$ rpki-client -vvf rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa File: 589FBEDC860311EBAFE18309C4F9AE02.roa (raw, json) Hash identifier: QPlmMaSOgFDznMyc1xMqSWCG5G0RLk70r7GmVWThnas= Subject key identifier: 3E:CD:CE:AB:5A:10:13:AD:19:E5:99:24:1B:6B:E9:22:4A:D6:EE:B7 Certificate issuer: /CN=A91B334D/serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Certificate serial: 0670 Authority key identifier: 95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa Signing time: Fri 04 Jul 2025 23:04:11 +0000 ROA not before: Fri 04 Jul 2025 23:04:11 +0000 ROA not after: Mon 31 Aug 2026 00:00:00 +0000 asID: 55555 IP address blocks: 43.245.28.0/22 maxlen: 24 103.246.96.0/22 maxlen: 24 180.200.244.0/22 maxlen: 24 2400:b100::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B334D, serialNumber=9516918095760044E74FAAA5497D06730ADA5F32 Validity Not Before: Jul 4 23:04:11 2025 GMT Not After : Aug 31 00:00:00 2026 GMT Subject: CN=68685deb-79ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3d:81:b0:e8:d8:7d:6e:68:74:a8:56:47:87: 79:40:e3:a8:ad:03:29:08:98:d5:55:92:90:14:44: cb:e1:6b:8a:ad:98:c3:fe:16:97:83:c8:d1:78:a0: 7d:22:44:81:ff:9d:c5:70:4f:66:cd:84:a8:df:53: c2:39:bd:dc:ba:b7:0c:94:46:99:39:0c:6c:4d:bb: ae:65:07:b2:21:47:0f:20:62:52:bc:44:f0:e3:2e: 27:fc:5b:3f:75:9f:6b:ad:28:b0:7c:80:90:99:e7: 3d:53:a6:87:26:02:90:69:84:bc:14:4e:b9:6e:83: 2e:da:e8:04:e3:ec:58:89:05:d3:d1:bc:65:85:32: 11:bd:a0:06:21:05:5f:6b:7d:b3:e9:7d:af:a9:6e: cc:1d:33:f2:a9:e6:0c:3c:15:7a:90:04:1b:15:78: 47:9b:0b:b2:d8:63:bc:12:a6:f8:ed:35:34:91:15: ae:ca:6d:47:5a:4e:c9:a7:8c:56:0a:1d:5e:48:b6: c6:56:f0:87:64:44:75:2c:e5:91:f5:5d:cc:7f:7d: 53:3b:3a:ce:90:c9:bc:fc:41:3a:3b:b9:7b:b3:1c: 81:cf:1b:fa:c1:13:73:00:2c:3e:6d:92:4e:ef:61: 61:7f:84:48:6b:4e:2a:3f:c0:f0:32:0e:3e:21:4a: df:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CD:CE:AB:5A:10:13:AD:19:E5:99:24:1B:6B:E9:22:4A:D6:EE:B7 X509v3 Authority Key Identifier: keyid:95:16:91:80:95:76:00:44:E7:4F:AA:A5:49:7D:06:73:0A:DA:5F:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/lRaRgJV2AETnT6qlSX0GcwraXzI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lRaRgJV2AETnT6qlSX0GcwraXzI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B334D/27E861D885F711EB92081711C4F9AE02/589FBEDC860311EBAFE18309C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.28.0/22 103.246.96.0/22 180.200.244.0/22 IPv6: 2400:b100::/32 Signature Algorithm: sha256WithRSAEncryption 1e:ab:a5:ce:fb:dd:47:fa:e8:8c:c6:10:09:2c:f4:71:a6:da: bc:5a:39:24:04:73:d4:76:03:77:6b:05:7b:a1:73:dd:48:23: f7:ad:2f:c4:a3:59:e7:02:63:b0:4c:3f:63:85:79:05:6b:c2: 23:e2:57:4e:7c:d5:d9:96:aa:d4:1d:bb:7e:90:24:1c:46:bb: a4:4f:92:bc:9e:c3:e9:e9:a5:6f:37:4c:05:a0:7f:06:ca:b6: c7:39:f6:11:05:80:80:92:c6:73:1e:33:9f:73:44:a5:25:85: e1:e1:e3:0f:e8:78:d4:9d:d2:2e:92:86:cd:c0:e8:11:d2:37: 38:c5:46:8f:f4:ea:29:89:43:04:b6:db:bf:75:72:ba:a4:30: 84:8e:ef:c7:75:b2:11:d5:e3:70:00:0d:16:cc:3c:8d:80:ab: 96:d2:7f:63:1c:d7:cd:96:79:4b:ef:7a:17:d2:54:f5:7e:37: 32:d3:ff:4b:4f:29:ae:1b:2a:c1:80:26:27:f7:62:2f:c2:8a: 28:53:f7:e9:1f:a0:20:e0:16:5c:b1:3c:b0:b7:16:49:32:96: 94:a1:e3:a3:26:46:88:13:69:8d:df:2b:b7:59:58:d6:4f:42: 43:1e:a9:5d:e2:e0:a8:d5:59:1c:33:12:c3:04:87:51:82:6d: 29:dc:7f:93 -----BEGIN CERTIFICATE----- MIIFjDCCBHSgAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjMzNEQxMTAvBgNVBAUTKDk1MTY5MTgwOTU3NjAwNDRFNzRGQUFBNTQ5N0QwNjcz MEFEQTVGMzIwHhcNMjUwNzA0MjMwNDExWhcNMjYwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY4NWRlYi03OWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwj2BsOjYfW5odKhWR4d5QOOorQMpCJjVVZKQFETL4WuKrZjD/haXg8jReKB9 IkSB/53FcE9mzYSo31PCOb3curcMlEaZOQxsTbuuZQeyIUcPIGJSvETw4y4n/Fs/ dZ9rrSiwfICQmec9U6aHJgKQaYS8FE65boMu2ugE4+xYiQXT0bxlhTIRvaAGIQVf a32z6X2vqW7MHTPyqeYMPBV6kAQbFXhHmwuy2GO8Eqb47TU0kRWuym1HWk7Jp4xW Ch1eSLbGVvCHZER1LOWR9V3Mf31TOzrOkMm8/EE6O7l7sxyBzxv6wRNzACw+bZJO 72Fhf4RIa04qP8DwMg4+IUrfoQIDAQABo4ICsDCCAqwwHQYDVR0OBBYEFD7Nzqta EBOtGeWZJBtr6SJK1u63MB8GA1UdIwQYMBaAFJUWkYCVdgBE50+qpUl9BnMK2l8y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzM0RC8yN0U4NjFEODg1 RjcxMUVCOTIwODE3MTFDNEY5QUUwMi9sUmFSZ0pWMkFFVG5UNnFsU1gwR2N3cmFY ekkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2xSYVJnSlYyQUVUblQ2cWxTWDBHY3dyYVh6SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjMzNEQvMjdFODYxRDg4NUY3MTFFQjkyMDgxNzExQzRGOUFFMDIvNTg5RkJFREM4 NjAzMTFFQkFGRTE4MzA5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOgYIKwYBBQUHAQcBAf8E KzApMBgEAgABMBIDBAIr9RwDBAJn9mADBAK0yPQwDQQCAAIwBwMFACQAsQAwDQYJ KoZIhvcNAQELBQADggEBAB6rpc773Uf66IzGEAks9HGm2rxaOSQEc9R2A3drBXuh c91II/etL8SjWecCY7BMP2OFeQVrwiPiV0581dmWqtQdu36QJBxGu6RPkryew+np pW83TAWgfwbKtsc59hEFgICSxnMeM59zRKUlheHh4w/oeNSd0i6Shs3A6BHSNzjF Ro/06imJQwS22791crqkMISO78d1shHV43AADRbMPI2Aq5bSf2Mc182WeUvvehfS VPV+NzLT/0tPKa4bKsGAJif3Yi/CiihT9+kfoCDgFlyxPLC3FkkylpSh46MmRogT aY3fK7dZWNZPQkMeqV3i4KjVWRwzEsMEh1GCbSncf5M= -----END CERTIFICATE-----Generated at Sun Jul 6 00:10:17 2025 by rpki-client