$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/710575A2635611ED90FD8A69C4F9AE02.roa File: 710575A2635611ED90FD8A69C4F9AE02.roa (raw, json) Hash identifier: Ojjbd1Ng9etxINrkJllS0XvsVkU95FVK8QTd3UlRsHQ= Subject key identifier: D8:D8:52:A5:5D:91:5F:C8:9B:82:F1:15:04:B5:98:4F:AE:67:73:F1 Certificate issuer: /CN=A91BF026/serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445 Certificate serial: 0884 Authority key identifier: 8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/710575A2635611ED90FD8A69C4F9AE02.roa Signing time: Wed 02 Jul 2025 16:55:38 +0000 ROA not before: Wed 02 Jul 2025 16:55:38 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 134116 IP address blocks: 45.114.88.0/22 maxlen: 22 45.114.88.0/23 maxlen: 23 45.114.88.0/24 maxlen: 24 45.114.89.0/24 maxlen: 24 45.114.90.0/23 maxlen: 23 45.114.90.0/24 maxlen: 24 45.114.91.0/24 maxlen: 24 103.54.40.0/22 maxlen: 22 103.54.40.0/23 maxlen: 23 103.54.40.0/24 maxlen: 24 103.54.41.0/24 maxlen: 24 103.54.42.0/23 maxlen: 23 103.54.42.0/24 maxlen: 24 103.54.43.0/24 maxlen: 24 2402:3280::/32 maxlen: 32 2402:3280::/34 maxlen: 40 2402:3280::/128 maxlen: 128 2402:3280:4000::/34 maxlen: 40 2402:3280:8000::/34 maxlen: 40 2402:3280:c000::/34 maxlen: 40 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2180 (0x884) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BF026, serialNumber=8AC79EB2EB7F6B57ADDE1CBA403C6E58236D3445 Validity Not Before: Jul 2 16:55:38 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=6865648a-b732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:4c:7b:e9:50:15:69:0a:9a:05:75:72:df: 93:45:54:26:1b:b3:4d:74:a0:70:92:7c:bb:8f:33: 7d:71:1e:e0:5f:ab:45:f2:97:81:3e:f4:61:f8:25: b3:6c:73:60:01:01:18:d9:f7:40:97:c0:d7:b0:9c: 8f:6b:ab:9d:b1:e3:93:35:74:f1:e2:f7:d0:a6:0d: ee:fe:fe:f3:ad:41:e5:c3:92:b3:95:63:ca:91:34: 98:62:39:a9:40:1f:15:f8:82:2a:02:04:ef:18:bb: 5d:32:c4:f1:02:60:4b:b1:47:da:0a:ea:dc:c8:a3: 49:eb:f1:2e:56:38:94:c9:c8:f7:39:e7:b4:e2:cc: d2:cd:b9:7f:c4:f5:49:04:82:8f:d9:6a:d2:79:56: b5:a5:31:2f:fe:5c:79:ec:89:78:40:d2:61:1b:56: f4:42:50:b4:22:73:83:e0:9e:3f:47:0f:ab:ca:cd: 46:bb:23:cc:46:9a:73:b4:36:17:09:d4:48:86:c0: 52:74:42:6c:1e:c2:59:06:c9:ea:f5:b8:f1:c4:de: 41:d6:d1:93:58:9c:b5:48:ad:87:20:fe:45:14:5b: 66:28:14:b7:45:5b:47:ad:e7:bb:d3:f4:74:51:f5: 0d:48:ff:5b:89:97:0d:f7:62:8c:f8:2d:5b:cf:fa: 07:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D8:52:A5:5D:91:5F:C8:9B:82:F1:15:04:B5:98:4F:AE:67:73:F1 X509v3 Authority Key Identifier: keyid:8A:C7:9E:B2:EB:7F:6B:57:AD:DE:1C:BA:40:3C:6E:58:23:6D:34:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/iseesut_a1et3hy6QDxuWCNtNEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iseesut_a1et3hy6QDxuWCNtNEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF026/0328A85CDDE011E7B2810757C4F9AE02/710575A2635611ED90FD8A69C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 45.114.88.0/22 103.54.40.0/22 IPv6: 2402:3280::/32 Signature Algorithm: sha256WithRSAEncryption 11:f2:a1:69:22:79:41:a4:8b:f7:8b:bd:96:54:01:c1:1d:dc: 67:6a:f3:ea:9e:9a:eb:c5:d0:38:8b:ff:ff:24:5d:36:56:37: f1:69:1d:69:cb:9e:80:da:83:31:5b:34:dd:ba:5d:9e:32:97: 4e:08:65:75:17:20:74:b4:7a:95:59:96:ae:2d:cd:7a:25:eb: a3:ad:8e:08:5e:4c:d0:5b:d9:5b:a8:d4:3b:6f:ef:aa:f8:3c: 54:39:29:77:25:7d:7e:e8:ae:41:07:67:fe:fa:ea:0a:75:b8: 5e:2b:1a:08:f4:52:5c:68:d2:2c:ec:2b:74:ba:fb:9f:99:db: 6a:36:92:f6:d7:b2:01:57:11:c2:8f:6a:e1:b5:e7:90:8c:19: 81:72:a3:c8:5c:6b:9a:ce:6f:71:90:3f:1f:e0:da:6a:c5:52: 5c:77:3a:4f:c4:c5:02:35:a1:45:f4:35:d9:55:9a:3e:74:c3: b6:52:98:36:7b:28:3d:8c:80:8a:56:95:c7:08:b9:90:9e:b3: 6c:93:a0:af:16:90:b7:d0:4a:5a:76:80:d4:ef:75:50:59:bd: 17:e7:c8:e8:0c:5e:3b:f8:49:7b:99:4f:f6:bf:06:c2:24:6d: 4e:48:5d:4e:be:b2:df:3f:9b:bb:de:c3:3f:22:b9:f0:16:e6: 6e:7d:49:0a -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICCIQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkYwMjYxMTAvBgNVBAUTKDhBQzc5RUIyRUI3RjZCNTdBRERFMUNCQTQwM0M2RTU4 MjM2RDM0NDUwHhcNMjUwNzAyMTY1NTM4WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1NjQ4YS1iNzMyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv1tMe+lQFWkKmgV1ct+TRVQmG7NNdKBwkny7jzN9cR7gX6tF8peBPvRh+CWz bHNgAQEY2fdAl8DXsJyPa6udseOTNXTx4vfQpg3u/v7zrUHlw5KzlWPKkTSYYjmp QB8V+IIqAgTvGLtdMsTxAmBLsUfaCurcyKNJ6/EuVjiUycj3Oee04szSzbl/xPVJ BIKP2WrSeVa1pTEv/lx57Il4QNJhG1b0QlC0InOD4J4/Rw+rys1GuyPMRppztDYX CdRIhsBSdEJsHsJZBsnq9bjxxN5B1tGTWJy1SK2HIP5FFFtmKBS3RVtHree70/R0 UfUNSP9biZcN92KM+C1bz/oH6wIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFNjYUqVd kV/Im4LxFQS1mE+uZ3PxMB8GA1UdIwQYMBaAFIrHnrLrf2tXrd4cukA8blgjbTRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRjAyNi8wMzI4QTg1Q0RE RTAxMUU3QjI4MTA3NTdDNEY5QUUwMi9pc2Vlc3V0X2ExZXQzaHk2UUR4dVdDTnRO RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2lzZWVzdXRfYTFldDNoeTZRRHh1V0NOdE5FVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkYwMjYvMDMyOEE4NUNEREUwMTFFN0IyODEwNzU3QzRGOUFFMDIvNzEwNTc1QTI2 MzU2MTFFRDkwRkQ4QTY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAItclgDBAJnNigwDQQCAAIwBwMFACQCMoAwDQYJKoZIhvcN AQELBQADggEBABHyoWkieUGki/eLvZZUAcEd3Gdq8+qemuvF0DiL//8kXTZWN/Fp HWnLnoDagzFbNN26XZ4yl04IZXUXIHS0epVZlq4tzXol66OtjgheTNBb2Vuo1Dtv 76r4PFQ5KXclfX7orkEHZ/766gp1uF4rGgj0Ulxo0izsK3S6+5+Z22o2kvbXsgFX EcKPauG155CMGYFyo8hca5rOb3GQPx/g2mrFUlx3Ok/ExQI1oUX0NdlVmj50w7ZS mDZ7KD2MgIpWlccIuZCes2yToK8WkLfQSlp2gNTvdVBZvRfnyOgMXjv4SXuZT/a/ BsIkbU5IXU6+st8/m7vewz8iufAW5m59SQo= -----END CERTIFICATE-----Generated at Sat Jul 5 05:38:44 2025 by rpki-client