$ rpki-client -vvf rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EA9E43FA07B711F0BE6C0912C4F9AE02.roa File: EA9E43FA07B711F0BE6C0912C4F9AE02.roa (raw, json) Hash identifier: aVXdkGCf6q/+7wpsJvB80Ml3c5iJsW80rFe/LuXBSfw= Subject key identifier: 76:51:E1:18:AF:3D:C2:03:48:A3:A2:4C:69:7D:23:67:06:F4:F5:5D Certificate issuer: /CN=A91A560A/serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Certificate serial: 4AD6 Authority key identifier: 16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EA9E43FA07B711F0BE6C0912C4F9AE02.roa Signing time: Mon 12 May 2025 08:49:21 +0000 ROA not before: Mon 12 May 2025 08:49:21 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 151858 IP address blocks: 36.50.54.0/23 maxlen: 23 36.50.176.0/23 maxlen: 23 103.20.96.0/23 maxlen: 23 103.75.180.0/22 maxlen: 23 2001:df4:e40::/48 maxlen: 48 2001:df4:2e40::/48 maxlen: 48 2001:df4:5740::/48 maxlen: 48 2001:df4:7dc0::/48 maxlen: 48 2401:2b20::/48 maxlen: 48 2401:4660::/48 maxlen: 48 2401:5ce0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 14:32:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19158 (0x4ad6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A560A, serialNumber=167C3B221775FEC05039468150CE814756AC6F0A Validity Not Before: May 12 08:49:21 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6821b611-b07b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0f:d2:15:cf:da:1a:ef:08:88:68:67:0c:ab: 56:5e:30:0d:48:f9:61:ab:9f:e1:69:6a:d4:00:fb: 71:f7:1a:da:05:24:f3:42:32:d1:3a:c5:76:d2:3d: 45:7b:7b:d4:5c:3a:6d:60:8b:8a:21:9a:96:4e:9b: e1:c2:ad:a2:f4:87:d8:e6:77:57:62:4a:a5:19:81: b1:27:2f:d9:55:34:b9:2b:24:4b:25:5e:77:d8:91: 2a:97:85:6a:fe:fe:71:53:6a:37:31:ce:d2:72:a4: 00:d7:40:38:a5:ae:bf:43:e8:8d:2d:d0:56:ed:19: f9:30:32:55:93:46:ef:31:f3:ad:58:56:57:df:32: 1c:e0:07:da:e7:00:7b:dc:c2:a2:df:56:d1:6f:11: 30:36:5f:cd:b8:16:2b:8a:8c:f0:a4:9d:a6:0c:62: 02:36:e1:9b:10:3f:43:a9:2a:0b:69:6b:7a:b0:43: cf:02:c5:2a:15:5c:25:88:29:bd:37:58:35:ca:9f: 79:de:c4:91:cf:23:27:90:fb:20:40:3a:59:27:37: 91:d2:28:3d:dc:e5:fe:e6:47:ad:61:69:50:99:ef: ba:ad:6d:1f:1e:48:5e:73:8e:61:dc:a9:ad:4b:fa: 6b:2e:12:f0:65:0f:f8:61:5a:90:68:a7:78:e9:55: 5e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:51:E1:18:AF:3D:C2:03:48:A3:A2:4C:69:7D:23:67:06:F4:F5:5D X509v3 Authority Key Identifier: keyid:16:7C:3B:22:17:75:FE:C0:50:39:46:81:50:CE:81:47:56:AC:6F:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fnw7Ihd1_sBQOUaBUM6BR1asbwo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A560A/AAEB191A1D8A11E2A387D0E408B02CD2/EA9E43FA07B711F0BE6C0912C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 36.50.54.0/23 36.50.176.0/23 103.20.96.0/23 103.75.180.0/22 IPv6: 2001:df4:e40::/48 2001:df4:2e40::/48 2001:df4:5740::/48 2001:df4:7dc0::/48 2401:2b20::/48 2401:4660::/48 2401:5ce0::/48 Signature Algorithm: sha256WithRSAEncryption 80:ad:c0:e3:12:6e:da:51:04:ea:85:64:10:55:42:6d:50:45: 0d:6d:50:66:13:96:9f:ef:02:98:3b:a0:1b:9f:b3:23:3e:8a: ad:85:6d:ff:a9:f6:f5:ea:a8:dc:bf:e6:2d:18:22:06:36:68: e0:7d:9a:fb:38:c5:f6:43:1a:24:5a:dc:35:b5:7f:73:95:0d: f8:1d:ed:d2:d5:d1:f3:52:41:d8:75:4d:7e:f3:e1:da:f6:f0: 87:03:2c:3f:0d:5f:8f:a9:0e:56:00:54:58:43:6c:eb:c9:df: dd:d0:f4:78:e2:fe:ab:de:a8:62:80:2e:c9:3f:3f:a9:50:ab: e2:23:77:42:af:c8:15:07:e2:00:8c:4b:18:ef:56:72:19:8a: 3e:6c:39:02:56:cc:57:94:79:63:45:b4:c1:71:b6:9f:25:1f: c2:da:8d:b3:57:a1:5e:d9:92:68:36:57:85:77:7c:6b:b3:f4: 79:b6:97:67:d0:d6:85:f9:74:3c:19:61:62:28:0e:c5:d2:0c: 74:dd:62:f3:dd:49:4f:f8:57:ef:de:18:4f:38:40:3e:9e:92: 98:bb:92:86:7c:46:ea:be:1e:70:ae:2a:8a:21:38:b6:32:f8: 74:6b:79:f4:d4:af:96:3b:c0:5e:44:c5:14:b6:ab:06:42:b0: 44:a1:ba:5a -----BEGIN CERTIFICATE----- MIIFyjCCBLKgAwIBAgICStYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU2MEExMTAvBgNVBAUTKDE2N0MzQjIyMTc3NUZFQzA1MDM5NDY4MTUwQ0U4MTQ3 NTZBQzZGMEEwHhcNMjUwNTEyMDg0OTIxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIxYjYxMS1iMDdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2A/SFc/aGu8IiGhnDKtWXjANSPlhq5/haWrUAPtx9xraBSTzQjLROsV20j1F e3vUXDptYIuKIZqWTpvhwq2i9IfY5ndXYkqlGYGxJy/ZVTS5KyRLJV532JEql4Vq /v5xU2o3Mc7ScqQA10A4pa6/Q+iNLdBW7Rn5MDJVk0bvMfOtWFZX3zIc4Afa5wB7 3MKi31bRbxEwNl/NuBYriozwpJ2mDGICNuGbED9DqSoLaWt6sEPPAsUqFVwliCm9 N1g1yp953sSRzyMnkPsgQDpZJzeR0ig93OX+5ketYWlQme+6rW0fHkhec45h3Kmt S/prLhLwZQ/4YVqQaKd46VVe1wIDAQABo4IC7jCCAuowHQYDVR0OBBYEFHZR4Riv PcIDSKOiTGl9I2cG9PVdMB8GA1UdIwQYMBaAFBZ8OyIXdf7AUDlGgVDOgUdWrG8K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTYwQS9BQUVCMTkxQTFE OEExMUUyQTM4N0QwRTQwOEIwMkNEMi9Gbnc3SWhkMV9zQlFPVWFCVU02QlIxYXNi d28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ZudzdJaGQxX3NCUU9VYUJVTTZCUjFhc2J3by5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTU2MEEvQUFFQjE5MUExRDhBMTFFMkEzODdEMEU0MDhCMDJDRDIvRUE5RTQzRkEw N0I3MTFGMEJFNkMwOTEyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwweAYIKwYBBQUHAQcBAf8E aTBnMB4EAgABMBgDBAEkMjYDBAEkMrADBAFnFGADBAJnS7QwRQQCAAIwPwMHACAB DfQOQAMHACABDfQuQAMHACABDfRXQAMHACABDfR9wAMHACQBKyAAAAMHACQBRmAA AAMHACQBXOAAADANBgkqhkiG9w0BAQsFAAOCAQEAgK3A4xJu2lEE6oVkEFVCbVBF DW1QZhOWn+8CmDugG5+zIz6KrYVt/6n29eqo3L/mLRgiBjZo4H2a+zjF9kMaJFrc NbV/c5UN+B3t0tXR81JB2HVNfvPh2vbwhwMsPw1fj6kOVgBUWENs68nf3dD0eOL+ q96oYoAuyT8/qVCr4iN3Qq/IFQfiAIxLGO9WchmKPmw5AlbMV5R5Y0W0wXG2nyUf wtqNs1ehXtmSaDZXhXd8a7P0ebaXZ9DWhfl0PBlhYigOxdIMdN1i891JT/hX794Y TzhAPp6SmLuShnxG6r4ecK4qiiE4tjL4dGt59NSvljvAXkTFFLarBkKwRKG6Wg== -----END CERTIFICATE-----Generated at Tue May 13 02:12:36 2025 by rpki-client