$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/66560AECE6B111EE9072F868C4F9AE02.roa File: 66560AECE6B111EE9072F868C4F9AE02.roa (raw, json) Hash identifier: X8EbZsDCunbUgYMWUd9RkHifxlYXQi2zXDu+dO2RG4s= Subject key identifier: ED:63:9C:32:93:3F:78:01:53:07:22:8B:0B:61:E4:4A:C4:B0:08:BA Certificate issuer: /CN=A91A4849/serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Certificate serial: E8 Authority key identifier: B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/66560AECE6B111EE9072F868C4F9AE02.roa Signing time: Thu 01 May 2025 04:41:51 +0000 ROA not before: Thu 01 May 2025 04:41:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 152651 IP address blocks: 202.71.184.0/23 maxlen: 23 202.71.184.0/24 maxlen: 24 202.71.185.0/24 maxlen: 24 2401:8ea0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 04:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 232 (0xe8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4849, serialNumber=B6CC02A7DB8A4DB530F112B6224F19080868FBD9 Validity Not Before: May 1 04:41:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6812fb8e-1d51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6d:63:7f:4c:50:d4:15:a5:d9:f2:1d:ef:66: 1b:10:e2:52:50:8a:18:a2:71:71:3f:d8:fb:c2:06: a4:52:c0:9d:f7:3d:ae:d1:de:0a:c8:07:00:6c:5e: 9d:9c:15:e0:e9:ed:6a:b3:c9:c1:3e:de:ac:88:83: 63:e1:e9:db:77:b4:f6:72:ff:3d:4b:c4:4c:46:9b: 3f:3a:ab:b5:07:ce:c9:9a:1d:9b:58:1f:ea:c3:0c: 86:44:f9:68:74:ad:9f:57:8c:30:21:e5:64:07:f6: c5:db:32:0d:c4:89:b2:25:75:32:b3:43:37:69:c9: 2b:34:c6:ca:a6:03:84:d7:fb:50:db:50:ca:ce:2e: 86:f0:b3:1c:94:e7:55:66:c7:50:74:0c:68:1a:1d: 63:0c:3b:58:5f:7e:19:7e:6d:de:3c:ec:62:79:c4: fb:40:66:43:a7:4a:dd:2b:80:d3:41:72:44:f3:ab: 2d:c1:12:77:11:45:a6:2c:62:33:6b:cc:29:28:33: d5:9c:53:1b:34:4a:24:ac:4c:ce:72:74:b6:62:ec: d7:3f:09:d4:88:13:28:f9:09:f5:84:2b:98:c5:10: dc:e3:44:29:08:2b:d0:b6:83:f8:73:b5:90:f3:f5: 2f:9c:3a:44:74:a9:1f:f1:01:ac:cc:1a:31:e0:32: 05:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:63:9C:32:93:3F:78:01:53:07:22:8B:0B:61:E4:4A:C4:B0:08:BA X509v3 Authority Key Identifier: keyid:B6:CC:02:A7:DB:8A:4D:B5:30:F1:12:B6:22:4F:19:08:08:68:FB:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/tswCp9uKTbUw8RK2Ik8ZCAho-9k.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tswCp9uKTbUw8RK2Ik8ZCAho-9k.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4849/087D3EE8E66D11EE8A31A960C4F9AE02/66560AECE6B111EE9072F868C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 202.71.184.0/23 IPv6: 2401:8ea0::/32 Signature Algorithm: sha256WithRSAEncryption 6f:7e:dc:47:74:15:de:5d:69:8c:fa:74:2d:bd:09:52:aa:d2: a5:00:10:c5:e2:5e:70:40:03:9c:13:a6:6d:26:2d:c5:96:63: 87:fe:99:08:7d:3b:a7:30:bd:b2:08:81:0d:ac:2e:55:cb:c4: b9:0b:af:61:80:a9:26:a6:b6:b0:15:27:dd:ef:e0:90:5a:75: e9:99:cb:f6:bb:bc:d5:5a:6d:1d:c7:65:1a:07:79:c3:c1:0a: 1c:08:55:2f:61:07:bf:c0:2b:64:db:fa:97:2d:a0:25:e5:38: 90:14:eb:0f:de:bc:61:29:cd:88:e1:ee:90:ed:ec:ac:13:4e: 4c:f8:ce:52:46:94:ef:8e:a1:19:9e:f4:13:64:08:71:f0:f6: 95:23:cc:87:21:b0:b2:c3:ab:68:58:d6:9d:fe:02:fe:7d:6a: 88:98:c6:58:7e:f7:e0:dc:02:39:43:ef:09:70:01:83:6a:11: cd:5e:4a:28:b2:51:70:87:ae:38:8c:38:81:4c:71:a3:f1:68: fb:fa:8d:a1:de:9e:49:61:f3:66:24:90:d1:d1:eb:62:2d:62: ca:da:94:8b:45:90:cd:7a:a0:95:d8:a9:a5:66:de:a8:fd:8c: ac:19:1f:4e:89:3e:be:15:5d:77:4c:35:b2:ed:9c:44:6a:2c: b7:2c:00:46 -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICAOgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTQ4NDkxMTAvBgNVBAUTKEI2Q0MwMkE3REI4QTREQjUzMEYxMTJCNjIyNEYxOTA4 MDg2OEZCRDkwHhcNMjUwNTAxMDQ0MTUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyZmI4ZS0xZDUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2m1jf0xQ1BWl2fId72YbEOJSUIoYonFxP9j7wgakUsCd9z2u0d4KyAcAbF6d nBXg6e1qs8nBPt6siINj4enbd7T2cv89S8RMRps/Oqu1B87Jmh2bWB/qwwyGRPlo dK2fV4wwIeVkB/bF2zINxImyJXUys0M3ackrNMbKpgOE1/tQ21DKzi6G8LMclOdV ZsdQdAxoGh1jDDtYX34Zfm3ePOxiecT7QGZDp0rdK4DTQXJE86stwRJ3EUWmLGIz a8wpKDPVnFMbNEokrEzOcnS2YuzXPwnUiBMo+Qn1hCuYxRDc40QpCCvQtoP4c7WQ 8/UvnDpEdKkf8QGszBox4DIFTwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFO1jnDKT P3gBUwciiwth5ErEsAi6MB8GA1UdIwQYMBaAFLbMAqfbik21MPEStiJPGQgIaPvZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNDg0OS8wODdEM0VFOEU2 NkQxMUVFOEEzMUE5NjBDNEY5QUUwMi90c3dDcDl1S1RiVXc4UksySWs4WkNBaG8t OWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Rzd0NwOXVLVGJVdzhSSzJJazhaQ0Foby05ay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTQ4NDkvMDg3RDNFRThFNjZEMTFFRThBMzFBOTYwQzRGOUFFMDIvNjY1NjBBRUNF NkIxMTFFRTkwNzJGODY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAHKR7gwDQQCAAIwBwMFACQBjqAwDQYJKoZIhvcNAQELBQAD ggEBAG9+3Ed0Fd5daYz6dC29CVKq0qUAEMXiXnBAA5wTpm0mLcWWY4f+mQh9O6cw vbIIgQ2sLlXLxLkLr2GAqSamtrAVJ93v4JBademZy/a7vNVabR3HZRoHecPBChwI VS9hB7/AK2Tb+pctoCXlOJAU6w/evGEpzYjh7pDt7KwTTkz4zlJGlO+OoRme9BNk CHHw9pUjzIchsLLDq2hY1p3+Av59aoiYxlh+9+DcAjlD7wlwAYNqEc1eSiiyUXCH rjiMOIFMcaPxaPv6jaHenklh82YkkNHR62ItYsralItFkM16oJXYqaVm3qj9jKwZ H06JPr4VXXdMNbLtnERqLLcsAEY= -----END CERTIFICATE-----Generated at Wed May 14 16:24:29 2025 by rpki-client