$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/6BC3CFFCAEAF11EAB092EE6BC4F9AE02.roa File: 6BC3CFFCAEAF11EAB092EE6BC4F9AE02.roa (raw, json) Hash identifier: u6H4P2TM61hqsziMp+QKQRj8V8OU+PakHeQt/LegiXU= Subject key identifier: 2A:78:76:6A:C1:81:61:1C:72:F8:43:49:E7:A7:CE:9F:10:8B:96:1B Certificate issuer: /CN=A91FDC78/serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Certificate serial: 0902 Authority key identifier: CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/6BC3CFFCAEAF11EAB092EE6BC4F9AE02.roa Signing time: Tue 17 Jun 2025 14:31:35 +0000 ROA not before: Tue 17 Jun 2025 14:31:35 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 135126 IP address blocks: 43.252.112.0/22 maxlen: 22 43.252.112.0/24 maxlen: 24 43.252.113.0/24 maxlen: 24 43.252.114.0/24 maxlen: 24 43.252.115.0/24 maxlen: 24 103.210.24.0/22 maxlen: 22 103.210.24.0/23 maxlen: 23 103.210.24.0/24 maxlen: 24 103.210.25.0/24 maxlen: 24 103.210.26.0/24 maxlen: 24 103.210.27.0/24 maxlen: 24 180.233.124.0/22 maxlen: 22 180.233.124.0/24 maxlen: 24 180.233.125.0/24 maxlen: 24 180.233.126.0/24 maxlen: 24 180.233.127.0/24 maxlen: 24 2404:78c0::/48 maxlen: 48 2404:78c0:1::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Jul 2025 20:37:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2306 (0x902) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FDC78, serialNumber=CC57E036431A5EA3C172AA7283401AF3C4AD5C59 Validity Not Before: Jun 17 14:31:35 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=68517c47-5351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:99:c0:e8:d3:ab:57:42:89:6f:c5:78:b0:86: 48:f9:70:5d:77:e0:97:b0:bf:37:ea:d7:63:a5:fa: af:82:02:38:58:fa:13:6b:35:7b:82:c3:51:21:14: d2:c5:43:e0:d3:a7:ff:4b:e5:59:01:22:3b:42:97: 92:e8:fa:74:be:43:93:2e:14:af:7d:62:2f:d9:f4: a3:9e:bb:8a:0c:4c:bf:22:a3:40:1a:2a:7d:ee:bf: 20:42:c0:5c:61:ef:58:11:fa:95:93:c2:09:39:3b: 54:0b:99:69:5e:ea:80:d0:12:ab:2c:e8:77:74:ba: 4e:6f:20:e9:c4:81:f9:50:e5:c8:ed:5a:f3:e8:67: ee:e3:13:7b:51:8d:20:7f:aa:a3:49:1e:0e:6f:50: 43:8c:02:21:2d:9f:54:cb:6c:fa:14:fd:29:29:b0: fb:6a:fe:76:c5:2e:a1:a3:c0:8b:84:20:f5:f4:c7: 94:06:51:5d:51:c3:1a:02:08:c9:f3:a4:a3:33:ad: 70:f5:81:f8:7b:7d:f6:40:63:be:07:f0:90:f3:8f: 3d:cc:8f:b4:b3:fa:f7:b0:ac:94:17:a6:9f:1b:ee: de:34:7f:c6:1c:de:74:52:33:eb:49:28:96:46:ff: 78:6e:67:70:cf:93:a7:3c:21:04:48:33:66:e6:b4: cd:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:78:76:6A:C1:81:61:1C:72:F8:43:49:E7:A7:CE:9F:10:8B:96:1B X509v3 Authority Key Identifier: keyid:CC:57:E0:36:43:1A:5E:A3:C1:72:AA:72:83:40:1A:F3:C4:AD:5C:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/zFfgNkMaXqPBcqpyg0Aa88StXFk.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zFfgNkMaXqPBcqpyg0Aa88StXFk.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC78/15474008AEAC11EAA6C1D761C4F9AE02/6BC3CFFCAEAF11EAB092EE6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 43.252.112.0/22 103.210.24.0/22 180.233.124.0/22 IPv6: 2404:78c0::/47 Signature Algorithm: sha256WithRSAEncryption 54:e3:fd:d3:29:2f:d3:4c:04:a0:a2:35:51:61:6f:32:44:ac: 8f:d6:ff:29:81:cc:5b:f2:69:bc:ea:5c:be:86:96:6e:95:f5: 72:40:f7:27:a4:30:33:01:27:45:3a:7a:c8:bf:31:ed:aa:8f: d4:28:1b:e3:3b:41:11:f4:e4:c8:c2:7b:e3:45:67:9e:84:61: c9:b9:ef:c7:04:3b:51:fc:6e:0b:dc:3e:dd:86:df:1e:d1:79: 3e:41:fc:10:44:21:8c:c6:08:fe:a1:e0:48:ab:0e:ac:85:d3: fe:8a:85:a9:4f:92:c0:db:26:09:e4:23:7a:06:45:8f:79:ab: 8f:11:be:2a:1e:78:df:de:7e:71:69:00:b4:d9:54:51:75:99: ef:7b:fa:65:ca:37:ef:db:0d:15:21:a1:2b:10:74:b2:e2:ae: 1e:35:d6:98:d4:78:dc:9b:a6:37:82:3a:8c:61:d7:7f:2d:bd: 33:d1:67:ba:d3:2b:7b:3f:2a:61:cf:d4:f8:65:20:83:26:02: 06:dd:3f:77:fb:8e:61:3d:94:8d:57:52:ce:07:99:44:73:d5: 94:b8:a8:aa:09:01:7f:46:0b:bc:99:13:1a:f6:c8:75:e3:3b: a4:43:53:e9:4b:f9:57:2d:91:6f:c4:ac:40:1b:a0:84:1f:e5: 54:d7:30:dd -----BEGIN CERTIFICATE----- MIIFjjCCBHagAwIBAgICCQIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RkRDNzgxMTAvBgNVBAUTKENDNTdFMDM2NDMxQTVFQTNDMTcyQUE3MjgzNDAxQUYz QzRBRDVDNTkwHhcNMjUwNjE3MTQzMTM1WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02ODUxN2M0Ny01MzUxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAr5nA6NOrV0KJb8V4sIZI+XBdd+CXsL836tdjpfqvggI4WPoTazV7gsNRIRTS xUPg06f/S+VZASI7QpeS6Pp0vkOTLhSvfWIv2fSjnruKDEy/IqNAGip97r8gQsBc Ye9YEfqVk8IJOTtUC5lpXuqA0BKrLOh3dLpObyDpxIH5UOXI7Vrz6Gfu4xN7UY0g f6qjSR4Ob1BDjAIhLZ9Uy2z6FP0pKbD7av52xS6ho8CLhCD19MeUBlFdUcMaAgjJ 86SjM61w9YH4e332QGO+B/CQ8489zI+0s/r3sKyUF6afG+7eNH/GHN50UjPrSSiW Rv94bmdwz5OnPCEESDNm5rTNHwIDAQABo4ICsjCCAq4wHQYDVR0OBBYEFCp4dmrB gWEccvhDSeenzp8Qi5YbMB8GA1UdIwQYMBaAFMxX4DZDGl6jwXKqcoNAGvPErVxZ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGREM3OC8xNTQ3NDAwOEFF QUMxMUVBQTZDMUQ3NjFDNEY5QUUwMi96RmZnTmtNYVhxUEJjcXB5ZzBBYTg4U3RY RmsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3pGZmdOa01hWHFQQmNxcHlnMEFhODhTdFhGay5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RkRDNzgvMTU0NzQwMDhBRUFDMTFFQUE2QzFENzYxQzRGOUFFMDIvNkJDM0NGRkNB RUFGMTFFQUIwOTJFRTZCQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwPAYIKwYBBQUHAQcBAf8E LTArMBgEAgABMBIDBAIr/HADBAJn0hgDBAK06XwwDwQCAAIwCQMHASQEeMAAADAN BgkqhkiG9w0BAQsFAAOCAQEAVOP90ykv00wEoKI1UWFvMkSsj9b/KYHMW/JpvOpc voaWbpX1ckD3J6QwMwEnRTp6yL8x7aqP1Cgb4ztBEfTkyMJ740VnnoRhybnvxwQ7 UfxuC9w+3YbfHtF5PkH8EEQhjMYI/qHgSKsOrIXT/oqFqU+SwNsmCeQjegZFj3mr jxG+Kh54395+cWkAtNlUUXWZ73v6Zco379sNFSGhKxB0suKuHjXWmNR43JumN4I6 jGHXfy29M9FnutMrez8qYc/U+GUggyYCBt0/d/uOYT2UjVdSzgeZRHPVlLioqgkB f0YLvJkTGvbIdeM7pENT6Uv5Vy2Rb8SsQBughB/lVNcw3Q== -----END CERTIFICATE-----Generated at Thu Jul 3 13:56:15 2025 by rpki-client