxo7sWQ5Qjkem87ucjNI7Is2xk75Rwx7Sbs ND6Yg+qlDutTsL2OPEfQw5yXD0F1ugycqUDjd16fV4LxuBoF/Rah49eFsepBmMAR yP8CqTbqsErYNpqlhxnssjDXJpHACMrjPD5aONN/73pXE2IBiUsIlc89jhMl2o6u K1cHb5PEr5MlJgRQNAqvIRRdHMUzcnKhyQ8zagYCJJMA+uGBWWNHabHo/46HNnZ9 1Az7iwnx5e4sF90eT/n4dt8QKQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFBX7AG/N K4BZKpmNe3qGGG2IeAI+MB8GA1UdIwQYMBaAFLQRao5tqZH9z3FibnvqEf9py6hG MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDQwMi9GREJGRDAyMDNE OTYxMUVBOEVBMDcwMkZDNEY5QUUwMi90QkZxam0ycGtmM1BjV0p1ZS1vUl8ybkxx RVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RCRnFqbTJwa2YzUGNXSnVlLW9SXzJuTHFFWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ0MDIvRkRCRkQwMjAzRDk2MTFFQThFQTA3MDJGQzRGOUFFMDIvQUZCMEYxMjYw RjVFMTFGMEFCQjU5RDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBAEr5jYDBABnDDQDBAFn+JQwDQYJKoZIhvcNAQELBQADggEB AAKIMM485FGq/elw3roX6ZbVOzyW+W1RRLMFS1yUQJoyeqj+0m3u/98IApOHJj/5 73Lb+VdhexIwSrc1M4Km5zGehWtDYMKPLR/cmgWS/bZHUKLp0nG93XnR2VU9NYbc f440uKzM1pqpZ8Lmp1+18Xy4ce83TUCE1wwROXzIsfPhwb8VLYLNN9GDL32Ddvip 2X8AqvZBUL6WvxahX1NLsi7HVc9puSPaylPgA7t5k6z+qcj4Wu2ckpuS3qSvebIy SgjT4WwlrYdGaTQJoRdYpcN6hQKUeJfQfUdAjtvV+wikuhBEfsA53ml1DQvNkCoM rqM7PlO01yy8jWposBuyOyU= -----END CERTIFICATE-----Generated at Sun May 11 06:17:34 2025 by rpki-client