$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E491927E2A6611F0A02D3886C4F9AE02.roa File: E491927E2A6611F0A02D3886C4F9AE02.roa (raw, json) Hash identifier: MFWEq2TOuq6QhhBQVdm19v1oEM88R8Tt3vC65nIVyd4= Subject key identifier: 02:24:14:59:DF:4D:35:02:DC:E0:7C:09:A1:A5:30:65:AA:C9:4F:E0 Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4AB2 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E491927E2A6611F0A02D3886C4F9AE02.roa Signing time: Tue 06 May 2025 10:44:14 +0000 ROA not before: Tue 06 May 2025 10:44:14 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 24088 IP address blocks: 14.0.16.0/20 maxlen: 24 103.19.220.0/22 maxlen: 24 103.71.104.0/23 maxlen: 24 103.88.112.0/22 maxlen: 24 103.88.116.0/22 maxlen: 24 103.130.208.0/22 maxlen: 24 103.235.212.0/22 maxlen: 24 103.238.68.0/22 maxlen: 24 103.238.72.0/22 maxlen: 24 103.244.136.0/22 maxlen: 24 116.118.56.0/22 maxlen: 24 202.60.104.0/21 maxlen: 24 202.93.156.0/22 maxlen: 24 203.128.240.0/21 maxlen: 24 203.209.180.0/22 maxlen: 24 2001:df4:acc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 14:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19122 (0x4ab2) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: May 6 10:44:14 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6819e7fe-a044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:06:7d:62:ef:cb:13:f2:2a:af:af:b0:cf:53: c7:bd:14:a7:91:df:72:62:ae:fa:08:31:0c:a6:b3: 4c:e8:14:11:03:55:9c:a4:d2:31:56:8f:02:9e:bb: ee:f9:b3:8b:36:fe:99:0a:c3:79:38:ee:e7:3a:65: 85:86:ad:3c:97:72:c3:8f:c4:0f:7e:0c:81:be:85: 78:38:ae:83:6a:bb:6a:51:58:56:ee:d4:3e:d9:71: df:17:58:42:77:9e:e5:3a:8a:b7:47:70:8a:f1:7f: 74:5d:ea:bb:03:74:0c:a1:6e:be:e5:6e:0a:48:3b: b9:24:0c:92:b9:df:08:77:01:d0:0e:fb:05:fe:68: 54:62:3c:da:31:5e:2c:ae:88:fb:1f:68:ba:f0:1f: d1:50:f6:f8:0d:55:92:ad:a2:c9:6d:b5:22:c3:fe: 5e:4c:62:39:30:d0:26:0a:7a:9f:9a:6b:84:e1:f0: c5:ea:b4:be:d9:a7:61:b2:46:c2:9a:12:f9:d3:8a: 35:b1:07:50:7f:d1:91:47:46:51:7c:f3:74:48:b6: 87:52:10:2f:43:c3:8a:56:e5:6a:1d:6d:e4:e4:20: 07:4c:28:e1:c0:32:25:ae:6f:af:e1:55:c3:71:cb: 4b:55:5c:24:23:5f:24:85:f9:00:85:cc:2c:e2:2b: 30:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:24:14:59:DF:4D:35:02:DC:E0:7C:09:A1:A5:30:65:AA:C9:4F:E0 X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/E491927E2A6611F0A02D3886C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.0.16.0/20 103.19.220.0/22 103.71.104.0/23 103.88.112.0/21 103.130.208.0/22 103.235.212.0/22 103.238.68.0-103.238.75.255 103.244.136.0/22 116.118.56.0/22 202.60.104.0/21 202.93.156.0/22 203.128.240.0/21 203.209.180.0/22 IPv6: 2001:df4:acc0::/48 Signature Algorithm: sha256WithRSAEncryption 40:b0:b4:eb:bd:33:b4:e5:7d:40:6e:0e:c3:d7:e1:06:8b:fa: 8d:a7:e9:73:18:8d:34:97:bd:83:0e:7f:b8:7f:14:77:08:15: 77:be:d6:53:d4:93:03:4b:d2:13:a5:40:d1:e1:a9:43:95:68: 49:4b:28:e8:cb:e9:20:ce:28:69:e0:25:ab:cc:22:5c:ea:41: 34:9b:86:e6:dd:ff:a0:80:27:e4:24:a4:dc:80:b6:a2:ca:86: 21:6e:66:db:ef:d0:79:be:c1:b5:ca:10:08:fa:d2:66:46:88: 14:7e:f1:94:01:79:bc:46:03:97:56:52:a0:39:12:52:1f:b7: e3:c1:6a:8d:18:78:fd:bd:91:a6:a0:d7:86:61:85:49:d1:18: 75:c3:f1:c7:56:d7:a2:df:4b:1a:46:4b:52:0f:c2:3a:65:ba: 15:e1:0d:9c:4b:05:fd:20:0a:f1:ad:1e:6f:d1:be:01:6e:82: 29:e5:c8:fc:3f:b6:69:91:7a:79:b7:e5:10:c6:d6:bc:89:0f: 72:a8:f4:86:64:a4:d9:e0:cc:b3:57:00:03:60:b7:23:71:02: 10:38:50:17:b5:eb:a7:1a:3e:b0:49:ab:ee:70:fb:25:38:99: 92:8b:1f:49:74:28:c8:96:a5:22:fd:ae:93:02:f9:9c:3e:05: bc:d8:39:57 -----BEGIN CERTIFICATE----- MIIF0zCCBLugAwIBAgICSrIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwNTA2MTA0NDE0WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE5ZTdmZS1hMDQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA3QZ9Yu/LE/Iqr6+wz1PHvRSnkd9yYq76CDEMprNM6BQRA1WcpNIxVo8Cnrvu +bOLNv6ZCsN5OO7nOmWFhq08l3LDj8QPfgyBvoV4OK6DartqUVhW7tQ+2XHfF1hC d57lOoq3R3CK8X90Xeq7A3QMoW6+5W4KSDu5JAySud8IdwHQDvsF/mhUYjzaMV4s roj7H2i68B/RUPb4DVWSraLJbbUiw/5eTGI5MNAmCnqfmmuE4fDF6rS+2adhskbC mhL504o1sQdQf9GRR0ZRfPN0SLaHUhAvQ8OKVuVqHW3k5CAHTCjhwDIlrm+v4VXD cctLVVwkI18khfkAhcws4isw1QIDAQABo4IC9zCCAvMwHQYDVR0OBBYEFAIkFFnf TTUC3OB8CaGlMGWqyU/gMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRTQ5MTkyN0Uy QTY2MTFGMEEwMkQzODg2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwgYAGCCsGAQUFBwEHAQH/ BHEwbzBcBAIAATBWAwQEDgAQAwQCZxPcAwQBZ0doAwQDZ1hwAwQCZ4LQAwQCZ+vU MAwDBAJn7kQDBAJn7kgDBAJn9IgDBAJ0djgDBAPKPGgDBALKXZwDBAPLgPADBALL 0bQwDwQCAAIwCQMHACABDfSswDANBgkqhkiG9w0BAQsFAAOCAQEAQLC0670ztOV9 QG4Ow9fhBov6jafpcxiNNJe9gw5/uH8UdwgVd77WU9STA0vSE6VA0eGpQ5VoSUso 6MvpIM4oaeAlq8wiXOpBNJuG5t3/oIAn5CSk3IC2osqGIW5m2+/Qeb7BtcoQCPrS ZkaIFH7xlAF5vEYDl1ZSoDkSUh+348FqjRh4/b2RpqDXhmGFSdEYdcPxx1bXot9L GkZLUg/COmW6FeENnEsF/SAK8a0eb9G+AW6CKeXI/D+2aZF6ebflEMbWvIkPcqj0 hmSk2eDMs1cAA2C3I3ECEDhQF7Xrpxo+sEmr7nD7JTiZkosfSXQoyJalIv2ukwL5 nD4FvNg5Vw== -----END CERTIFICATE-----Generated at Sun May 11 22:44:02 2025 by rpki-client