$ rpki-client -vvf rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/51273D9A08EE11E99E30172AC4F9AE02.roa File: 51273D9A08EE11E99E30172AC4F9AE02.roa (raw, json) Hash identifier: w5Wibqq/9uZKFdplDNzWfbo2U0mV8bZOoGj0UNzkyfo= Subject key identifier: F4:58:44:9D:C7:DE:5C:22:AE:89:3F:3F:C0:41:BE:09:F0:04:14:FF Certificate issuer: /CN=A91D7454/serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Certificate serial: 1146 Authority key identifier: 33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/51273D9A08EE11E99E30172AC4F9AE02.roa Signing time: Wed 30 Apr 2025 17:26:15 +0000 ROA not before: Wed 30 Apr 2025 17:26:15 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 132615 IP address blocks: 43.250.224.0/22 maxlen: 22 103.17.20.0/22 maxlen: 22 103.17.20.0/24 maxlen: 24 103.17.21.0/24 maxlen: 24 103.17.22.0/24 maxlen: 24 103.17.23.0/24 maxlen: 24 2001:df0:3000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 19 May 2025 17:11:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4422 (0x1146) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D7454, serialNumber=3311BF97E21B726A9C0056BBE4A85B1F7F295F35 Validity Not Before: Apr 30 17:26:15 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68125d37-7fa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:77:bf:dc:01:06:de:22:66:07:30:bd:e4: cb:6d:51:76:a3:74:5d:ad:be:0d:99:e6:d0:7d:3f: d1:77:45:18:8e:1d:3b:a1:cd:e3:6d:03:2f:63:33: ec:a3:3c:2e:9b:d5:98:1b:40:98:42:ab:1a:f1:12: 81:8e:c0:c3:0c:f5:43:ed:33:46:ae:1b:c0:c0:95: 78:32:43:9e:18:75:2c:0f:5e:b5:e3:f7:c0:af:3c: 02:c7:1b:de:66:d1:47:f5:f3:da:b6:98:3b:e6:e6: 0b:37:ca:a0:44:a5:c0:b8:d7:ae:55:f9:87:28:8d: d8:00:0c:f3:84:0c:3f:20:31:53:89:39:4a:49:6a: 8c:be:dd:91:a2:b1:1f:61:6a:26:0f:7a:e2:d9:b6: a8:d2:ad:f6:95:98:aa:c0:cb:bc:14:b8:1f:b6:ad: 42:af:58:6d:b3:23:48:20:1f:47:c1:ba:ef:73:d1: f7:d4:b7:01:08:49:9c:f1:b4:e5:68:09:19:80:52: 97:ea:3a:bf:a1:76:d7:92:b4:1a:88:13:1c:1c:15: d5:0a:39:f8:d3:ae:89:8c:d2:ed:94:da:da:22:8f: 61:dd:24:47:bf:6c:1f:d4:77:73:87:ef:4a:ea:fe: 5f:be:ba:2c:e4:1a:40:5a:3d:5d:85:b1:e1:43:65: 4a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:58:44:9D:C7:DE:5C:22:AE:89:3F:3F:C0:41:BE:09:F0:04:14:FF X509v3 Authority Key Identifier: keyid:33:11:BF:97:E2:1B:72:6A:9C:00:56:BB:E4:A8:5B:1F:7F:29:5F:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/MxG_l-IbcmqcAFa75KhbH38pXzU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MxG_l-IbcmqcAFa75KhbH38pXzU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D7454/79C61E7C08EB11E9AF8BCD23C4F9AE02/51273D9A08EE11E99E30172AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.224.0/22 103.17.20.0/22 IPv6: 2001:df0:3000::/48 Signature Algorithm: sha256WithRSAEncryption 02:f4:f2:5c:31:6e:a9:20:07:55:4d:d7:47:f6:ee:a3:35:55: 93:c6:e7:c7:5b:f8:90:2f:57:2e:2e:ad:ff:9c:06:b7:4d:b9: 75:03:14:93:70:ec:70:b3:bb:be:2b:c9:6f:62:53:d7:af:cc: 17:95:69:58:e4:d1:83:54:36:3d:e4:67:38:be:71:47:8d:a3: b3:fb:bd:4b:61:b7:ea:93:03:25:d6:cd:b2:87:d1:ec:c7:80: 5e:f5:d8:8b:b7:59:3f:6c:7c:12:87:b7:a9:af:46:d9:33:98: 54:18:2d:5e:f4:44:ab:20:9c:3a:12:46:8e:09:ea:76:9c:3b: dc:3b:81:41:9c:5f:e8:a9:16:6a:e9:e3:1f:52:33:ba:8f:b0: 8b:c3:76:31:24:34:6d:b6:43:c6:6d:e7:e1:21:8b:c9:9b:fc: 97:9d:38:50:8e:7b:f6:f9:72:b5:eb:e8:fa:03:2e:7f:f9:2d: 6c:7c:93:16:6a:99:0b:0a:8a:41:7b:bf:45:a8:69:94:38:c8: 75:0f:2d:e5:e3:67:05:ee:a8:e1:6b:35:87:39:8a:a3:fa:98: 58:d6:39:15:7f:d8:88:4d:16:29:51:26:5b:63:b1:15:95:b6: 80:78:43:f0:3d:be:95:01:c9:74:1d:df:66:cd:21:6c:fc:6e: 12:db:88:7f -----BEGIN CERTIFICATE----- MIIFiDCCBHCgAwIBAgICEUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDc0NTQxMTAvBgNVBAUTKDMzMTFCRjk3RTIxQjcyNkE5QzAwNTZCQkU0QTg1QjFG N0YyOTVGMzUwHhcNMjUwNDMwMTcyNjE1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNWQzNy03ZmE2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAv6h3v9wBBt4iZgcwveTLbVF2o3Rdrb4NmebQfT/Rd0UYjh07oc3jbQMvYzPs ozwum9WYG0CYQqsa8RKBjsDDDPVD7TNGrhvAwJV4MkOeGHUsD1614/fArzwCxxve ZtFH9fPatpg75uYLN8qgRKXAuNeuVfmHKI3YAAzzhAw/IDFTiTlKSWqMvt2RorEf YWomD3ri2bao0q32lZiqwMu8FLgftq1Cr1htsyNIIB9Hwbrvc9H31LcBCEmc8bTl aAkZgFKX6jq/oXbXkrQaiBMcHBXVCjn4066JjNLtlNraIo9h3SRHv2wf1Hdzh+9K 6v5fvros5BpAWj1dhbHhQ2VK2QIDAQABo4ICrDCCAqgwHQYDVR0OBBYEFPRYRJ3H 3lwirok/P8BBvgnwBBT/MB8GA1UdIwQYMBaAFDMRv5fiG3JqnABWu+SoWx9/KV81 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENzQ1NC83OUM2MUU3QzA4 RUIxMUU5QUY4QkNEMjNDNEY5QUUwMi9NeEdfbC1JYmNtcWNBRmE3NUtoYkgzOHBY elUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL014R19sLUliY21xY0FGYTc1S2hiSDM4cFh6VS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDc0NTQvNzlDNjFFN0MwOEVCMTFFOUFGOEJDRDIzQzRGOUFFMDIvNTEyNzNEOUEw OEVFMTFFOTlFMzAxNzJBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNgYIKwYBBQUHAQcBAf8E JzAlMBIEAgABMAwDBAIr+uADBAJnERQwDwQCAAIwCQMHACABDfAwADANBgkqhkiG 9w0BAQsFAAOCAQEAAvTyXDFuqSAHVU3XR/buozVVk8bnx1v4kC9XLi6t/5wGt025 dQMUk3DscLO7vivJb2JT16/MF5VpWOTRg1Q2PeRnOL5xR42js/u9S2G36pMDJdbN sofR7MeAXvXYi7dZP2x8Eoe3qa9G2TOYVBgtXvREqyCcOhJGjgnqdpw73DuBQZxf 6KkWaunjH1Izuo+wi8N2MSQ0bbZDxm3n4SGLyZv8l504UI579vlytevo+gMuf/kt bHyTFmqZCwqKQXu/RahplDjIdQ8t5eNnBe6o4Ws1hzmKo/qYWNY5FX/YiE0WKVEm W2OxFZW2gHhD8D2+lQHJdB3fZs0hbPxuEtuIfw== -----END CERTIFICATE-----Generated at Tue May 13 10:30:35 2025 by rpki-client