$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa File: 42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa (raw, json) Hash identifier: CyxiPw+FT1M9Ph8t1a5WH+7GPhy7eSnekwAYkJL1/JA= Subject key identifier: 09:56:96:AB:58:5A:6A:F6:07:FD:A7:08:36:D2:E5:44:A6:9F:71:7D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4B98 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa Signing time: Tue 01 Jul 2025 07:57:40 +0000 ROA not before: Tue 01 Jul 2025 07:57:40 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 131386 IP address blocks: 45.119.80.0/22 maxlen: 24 45.119.84.0/22 maxlen: 24 103.2.228.0/22 maxlen: 24 103.27.236.0/22 maxlen: 24 103.87.220.0/22 maxlen: 24 103.89.92.0/22 maxlen: 24 103.95.156.0/22 maxlen: 24 103.200.24.0/22 maxlen: 24 2403:bf40::/48 maxlen: 48 2403:bf40:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 08:20:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19352 (0x4b98) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: Jul 1 07:57:40 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=686394f4-2f22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:8f:27:7d:82:5a:c7:6d:bb:0e:4e:d8:ff:8d: 4c:14:fd:be:61:ca:e0:97:75:6b:40:41:8a:f0:fe: c3:b9:ea:a6:9a:b4:7e:16:bd:8c:6a:fb:87:38:35: 51:05:03:40:df:ac:18:56:ce:b3:79:0d:60:e7:c3: 03:8b:c1:f9:2e:32:72:b3:9b:cb:88:00:b7:54:ca: bf:29:06:25:34:00:ac:0a:95:0b:83:54:01:a1:a0: 5b:99:df:f9:59:d1:a4:f7:08:51:07:97:33:c1:e3: 09:60:cd:2c:af:c6:a0:c3:0d:24:32:90:cb:3e:d9: 3e:36:08:2c:34:7f:b6:9e:5e:88:ff:7a:f7:4f:25: 6e:24:42:1f:60:82:9e:00:1a:73:d4:25:ec:74:89: 47:40:a9:8f:ab:60:1d:00:eb:f3:36:ec:ec:c1:fa: 3d:ab:3d:9b:3c:80:ab:3b:70:0d:f9:8c:65:aa:f4: a7:53:e7:ab:8a:7b:86:98:31:31:20:de:24:65:bd: e4:fd:8d:40:de:9c:7f:d6:37:13:2a:65:ce:81:0e: c1:4f:44:d3:05:31:c7:fa:ad:74:d4:b1:35:32:ca: 50:fd:8c:dd:ea:c2:5e:d5:48:b0:96:55:4b:89:19: ea:02:3b:dd:fc:b8:6b:0f:d7:63:be:99:0d:fc:d2: 16:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:56:96:AB:58:5A:6A:F6:07:FD:A7:08:36:D2:E5:44:A6:9F:71:7D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/42CE2AF4CE3D11EFB64C2D1BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.119.80.0/21 103.2.228.0/22 103.27.236.0/22 103.87.220.0/22 103.89.92.0/22 103.95.156.0/22 103.200.24.0/22 IPv6: 2403:bf40::/48 2403:bf40:2::/48 Signature Algorithm: sha256WithRSAEncryption 76:61:b9:9c:b0:a2:2c:ef:df:92:ac:a9:07:cc:7f:46:d5:5d: 81:b6:47:58:da:af:10:9f:06:b5:a9:e5:c2:e1:2f:88:07:6d: 25:c8:e1:61:24:24:fe:e5:1d:b7:c7:73:45:6d:cf:41:01:2f: 61:3d:a4:a2:c3:5e:8c:41:2e:4e:48:f4:b7:6b:ae:08:90:9d: 10:49:19:cf:13:5a:06:a8:d9:a2:8c:44:2e:e5:2f:64:f3:bd: 4c:ea:23:35:a2:f5:4f:7f:c8:8f:d7:20:92:93:1f:43:18:e1: 63:77:b4:61:ed:45:7a:02:41:ae:a2:85:f8:e2:17:16:b5:30: e0:07:88:6e:b2:7d:c7:ff:d5:02:a4:22:26:30:d5:6c:38:f2: ce:9b:38:9d:06:53:ae:6c:3b:fd:ea:58:50:87:c9:3f:f7:7f: ff:b8:45:f6:aa:cc:6e:46:0b:26:57:d3:39:72:9e:2c:eb:04: c4:82:74:58:de:c5:64:df:58:fc:e1:05:a8:45:0d:bb:a6:21: 53:40:ea:36:79:9b:ec:f8:a3:f3:ba:4e:21:26:48:6b:4e:fb: 86:e7:36:09:23:28:9b:e3:96:0b:3f:e4:fb:3b:e0:5f:3f:60: 92:35:b7:6c:22:3d:00:5a:51:6b:35:97:7b:bc:56:42:d8:2d: 2f:7d:d8:c6 -----BEGIN CERTIFICATE----- MIIFrzCCBJegAwIBAgICS5gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwNzAxMDc1NzQwWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODYzOTRmNC0yZjIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAmI8nfYJax227Dk7Y/41MFP2+Ycrgl3VrQEGK8P7DueqmmrR+Fr2MavuHODVR BQNA36wYVs6zeQ1g58MDi8H5LjJys5vLiAC3VMq/KQYlNACsCpULg1QBoaBbmd/5 WdGk9whRB5czweMJYM0sr8agww0kMpDLPtk+NggsNH+2nl6I/3r3TyVuJEIfYIKe ABpz1CXsdIlHQKmPq2AdAOvzNuzswfo9qz2bPICrO3AN+YxlqvSnU+erinuGmDEx IN4kZb3k/Y1A3px/1jcTKmXOgQ7BT0TTBTHH+q101LE1MspQ/Yzd6sJe1UiwllVL iRnqAjvd/LhrD9djvpkN/NIW8wIDAQABo4IC0zCCAs8wHQYDVR0OBBYEFAlWlqtY Wmr2B/2nCDbS5USmn3F9MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvNDJDRTJBRjRD RTNEMTFFRkI2NEMyRDFCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwXQYIKwYBBQUHAQcBAf8E TjBMMDAEAgABMCoDBAMtd1ADBAJnAuQDBAJnG+wDBAJnV9wDBAJnWVwDBAJnX5wD BAJnyBgwGAQCAAIwEgMHACQDv0AAAAMHACQDv0AAAjANBgkqhkiG9w0BAQsFAAOC AQEAdmG5nLCiLO/fkqypB8x/RtVdgbZHWNqvEJ8GtanlwuEviAdtJcjhYSQk/uUd t8dzRW3PQQEvYT2kosNejEEuTkj0t2uuCJCdEEkZzxNaBqjZooxELuUvZPO9TOoj NaL1T3/Ij9cgkpMfQxjhY3e0Ye1FegJBrqKF+OIXFrUw4AeIbrJ9x//VAqQiJjDV bDjyzps4nQZTrmw7/epYUIfJP/d//7hF9qrMbkYLJlfTOXKeLOsExIJ0WN7FZN9Y /OEFqEUNu6YhU0DqNnmb7Pij87pOISZIa077huc2CSMom+OWCz/k+zvgXz9gkjW3 bCI9AFpRazWXe7xWQtgtL33Yxg== -----END CERTIFICATE-----Generated at Wed Jul 2 10:36:33 2025 by rpki-client