$ rpki-client -vvf rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/DE6E8CA8257F11F0823F9E46C4F9AE02.roa File: DE6E8CA8257F11F0823F9E46C4F9AE02.roa (raw, json) Hash identifier: jUyUfVKqSzdQ1Jiv0y+K/4ZOmbxn+iVK0WY87xliBD0= Subject key identifier: 0E:B1:9A:9C:3E:17:E6:E1:FF:B0:D4:2A:1D:EE:60:66:09:A9:04:9F Certificate issuer: /CN=A91C326F/serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Certificate serial: 06E1 Authority key identifier: 39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/DE6E8CA8257F11F0823F9E46C4F9AE02.roa Signing time: Wed 30 Apr 2025 04:59:41 +0000 ROA not before: Wed 30 Apr 2025 04:59:41 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 62468 IP address blocks: 103.68.192.0/22 maxlen: 24 121.54.190.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 21 May 2025 22:13:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1761 (0x6e1) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C326F, serialNumber=392F36E0A450053C3DC66D2E3894E10CA733DDA6 Validity Not Before: Apr 30 04:59:41 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=6811ae3d-852c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:54:f7:ed:30:76:25:e5:95:b7:81:9d:0b: 94:21:6d:9b:6f:68:18:61:f9:ac:88:47:5e:5b:3f: ee:1a:d5:7b:be:ea:19:b9:7c:98:21:68:49:6d:b1: d2:5a:df:f0:f5:6b:2f:b0:1d:12:33:35:77:a3:cb: fb:55:fb:46:86:56:fc:2f:3c:74:e0:16:b2:d7:27: 41:6e:92:76:0b:96:a5:09:cd:50:ef:86:f8:dc:75: 2b:20:5a:8d:db:cd:49:78:65:eb:0c:86:00:9a:06: 98:8b:bf:9b:f6:6a:1e:3c:ec:e5:5e:27:36:51:77: 2f:1e:34:42:c6:17:f8:2c:33:1e:83:b9:bd:be:06: dc:aa:11:6d:02:a4:c2:9c:77:b1:55:80:3e:5b:b5: 35:f3:c8:2a:0c:4b:e7:63:fe:0b:63:ac:88:0d:f6: d9:0b:86:2d:0e:f4:a8:4a:a2:19:4c:c2:fc:a8:01: 59:d2:d3:df:24:55:5c:53:da:f5:18:ed:21:5f:58: 0a:76:30:a2:3d:82:c6:7f:ea:ce:41:17:d4:cc:95: 88:4a:f3:42:31:fa:88:d3:bf:f5:35:1f:45:ca:de: 41:33:f7:45:cd:90:5c:72:92:3b:86:6b:2c:15:0e: ea:a9:a7:eb:56:32:19:07:67:f2:d7:1b:57:b8:48: e7:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B1:9A:9C:3E:17:E6:E1:FF:B0:D4:2A:1D:EE:60:66:09:A9:04:9F X509v3 Authority Key Identifier: keyid:39:2F:36:E0:A4:50:05:3C:3D:C6:6D:2E:38:94:E1:0C:A7:33:DD:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/OS824KRQBTw9xm0uOJThDKcz3aY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/OS824KRQBTw9xm0uOJThDKcz3aY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C326F/7866F5305FC711EB8A69202EC4F9AE02/DE6E8CA8257F11F0823F9E46C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.68.192.0/22 121.54.190.0/23 Signature Algorithm: sha256WithRSAEncryption 74:2a:3f:f1:38:4b:ba:43:ed:91:b6:90:38:fb:bf:f5:2a:b5: 44:be:1a:fc:1e:29:6a:54:28:d6:b0:d7:75:0a:d1:2a:d5:76: 6b:ad:ef:b8:9c:c1:68:8f:77:60:08:f6:70:ea:3a:bc:08:2c: 2b:1e:01:e6:7f:13:32:90:93:ed:68:14:7a:41:76:12:06:88: e7:83:f9:c6:2c:ed:e9:7a:36:34:40:f3:53:c1:64:d0:d0:65: a0:c1:ce:fd:01:57:df:cc:da:3c:69:30:6c:aa:99:a0:16:4f: 39:2a:d8:35:a7:ef:6a:9c:23:7a:c8:52:90:7e:f1:67:83:a7: 41:bb:bc:03:b7:f4:1d:bc:f6:9a:04:7e:24:67:fa:97:c4:e9: 3b:95:a3:ce:dd:0a:e4:d7:07:4d:ed:cc:6e:c9:4f:80:90:eb: 9e:1e:c3:f0:48:0e:b1:fb:29:ab:dd:99:ee:d8:b0:16:69:a7: f8:db:46:08:87:5e:7e:4d:b7:30:68:18:be:06:c9:62:e6:f0: c1:f7:e8:da:0a:86:4f:0d:10:60:bb:ed:0f:9a:a8:54:47:3e: 0f:40:6d:34:91:cc:16:48:31:e8:c4:ea:10:22:cf:07:ce:b1: b5:5d:72:ca:df:bf:5a:15:e0:d9:e1:11:11:8e:5f:00:03:31: d8:ac:e8:df -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICBuEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzMyNkYxMTAvBgNVBAUTKDM5MkYzNkUwQTQ1MDA1M0MzREM2NkQyRTM4OTRFMTBD QTczM0REQTYwHhcNMjUwNDMwMDQ1OTQxWhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODExYWUzZC04NTJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs6dU9+0wdiXllbeBnQuUIW2bb2gYYfmsiEdeWz/uGtV7vuoZuXyYIWhJbbHS Wt/w9WsvsB0SMzV3o8v7VftGhlb8Lzx04Bay1ydBbpJ2C5alCc1Q74b43HUrIFqN 281JeGXrDIYAmgaYi7+b9moePOzlXic2UXcvHjRCxhf4LDMeg7m9vgbcqhFtAqTC nHexVYA+W7U188gqDEvnY/4LY6yIDfbZC4YtDvSoSqIZTML8qAFZ0tPfJFVcU9r1 GO0hX1gKdjCiPYLGf+rOQRfUzJWISvNCMfqI07/1NR9Fyt5BM/dFzZBccpI7hmss FQ7qqafrVjIZB2fy1xtXuEjnxQIDAQABo4ICmzCCApcwHQYDVR0OBBYEFA6xmpw+ F+bh/7DUKh3uYGYJqQSfMB8GA1UdIwQYMBaAFDkvNuCkUAU8PcZtLjiU4QynM92m MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMzI2Ri83ODY2RjUzMDVG QzcxMUVCOEE2OTIwMkVDNEY5QUUwMi9PUzgyNEtSUUJUdzl4bTB1T0pUaERLY3oz YVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL09TODI0S1JRQlR3OXhtMHVPSlRoREtjejNhWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzMyNkYvNzg2NkY1MzA1RkM3MTFFQjhBNjkyMDJFQzRGOUFFMDIvREU2RThDQTgy NTdGMTFGMDgyM0Y5RTQ2QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnRMADBAF5Nr4wDQYJKoZIhvcNAQELBQADggEBAHQqP/E4 S7pD7ZG2kDj7v/UqtUS+GvweKWpUKNaw13UK0SrVdmut77icwWiPd2AI9nDqOrwI LCseAeZ/EzKQk+1oFHpBdhIGiOeD+cYs7el6NjRA81PBZNDQZaDBzv0BV9/M2jxp MGyqmaAWTzkq2DWn72qcI3rIUpB+8WeDp0G7vAO39B289poEfiRn+pfE6TuVo87d CuTXB03tzG7JT4CQ654ew/BIDrH7Kavdme7YsBZpp/jbRgiHXn5NtzBoGL4GyWLm 8MH36NoKhk8NEGC77Q+aqFRHPg9AbTSRzBZIMejE6hAizwfOsbVdcsrfv1oV4Nnh ERGOXwADMdis6N8= -----END CERTIFICATE-----Generated at Thu May 15 23:38:05 2025 by rpki-client