$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/5A7BB752BD2F11EBB84EE532C4F9AE02.roa File: 5A7BB752BD2F11EBB84EE532C4F9AE02.roa (raw, json) Hash identifier: LB+KlOsPvF4imD5dH4Y/7ETYXLpR1TopuFn08dtZ6UQ= Subject key identifier: 63:FD:ED:68:12:14:4F:A9:34:5D:F3:37:A2:2C:CD:2C:4F:7F:78:91 Certificate issuer: /CN=A91EA958/serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Certificate serial: 34DA Authority key identifier: FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/5A7BB752BD2F11EBB84EE532C4F9AE02.roa Signing time: Wed 02 Jul 2025 15:21:10 +0000 ROA not before: Wed 02 Jul 2025 15:21:10 +0000 ROA not after: Wed 30 Sep 2026 00:00:00 +0000 asID: 59318 IP address blocks: 43.245.200.0/23 maxlen: 23 43.245.200.0/24 maxlen: 24 43.245.201.0/24 maxlen: 24 180.178.124.0/23 maxlen: 23 180.178.124.0/24 maxlen: 24 180.178.125.0/24 maxlen: 24 2404:b300::/48 maxlen: 48 2404:b300:10::/48 maxlen: 48 2404:b300:23::/48 maxlen: 48 2404:b300:31::/48 maxlen: 48 2404:b300:32::/48 maxlen: 48 2404:b300:33::/48 maxlen: 48 2404:b300:105::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:21:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13530 (0x34da) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91EA958, serialNumber=FD1607186373E81F44D137B2A0E96957E62AB8A1 Validity Not Before: Jul 2 15:21:10 2025 GMT Not After : Sep 30 00:00:00 2026 GMT Subject: CN=68654e66-b9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2e:1a:18:10:49:0b:13:10:c5:3a:f8:10:ff: 36:37:41:1e:08:bd:a7:f8:94:78:f6:38:de:0a:20: f4:fc:60:13:80:37:4e:34:46:59:97:c3:23:cd:95: 01:9d:93:a1:93:1f:e5:ae:58:1a:03:0e:ef:5c:5f: 21:d3:f2:f9:3b:d4:ac:3e:fe:12:9b:10:64:c1:bc: 76:65:ba:18:05:78:2e:b2:1b:91:01:19:d9:6d:3a: 69:ad:37:26:6e:2e:d6:22:a7:f9:b4:51:c6:4a:3e: c1:4e:0d:75:e4:9c:0e:e2:28:41:a1:a3:dd:3c:ea: 16:e8:9f:c0:57:0e:c2:ed:b6:28:b6:83:55:ee:50: e5:a1:a9:1c:6c:b5:6c:ae:1d:ce:0b:63:0a:fe:06: e0:10:b2:2b:9a:ce:ca:d8:0f:7b:bb:ca:ff:6a:c0: fa:6a:eb:b7:6d:06:7b:89:d3:8b:09:8a:6d:fd:a0: 85:da:eb:e8:de:ae:6f:b2:eb:3e:9a:04:62:af:9d: 87:64:5e:fd:15:ee:9a:5b:bb:7e:9c:53:ad:56:f5: 34:34:53:05:a1:ee:bd:74:7a:27:d9:e9:77:d7:22: 08:c5:be:82:99:c0:c6:fd:a7:da:d7:ed:25:3b:69: f9:11:2f:1f:d1:ba:83:e7:b4:bd:b1:f8:db:1c:ad: f5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FD:ED:68:12:14:4F:A9:34:5D:F3:37:A2:2C:CD:2C:4F:7F:78:91 X509v3 Authority Key Identifier: keyid:FD:16:07:18:63:73:E8:1F:44:D1:37:B2:A0:E9:69:57:E6:2A:B8:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/_RYHGGNz6B9E0TeyoOlpV-YquKE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_RYHGGNz6B9E0TeyoOlpV-YquKE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA958/5AE197F41D9F11E2BCBFF78F08B02CD2/5A7BB752BD2F11EBB84EE532C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.245.200.0/23 180.178.124.0/23 IPv6: 2404:b300::/48 2404:b300:10::/48 2404:b300:23::/48 2404:b300:31::-2404:b300:33:ffff:ffff:ffff:ffff:ffff 2404:b300:105::/48 Signature Algorithm: sha256WithRSAEncryption 88:e4:79:76:c6:9e:a3:3f:02:51:91:79:82:0e:8c:c9:80:d1: 4e:72:fd:ba:54:f6:46:f4:8f:00:58:21:48:30:35:c9:20:ba: 5a:22:7b:b9:3a:bb:4b:f0:be:b1:0c:58:18:71:a9:81:9f:fe: 50:f8:bb:95:37:ee:14:04:89:c7:cb:81:4f:e4:ee:ba:bd:b6: 35:70:ef:6d:ba:32:c7:af:71:ac:90:69:9d:49:75:7d:4c:41: 60:b3:8f:64:3a:ed:c5:e4:d5:61:ec:ab:7c:f8:09:ec:e5:10: 94:15:36:3d:72:e8:a5:d1:32:65:ac:09:bb:1f:11:00:23:07: 88:ca:26:3d:76:44:18:5d:60:1c:c2:77:31:e0:2f:d0:86:b8: d5:82:6f:90:ac:41:c3:73:e1:80:7c:52:f3:37:7e:c0:7e:43: 74:21:1a:c4:5f:8d:8a:36:0c:9f:9b:e0:93:fa:48:d8:68:e7: d8:df:77:54:e4:e4:b3:0f:aa:fd:45:23:b6:23:e7:14:54:1c: ac:12:f6:cd:36:32:fa:83:99:f6:f6:7e:86:7f:e6:75:00:2f: 1d:6a:cd:e2:7c:d1:a6:75:34:e1:42:76:9f:7a:28:6a:3d:2f: 85:f3:b0:b5:59:36:a3:cf:0b:0c:d8:00:84:fb:31:eb:91:fe: 3c:c9:c3:ff -----BEGIN CERTIFICATE----- MIIFtzCCBJ+gAwIBAgICNNowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RUE5NTgxMTAvBgNVBAUTKEZEMTYwNzE4NjM3M0U4MUY0NEQxMzdCMkEwRTk2OTU3 RTYyQUI4QTEwHhcNMjUwNzAyMTUyMTEwWhcNMjYwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02ODY1NGU2Ni1iOWJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAyC4aGBBJCxMQxTr4EP82N0EeCL2n+JR49jjeCiD0/GATgDdONEZZl8MjzZUB nZOhkx/lrlgaAw7vXF8h0/L5O9SsPv4SmxBkwbx2ZboYBXgushuRARnZbTpprTcm bi7WIqf5tFHGSj7BTg115JwO4ihBoaPdPOoW6J/AVw7C7bYotoNV7lDloakcbLVs rh3OC2MK/gbgELIrms7K2A97u8r/asD6auu3bQZ7idOLCYpt/aCF2uvo3q5vsus+ mgRir52HZF79Fe6aW7t+nFOtVvU0NFMFoe69dHon2el31yIIxb6CmcDG/afa1+0l O2n5ES8f0bqD57S9sfjbHK316QIDAQABo4IC2zCCAtcwHQYDVR0OBBYEFGP97WgS FE+pNF3zN6IszSxPf3iRMB8GA1UdIwQYMBaAFP0WBxhjc+gfRNE3sqDpaVfmKrih MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQTk1OC81QUUxOTdGNDFE OUYxMUUyQkNCRkY3OEYwOEIwMkNEMi9fUllIR0dOejZCOUUwVGV5b09scFYtWXF1 S0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL19SWUhHR056NkI5RTBUZXlvT2xwVi1ZcXVLRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RUE5NTgvNUFFMTk3RjQxRDlGMTFFMkJDQkZGNzhGMDhCMDJDRDIvNUE3QkI3NTJC RDJGMTFFQkI4NEVFNTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwZQYIKwYBBQUHAQcBAf8E VjBUMBIEAgABMAwDBAEr9cgDBAG0snwwPgQCAAIwOAMHACQEswAAAAMHACQEswAA EAMHACQEswAAIzASAwcAJASzAAAxAwcCJASzAAAwAwcAJASzAAEFMA0GCSqGSIb3 DQEBCwUAA4IBAQCI5Hl2xp6jPwJRkXmCDozJgNFOcv26VPZG9I8AWCFIMDXJILpa Inu5OrtL8L6xDFgYcamBn/5Q+LuVN+4UBInHy4FP5O66vbY1cO9tujLHr3GskGmd SXV9TEFgs49kOu3F5NVh7Kt8+Ans5RCUFTY9cuil0TJlrAm7HxEAIweIyiY9dkQY XWAcwncx4C/QhrjVgm+QrEHDc+GAfFLzN37AfkN0IRrEX42KNgyfm+CT+kjYaOfY 33dU5OSzD6r9RSO2I+cUVBysEvbNNjL6g5n29n6Gf+Z1AC8das3ifNGmdTThQnaf eihqPS+F87C1WTajzwsM2ACE+zHrkf48ycP/ -----END CERTIFICATE-----Generated at Thu Jul 3 03:49:41 2025 by rpki-client