$ rpki-client -vvf rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa File: FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa (raw, json) Hash identifier: MoBNAkuLRzgHxyy+fW6QOq2yoTFvvvMiEPMzpFN2XIU= Subject key identifier: 68:04:F9:FD:14:1A:2E:A6:7A:5B:4E:10:2A:F9:29:26:55:9A:38:E7 Certificate issuer: /CN=A91D19ED/serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Certificate serial: 0670 Authority key identifier: 1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa Signing time: Wed 04 Jun 2025 23:59:38 +0000 ROA not before: Wed 04 Jun 2025 23:59:38 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133739 IP address blocks: 43.243.236.0/23 maxlen: 24 103.24.240.0/23 maxlen: 24 103.39.60.0/22 maxlen: 22 103.39.60.0/23 maxlen: 24 103.39.62.0/24 maxlen: 24 103.39.63.0/24 maxlen: 24 103.224.208.0/23 maxlen: 23 103.224.208.0/24 maxlen: 24 103.224.209.0/24 maxlen: 24 103.224.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1648 (0x670) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D19ED, serialNumber=1ED4A50449F86200A0C2668069A28324F9F6A93E Validity Not Before: Jun 4 23:59:38 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6840dde9-58b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:da:22:29:17:7f:aa:7e:47:0f:99:46:ad:a4: b0:70:35:e7:24:7f:46:a8:7f:af:0b:ec:d1:fa:7a: d7:05:21:cd:b9:f2:50:5a:68:23:45:be:08:27:c0: 1d:e2:68:9b:00:d8:24:6c:a4:e8:95:b0:ae:35:ad: 5c:91:93:72:aa:80:9b:0c:91:90:26:4d:35:30:61: 8d:23:79:a6:3d:6d:93:ec:ca:06:68:79:e2:6a:7f: fe:f6:6e:a0:e4:bc:0f:55:ea:99:51:41:cb:70:5f: 90:a0:1a:78:34:63:92:4d:ab:b3:7d:14:b5:78:e3: 78:df:da:5a:2f:f7:59:96:9a:21:27:c8:aa:be:75: e2:73:cd:f0:22:eb:be:5e:f2:ff:41:89:77:2f:b5: 03:e6:f2:18:45:6c:5e:ab:8a:ff:7f:b8:65:d0:fa: 04:d5:ae:ca:e1:1a:dd:1d:76:9a:79:14:a0:87:06: f5:fa:be:d5:10:e3:67:ab:eb:67:68:21:6f:5a:25: c8:55:b5:17:ec:8b:85:37:b9:b7:04:29:f0:2c:a4: 6b:17:50:8f:7d:96:76:83:b8:9a:5a:bb:ea:4c:a6: b0:3b:bf:2c:1b:0a:1a:2e:fa:ce:c2:09:58:12:88: c0:76:3e:6d:22:d2:ac:65:f7:b5:3f:f3:6e:ec:3a: c3:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:04:F9:FD:14:1A:2E:A6:7A:5B:4E:10:2A:F9:29:26:55:9A:38:E7 X509v3 Authority Key Identifier: keyid:1E:D4:A5:04:49:F8:62:00:A0:C2:66:80:69:A2:83:24:F9:F6:A9:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/HtSlBEn4YgCgwmaAaaKDJPn2qT4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/HtSlBEn4YgCgwmaAaaKDJPn2qT4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D19ED/54B97A268AB611EB832F0314C4F9AE02/FF7ABE2C3AE611F083D6AD7FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.243.236.0/23 103.24.240.0/23 103.39.60.0/22 103.224.208.0/23 103.224.211.0/24 Signature Algorithm: sha256WithRSAEncryption 1d:29:24:59:00:4c:58:f3:e0:c4:49:73:03:89:fb:cb:74:7b: 86:90:82:96:58:33:90:5a:d0:83:d5:0a:cd:5a:57:35:5f:db: c6:cc:3c:c6:92:b3:04:fa:de:58:cb:f2:9c:e0:0e:77:07:9e: 3f:d8:60:70:d2:6e:4e:8f:a8:1c:3e:22:4d:2d:6b:60:43:9e: 07:53:0e:17:c6:aa:0d:76:14:ce:61:cf:b0:f3:a3:d4:c6:82: ad:11:50:8a:fe:cc:fc:7b:0d:ef:3d:7c:69:d1:f8:16:d1:c0: d9:20:73:b8:a5:2e:b7:4a:29:f9:09:63:9f:40:5a:89:6c:da: fb:51:65:f9:25:fe:24:5f:ec:2e:ce:9f:61:a9:45:59:fb:9c: a0:fa:26:4e:8d:6e:0c:c1:57:10:9e:1c:b4:15:3c:95:87:34: c6:98:b2:14:cf:c5:1e:09:4e:3f:5e:ff:a6:59:bf:f3:f8:87: 57:cb:0b:8a:35:be:49:b2:e5:01:e3:67:b2:71:b4:21:54:19: 74:75:dc:3c:d6:b3:d3:cd:88:76:35:29:1b:0e:21:e1:04:bf: e7:fd:9b:2e:65:c3:f3:0c:22:fc:76:33:3d:ba:7b:ec:f9:a7: d1:dc:84:8a:2e:d9:79:0c:ba:9c:81:f6:30:48:29:4b:ee:d3: d5:88:6f:4f -----BEGIN CERTIFICATE----- MIIFiTCCBHGgAwIBAgICBnAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDE5RUQxMTAvBgNVBAUTKDFFRDRBNTA0NDlGODYyMDBBMEMyNjY4MDY5QTI4MzI0 RjlGNkE5M0UwHhcNMjUwNjA0MjM1OTM4WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODQwZGRlOS01OGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsNoiKRd/qn5HD5lGraSwcDXnJH9GqH+vC+zR+nrXBSHNufJQWmgjRb4IJ8Ad 4mibANgkbKTolbCuNa1ckZNyqoCbDJGQJk01MGGNI3mmPW2T7MoGaHnian/+9m6g 5LwPVeqZUUHLcF+QoBp4NGOSTauzfRS1eON439paL/dZlpohJ8iqvnXic83wIuu+ XvL/QYl3L7UD5vIYRWxeq4r/f7hl0PoE1a7K4RrdHXaaeRSghwb1+r7VEONnq+tn aCFvWiXIVbUX7IuFN7m3BCnwLKRrF1CPfZZ2g7iaWrvqTKawO78sGwoaLvrOwglY EojAdj5tItKsZfe1P/Nu7DrDZwIDAQABo4ICrTCCAqkwHQYDVR0OBBYEFGgE+f0U Gi6meltOECr5KSZVmjjnMB8GA1UdIwQYMBaAFB7UpQRJ+GIAoMJmgGmigyT59qk+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTlFRC81NEI5N0EyNjhB QjYxMUVCODMyRjAzMTRDNEY5QUUwMi9IdFNsQkVuNFlnQ2d3bWFBYWFLREpQbjJx VDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0h0U2xCRW40WWdDZ3dtYUFhYUtESlBuMnFUNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDE5RUQvNTRCOTdBMjY4QUI2MTFFQjgzMkYwMzE0QzRGOUFFMDIvRkY3QUJFMkMz QUU2MTFGMDgzRDZBRDdGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNwYIKwYBBQUHAQcBAf8E KDAmMCQEAgABMB4DBAEr8+wDBAFnGPADBAJnJzwDBAFn4NADBABn4NMwDQYJKoZI hvcNAQELBQADggEBAB0pJFkATFjz4MRJcwOJ+8t0e4aQgpZYM5Ba0IPVCs1aVzVf 28bMPMaSswT63ljL8pzgDncHnj/YYHDSbk6PqBw+Ik0ta2BDngdTDhfGqg12FM5h z7Dzo9TGgq0RUIr+zPx7De89fGnR+BbRwNkgc7ilLrdKKfkJY59AWols2vtRZfkl /iRf7C7On2GpRVn7nKD6Jk6NbgzBVxCeHLQVPJWHNMaYshTPxR4JTj9e/6ZZv/P4 h1fLC4o1vkmy5QHjZ7JxtCFUGXR13DzWs9PNiHY1KRsOIeEEv+f9my5lw/MMIvx2 Mz26e+z5p9HchIou2XkMupyB9jBIKUvu09WIb08= -----END CERTIFICATE-----Generated at Sat Jul 5 05:28:52 2025 by rpki-client