$ rpki-client -vvf rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/76C782CC836811E9B8830935C4F9AE02.roa File: 76C782CC836811E9B8830935C4F9AE02.roa (raw, json) Hash identifier: Wv9uMY+WdEAX81GX6NeGlpR1t2a7ig+R8eOluIMlrac= Subject key identifier: 35:FB:03:C0:8A:2A:29:11:37:A2:29:95:FD:6F:ED:83:6B:4B:5F:CC Certificate issuer: /CN=A91D58EC/serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Certificate serial: 0EF7 Authority key identifier: 73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/76C782CC836811E9B8830935C4F9AE02.roa Signing time: Wed 14 May 2025 09:16:56 +0000 ROA not before: Wed 14 May 2025 09:16:56 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 64073 IP address blocks: 14.102.98.0/23 maxlen: 24 103.9.40.0/23 maxlen: 24 103.139.184.0/23 maxlen: 24 103.250.88.0/22 maxlen: 24 163.47.128.0/22 maxlen: 24 202.179.140.0/22 maxlen: 24 2404:e940::/32 maxlen: 32 2407:8b00::/32 maxlen: 32 2407:8b00::/36 maxlen: 36 2407:8b00:1::/48 maxlen: 48 2407:8b00:1000::/36 maxlen: 36 2407:8b00:1160::/43 maxlen: 43 2407:8b00:1162::/48 maxlen: 48 2407:8b00:2000::/36 maxlen: 36 2407:8b00:3000::/36 maxlen: 36 2407:8b00:9000::/36 maxlen: 36 2407:8b00:c003::/48 maxlen: 48 2407:8b00:f000::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 23 May 2025 17:55:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3831 (0xef7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D58EC, serialNumber=731E27E12FB3DB0B6CCC0B20F186809BA08D0915 Validity Not Before: May 14 09:16:56 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=68245f88-6c7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:29:95:c6:48:85:06:96:b1:83:2f:6f:17:f7: e8:c7:97:03:a7:00:16:ea:e7:fd:53:dc:48:c3:84: 00:10:cb:8b:16:2e:77:21:2b:4a:d0:d9:f3:4d:7b: 98:2f:23:c9:9d:04:c2:43:f3:48:9c:6b:f6:27:59: 54:42:61:6b:be:93:2d:0b:38:73:a7:24:d8:cc:bc: 31:94:72:37:1b:ec:53:76:39:28:d9:ed:77:b0:73: ef:0d:b6:ab:6a:1f:15:62:3f:72:cf:5c:8c:48:3f: 55:4f:77:ab:ba:e8:02:e9:75:b8:52:bf:b5:e6:22: c9:05:66:d2:e9:74:61:5c:d9:2f:2c:87:9f:a8:ce: cc:0f:e1:fb:c1:77:dd:d2:c9:96:ca:13:ec:40:98: bb:a7:2d:f5:4d:5e:70:f6:91:cf:c7:ac:bf:69:3b: b1:d9:9d:5a:5e:49:a7:58:70:55:67:31:80:f1:27: f8:72:b8:ee:73:22:fd:a6:5a:c3:73:d7:07:9a:17: e0:a9:df:c7:57:71:ee:a9:4c:c0:21:3e:e0:8e:25: 93:ab:2a:6b:1b:fe:e1:72:a1:70:bc:9d:ac:e9:88: 42:0f:c5:05:25:97:a7:85:2e:aa:57:b1:7b:30:2e: 4e:ae:c2:da:bd:df:31:b1:fb:7a:b3:e9:d2:7a:46: 4d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:FB:03:C0:8A:2A:29:11:37:A2:29:95:FD:6F:ED:83:6B:4B:5F:CC X509v3 Authority Key Identifier: keyid:73:1E:27:E1:2F:B3:DB:0B:6C:CC:0B:20:F1:86:80:9B:A0:8D:09:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/cx4n4S-z2wtszAsg8YaAm6CNCRU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cx4n4S-z2wtszAsg8YaAm6CNCRU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D58EC/AF50A0E8836711E984437734C4F9AE02/76C782CC836811E9B8830935C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 14.102.98.0/23 103.9.40.0/23 103.139.184.0/23 103.250.88.0/22 163.47.128.0/22 202.179.140.0/22 IPv6: 2404:e940::/32 2407:8b00::/32 Signature Algorithm: sha256WithRSAEncryption 37:4f:8e:ae:5e:d5:03:49:e1:d4:71:08:3e:7e:35:52:17:62: 12:ab:f4:6d:38:98:4f:12:97:02:67:bf:54:5d:c6:d2:c9:e8: e9:9b:f9:1f:ad:49:83:84:8b:28:cf:ba:59:13:ff:c8:a2:92: 3c:6e:59:b9:1d:ff:4b:1b:a1:cd:9a:a2:5a:67:2c:e0:d4:66: 5a:c8:46:e5:01:5e:ea:dd:e0:0b:ec:0d:18:4d:73:f2:5c:20: 00:ca:61:39:a9:bc:b8:7e:3e:fc:b5:f0:a7:f4:6b:f1:a7:9b: 40:df:bc:3d:48:ec:1c:4b:ff:87:df:4d:d8:1b:08:c5:e7:df: 91:cf:95:90:88:45:6a:41:a0:68:10:7b:4f:79:46:eb:60:55: 99:ee:b6:6a:62:8b:1a:b4:f4:51:c0:b8:9e:9f:e9:85:89:22: f2:28:51:4a:74:2a:98:ce:0a:50:10:e5:f5:ae:53:5f:82:e1: 3f:eb:75:87:e1:85:26:88:aa:36:3b:d8:c5:41:44:30:c9:5c: c4:2e:16:af:8c:7a:f0:4c:10:38:13:e9:93:fd:6a:e9:7a:3a: 22:64:b2:c2:ff:0b:91:ae:76:ba:16:b9:ad:25:87:cf:fb:47: 3d:ca:c4:f6:dd:8c:24:f0:6b:ba:48:36:68:0f:32:d7:22:97: 3c:46:6b:e6 -----BEGIN CERTIFICATE----- MIIFpTCCBI2gAwIBAgICDvcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDU4RUMxMTAvBgNVBAUTKDczMUUyN0UxMkZCM0RCMEI2Q0NDMEIyMEYxODY4MDlC QTA4RDA5MTUwHhcNMjUwNTE0MDkxNjU2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODI0NWY4OC02YzdiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwSmVxkiFBpaxgy9vF/fox5cDpwAW6uf9U9xIw4QAEMuLFi53IStK0NnzTXuY LyPJnQTCQ/NInGv2J1lUQmFrvpMtCzhzpyTYzLwxlHI3G+xTdjko2e13sHPvDbar ah8VYj9yz1yMSD9VT3eruugC6XW4Ur+15iLJBWbS6XRhXNkvLIefqM7MD+H7wXfd 0smWyhPsQJi7py31TV5w9pHPx6y/aTux2Z1aXkmnWHBVZzGA8Sf4crjucyL9plrD c9cHmhfgqd/HV3HuqUzAIT7gjiWTqyprG/7hcqFwvJ2s6YhCD8UFJZenhS6qV7F7 MC5OrsLavd8xsft6s+nSekZNEQIDAQABo4ICyTCCAsUwHQYDVR0OBBYEFDX7A8CK KikRN6Iplf1v7YNrS1/MMB8GA1UdIwQYMBaAFHMeJ+Evs9sLbMwLIPGGgJugjQkV MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENThFQy9BRjUwQTBFODgz NjcxMUU5ODQ0Mzc3MzRDNEY5QUUwMi9jeDRuNFMtejJ3dHN6QXNnOFlhQW02Q05D UlUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2N4NG40Uy16Mnd0c3pBc2c4WWFBbTZDTkNSVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDU4RUMvQUY1MEEwRTg4MzY3MTFFOTg0NDM3NzM0QzRGOUFFMDIvNzZDNzgyQ0M4 MzY4MTFFOUI4ODMwOTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwUwYIKwYBBQUHAQcBAf8E RDBCMCoEAgABMCQDBAEOZmIDBAFnCSgDBAFni7gDBAJn+lgDBAKjL4ADBALKs4ww FAQCAAIwDgMFACQE6UADBQAkB4sAMA0GCSqGSIb3DQEBCwUAA4IBAQA3T46uXtUD SeHUcQg+fjVSF2ISq/RtOJhPEpcCZ79UXcbSyejpm/kfrUmDhIsoz7pZE//IopI8 blm5Hf9LG6HNmqJaZyzg1GZayEblAV7q3eAL7A0YTXPyXCAAymE5qby4fj78tfCn 9Gvxp5tA37w9SOwcS/+H303YGwjF59+Rz5WQiEVqQaBoEHtPeUbrYFWZ7rZqYosa tPRRwLien+mFiSLyKFFKdCqYzgpQEOX1rlNfguE/63WH4YUmiKo2O9jFQUQwyVzE LhavjHrwTBA4E+mT/WrpejoiZLLC/wuRrna6FrmtJYfP+0c9ysT23Ywk8Gu6SDZo DzLXIpc8Rmvm -----END CERTIFICATE-----Generated at Sat May 17 13:18:24 2025 by rpki-client