$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/14564AB0E83311E6A72DC543C4F9AE02.roa File: 14564AB0E83311E6A72DC543C4F9AE02.roa (raw, json) Hash identifier: 4+gvlbrCKPYHxXa5P1wV2CMHV3TVWTeug3ZLXYBNytU= Subject key identifier: AF:B3:75:63:06:56:86:6B:06:7D:88:81:02:66:51:A3:42:86:44:B3 Certificate issuer: /CN=A91F0FE2/serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Certificate serial: 1C2B Authority key identifier: 11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/14564AB0E83311E6A72DC543C4F9AE02.roa Signing time: Wed 30 Apr 2025 16:24:41 +0000 ROA not before: Wed 30 Apr 2025 16:24:41 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 55795 IP address blocks: 101.128.5.0/24 maxlen: 24 101.128.6.0/24 maxlen: 24 101.128.7.0/24 maxlen: 24 103.9.16.0/22 maxlen: 22 202.52.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 16:08:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7211 (0x1c2b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F0FE2, serialNumber=111E981BAD301830F7C1E590CC1AA8B482260ED8 Validity Not Before: Apr 30 16:24:41 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=68124ec8-303f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:98:44:0b:c5:3a:fc:4d:19:cc:78:84:53:86: 27:9a:cb:a7:fb:3b:19:06:71:2b:84:04:5e:5c:6a: 3e:63:c3:99:cc:4f:90:5c:2d:fd:8a:bf:fd:c8:97: 95:4e:78:7c:d2:6f:0a:c2:11:e3:5f:9c:34:67:f3: c2:8b:7c:ac:70:82:46:ff:b9:aa:ae:99:56:c0:45: 47:b8:0c:d4:a5:99:27:53:3c:fd:90:f8:10:72:5e: e0:7d:c5:f5:a8:c9:21:5d:06:7b:e5:f3:f6:25:a0: 54:73:79:3d:a3:54:0e:f1:88:12:d4:1e:cd:65:0a: 64:25:94:9b:33:f0:12:17:b3:f3:52:1c:ff:0b:2c: 03:ab:ea:e2:37:b0:6e:6f:e8:cd:86:77:e8:56:ab: 31:88:cb:8b:fd:51:d2:f9:93:d6:a8:3f:d2:ed:7c: db:e7:64:e0:84:e5:9e:2d:b3:7d:c1:48:1f:ea:e3: f0:00:e3:76:b8:a5:f4:6e:c9:f9:7f:e6:d8:dd:81: c2:74:0b:99:4a:59:41:44:b1:3c:a3:9e:4f:5b:a6: f7:3f:c3:29:a2:74:61:14:be:a4:49:59:75:98:73: ed:aa:50:5e:40:54:be:0c:f7:5a:63:cf:be:20:4b: 97:77:df:0c:b3:8c:27:6d:73:d5:d1:f8:40:5b:7c: 95:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:B3:75:63:06:56:86:6B:06:7D:88:81:02:66:51:A3:42:86:44:B3 X509v3 Authority Key Identifier: keyid:11:1E:98:1B:AD:30:18:30:F7:C1:E5:90:CC:1A:A8:B4:82:26:0E:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/ER6YG60wGDD3weWQzBqotIImDtg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ER6YG60wGDD3weWQzBqotIImDtg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0FE2/2FF9BB22E83211E6BF512842C4F9AE02/14564AB0E83311E6A72DC543C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 101.128.5.0-101.128.7.255 103.9.16.0/22 202.52.46.0/24 Signature Algorithm: sha256WithRSAEncryption 3b:cd:29:6f:1c:4e:e6:c9:d1:b8:d3:a3:1a:74:df:95:b3:fa: 6d:1d:58:82:24:16:1b:30:11:71:3a:71:a8:46:52:f6:d4:18: 23:17:73:21:f5:3d:c6:02:57:47:35:01:86:5c:3b:9f:f9:80: f9:68:3f:85:e2:30:10:e1:94:37:bd:9e:ba:31:ee:92:56:60: e4:c6:ac:4f:36:58:5c:3b:a5:8c:b4:47:fd:6b:09:08:8b:ba: ad:75:4b:71:9e:11:cb:74:ba:12:9c:00:65:98:80:52:a6:b1: 9b:97:55:ab:80:8f:55:04:9e:12:ea:ac:08:f1:7b:28:0e:98: d2:ab:9e:22:7c:a5:4f:ae:93:f5:20:dd:38:1d:16:10:41:87: f9:f8:ce:97:0b:0a:3f:5a:20:4e:ee:bf:59:5b:59:e2:c0:d9: 24:47:69:df:45:0d:54:de:80:19:44:04:f7:27:c7:9b:f0:2e: 67:2a:06:fb:d8:0e:8e:32:21:9f:41:52:ef:13:3c:73:db:e0: 58:44:0d:d9:ba:a9:53:ca:b9:4b:95:87:dd:84:a0:95:78:f2: 81:83:10:6a:81:21:63:c7:50:ec:0f:24:73:fc:96:14:1d:47: b9:98:5c:b1:07:71:c4:39:b1:eb:13:5c:55:63:10:3a:35:3f: 85:a0:41:97 -----BEGIN CERTIFICATE----- MIIFhTCCBG2gAwIBAgICHCswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjBGRTIxMTAvBgNVBAUTKDExMUU5ODFCQUQzMDE4MzBGN0MxRTU5MENDMUFBOEI0 ODIyNjBFRDgwHhcNMjUwNDMwMTYyNDQxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02ODEyNGVjOC0zMDNmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA8JhEC8U6/E0ZzHiEU4Ynmsun+zsZBnErhAReXGo+Y8OZzE+QXC39ir/9yJeV Tnh80m8KwhHjX5w0Z/PCi3yscIJG/7mqrplWwEVHuAzUpZknUzz9kPgQcl7gfcX1 qMkhXQZ75fP2JaBUc3k9o1QO8YgS1B7NZQpkJZSbM/ASF7PzUhz/CywDq+riN7Bu b+jNhnfoVqsxiMuL/VHS+ZPWqD/S7Xzb52TghOWeLbN9wUgf6uPwAON2uKX0bsn5 f+bY3YHCdAuZSllBRLE8o55PW6b3P8MponRhFL6kSVl1mHPtqlBeQFS+DPdaY8++ IEuXd98Ms4wnbXPV0fhAW3yVLwIDAQABo4ICqTCCAqUwHQYDVR0OBBYEFK+zdWMG VoZrBn2IgQJmUaNChkSzMB8GA1UdIwQYMBaAFBEemButMBgw98HlkMwaqLSCJg7Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMEZFMi8yRkY5QkIyMkU4 MzIxMUU2QkY1MTI4NDJDNEY5QUUwMi9FUjZZRzYwd0dERDN3ZVdRekJxb3RJSW1E dGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0VSNllHNjB3R0REM3dlV1F6QnFvdElJbUR0Zy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjBGRTIvMkZGOUJCMjJFODMyMTFFNkJGNTEyODQyQzRGOUFFMDIvMTQ1NjRBQjBF ODMzMTFFNkE3MkRDNTQzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMwYIKwYBBQUHAQcBAf8E JDAiMCAEAgABMBowDAMEAGWABQMEA2WAAAMEAmcJEAMEAMo0LjANBgkqhkiG9w0B AQsFAAOCAQEAO80pbxxO5snRuNOjGnTflbP6bR1YgiQWGzARcTpxqEZS9tQYIxdz IfU9xgJXRzUBhlw7n/mA+Wg/heIwEOGUN72eujHuklZg5MasTzZYXDuljLRH/WsJ CIu6rXVLcZ4Ry3S6EpwAZZiAUqaxm5dVq4CPVQSeEuqsCPF7KA6Y0queInylT66T 9SDdOB0WEEGH+fjOlwsKP1ogTu6/WVtZ4sDZJEdp30UNVN6AGUQE9yfHm/AuZyoG +9gOjjIhn0FS7xM8c9vgWEQN2bqpU8q5S5WH3YSglXjygYMQaoEhY8dQ7A8kc/yW FB1HuZhcsQdxxDmx6xNcVWMQOjU/haBBlw== -----END CERTIFICATE-----Generated at Mon May 12 04:24:53 2025 by rpki-client