$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/ED388A1840BB11E9A6718844C4F9AE02.roa File: ED388A1840BB11E9A6718844C4F9AE02.roa (raw, json) Hash identifier: gcGbaS+C10OxA3/sWZJEHnaLaEauoh+9kGT7bNc0D6Q= Subject key identifier: 3E:8D:FC:F8:6A:B5:CD:53:DE:87:B7:CC:45:4B:D3:65:03:75:23:1F Certificate issuer: /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Certificate serial: 1282 Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/ED388A1840BB11E9A6718844C4F9AE02.roa Signing time: Wed 14 May 2025 17:38:55 +0000 ROA not before: Wed 14 May 2025 17:38:55 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 134451 IP address blocks: 103.60.9.0/24 maxlen: 24 2406:f400:120::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:21:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4738 (0x1282) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859 Validity Not Before: May 14 17:38:55 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=6824d52f-cbf0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:8a:d4:9d:c8:6c:2a:1b:dd:c5:79:de:82:9d: 66:dc:a0:8f:0b:9e:0e:eb:25:8c:97:7b:9c:ea:5d: 95:b9:26:e4:52:b0:03:6b:1f:c4:40:d3:d8:ac:00: ed:c7:23:42:62:3b:96:b9:ce:68:17:d2:36:3a:fb: a5:e9:64:dc:1e:b9:5e:8a:2f:f8:01:74:bc:34:ad: 48:e2:16:ec:26:a7:22:5a:e0:41:aa:aa:d2:e3:14: a3:8a:ca:7d:ba:f2:cb:f6:4b:b0:1b:f1:f9:f3:3b: 16:31:c6:fc:91:7e:7f:a5:38:27:93:87:d7:91:e7: c1:ec:b5:41:cc:57:5a:36:d5:b3:b7:49:b0:5e:d2: 3d:fb:5e:09:25:e5:67:5b:5b:d5:b4:da:4d:ff:b1: 14:dc:f5:e5:eb:fb:95:76:62:9e:03:99:09:9e:af: 60:4f:82:e1:3c:a3:2d:0a:fe:ba:56:63:c2:79:17: fd:4f:aa:2d:7f:1a:5c:c5:25:13:2b:b6:7d:3d:6e: 92:05:6a:00:e6:e3:d3:42:ed:64:1a:b3:42:07:f7: 43:d0:cf:15:6e:9b:6e:e7:fd:f2:95:ee:f3:a6:e8: 10:7d:df:f9:0d:fc:f4:f4:18:d9:47:42:f3:74:4d: 47:df:81:46:78:69:3e:e8:d9:59:74:27:ca:67:cf: f6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:8D:FC:F8:6A:B5:CD:53:DE:87:B7:CC:45:4B:D3:65:03:75:23:1F X509v3 Authority Key Identifier: keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/ED388A1840BB11E9A6718844C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.9.0/24 IPv6: 2406:f400:120::/44 Signature Algorithm: sha256WithRSAEncryption 5e:54:90:47:90:f8:48:e4:a6:aa:fe:02:f9:e1:8f:8e:7c:23: 71:21:73:71:83:b8:f7:a7:b1:ec:18:43:4e:a4:3a:ea:12:d9: 5e:d3:aa:ff:f3:f0:b7:5c:cc:40:fd:a3:e9:bc:81:ed:e7:74: d6:fb:bf:0c:58:b4:53:7e:4e:50:39:7a:aa:7d:9a:b1:91:e8: fe:7f:e7:c9:82:c7:96:9a:14:88:03:ab:c0:d5:dd:60:8b:84: a0:86:40:c6:6a:85:94:80:c2:4c:1e:29:71:ab:fe:75:8e:55: 61:44:00:9b:ad:a8:0a:13:a8:cc:03:57:21:1f:da:38:a6:76: a2:78:ee:0b:37:3c:42:44:ad:30:b7:50:c7:ff:cc:7e:de:da: ed:46:86:03:91:bd:46:c0:ed:33:fe:b6:b7:c5:a6:b6:67:84: b7:65:06:df:2a:d5:78:1d:12:0a:74:59:b7:21:95:34:7f:d8: 87:b2:d4:39:92:74:3b:cd:82:24:64:3d:06:ea:b7:3b:9e:c8: 49:a8:d2:10:cc:56:44:7b:5e:2f:3d:3d:82:d7:93:b8:49:db: 75:82:23:a8:c9:40:33:a5:83:61:95:18:a7:e7:05:26:33:21: 8a:7e:98:5f:52:cc:a5:29:95:43:eb:af:e7:b0:81:3c:b8:50: 54:a5:f6:16 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICEoIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkZFNkExMTAvBgNVBAUTKEVGNjJGMTU1QzE5NzFENTA0OTQxRjU3MUVFREZBQzBB RkNDNTI4NTkwHhcNMjUwNTE0MTczODU1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI0ZDUyZi1jYmYwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqYrUnchsKhvdxXnegp1m3KCPC54O6yWMl3uc6l2VuSbkUrADax/EQNPYrADt xyNCYjuWuc5oF9I2Ovul6WTcHrleii/4AXS8NK1I4hbsJqciWuBBqqrS4xSjisp9 uvLL9kuwG/H58zsWMcb8kX5/pTgnk4fXkefB7LVBzFdaNtWzt0mwXtI9+14JJeVn W1vVtNpN/7EU3PXl6/uVdmKeA5kJnq9gT4LhPKMtCv66VmPCeRf9T6otfxpcxSUT K7Z9PW6SBWoA5uPTQu1kGrNCB/dD0M8Vbptu5/3yle7zpugQfd/5Dfz09BjZR0Lz dE1H34FGeGk+6NlZdCfKZ8/2OwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFD6N/Phq tc1T3oe3zEVL02UDdSMfMB8GA1UdIwQYMBaAFO9i8VXBlx1QSUH1ce7frAr8xShZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRkU2QS8xRDY0MzI4RUQz ODcxMUU4QkQ3MDc1NUNDNEY5QUUwMi83Mkx4VmNHWEhWQkpRZlZ4N3Qtc0N2ekZL RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzcyTHhWY0dYSFZCSlFmVng3dC1zQ3Z6RktGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkZFNkEvMUQ2NDMyOEVEMzg3MTFFOEJENzA3NTVDQzRGOUFFMDIvRUQzODhBMTg0 MEJCMTFFOUE2NzE4ODQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnPAkwDwQCAAIwCQMHBCQG9AABIDANBgkqhkiG9w0BAQsF AAOCAQEAXlSQR5D4SOSmqv4C+eGPjnwjcSFzcYO496ex7BhDTqQ66hLZXtOq//Pw t1zMQP2j6byB7ed01vu/DFi0U35OUDl6qn2asZHo/n/nyYLHlpoUiAOrwNXdYIuE oIZAxmqFlIDCTB4pcav+dY5VYUQAm62oChOozANXIR/aOKZ2onjuCzc8QkStMLdQ x//Mft7a7UaGA5G9RsDtM/62t8WmtmeEt2UG3yrVeB0SCnRZtyGVNH/Yh7LUOZJ0 O82CJGQ9Buq3O57ISajSEMxWRHteLz09gteTuEnbdYIjqMlAM6WDYZUYp+cFJjMh in6YX1LMpSmVQ+uv57CBPLhQVKX2Fg== -----END CERTIFICATE-----Generated at Sat May 17 01:27:48 2025 by rpki-client