$ rpki-client -vvf rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa File: 4034878C531411F0B5969F4DC4F9AE02.roa (raw, json) Hash identifier: AU3yamyux9/p0ToAAMhAyNL8bseyjrWTlbYkE9w/k9M= Subject key identifier: 1E:F4:1D:C1:46:80:08:3C:17:2B:16:30:7E:9A:6F:F6:02:2D:C2:34 Certificate issuer: /CN=A91A54FE/serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Certificate serial: EF Authority key identifier: 6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa Signing time: Fri 27 Jun 2025 05:04:49 +0000 ROA not before: Fri 27 Jun 2025 05:04:49 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 9734 IP address blocks: 203.20.114.0/24 maxlen: 24 2001:df3:b540::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 239 (0xef) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A54FE, serialNumber=6FC70906FBA6F4539452091932C45FFA4D8572B8 Validity Not Before: Jun 27 05:04:49 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=685e2671-68de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:35:03:e6:a8:96:70:e8:c2:a6:90:0c:37:dd: b1:81:aa:c3:c9:1d:df:c8:ee:7a:81:dc:64:26:c4: 40:a2:0d:da:6b:f6:62:fa:38:99:ad:ad:7f:86:51: 7a:0a:9b:d2:d3:94:d3:6c:42:27:3f:c2:5d:6b:e8: 28:e2:12:e8:a4:7f:60:80:c2:87:af:27:10:92:af: f9:ce:e0:62:6a:eb:e3:6c:a7:41:d7:2d:56:a5:bf: 2d:16:b6:8b:12:2f:0c:4d:9c:6a:98:23:03:49:4e: 92:f3:55:7a:da:8d:a9:62:da:1d:81:33:00:78:df: e4:d6:a5:12:94:20:4c:26:f6:69:3c:a6:6a:06:09: 86:e1:9b:c1:15:a2:de:07:22:0c:13:f8:88:f2:71: ab:fa:0f:0b:11:6f:84:74:b3:f4:e0:58:5b:a6:10: 42:e4:af:20:3d:4b:8b:11:c1:40:9a:b5:77:4c:e5: 31:a7:58:0b:70:46:89:7a:89:9c:1c:12:74:76:2b: 18:21:1e:62:4b:46:59:34:0f:10:b0:0b:98:7d:8d: 9c:cd:10:3a:49:2c:00:f2:95:15:27:d0:78:29:51: 4e:92:46:ec:66:a6:31:e2:1f:b6:a7:74:d1:28:f8: b6:ec:0f:eb:0f:1e:46:84:28:5f:a3:56:46:76:04: ce:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:F4:1D:C1:46:80:08:3C:17:2B:16:30:7E:9A:6F:F6:02:2D:C2:34 X509v3 Authority Key Identifier: keyid:6F:C7:09:06:FB:A6:F4:53:94:52:09:19:32:C4:5F:FA:4D:85:72:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/b8cJBvum9FOUUgkZMsRf-k2Fcrg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b8cJBvum9FOUUgkZMsRf-k2Fcrg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A54FE/D6117DF6F6E911EEADBFFB52C4F9AE02/4034878C531411F0B5969F4DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 203.20.114.0/24 IPv6: 2001:df3:b540::/48 Signature Algorithm: sha256WithRSAEncryption a0:61:08:21:15:d7:d5:df:11:2f:10:3b:8d:d6:ec:1f:f0:d9: f1:8c:41:7a:3c:af:5a:56:ee:9d:1a:9e:5b:7d:1b:f3:66:d9: db:11:6c:60:27:08:0a:24:e2:7d:3c:9a:ad:f8:b8:e5:8a:62: 94:a2:65:30:2e:18:d2:96:86:96:1e:e6:ce:c7:4a:5d:31:c5: 55:6f:b1:af:1f:36:e0:22:33:df:9c:e0:04:e3:7e:6d:6f:2b: 96:84:42:42:e5:28:38:c7:3a:20:89:b6:0e:08:3e:cb:1d:b1: 83:03:44:b7:e6:5d:62:a8:da:fd:25:6b:bf:3c:14:c6:fb:f3: b4:e2:27:e4:4b:b6:60:ee:fb:50:0f:55:08:d8:9e:b8:00:be: 55:ec:a6:04:db:2f:35:8d:88:66:e7:6a:84:4c:00:a7:7d:b2: 45:3b:bc:d7:9e:e1:29:95:43:1b:2f:20:19:9f:e4:06:35:80: 4a:40:fd:c8:09:3e:38:73:b0:81:9e:b3:33:a0:42:3d:7b:ea: c7:51:54:fa:de:52:bf:94:05:9e:b1:05:da:21:de:ac:b9:2e: b6:40:82:93:ca:ab:3b:6c:fd:26:fa:63:79:73:f6:ff:c5:d9: 59:e8:48:f3:9b:7d:c1:97:8a:a2:04:4c:38:51:33:d1:3d:a6: 0d:7e:58:6f -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU0RkUxMTAvBgNVBAUTKDZGQzcwOTA2RkJBNkY0NTM5NDUyMDkxOTMyQzQ1RkZB NEQ4NTcyQjgwHhcNMjUwNjI3MDUwNDQ5WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODVlMjY3MS02OGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAkTUD5qiWcOjCppAMN92xgarDyR3fyO56gdxkJsRAog3aa/Zi+jiZra1/hlF6 CpvS05TTbEInP8Jda+go4hLopH9ggMKHrycQkq/5zuBiauvjbKdB1y1Wpb8tFraL Ei8MTZxqmCMDSU6S81V62o2pYtodgTMAeN/k1qUSlCBMJvZpPKZqBgmG4ZvBFaLe ByIME/iI8nGr+g8LEW+EdLP04FhbphBC5K8gPUuLEcFAmrV3TOUxp1gLcEaJeomc HBJ0disYIR5iS0ZZNA8QsAuYfY2czRA6SSwA8pUVJ9B4KVFOkkbsZqYx4h+2p3TR KPi27A/rDx5GhChfo1ZGdgTO1QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFB70HcFG gAg8FysWMH6ab/YCLcI0MB8GA1UdIwQYMBaAFG/HCQb7pvRTlFIJGTLEX/pNhXK4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTRGRS9ENjExN0RGNkY2 RTkxMUVFQURCRkZCNTJDNEY5QUUwMi9iOGNKQnZ1bTlGT1VVZ2taTXNSZi1rMkZj cmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2I4Y0pCdnVtOUZPVVVna1pNc1JmLWsyRmNyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU0RkUvRDYxMTdERjZGNkU5MTFFRUFEQkZGQjUyQzRGOUFFMDIvNDAzNDg3OEM1 MzE0MTFGMEI1OTY5RjREQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBADLFHIwDwQCAAIwCQMHACABDfO1QDANBgkqhkiG9w0BAQsF AAOCAQEAoGEIIRXX1d8RLxA7jdbsH/DZ8YxBejyvWlbunRqeW30b82bZ2xFsYCcI CiTifTyarfi45YpilKJlMC4Y0paGlh7mzsdKXTHFVW+xrx824CIz35zgBON+bW8r loRCQuUoOMc6IIm2Dgg+yx2xgwNEt+ZdYqja/SVrvzwUxvvztOIn5Eu2YO77UA9V CNieuAC+VeymBNsvNY2IZudqhEwAp32yRTu8157hKZVDGy8gGZ/kBjWASkD9yAk+ OHOwgZ6zM6BCPXvqx1FU+t5Sv5QFnrEF2iHerLkutkCCk8qrO2z9JvpjeXP2/8XZ WehI85t9wZeKogRMOFEz0T2mDX5Ybw== -----END CERTIFICATE-----Generated at Thu Jul 3 02:56:06 2025 by rpki-client