$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/2B07FA82EADC11EBBE430B5EC4F9AE02.roa File: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (raw, json) Hash identifier: jxQWNR1P8sYKVza0W/49c3uTybsGhMQmKrsxrcNc/xk= Subject key identifier: B9:0E:7A:89:C0:D8:97:43:9E:1B:FA:95:D9:2D:6C:54:D9:DB:14:7F Certificate issuer: /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Certificate serial: 0553 Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/2B07FA82EADC11EBBE430B5EC4F9AE02.roa Signing time: Mon 12 May 2025 23:54:05 +0000 ROA not before: Mon 12 May 2025 23:54:05 +0000 ROA not after: Thu 30 Jul 2026 00:00:00 +0000 asID: 133613 IP address blocks: 43.247.24.0/22 maxlen: 22 43.247.24.0/24 maxlen: 24 43.247.25.0/24 maxlen: 24 43.247.26.0/24 maxlen: 24 43.247.27.0/24 maxlen: 24 103.237.124.0/24 maxlen: 24 103.237.125.0/24 maxlen: 24 103.237.126.0/24 maxlen: 24 103.237.127.0/24 maxlen: 24 2401:3280:1000::/36 maxlen: 36 2401:3280:2000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 23:54:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1363 (0x553) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163 Validity Not Before: May 12 23:54:05 2025 GMT Not After : Jul 30 00:00:00 2026 GMT Subject: CN=68228a1d-9fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:c4:45:39:b9:75:27:80:55:df:99:94:45:25: a7:a3:81:3e:b1:bb:14:88:59:32:72:df:12:13:de: a3:80:c7:d4:90:22:f6:ab:16:f9:23:c2:03:0c:d7: c6:10:4a:c3:cf:b3:e9:1a:e7:70:e4:e8:b3:6b:3f: 7d:34:01:df:52:c4:20:e7:29:aa:a7:fe:45:fa:86: 97:29:a3:f8:71:d8:c6:d6:30:24:5c:60:75:03:e6: 57:51:38:74:cc:8a:1a:ff:72:56:e4:87:29:5a:4a: e9:5a:c6:72:ea:a0:11:3e:65:f5:a7:46:9e:d1:c6: 13:44:75:3a:8c:40:60:6d:09:b4:99:2a:b8:1a:b1: cf:7b:5d:eb:3a:73:e2:55:b0:9d:ed:40:3a:6c:42: ca:d4:8e:f0:5a:c5:35:71:51:97:ec:9a:62:4c:c0: e5:02:28:53:49:3a:d0:90:88:ac:28:81:f4:14:36: 19:9f:93:47:15:2a:05:9f:6f:3e:3e:3f:1d:fe:89: 10:bf:2f:bf:e6:3c:d4:5d:16:86:72:15:ee:9c:99: cc:66:29:1a:26:87:3e:56:95:42:d5:d6:5c:eb:39: d4:c9:ab:41:37:d3:da:28:ef:70:ec:7f:70:c6:05: 53:63:ff:a4:72:3b:73:4d:fc:41:44:7e:57:10:16: 19:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:7A:89:C0:D8:97:43:9E:1B:FA:95:D9:2D:6C:54:D9:DB:14:7F X509v3 Authority Key Identifier: keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/2B07FA82EADC11EBBE430B5EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.247.24.0/22 103.237.124.0/22 IPv6: 2401:3280:1000::-2401:3280:2fff:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 89:c6:aa:e7:89:e3:1c:1c:3d:f5:46:fa:44:4b:6c:d3:8e:90: d7:b5:a0:92:ef:33:f4:00:40:5a:4f:b0:91:1b:26:bd:6e:c9: 06:1b:fa:a1:6d:80:a8:32:f9:59:72:ee:80:c5:11:52:7b:d6: 8e:c4:52:4f:37:66:80:9e:6a:6e:09:fc:ed:95:61:99:ba:c5: af:b7:a3:c4:cd:ab:29:e9:5c:e6:f1:c7:d8:ed:b4:c8:7e:34: 5b:44:e8:9e:28:47:a1:4f:a1:d7:d0:c0:7f:33:22:2a:d7:e9: 91:ba:34:be:82:d2:a3:3b:7a:22:ce:b4:9c:8c:18:d6:c1:53: f9:41:66:d1:c0:b1:b0:cb:dc:6e:fd:46:57:c3:e8:df:11:d4: d5:de:24:4e:40:75:da:09:70:ff:d3:ad:30:97:3f:8b:89:90: ed:ab:da:69:9a:2f:8c:90:95:ec:cd:8b:48:5c:72:03:a8:b0: b7:45:2c:da:ee:2a:f6:0f:36:0f:1a:0d:d4:dd:b3:5e:41:ac: c9:12:e5:a3:57:0b:94:6e:44:92:46:ac:81:88:6e:33:27:0b: da:9d:51:db:69:51:ef:f8:77:6b:2a:da:2f:76:36:ff:d4:c9: 74:14:7b:38:3b:74:8d:a3:24:61:44:6b:47:b5:0b:59:43:ac: fb:47:8c:fd -----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgICBVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDI4QkMxMTAvBgNVBAUTKEM0OEEwRTQwRkI3RkUzOTc1QjEyQzIzRTAzMEFDNTRD NTIwNTcxNjMwHhcNMjUwNTEyMjM1NDA1WhcNMjYwNzMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODIyOGExZC05ZmQ2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA88RFObl1J4BV35mURSWno4E+sbsUiFkyct8SE96jgMfUkCL2qxb5I8IDDNfG EErDz7PpGudw5Oizaz99NAHfUsQg5ymqp/5F+oaXKaP4cdjG1jAkXGB1A+ZXUTh0 zIoa/3JW5IcpWkrpWsZy6qARPmX1p0ae0cYTRHU6jEBgbQm0mSq4GrHPe13rOnPi VbCd7UA6bELK1I7wWsU1cVGX7JpiTMDlAihTSTrQkIisKIH0FDYZn5NHFSoFn28+ Pj8d/okQvy+/5jzUXRaGchXunJnMZikaJoc+VpVC1dZc6znUyatBN9PaKO9w7H9w xgVTY/+kcjtzTfxBRH5XEBYZ0wIDAQABo4ICtTCCArEwHQYDVR0OBBYEFLkOeonA 2JdDnhv6ldktbFTZ2xR/MB8GA1UdIwQYMBaAFMSKDkD7f+OXWxLCPgMKxUxSBXFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMjhCQy85MjA5MjM5MEVB RDgxMUVCQkQyQ0M3NThDNEY5QUUwMi94SW9PUVB0XzQ1ZGJFc0ktQXdyRlRGSUZj V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3hJb09RUHRfNDVkYkVzSS1Bd3JGVEZJRmNXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDI4QkMvOTIwOTIzOTBFQUQ4MTFFQkJEMkNDNzU4QzRGOUFFMDIvMkIwN0ZBODJF QURDMTFFQkJFNDMwQjVFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPwYIKwYBBQUHAQcBAf8E MDAuMBIEAgABMAwDBAIr9xgDBAJn7XwwGAQCAAIwEjAQAwYEJAEygBADBgQkATKA IDANBgkqhkiG9w0BAQsFAAOCAQEAicaq54njHBw99Ub6REts046Q17Wgku8z9ABA Wk+wkRsmvW7JBhv6oW2AqDL5WXLugMURUnvWjsRSTzdmgJ5qbgn87ZVhmbrFr7ej xM2rKelc5vHH2O20yH40W0TonihHoU+h19DAfzMiKtfpkbo0voLSozt6Is60nIwY 1sFT+UFm0cCxsMvcbv1GV8Po3xHU1d4kTkB12glw/9OtMJc/i4mQ7avaaZovjJCV 7M2LSFxyA6iwt0Us2u4q9g82DxoN1N2zXkGsyRLlo1cLlG5EkkasgYhuMycL2p1R 22lR7/h3ayraL3Y2/9TJdBR7ODt0jaMkYURrR7ULWUOs+0eM/Q== -----END CERTIFICATE-----Generated at Wed May 14 16:11:29 2025 by rpki-client