$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/12561046368911EEA0CB766BC4F9AE02.roa File: 12561046368911EEA0CB766BC4F9AE02.roa (raw, json) Hash identifier: ZsNiLxfxjjXIOR9efOK6g19RpsthQOBE4XYCmM1hnq8= Subject key identifier: EE:FE:CB:D1:F3:5B:32:1F:96:B8:4F:C8:23:AD:83:C2:75:8C:52:A5 Certificate issuer: /CN=A91BBA80/serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Certificate serial: 0CA0 Authority key identifier: 06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/12561046368911EEA0CB766BC4F9AE02.roa Signing time: Wed 30 Apr 2025 18:28:16 +0000 ROA not before: Wed 30 Apr 2025 18:28:16 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 50889 IP address blocks: 103.6.211.0/24 maxlen: 24 121.200.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 18:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3232 (0xca0) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BBA80, serialNumber=060F7E77C00ACBE0868DC0B8FCA23D4A5F07D77A Validity Not Before: Apr 30 18:28:16 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68126bc0-fc0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f4:04:aa:05:e3:3c:5f:df:e9:6f:2e:e2:91: 6b:4e:63:96:bb:ee:e2:14:8b:55:23:0e:46:78:92: 7b:82:82:a2:e9:fc:a6:33:4c:e6:f6:15:14:99:5b: 3d:04:d7:c6:1a:1e:d7:82:35:de:d7:1e:e5:ba:95: c7:88:0e:8c:36:8e:30:65:25:f3:ba:9f:88:f4:ff: 9e:cb:2e:86:98:82:6d:e2:41:2b:98:f7:b3:24:97: 6b:d9:a3:cb:03:08:73:aa:f7:00:0d:82:df:52:84: c2:be:51:d6:dd:0f:b6:02:56:61:99:de:07:5c:12: b8:dc:90:bf:fd:be:af:a1:5a:43:0a:35:f6:78:10: 57:d1:88:b1:2a:54:a5:c7:6a:4e:9a:63:73:68:04: 4e:8d:01:e8:ed:fb:83:f6:1a:d4:7d:ca:51:4b:1c: 62:e1:95:08:fd:b4:4e:93:d3:44:ef:db:14:f0:15: c4:4a:f2:90:2a:de:36:f1:07:c0:ba:3e:88:b3:51: 35:0f:e0:b4:22:19:c1:d2:57:09:3e:1e:01:65:d1: 4d:47:a4:9f:d5:ce:c4:c1:9a:2e:76:05:5f:b1:37: 28:94:27:97:8d:64:c4:1e:b8:67:d8:6d:d2:88:1b: 64:6a:42:01:ad:8b:99:36:da:5c:6c:6e:33:08:5c: 95:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:FE:CB:D1:F3:5B:32:1F:96:B8:4F:C8:23:AD:83:C2:75:8C:52:A5 X509v3 Authority Key Identifier: keyid:06:0F:7E:77:C0:0A:CB:E0:86:8D:C0:B8:FC:A2:3D:4A:5F:07:D7:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bg9-d8AKy-CGjcC4_KI9Sl8H13o.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBA80/B98E81D605B911EA8208996EC4F9AE02/12561046368911EEA0CB766BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.6.211.0/24 121.200.45.0/24 Signature Algorithm: sha256WithRSAEncryption 40:d4:9b:ad:f0:19:95:ad:66:e3:25:b9:2c:32:c6:b5:54:0d: d6:ab:46:85:64:ee:75:dd:c6:8d:23:cf:48:98:9f:ac:df:32: 26:27:a6:04:4a:e6:93:a9:6a:3e:12:34:3d:e2:10:d5:a0:9a: 0a:0e:61:f1:be:d1:39:6e:30:30:f1:d1:b3:8a:7e:3e:b1:81: 41:8e:17:af:23:d2:8d:67:30:5d:6d:22:8d:51:24:18:e7:69: ba:4f:dc:05:86:d6:ba:03:33:9f:bd:4a:d3:e6:e1:7c:13:b4: 5d:a9:7d:f8:79:36:12:ed:f4:c0:9e:c4:9f:bd:4a:48:2f:7e: 94:f0:1c:dc:fb:55:2f:1d:d2:4e:44:bb:dc:16:e1:d9:c2:8c: 84:a8:2d:10:a4:98:df:94:06:cf:e0:3c:35:8e:51:af:47:de: a0:0d:75:b1:6e:f3:14:98:b6:29:85:de:4f:dd:24:27:ad:2e: f3:5d:7f:b4:35:07:b3:07:c3:4f:f5:40:61:b7:18:d3:5d:03: c2:97:95:2d:cb:67:3b:f6:4b:26:9f:28:fb:98:70:96:19:4e: 99:39:a9:fd:e2:18:66:e7:b8:65:c1:7e:4d:51:53:2f:39:e3: f9:00:55:c8:8a:2a:be:82:d4:bf:70:1a:bb:61:81:0d:89:d9: 92:f1:ae:63 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICDKAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkJBODAxMTAvBgNVBAUTKDA2MEY3RTc3QzAwQUNCRTA4NjhEQzBCOEZDQTIzRDRB NUYwN0Q3N0EwHhcNMjUwNDMwMTgyODE2WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNmJjMC1mYzBjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA0vQEqgXjPF/f6W8u4pFrTmOWu+7iFItVIw5GeJJ7goKi6fymM0zm9hUUmVs9 BNfGGh7XgjXe1x7lupXHiA6MNo4wZSXzup+I9P+eyy6GmIJt4kErmPezJJdr2aPL AwhzqvcADYLfUoTCvlHW3Q+2AlZhmd4HXBK43JC//b6voVpDCjX2eBBX0YixKlSl x2pOmmNzaAROjQHo7fuD9hrUfcpRSxxi4ZUI/bROk9NE79sU8BXESvKQKt428QfA uj6Is1E1D+C0IhnB0lcJPh4BZdFNR6Sf1c7EwZoudgVfsTcolCeXjWTEHrhn2G3S iBtkakIBrYuZNtpcbG4zCFyVUQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFO7+y9Hz WzIflrhPyCOtg8J1jFKlMB8GA1UdIwQYMBaAFAYPfnfACsvgho3AuPyiPUpfB9d6 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCQkE4MC9COThFODFENjA1 QjkxMUVBODIwODk5NkVDNEY5QUUwMi9CZzktZDhBS3ktQ0dqY0M0X0tJOVNsOEgx M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0JnOS1kOEFLeS1DR2pjQzRfS0k5U2w4SDEzby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkJBODAvQjk4RTgxRDYwNUI5MTFFQTgyMDg5OTZFQzRGOUFFMDIvMTI1NjEwNDYz Njg5MTFFRUEwQ0I3NjZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBABnBtMDBAB5yC0wDQYJKoZIhvcNAQELBQADggEBAEDUm63w GZWtZuMluSwyxrVUDdarRoVk7nXdxo0jz0iYn6zfMiYnpgRK5pOpaj4SND3iENWg mgoOYfG+0TluMDDx0bOKfj6xgUGOF68j0o1nMF1tIo1RJBjnabpP3AWG1roDM5+9 StPm4XwTtF2pffh5NhLt9MCexJ+9SkgvfpTwHNz7VS8d0k5Eu9wW4dnCjISoLRCk mN+UBs/gPDWOUa9H3qANdbFu8xSYtimF3k/dJCetLvNdf7Q1B7MHw0/1QGG3GNNd A8KXlS3LZzv2SyafKPuYcJYZTpk5qf3iGGbnuGXBfk1RUy854/kAVciKKr6C1L9w GrthgQ2J2ZLxrmM= -----END CERTIFICATE-----Generated at Tue May 13 15:23:10 2025 by rpki-client