$ rpki-client -vvf rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa File: EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa (raw, json) Hash identifier: F7qGiUSXmfTHkG4rLsiz9f3fhRuXMOAIShVR1Seg7DE= Subject key identifier: DF:89:1A:DF:49:D3:0B:AB:6D:E4:38:A7:A5:60:5C:C2:C5:99:27:3C Certificate issuer: /CN=A91A7890/serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Certificate serial: 0188 Authority key identifier: C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa Signing time: Sat 03 May 2025 03:09:50 +0000 ROA not before: Sat 03 May 2025 03:09:50 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 139839 IP address blocks: 103.132.20.0/23 maxlen: 23 103.132.20.0/24 maxlen: 24 103.132.21.0/24 maxlen: 24 2400:f6a0::/36 maxlen: 36 2400:f6a0:1000::/36 maxlen: 36 2400:f6a0:2000::/36 maxlen: 36 2400:f6a0:3000::/36 maxlen: 36 2400:f6a0:4000::/36 maxlen: 36 2400:f6a0:5000::/36 maxlen: 36 2400:f6a0:6000::/36 maxlen: 36 2400:f6a0:7000::/36 maxlen: 36 2400:f6a0:8000::/36 maxlen: 36 2400:f6a0:a000::/36 maxlen: 36 2400:f6a0:b000::/36 maxlen: 36 2400:f6a0:c000::/36 maxlen: 36 2400:f6a0:d000::/36 maxlen: 36 2400:f6a0:e000::/36 maxlen: 36 2400:f6a0:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 20 May 2025 02:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 392 (0x188) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A7890, serialNumber=C8392445154A211457468DC92675C6B2BC9C448B Validity Not Before: May 3 03:09:50 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=681588fd-bff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:79:8d:36:8d:ac:35:c5:c5:04:e4:58:97:71: 32:a4:a5:ab:86:9e:54:12:e5:98:85:1b:49:be:9c: 4b:91:4b:20:a8:7b:02:97:f5:4b:88:19:fb:60:b9: 9e:2b:af:08:5c:fa:e0:67:e8:3c:3e:46:ec:8e:87: 18:2d:76:54:2c:8b:d9:46:4a:2a:f1:fe:80:53:2d: 1c:48:c6:b1:9b:8e:15:83:3b:29:a4:45:c5:2d:75: b1:d9:bf:f0:91:a0:e2:f0:8c:cd:20:83:b3:d2:4e: 48:01:24:9c:2c:d4:1b:ae:db:a9:df:37:66:31:1a: 10:88:95:8c:4c:2f:8f:51:26:33:8e:f9:cb:d8:3b: 04:d5:92:48:d3:a1:a5:34:82:2c:7a:de:b4:87:01: 86:2b:7b:a0:04:77:53:92:ff:e6:92:02:e7:4b:b6: 93:a0:38:f8:2d:fc:82:d2:07:eb:05:ad:61:d5:05: d5:a6:a4:43:ae:6c:d7:1d:e2:5d:cf:f7:b0:d6:64: 44:25:e8:79:7e:1c:83:16:f6:cc:bd:1e:d7:0f:f4: f4:cb:e6:36:07:ea:9c:fe:a5:90:48:04:c6:2d:da: e3:23:bd:5b:3b:a3:4c:cb:fe:e0:fb:14:7d:74:13: 9f:5b:1d:ff:bb:21:18:9f:05:a7:32:3a:69:46:ce: f2:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:89:1A:DF:49:D3:0B:AB:6D:E4:38:A7:A5:60:5C:C2:C5:99:27:3C X509v3 Authority Key Identifier: keyid:C8:39:24:45:15:4A:21:14:57:46:8D:C9:26:75:C6:B2:BC:9C:44:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/yDkkRRVKIRRXRo3JJnXGsrycRIs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yDkkRRVKIRRXRo3JJnXGsrycRIs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A7890/ADE13186DADF11EDB1F9D719C4F9AE02/EC8CA72CDAE311EDA0A6B03DC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.132.20.0/23 IPv6: 2400:f6a0::-2400:f6a0:8fff:ffff:ffff:ffff:ffff:ffff 2400:f6a0:a000::-2400:f6a0:ffff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 76:ba:1b:37:7f:29:9d:1a:61:3f:23:02:3c:b8:bb:04:a0:20: 30:10:07:20:ab:1d:30:58:f9:76:02:e5:ab:a9:8d:a9:9e:9f: b7:d8:20:6c:35:e2:03:14:40:54:26:d2:84:73:54:69:89:70: f9:86:2d:e4:6f:b1:87:0d:56:e8:44:5c:70:7f:27:91:3b:5a: 59:91:0b:de:e7:7f:32:ae:39:c9:0f:1b:d1:c2:11:90:00:59: bd:03:fe:3e:a9:ba:2b:77:d3:dc:88:13:16:e7:85:e5:cc:b9: fc:b5:d5:31:dd:91:68:16:57:19:5d:c7:44:b9:22:9e:4f:ec: 56:a9:6f:c7:3a:77:4d:df:56:73:59:5b:eb:66:ae:d7:ac:3e: c5:bc:17:7b:2c:a9:67:c1:7d:81:2e:e7:6a:a0:23:a7:a8:f0: c0:c3:79:67:09:92:ac:27:65:a6:00:52:e9:62:a7:ec:e1:51: a8:8c:c5:d4:f4:14:ae:62:24:5c:a6:2c:2b:f1:0b:6a:e2:0b: 41:cb:b3:8d:e7:02:9d:9a:81:97:d3:6e:75:36:fb:3f:9f:fd: 65:1f:e9:25:b0:f0:bf:7c:b0:26:dd:d6:d3:a6:7f:d5:20:05: e9:1d:d2:6a:ea:3f:8e:39:ee:52:78:bf:16:95:a8:f6:80:f3: f4:8e:97:96 -----BEGIN CERTIFICATE----- MIIFmzCCBIOgAwIBAgICAYgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTc4OTAxMTAvBgNVBAUTKEM4MzkyNDQ1MTU0QTIxMTQ1NzQ2OERDOTI2NzVDNkIy QkM5QzQ0OEIwHhcNMjUwNTAzMDMwOTUwWhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODE1ODhmZC1iZmY5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAynmNNo2sNcXFBORYl3EypKWrhp5UEuWYhRtJvpxLkUsgqHsCl/VLiBn7YLme K68IXPrgZ+g8PkbsjocYLXZULIvZRkoq8f6AUy0cSMaxm44VgzsppEXFLXWx2b/w kaDi8IzNIIOz0k5IASScLNQbrtup3zdmMRoQiJWMTC+PUSYzjvnL2DsE1ZJI06Gl NIIset60hwGGK3ugBHdTkv/mkgLnS7aToDj4LfyC0gfrBa1h1QXVpqRDrmzXHeJd z/ew1mREJeh5fhyDFvbMvR7XD/T0y+Y2B+qc/qWQSATGLdrjI71bO6NMy/7g+xR9 dBOfWx3/uyEYnwWnMjppRs7yuwIDAQABo4ICvzCCArswHQYDVR0OBBYEFN+JGt9J 0wurbeQ4p6VgXMLFmSc8MB8GA1UdIwQYMBaAFMg5JEUVSiEUV0aNySZ1xrK8nESL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNzg5MC9BREUxMzE4NkRB REYxMUVEQjFGOUQ3MTlDNEY5QUUwMi95RGtrUlJWS0lSUlhSbzNKSm5YR3NyeWNS SXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3lEa2tSUlZLSVJSWFJvM0pKblhHc3J5Y1JJcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTc4OTAvQURFMTMxODZEQURGMTFFREIxRjlENzE5QzRGOUFFMDIvRUM4Q0E3MkNE QUUzMTFFREEwQTZCMDNEQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSQYIKwYBBQUHAQcBAf8E OjA4MAwEAgABMAYDBAFnhBQwKAQCAAIwIjAPAwUFJAD2oAMGBCQA9qCAMA8DBgUk APagoAMFACQA9qAwDQYJKoZIhvcNAQELBQADggEBAHa6Gzd/KZ0aYT8jAjy4uwSg IDAQByCrHTBY+XYC5aupjamen7fYIGw14gMUQFQm0oRzVGmJcPmGLeRvsYcNVuhE XHB/J5E7WlmRC97nfzKuOckPG9HCEZAAWb0D/j6puit309yIExbnheXMufy11THd kWgWVxldx0S5Ip5P7Fapb8c6d03fVnNZW+tmrtesPsW8F3ssqWfBfYEu52qgI6eo 8MDDeWcJkqwnZaYAUulip+zhUaiMxdT0FK5iJFymLCvxC2riC0HLs43nAp2agZfT bnU2+z+f/WUf6SWw8L98sCbd1tOmf9UgBekd0mrqP4457lJ4vxaVqPaA8/SOl5Y= -----END CERTIFICATE-----Generated at Tue May 13 06:44:24 2025 by rpki-client