$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/F04A74EC90C511EDA07C3025C4F9AE02.roa File: F04A74EC90C511EDA07C3025C4F9AE02.roa (raw, json) Hash identifier: S5aqnIp8wBDzzuC/I2D/TZu1GPCH8szm3/gxMup7cPA= Subject key identifier: C2:89:3D:70:D7:D4:19:94:B7:7B:3C:2F:6B:49:B1:72:B7:5A:78:0D Certificate issuer: /CN=A91E4696/serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Certificate serial: 01DF Authority key identifier: 27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/F04A74EC90C511EDA07C3025C4F9AE02.roa Signing time: Thu 03 Jul 2025 03:06:58 +0000 ROA not before: Thu 03 Jul 2025 03:06:58 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 38277 IP address blocks: 43.252.164.0/22 maxlen: 22 43.252.164.0/24 maxlen: 24 43.252.165.0/24 maxlen: 24 43.252.166.0/24 maxlen: 24 43.252.167.0/24 maxlen: 24 103.28.44.0/22 maxlen: 22 103.28.44.0/24 maxlen: 24 103.28.45.0/24 maxlen: 24 103.28.46.0/24 maxlen: 24 103.28.47.0/24 maxlen: 24 203.124.8.0/24 maxlen: 24 203.124.9.0/24 maxlen: 24 203.124.10.0/24 maxlen: 24 203.124.11.0/24 maxlen: 24 203.124.12.0/24 maxlen: 24 203.124.13.0/24 maxlen: 24 203.124.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Jul 2025 03:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 479 (0x1df) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4696, serialNumber=27B8722C859CA4F6F03EC1E061FDD4C3B9B497E5 Validity Not Before: Jul 3 03:06:58 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=6865f3d2-552a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3e:be:59:89:af:42:02:50:5f:8b:15:2f:b7: a3:86:5b:93:48:35:55:30:12:52:e3:42:ba:9b:73: b6:1f:b8:e9:7a:38:e3:87:13:4c:32:71:89:63:ec: 14:c9:b7:86:03:12:88:2b:e9:a6:fd:31:27:b8:f1: 35:94:1c:ef:af:3e:9d:3b:58:66:bf:c6:ba:d6:b5: 8b:dc:b2:f6:9f:d8:a5:71:e0:21:1a:b1:5d:12:40: c9:de:93:61:8b:2b:69:ff:3a:dc:c2:c8:ad:98:63: 06:0f:46:80:ea:04:0c:e0:84:80:5f:97:f6:61:e9: 31:35:0e:b7:28:ed:69:02:c5:6c:f1:48:dc:94:7e: cd:24:08:57:45:6f:44:4f:fe:41:98:9d:5f:69:49: 21:bd:3c:27:73:60:e5:33:02:f3:e9:64:36:7b:a7: ff:35:11:4b:ec:b3:67:95:09:7d:8e:f2:77:4d:cf: 18:e0:ca:62:c3:f2:ad:93:03:29:cd:6c:ed:08:2b: 4e:d9:9e:5e:b0:b6:a9:e7:bf:3e:bc:ce:77:21:87: 09:77:14:30:61:db:89:53:cb:ce:c9:da:30:a7:13: 63:40:ff:65:df:5a:11:66:04:0b:fb:e9:74:e5:d2: a8:98:58:8e:48:5b:6f:a4:62:e7:e9:60:90:4c:69: 83:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:89:3D:70:D7:D4:19:94:B7:7B:3C:2F:6B:49:B1:72:B7:5A:78:0D X509v3 Authority Key Identifier: keyid:27:B8:72:2C:85:9C:A4:F6:F0:3E:C1:E0:61:FD:D4:C3:B9:B4:97:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7hyLIWcpPbwPsHgYf3Uw7m0l-U.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4696/D6A11C4A90BF11ED8CC1E783C4F9AE02/F04A74EC90C511EDA07C3025C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.164.0/22 103.28.44.0/22 203.124.8.0-203.124.13.255 203.124.15.0/24 Signature Algorithm: sha256WithRSAEncryption 78:dc:0c:77:7f:f1:65:92:63:94:c1:4b:c5:33:b7:6a:89:8a: d9:9e:a9:af:13:90:c7:3f:72:d9:0b:60:f1:be:f9:b5:21:da: cb:9b:70:5e:83:78:7d:cb:cc:84:95:53:e6:7d:77:00:ee:b4: 87:82:0a:4f:98:94:2b:84:b5:14:97:bd:49:f4:4f:0d:9d:65: 53:1c:4a:85:5e:6c:df:41:82:48:d4:66:26:41:1b:f1:4b:79: 59:97:fd:dd:93:3f:b6:b9:6c:75:7d:9a:e2:a3:11:dc:4e:b0: b9:10:e2:35:ba:f7:5f:66:40:e0:91:04:3b:cc:ad:90:27:d5: a0:72:38:fc:d6:61:bc:b0:d5:60:dd:85:f2:bf:c2:59:8e:cf: ee:80:00:1c:d9:7c:05:e9:a4:dd:0f:fe:ed:57:b1:b3:6d:08: 9c:81:2c:3b:6f:3d:d7:6f:98:5b:37:8c:e7:8e:49:56:d6:09: 9a:5c:91:39:8c:e3:20:43:28:f9:89:75:b6:43:79:43:3e:bc: 1d:b1:e6:b5:17:6a:48:56:96:18:40:c9:33:a6:bb:0d:ae:bd: ca:b9:9d:44:ec:04:8d:ea:c0:af:71:31:40:0d:6f:57:3c:59: 55:7d:2a:e9:ad:0f:90:90:21:eb:e9:29:df:9d:e7:5f:b0:a8: 7a:5d:c9:50 -----BEGIN CERTIFICATE----- MIIFizCCBHOgAwIBAgICAd8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTQ2OTYxMTAvBgNVBAUTKDI3Qjg3MjJDODU5Q0E0RjZGMDNFQzFFMDYxRkRENEMz QjlCNDk3RTUwHhcNMjUwNzAzMDMwNjU4WhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1ZjNkMi01NTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwz6+WYmvQgJQX4sVL7ejhluTSDVVMBJS40K6m3O2H7jpejjjhxNMMnGJY+wU ybeGAxKIK+mm/TEnuPE1lBzvrz6dO1hmv8a61rWL3LL2n9ilceAhGrFdEkDJ3pNh iytp/zrcwsitmGMGD0aA6gQM4ISAX5f2YekxNQ63KO1pAsVs8UjclH7NJAhXRW9E T/5BmJ1faUkhvTwnc2DlMwLz6WQ2e6f/NRFL7LNnlQl9jvJ3Tc8Y4Mpiw/KtkwMp zWztCCtO2Z5esLap578+vM53IYcJdxQwYduJU8vOydowpxNjQP9l31oRZgQL++l0 5dKomFiOSFtvpGLn6WCQTGmDwwIDAQABo4ICrzCCAqswHQYDVR0OBBYEFMKJPXDX 1BmUt3s8L2tJsXK3WngNMB8GA1UdIwQYMBaAFCe4ciyFnKT28D7B4GH91MO5tJfl MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNDY5Ni9ENkExMUM0QTkw QkYxMUVEOENDMUU3ODNDNEY5QUUwMi9KN2h5TElXY3BQYndQc0hnWWYzVXc3bTBs LVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0o3aHlMSVdjcFBid1BzSGdZZjNVdzdtMGwtVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RTQ2OTYvRDZBMTFDNEE5MEJGMTFFRDhDQzFFNzgzQzRGOUFFMDIvRjA0QTc0RUM5 MEM1MTFFREEwN0MzMDI1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwOQYIKwYBBQUHAQcBAf8E KjAoMCYEAgABMCADBAIr/KQDBAJnHCwwDAMEA8t8CAMEAct8DAMEAMt8DzANBgkq hkiG9w0BAQsFAAOCAQEAeNwMd3/xZZJjlMFLxTO3aomK2Z6prxOQxz9y2Qtg8b75 tSHay5twXoN4fcvMhJVT5n13AO60h4IKT5iUK4S1FJe9SfRPDZ1lUxxKhV5s30GC SNRmJkEb8Ut5WZf93ZM/trlsdX2a4qMR3E6wuRDiNbr3X2ZA4JEEO8ytkCfVoHI4 /NZhvLDVYN2F8r/CWY7P7oAAHNl8Bemk3Q/+7Vexs20InIEsO28912+YWzeM545J VtYJmlyROYzjIEMo+Yl1tkN5Qz68HbHmtRdqSFaWGEDJM6a7Da69yrmdROwEjerA r3ExQA1vVzxZVX0q6a0PkJAh6+kp353nX7Coel3JUA== -----END CERTIFICATE-----Generated at Thu Jul 3 13:24:48 2025 by rpki-client