$ rpki-client -vvf rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/58CA2F840D3E11F08AA20980C4F9AE02.roa File: 58CA2F840D3E11F08AA20980C4F9AE02.roa (raw, json) Hash identifier: o3WxnMuTVoZ5sDv98g86AWu9+ZVPEihcJKRFXeclwGE= Subject key identifier: B1:74:70:E4:54:F7:57:BB:33:A3:EB:A0:25:0D:02:EF:E9:7A:4E:74 Certificate issuer: /CN=A911BAD6/serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Certificate serial: 01EB Authority key identifier: 53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/58CA2F840D3E11F08AA20980C4F9AE02.roa Signing time: Sun 30 Mar 2025 08:09:48 +0000 ROA not before: Sun 30 Mar 2025 08:09:48 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 150319 IP address blocks: 103.10.194.0/23 maxlen: 23 103.10.195.0/24 maxlen: 24 2001:df1:4dc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 01:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 491 (0x1eb) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A911BAD6, serialNumber=5332F9AF3052CF3F85EABDD0AAD681523952E656 Validity Not Before: Mar 30 08:09:48 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67e8fc4b-8494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:4e:6c:ab:64:3e:dd:83:cc:6c:dd:8d:cc:82: 4a:82:bd:df:c0:aa:67:2d:21:6f:6a:f9:34:c9:0f: 0c:70:d0:5a:6f:bb:be:41:17:ac:54:65:df:d1:d1: 9c:b9:fc:76:21:44:e6:2c:ee:97:78:99:8a:d9:f3: 21:c7:c0:b9:18:18:ed:14:a9:dd:fe:38:7d:23:83: 8a:93:7b:4d:b7:3c:47:97:69:ab:84:1b:6e:4e:93: 2f:94:f6:e1:af:ce:8e:3a:5d:73:7c:38:e8:f2:5b: 8a:17:45:7e:32:ac:66:39:29:38:d1:78:d2:50:32: ce:8e:31:9f:5d:ab:ce:60:ab:9f:6f:68:2e:cc:0e: 99:9f:fc:e6:a5:d3:33:a1:e0:67:dc:ae:52:d1:56: f6:05:70:3a:f6:8d:61:eb:7c:89:ea:82:e0:44:52: 14:cc:2a:f9:b0:27:52:ed:5b:87:d1:82:ae:29:34: b2:de:63:a1:48:08:bc:1a:08:14:20:15:25:54:ec: 7c:72:5a:a0:41:5a:8b:82:11:28:0f:52:b8:3f:90: f2:db:bc:d4:75:65:5a:73:41:f8:97:6b:c2:7e:6f: 75:dc:fd:03:b6:93:cc:8c:83:7e:80:4a:80:bb:a1: 45:c7:ed:16:43:80:92:b5:2c:84:14:b5:5f:5a:ba: 79:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:74:70:E4:54:F7:57:BB:33:A3:EB:A0:25:0D:02:EF:E9:7A:4E:74 X509v3 Authority Key Identifier: keyid:53:32:F9:AF:30:52:CF:3F:85:EA:BD:D0:AA:D6:81:52:39:52:E6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/UzL5rzBSzz-F6r3QqtaBUjlS5lY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UzL5rzBSzz-F6r3QqtaBUjlS5lY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911BAD6/D64F4E9C3AF211EDA842C576C4F9AE02/58CA2F840D3E11F08AA20980C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.10.194.0/23 IPv6: 2001:df1:4dc0::/48 Signature Algorithm: sha256WithRSAEncryption c4:ff:9c:d8:07:b2:5c:60:56:ec:6d:15:8f:4b:7e:e6:a2:aa: 81:b3:8c:b8:01:7d:0b:0e:98:f7:b5:1b:5e:ea:78:41:e0:80: 4a:3b:c0:54:b6:b6:be:4a:fe:5a:24:7a:56:83:43:ef:b9:f4: b9:04:97:9e:a2:7d:1e:0e:2e:1a:ba:be:ab:0c:8f:bf:32:07: f6:fd:3e:4a:e5:ba:01:b5:de:80:49:d3:12:93:d6:21:4d:7d: 3c:b8:d4:6a:ca:73:69:b7:0c:69:52:e3:91:c4:ea:f2:8d:83: 3d:d2:fb:1e:c2:25:2e:34:9f:74:e3:be:cb:10:d0:d3:ab:e4: a5:58:fe:6d:2f:a9:7b:ac:54:5f:f0:ce:75:04:96:90:8f:ea: aa:18:f6:6b:10:d7:0f:d0:5a:29:f5:94:a6:6d:a5:a7:ab:97: 51:e0:73:76:eb:50:04:d6:6d:24:58:cc:54:c3:c6:dd:01:7b: fa:12:c1:04:54:8e:c8:42:37:ba:f0:7c:cc:b3:4d:ee:1a:0e: 86:87:14:60:af:2b:2e:9c:8b:ec:8f:a5:b5:f9:95:47:fe:2c: 5c:3f:4f:94:71:e6:c8:62:9f:9f:63:63:f0:d9:0b:7f:4e:f6: c6:1d:5b:f8:68:c4:b1:69:9b:e8:0a:9e:63:40:5b:22:73:90: 06:c0:38:cb -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAeswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MUJBRDYxMTAvBgNVBAUTKDUzMzJGOUFGMzA1MkNGM0Y4NUVBQkREMEFBRDY4MTUy Mzk1MkU2NTYwHhcNMjUwMzMwMDgwOTQ4WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2U4ZmM0Yi04NDk0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA705sq2Q+3YPMbN2NzIJKgr3fwKpnLSFvavk0yQ8McNBab7u+QResVGXf0dGc ufx2IUTmLO6XeJmK2fMhx8C5GBjtFKnd/jh9I4OKk3tNtzxHl2mrhBtuTpMvlPbh r86OOl1zfDjo8luKF0V+MqxmOSk40XjSUDLOjjGfXavOYKufb2guzA6Zn/zmpdMz oeBn3K5S0Vb2BXA69o1h63yJ6oLgRFIUzCr5sCdS7VuH0YKuKTSy3mOhSAi8GggU IBUlVOx8clqgQVqLghEoD1K4P5Dy27zUdWVac0H4l2vCfm913P0DtpPMjIN+gEqA u6FFx+0WQ4CStSyEFLVfWrp5kQIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFLF0cORU 91e7M6ProCUNAu/pek50MB8GA1UdIwQYMBaAFFMy+a8wUs8/heq90KrWgVI5UuZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQkFENi9ENjRGNEU5QzNB RjIxMUVEQTg0MkM1NzZDNEY5QUUwMi9Vekw1cnpCU3p6LUY2cjNRcXRhQlVqbFM1 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1V6TDVyekJTenotRjZyM1FxdGFCVWpsUzVsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MUJBRDYvRDY0RjRFOUMzQUYyMTFFREE4NDJDNTc2QzRGOUFFMDIvNThDQTJGODQw RDNFMTFGMDhBQTIwOTgwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnCsIwDwQCAAIwCQMHACABDfFNwDANBgkqhkiG9w0BAQsF AAOCAQEAxP+c2AeyXGBW7G0Vj0t+5qKqgbOMuAF9Cw6Y97UbXup4QeCASjvAVLa2 vkr+WiR6VoND77n0uQSXnqJ9Hg4uGrq+qwyPvzIH9v0+SuW6AbXegEnTEpPWIU19 PLjUaspzabcMaVLjkcTq8o2DPdL7HsIlLjSfdOO+yxDQ06vkpVj+bS+pe6xUX/DO dQSWkI/qqhj2axDXD9BaKfWUpm2lp6uXUeBzdutQBNZtJFjMVMPG3QF7+hLBBFSO yEI3uvB8zLNN7hoOhocUYK8rLpyL7I+ltfmVR/4sXD9PlHHmyGKfn2Nj8NkLf072 xh1b+GjEsWmb6AqeY0BbInOQBsA4yw== -----END CERTIFICATE-----Generated at Mon Apr 14 15:29:51 2025 by rpki-client