$ rpki-client -vvf rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8DB35F6A766511EF8820F844C4F9AE02.roa File: 8DB35F6A766511EF8820F844C4F9AE02.roa (raw, json) Hash identifier: DUjlMecJ3MCBuCiDf6r0BnVvRVnuDf5vmODbFKyvDAA= Subject key identifier: B9:28:6B:26:EF:80:E3:52:39:50:5D:CA:FE:03:2D:33:26:2E:58:8F Certificate issuer: /CN=A91354AE/serialNumber=87F958DAF498659A9EEE0FF144226B1710489DE0 Certificate serial: 0378 Authority key identifier: 87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8DB35F6A766511EF8820F844C4F9AE02.roa Signing time: Sat 05 Apr 2025 01:06:39 +0000 ROA not before: Sat 05 Apr 2025 01:06:39 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 139855 IP address blocks: 103.183.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:06:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 888 (0x378) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91354AE Validity Not Before: Apr 5 01:06:39 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f0821f-88b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8a:48:60:70:ae:e7:c8:8e:ee:f8:06:69:4c: be:d3:0c:06:40:51:57:fd:3e:0f:08:4f:1a:fe:78: 88:05:bd:1b:d4:99:b8:91:c4:07:7b:3e:aa:c3:b4: 88:4e:68:8c:02:cf:d8:7a:ed:f0:27:f3:cd:cc:d1: 1a:52:4f:d2:d4:12:05:d7:4f:9c:28:11:55:be:46: c6:fb:64:16:04:52:a6:a7:73:f3:31:87:59:3a:ba: e4:5c:59:c2:e4:2f:75:e8:09:da:33:e2:18:4a:de: e6:9a:b3:ab:49:4b:49:15:fd:51:e7:a3:ea:2e:c3: 6e:05:b5:d6:c2:f0:ad:0e:a9:b4:31:14:eb:8d:72: 21:b9:7f:52:e3:16:e5:1a:29:41:88:f0:dd:9d:d1: 07:ed:39:94:38:69:bc:ee:90:88:3a:69:08:38:cd: d0:96:95:1a:94:9c:43:dc:98:b8:6e:5a:2b:5c:61: 2e:47:19:fb:e6:bc:d7:a4:83:2b:d3:e4:03:36:fb: 64:2f:70:40:77:d0:2c:0b:3a:36:88:97:2e:fc:44: 22:f3:c5:cf:ed:e2:01:a4:30:e6:f8:51:af:e3:7a: 4d:10:52:04:67:67:3c:17:bf:f0:83:8b:7e:53:8c: 49:09:54:c0:2f:af:2f:d6:33:43:2b:95:a6:d1:df: 99:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:28:6B:26:EF:80:E3:52:39:50:5D:CA:FE:03:2D:33:26:2E:58:8F X509v3 Authority Key Identifier: keyid:87:F9:58:DA:F4:98:65:9A:9E:EE:0F:F1:44:22:6B:17:10:48:9D:E0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/h_lY2vSYZZqe7g_xRCJrFxBIneA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h_lY2vSYZZqe7g_xRCJrFxBIneA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91354AE/6C9F2DFAA50111EC89642757C4F9AE02/8DB35F6A766511EF8820F844C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.183.246.0/24 Signature Algorithm: sha256WithRSAEncryption b7:cc:1e:5d:0e:56:3d:a9:60:73:18:c4:b4:76:8a:c2:99:94: 20:5b:f2:5a:13:18:c3:7d:43:ac:b1:30:a9:11:54:5e:27:7b: 33:6b:c8:fb:7c:3a:d6:70:71:2f:c7:75:0e:f9:58:c3:aa:78: be:fc:81:c3:10:09:e1:5c:72:a7:97:05:76:d9:98:b4:4f:aa: 91:a2:80:ce:80:b1:3b:a6:d0:88:66:33:51:37:da:46:41:1f: fd:08:d6:d9:c2:4d:62:ea:b4:e9:96:0d:9b:95:ee:fe:15:c3: c4:f6:8b:65:86:be:59:7f:bd:f4:05:cc:41:22:84:0a:ac:1d: f2:47:e3:0e:45:73:db:b8:b1:a1:19:f1:7a:34:9a:64:80:3e: 12:2e:d9:e3:16:a4:e6:a7:32:c8:6d:28:7c:94:91:79:6a:47: 53:bb:8c:88:9e:8a:61:1d:ed:49:91:46:4b:db:f1:04:e7:6f: b5:74:d3:81:43:34:2a:1d:20:9b:4f:e0:d9:d6:89:d9:6f:72: e7:e2:f7:6f:7f:e5:dc:7d:75:88:b7:eb:cf:c3:8f:e8:90:f3: 96:4b:ab:d2:c4:1d:82:10:6d:9a:4b:d8:86:3d:5d:4f:fa:c4: d9:4f:6a:e6:6f:70:ed:58:3b:0f:8e:07:7b:f3:e1:9c:aa:38: f7:5c:4d:22 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICA3gwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzU0QUUxMTAvBgNVBAUTKDg3Rjk1OERBRjQ5ODY1OUE5RUVFMEZGMTQ0MjI2QjE3 MTA0ODlERTAwHhcNMjUwNDA1MDEwNjM5WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2YwODIxZi04OGIzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsYpIYHCu58iO7vgGaUy+0wwGQFFX/T4PCE8a/niIBb0b1Jm4kcQHez6qw7SI TmiMAs/Yeu3wJ/PNzNEaUk/S1BIF10+cKBFVvkbG+2QWBFKmp3PzMYdZOrrkXFnC 5C916AnaM+IYSt7mmrOrSUtJFf1R56PqLsNuBbXWwvCtDqm0MRTrjXIhuX9S4xbl GilBiPDdndEH7TmUOGm87pCIOmkIOM3QlpUalJxD3Ji4blorXGEuRxn75rzXpIMr 0+QDNvtkL3BAd9AsCzo2iJcu/EQi88XP7eIBpDDm+FGv43pNEFIEZ2c8F7/wg4t+ U4xJCVTAL68v1jNDK5Wm0d+ZMwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLkoaybv gONSOVBdyv4DLTMmLliPMB8GA1UdIwQYMBaAFIf5WNr0mGWanu4P8UQiaxcQSJ3g MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTRBRS82QzlGMkRGQUE1 MDExMUVDODk2NDI3NTdDNEY5QUUwMi9oX2xZMnZTWVpacWU3Z194UkNKckZ4Qklu ZUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2hfbFkydlNZWlpxZTdnX3hSQ0pyRnhCSW5lQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx MzU0QUUvNkM5RjJERkFBNTAxMTFFQzg5NjQyNzU3QzRGOUFFMDIvOERCMzVGNkE3 NjY1MTFFRjg4MjBGODQ0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnt/YwDQYJKoZIhvcNAQELBQADggEBALfMHl0OVj2pYHMY xLR2isKZlCBb8loTGMN9Q6yxMKkRVF4nezNryPt8OtZwcS/HdQ75WMOqeL78gcMQ CeFccqeXBXbZmLRPqpGigM6AsTum0IhmM1E32kZBH/0I1tnCTWLqtOmWDZuV7v4V w8T2i2WGvll/vfQFzEEihAqsHfJH4w5Fc9u4saEZ8Xo0mmSAPhIu2eMWpOanMsht KHyUkXlqR1O7jIieimEd7UmRRkvb8QTnb7V004FDNCodIJtP4NnWidlvcufi929/ 5dx9dYi368/Dj+iQ85ZLq9LEHYIQbZpL2IY9XU/6xNlPauZvcO1YOw+OB3vz4Zyq OPdcTSI= -----END CERTIFICATE-----Generated at Sun Apr 6 18:05:58 2025 by rpki-client