$ rpki-client -vvf rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/D0A31DDC8E6011EC93F6710FC4F9AE02.roa File: D0A31DDC8E6011EC93F6710FC4F9AE02.roa (raw, json) Hash identifier: 56SXWg9vgGgESxFQOAJJzB+wTF1OQoT0wNilbJGbabc= Subject key identifier: 8E:BF:F8:8B:4F:85:AC:AF:F4:B4:07:44:6C:32:AA:C4:F9:27:1C:70 Certificate issuer: /CN=A91262BD/serialNumber=D2E78E52C5DBCBF5E1841DACE527AEAA894A9A76 Certificate serial: 0604 Authority key identifier: D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/D0A31DDC8E6011EC93F6710FC4F9AE02.roa Signing time: Sun 16 Feb 2025 23:51:52 +0000 ROA not before: Sun 16 Feb 2025 23:51:52 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 63969 IP address blocks: 103.106.118.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 22:56:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1540 (0x604) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91262BD Validity Not Before: Feb 16 23:51:52 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67b27a17-2ad4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:11:61:64:99:c0:37:f0:de:d5:ff:7d:3c:14: 37:24:68:94:45:2c:fc:3b:b9:62:7e:0b:a9:31:d4: c5:64:ab:f0:18:69:63:52:e3:22:33:0a:2c:d1:55: f4:b0:e5:61:04:6b:41:f9:28:b2:33:1d:d8:90:48: 4f:99:37:5b:7f:c3:73:10:4c:71:41:94:ba:a5:ca: b1:ee:09:3e:33:4a:01:f5:57:7a:83:f2:4a:a1:57: c0:98:d7:71:bf:44:8b:aa:81:e2:c2:6f:a4:64:da: be:a8:c0:a0:53:b3:f3:c5:3b:3e:a7:77:02:36:f6: f6:b5:cf:52:b1:ec:d8:67:b8:e2:66:b0:93:71:9e: 30:e7:ae:1d:bd:de:6e:25:18:d3:73:12:3c:4e:b5: 3b:77:0f:59:17:d6:84:97:2c:3f:3d:4a:de:07:2f: 27:f3:86:95:37:ed:4c:e9:ca:35:b0:7c:cb:e8:73: eb:a0:b5:8d:cc:37:d1:ff:6b:1c:94:85:b2:1e:0d: 52:e4:3a:42:79:ae:3f:1f:60:3c:9f:d8:0e:64:6f: 23:b3:45:c1:53:dd:49:09:8a:9b:e0:8c:83:82:ad: 92:3f:29:15:a0:c1:3e:40:16:9d:d7:74:3f:eb:80: 0a:48:77:9d:d8:7c:67:92:a1:53:f9:b3:21:98:dd: 39:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:BF:F8:8B:4F:85:AC:AF:F4:B4:07:44:6C:32:AA:C4:F9:27:1C:70 X509v3 Authority Key Identifier: keyid:D2:E7:8E:52:C5:DB:CB:F5:E1:84:1D:AC:E5:27:AE:AA:89:4A:9A:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/0ueOUsXby_XhhB2s5SeuqolKmnY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0ueOUsXby_XhhB2s5SeuqolKmnY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262BD/D3F11F0E991311EB860DDB3DC4F9AE02/D0A31DDC8E6011EC93F6710FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.106.118.0/23 Signature Algorithm: sha256WithRSAEncryption 50:f5:a4:83:2d:dd:b6:6f:0c:68:87:d6:e1:b5:98:15:0e:e0: 96:d8:6b:74:a6:21:9d:4c:41:d5:5d:42:f5:1f:9b:16:84:77: 9d:a3:e5:d0:05:3c:1c:fa:6d:8a:11:d1:c9:f2:6e:d0:87:73: cb:c0:73:ae:a0:b5:24:7b:55:5e:93:85:90:82:21:cf:b2:a5: f8:c7:e0:15:89:ad:93:ba:fd:2d:70:c6:19:c5:e3:0d:c2:3e: 64:02:9d:17:b9:ad:65:b6:10:c2:6b:0c:ad:7a:80:1d:1b:7e: 8e:ed:9d:c7:28:2a:9d:ce:63:2f:fd:e1:d0:56:6f:cc:45:48: 61:a1:65:17:e0:f8:3b:90:97:08:23:11:a0:7d:f9:b8:bc:7b: 8a:e4:95:3d:74:6b:53:77:3c:ab:ab:97:e5:00:b2:3b:6b:71: e7:87:94:fa:a0:81:85:7d:a4:d5:50:bf:09:7f:46:90:2e:29: 4e:07:49:ba:9a:75:c9:e1:57:5d:5c:a2:0e:09:b9:a9:38:f1: b9:91:72:5a:a8:6a:69:c9:47:89:4a:d1:8c:ec:f5:67:b3:a6: 1b:0e:de:2d:27:38:ef:d4:20:28:c2:66:b7:30:d9:08:34:fb: 32:13:9e:f1:b5:34:b6:47:4b:bd:3d:7d:bf:0d:2b:15:70:53: 80:7e:3f:3a -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBgQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MjYyQkQxMTAvBgNVBAUTKEQyRTc4RTUyQzVEQkNCRjVFMTg0MURBQ0U1MjdBRUFB ODk0QTlBNzYwHhcNMjUwMjE2MjM1MTUyWhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2IyN2ExNy0yYWQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsRFhZJnAN/De1f99PBQ3JGiURSz8O7lifgupMdTFZKvwGGljUuMiMwos0VX0 sOVhBGtB+SiyMx3YkEhPmTdbf8NzEExxQZS6pcqx7gk+M0oB9Vd6g/JKoVfAmNdx v0SLqoHiwm+kZNq+qMCgU7PzxTs+p3cCNvb2tc9SsezYZ7jiZrCTcZ4w564dvd5u JRjTcxI8TrU7dw9ZF9aElyw/PUreBy8n84aVN+1M6co1sHzL6HProLWNzDfR/2sc lIWyHg1S5DpCea4/H2A8n9gOZG8js0XBU91JCYqb4IyDgq2SPykVoME+QBad13Q/ 64AKSHed2HxnkqFT+bMhmN05HwIDAQABo4IClTCCApEwHQYDVR0OBBYEFI6/+ItP hayv9LQHRGwyqsT5JxxwMB8GA1UdIwQYMBaAFNLnjlLF28v14YQdrOUnrqqJSpp2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNjJCRC9EM0YxMUYwRTk5 MTMxMUVCODYwRERCM0RDNEY5QUUwMi8wdWVPVXNYYnlfWGhoQjJzNVNldXFvbEtt blkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzB1ZU9Vc1hieV9YaGhCMnM1U2V1cW9sS21uWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MjYyQkQvRDNGMTFGMEU5OTEzMTFFQjg2MEREQjNEQzRGOUFFMDIvRDBBMzFEREM4 RTYwMTFFQzkzRjY3MTBGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnanYwDQYJKoZIhvcNAQELBQADggEBAFD1pIMt3bZvDGiH 1uG1mBUO4JbYa3SmIZ1MQdVdQvUfmxaEd52j5dAFPBz6bYoR0cnybtCHc8vAc66g tSR7VV6ThZCCIc+ypfjH4BWJrZO6/S1wxhnF4w3CPmQCnRe5rWW2EMJrDK16gB0b fo7tnccoKp3OYy/94dBWb8xFSGGhZRfg+DuQlwgjEaB9+bi8e4rklT10a1N3PKur l+UAsjtrceeHlPqggYV9pNVQvwl/RpAuKU4HSbqadcnhV11cog4Juak48bmRclqo amnJR4lK0Yzs9WezphsO3i0nOO/UICjCZrcw2Qg0+zITnvG1NLZHS709fb8NKxVw U4B+Pzo= -----END CERTIFICATE-----Generated at Sat Apr 5 07:16:51 2025 by rpki-client