$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D495A572799111EE806FBC0DC4F9AE02.roa File: D495A572799111EE806FBC0DC4F9AE02.roa (raw, json) Hash identifier: Lujw52nzrj6XM7oMK5n9l1KbuuRJ4pcpY82cylZiL+0= Subject key identifier: C6:97:94:07:BF:42:35:B1:25:B1:F9:2D:56:E6:24:ED:A4:4D:69:77 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4AC2 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D495A572799111EE806FBC0DC4F9AE02.roa Signing time: Sat 10 May 2025 12:37:47 +0000 ROA not before: Sat 10 May 2025 12:37:47 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 150895 IP address blocks: 103.67.162.0/23 maxlen: 23 103.72.56.0/23 maxlen: 23 103.75.76.0/23 maxlen: 23 103.78.2.0/23 maxlen: 23 163.223.210.0/23 maxlen: 23 163.227.230.0/23 maxlen: 24 2401:37e0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19138 (0x4ac2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: May 10 12:37:47 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=681f489b-2b2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:60:34:4c:3e:c7:25:b2:e0:a5:60:53:ab:b3: d6:e0:f2:0d:d6:a1:4d:17:c6:12:6f:43:45:c7:98: ce:41:5b:dc:ec:1b:4b:44:ee:31:4c:6d:e7:50:ee: 52:be:61:af:b2:28:47:2f:87:b7:9a:a3:cb:5e:c4: 2c:38:81:15:18:85:2d:62:3c:e7:99:3f:eb:95:2a: 8f:4f:8d:31:8a:91:e9:b8:73:4c:cc:8b:57:82:db: 56:80:f9:c3:7d:e3:f5:f1:c0:cd:e0:a0:78:f2:e8: 90:88:de:cc:56:a2:b9:02:4d:4b:d6:4c:13:c5:2e: 16:16:81:a5:04:b9:50:31:e8:62:7d:50:e5:f7:3a: 31:1e:f0:29:7b:e6:24:8c:c4:cb:e4:d5:80:a4:b3: d5:be:23:ed:d5:11:06:aa:43:cf:d0:13:4e:76:59: 45:0d:2f:59:0e:f3:3f:17:a2:69:2f:98:f0:8e:f0: 64:a3:46:ce:9e:7b:28:b9:92:a6:8e:7a:21:3b:ba: eb:5e:0b:97:a5:0b:d2:5e:88:cd:1f:9a:53:23:31: c5:56:37:af:af:f0:7b:64:b1:99:03:ba:b1:6b:61: 82:a6:56:7b:c8:6c:c8:60:42:3c:96:91:ef:63:d5: ef:80:14:67:8a:11:92:20:97:0a:6a:97:bc:02:c0: 9b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:97:94:07:BF:42:35:B1:25:B1:F9:2D:56:E6:24:ED:A4:4D:69:77 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/D495A572799111EE806FBC0DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.67.162.0/23 103.72.56.0/23 103.75.76.0/23 103.78.2.0/23 163.223.210.0/23 163.227.230.0/23 IPv6: 2401:37e0::/48 Signature Algorithm: sha256WithRSAEncryption 84:df:8b:96:6a:fc:25:25:3f:0f:39:c9:52:33:19:a7:f5:66: 23:84:c8:29:cd:8b:aa:e6:9f:74:20:ce:3a:f6:00:7a:cf:b8: fd:8f:ad:83:ae:8e:be:de:28:34:91:c3:fe:1d:01:e0:b3:8f: 9e:ac:ab:02:4e:13:c0:9f:5d:ca:8c:ed:8a:4b:c2:20:66:9c: f8:70:b4:6d:48:35:0e:c4:75:b5:62:ef:6a:c2:a1:b3:7a:fc: b6:12:83:cf:d5:59:0a:b8:8d:54:6a:b3:57:a7:3f:03:b1:c8: 78:2d:8c:5b:c1:21:d0:e5:f1:fb:0b:bf:1c:24:67:75:cb:81: b2:0d:94:1f:59:65:a7:fd:ca:6a:29:98:eb:13:4b:29:fb:04: 7b:d4:d2:30:6c:fd:3c:e9:c0:81:9c:63:99:c0:a2:91:be:b2: 1a:69:21:43:20:97:13:a9:f2:2c:75:79:25:a5:93:20:98:34: b0:0c:cf:68:da:71:03:c4:d4:fa:d3:ea:3b:09:16:ba:03:df: 4c:2e:2f:cb:ce:7d:ae:b1:8e:0f:4b:d5:59:aa:13:a0:7b:df: 26:f3:89:2b:e6:74:f3:95:77:62:63:8d:c7:59:f7:5d:34:91: b3:0d:27:bb:73:c4:c5:4f:f4:b0:a8:92:cb:71:d7:97:91:b2: 4c:8c:fb:fd -----BEGIN CERTIFICATE----- MIIFoDCCBIigAwIBAgICSsIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwNTEwMTIzNzQ3WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODFmNDg5Yi0yYjJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArWA0TD7HJbLgpWBTq7PW4PIN1qFNF8YSb0NFx5jOQVvc7BtLRO4xTG3nUO5S vmGvsihHL4e3mqPLXsQsOIEVGIUtYjznmT/rlSqPT40xipHpuHNMzItXgttWgPnD feP18cDN4KB48uiQiN7MVqK5Ak1L1kwTxS4WFoGlBLlQMehifVDl9zoxHvApe+Yk jMTL5NWApLPVviPt1REGqkPP0BNOdllFDS9ZDvM/F6JpL5jwjvBko0bOnnsouZKm jnohO7rrXguXpQvSXojNH5pTIzHFVjevr/B7ZLGZA7qxa2GCplZ7yGzIYEI8lpHv Y9XvgBRnihGSIJcKape8AsCbHwIDAQABo4ICxDCCAsAwHQYDVR0OBBYEFMaXlAe/ QjWxJbH5LVbmJO2kTWl3MB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRDQ5NUE1NzI3 OTkxMTFFRTgwNkZCQzBEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwTgYIKwYBBQUHAQcBAf8E PzA9MCoEAgABMCQDBAFnQ6IDBAFnSDgDBAFnS0wDBAFnTgIDBAGj39IDBAGj4+Yw DwQCAAIwCQMHACQBN+AAADANBgkqhkiG9w0BAQsFAAOCAQEAhN+Llmr8JSU/DznJ UjMZp/VmI4TIKc2LquafdCDOOvYAes+4/Y+tg66Ovt4oNJHD/h0B4LOPnqyrAk4T wJ9dyoztikvCIGac+HC0bUg1DsR1tWLvasKhs3r8thKDz9VZCriNVGqzV6c/A7HI eC2MW8Eh0OXx+wu/HCRndcuBsg2UH1llp/3KaimY6xNLKfsEe9TSMGz9POnAgZxj mcCikb6yGmkhQyCXE6nyLHV5JaWTIJg0sAzPaNpxA8TU+tPqOwkWugPfTC4vy859 rrGOD0vVWaoToHvfJvOJK+Z085V3YmONx1n3XTSRsw0nu3PExU/0sKiSy3HXl5Gy TIz7/Q== -----END CERTIFICATE-----Generated at Sun May 11 04:30:02 2025 by rpki-client