$ rpki-client -vvf rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9E60B12451BF11F08496463FC4F9AE02.roa File: 9E60B12451BF11F08496463FC4F9AE02.roa (raw, json) Hash identifier: G7alyc28UnPinuub9L7HxXgSKVSvMX+VK7VfHOkzhq8= Subject key identifier: 55:AB:A0:57:55:AB:14:05:46:D0:A5:DF:16:C4:D7:F5:7F:A2:F8:EE Certificate issuer: /CN=A91F13B9/serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Certificate serial: 28BF Authority key identifier: 7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9E60B12451BF11F08496463FC4F9AE02.roa Signing time: Wed 25 Jun 2025 12:26:29 +0000 ROA not before: Wed 25 Jun 2025 12:26:29 +0000 ROA not after: Mon 02 Mar 2026 00:00:00 +0000 asID: 38051 IP address blocks: 43.250.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 15:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10431 (0x28bf) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F13B9, serialNumber=7EAC0C2CB27A30A138EE475B07FE97E8E933FDCA Validity Not Before: Jun 25 12:26:29 2025 GMT Not After : Mar 2 00:00:00 2026 GMT Subject: CN=685beaf4-e35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7e:4e:9f:96:b6:d0:0e:1e:ed:9e:f8:97:58: fb:dd:7b:4c:00:e1:c9:c0:67:a1:ec:bc:e1:f1:91: 65:ea:b3:ca:99:22:3a:d1:2f:a2:a8:16:93:89:d1: ef:d6:f8:5a:9d:d2:45:07:66:bc:20:03:11:18:cd: da:89:3f:23:bd:c9:5e:88:a6:ad:01:45:d2:ab:9a: 13:02:80:4e:98:af:08:fe:6f:86:83:b6:5c:c5:9f: c9:47:66:99:34:94:15:40:d2:73:37:cb:39:ec:ef: 3a:0a:c1:00:d9:f4:c4:2e:92:d1:65:af:f7:e8:d0: 16:a1:06:14:7d:36:ac:2c:23:8a:b0:f5:c3:c5:34: fa:4b:80:e8:bc:67:d5:83:88:b8:08:48:0d:7d:76: 86:49:90:4c:3e:ca:b2:66:4c:bb:9a:50:64:13:1c: b7:b8:38:1c:18:37:0c:6d:0e:da:9b:bc:05:e5:09: d9:c2:22:b3:92:a3:7a:dc:d1:c2:e8:1c:2e:71:81: 93:b0:f8:49:87:77:23:09:c7:f7:44:47:ef:8b:4e: ef:20:e3:16:96:be:74:4d:a8:cc:e3:0d:f4:57:87: b6:bb:d2:c2:3b:0f:2e:0f:17:9d:05:20:a0:a5:6d: f4:95:9b:0d:4a:e8:fb:32:7a:7e:73:51:00:71:d5: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:AB:A0:57:55:AB:14:05:46:D0:A5:DF:16:C4:D7:F5:7F:A2:F8:EE X509v3 Authority Key Identifier: keyid:7E:AC:0C:2C:B2:7A:30:A1:38:EE:47:5B:07:FE:97:E8:E9:33:FD:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/fqwMLLJ6MKE47kdbB_6X6Okz_co.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fqwMLLJ6MKE47kdbB_6X6Okz_co.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F13B9/1897B2529F9D11E49619532DC4F9AE02/9E60B12451BF11F08496463FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.250.127.0/24 Signature Algorithm: sha256WithRSAEncryption bd:14:94:f5:cd:fe:cf:08:c4:2d:30:bf:11:f1:07:84:22:be: f2:e4:40:d3:37:28:ce:ee:54:a5:23:27:af:3e:42:ab:44:ef: db:dd:c4:42:c1:a2:13:8b:8e:86:c9:41:30:99:0f:cd:e3:f8: 0d:ed:1e:a4:1e:b3:bc:62:92:e9:45:ae:7a:42:70:75:5c:65: 3c:4b:ba:36:c5:fd:d4:d8:55:25:a5:40:13:b7:45:7b:b0:a4: c4:de:ba:f0:fd:69:cf:5f:ce:dc:54:5e:16:ef:a2:6f:5a:cc: 0f:6c:3c:2c:59:07:7d:5d:e0:98:d9:f7:fb:15:0a:9e:c4:ad: 9c:f5:6b:23:45:7c:ef:be:02:b7:31:7c:64:55:1a:68:79:c5: dd:42:0b:7b:c6:01:03:c6:d8:e3:80:08:49:d8:63:9f:bf:b2: dc:8c:cd:62:c7:4d:5a:8f:af:c3:05:3f:14:de:f7:cc:27:f5: 73:52:ad:59:1d:96:65:64:2a:0f:30:f4:67:18:77:e4:cb:1e: f1:3b:90:d5:f6:48:d4:ed:23:4f:5d:de:3a:34:c1:a8:19:6c: 6f:cd:6f:5b:ef:55:5a:af:61:d6:4a:54:1a:9f:8d:ef:53:ed: 2b:ec:8f:c9:2f:9a:fc:dd:61:94:ec:db:fa:4e:90:87:82:60: 25:43:38:ae -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICKL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjEzQjkxMTAvBgNVBAUTKDdFQUMwQzJDQjI3QTMwQTEzOEVFNDc1QjA3RkU5N0U4 RTkzM0ZEQ0EwHhcNMjUwNjI1MTIyNjI5WhcNMjYwMzAyMDAwMDAwWjAYMRYwFAYD VQQDEw02ODViZWFmNC1lMzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA635On5a20A4e7Z74l1j73XtMAOHJwGeh7Lzh8ZFl6rPKmSI60S+iqBaTidHv 1vhandJFB2a8IAMRGM3aiT8jvcleiKatAUXSq5oTAoBOmK8I/m+Gg7ZcxZ/JR2aZ NJQVQNJzN8s57O86CsEA2fTELpLRZa/36NAWoQYUfTasLCOKsPXDxTT6S4DovGfV g4i4CEgNfXaGSZBMPsqyZky7mlBkExy3uDgcGDcMbQ7am7wF5QnZwiKzkqN63NHC 6BwucYGTsPhJh3cjCcf3REfvi07vIOMWlr50TajM4w30V4e2u9LCOw8uDxedBSCg pW30lZsNSuj7Mnp+c1EAcdVTuwIDAQABo4IClTCCApEwHQYDVR0OBBYEFFWroFdV qxQFRtCl3xbE1/V/ovjuMB8GA1UdIwQYMBaAFH6sDCyyejChOO5HWwf+l+jpM/3K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTNCOS8xODk3QjI1MjlG OUQxMUU0OTYxOTUzMkRDNEY5QUUwMi9mcXdNTExKNk1LRTQ3a2RiQl82WDZPa3pf Y28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2Zxd01MTEo2TUtFNDdrZGJCXzZYNk9rel9jby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RjEzQjkvMTg5N0IyNTI5RjlEMTFFNDk2MTk1MzJEQzRGOUFFMDIvOUU2MEIxMjQ1 MUJGMTFGMDg0OTY0NjNGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAAr+n8wDQYJKoZIhvcNAQELBQADggEBAL0UlPXN/s8IxC0w vxHxB4QivvLkQNM3KM7uVKUjJ68+QqtE79vdxELBohOLjobJQTCZD83j+A3tHqQe s7xikulFrnpCcHVcZTxLujbF/dTYVSWlQBO3RXuwpMTeuvD9ac9fztxUXhbvom9a zA9sPCxZB31d4JjZ9/sVCp7ErZz1ayNFfO++ArcxfGRVGmh5xd1CC3vGAQPG2OOA CEnYY5+/styMzWLHTVqPr8MFPxTe98wn9XNSrVkdlmVkKg8w9GcYd+TLHvE7kNX2 SNTtI09d3jo0wagZbG/Nb1vvVVqvYdZKVBqfje9T7Svsj8kvmvzdYZTs2/pOkIeC YCVDOK4= -----END CERTIFICATE-----Generated at Thu Jul 3 01:57:53 2025 by rpki-client