$ rpki-client -vvf rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/31603938763B11EF810E6D1FC4F9AE02.roa File: 31603938763B11EF810E6D1FC4F9AE02.roa (raw, json) Hash identifier: 7bLJ+6dveh56SJZSGgZCe9J26eijaiEXg9KDAFNqlo0= Subject key identifier: 46:F7:C4:57:4A:1B:14:35:4C:DA:2A:72:5C:9C:E1:70:AA:A0:30:26 Certificate issuer: /CN=A913F0E3/serialNumber=8E8377810CF9C204BB12584F3E5B5F050368246F Certificate serial: 1EB8 Authority key identifier: 8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer Subject info access: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/31603938763B11EF810E6D1FC4F9AE02.roa Signing time: Mon 31 Mar 2025 04:59:35 +0000 ROA not before: Mon 31 Mar 2025 04:59:35 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 58631 IP address blocks: 103.5.28.0/24 maxlen: 24 103.192.197.0/24 maxlen: 24 2001:df0:247::/48 maxlen: 48 2400:c760:1::/48 maxlen: 48 2400:c760:2::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Apr 2025 16:05:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7864 (0x1eb8) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A913F0E3 Validity Not Before: Mar 31 04:59:35 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67ea2137-e30a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3c:62:2d:95:7e:cb:7c:67:1f:e4:5e:19:a4: 6d:01:b8:43:fe:44:b0:45:76:86:34:3a:6e:9c:bd: 44:a0:9d:cb:40:7a:54:4f:c3:83:56:a8:44:9a:79: 69:48:d9:62:3a:29:08:f4:e3:b2:d1:9f:5d:ae:58: 98:3b:bb:bd:7b:53:db:de:c2:62:13:58:8c:63:0f: 4f:e9:17:0a:3b:18:2d:0c:f7:42:f9:97:31:b1:59: e9:fc:e4:ea:b4:df:15:4e:ec:ba:81:78:83:e6:bb: 8d:b3:75:e0:ab:39:72:34:55:b7:0f:d0:56:c8:de: 97:d2:33:ed:ad:c3:e2:1f:f0:70:a2:ed:0b:15:02: 4a:6d:fb:29:0c:53:08:48:8c:33:8d:9c:be:58:54: a5:01:6b:60:18:f4:50:78:d7:31:e0:b6:e1:7f:f7: 6f:44:6f:2d:1a:2c:15:94:b2:51:e4:89:8e:88:9f: 4d:54:49:e1:63:1d:09:ce:99:9c:63:fe:24:b7:d1: fb:67:ae:2f:45:94:93:f4:6c:9c:20:ee:dc:7f:4a: 6e:c6:34:42:56:64:82:6a:7e:32:1c:8c:33:9b:96: aa:2d:43:8b:ac:81:87:50:6f:43:ab:01:7d:ce:a3: dd:1f:80:ba:cc:ab:d3:35:86:9d:bb:40:13:b6:6a: e0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:F7:C4:57:4A:1B:14:35:4C:DA:2A:72:5C:9C:E1:70:AA:A0:30:26 X509v3 Authority Key Identifier: keyid:8E:83:77:81:0C:F9:C2:04:BB:12:58:4F:3E:5B:5F:05:03:68:24:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/joN3gQz5wgS7ElhPPltfBQNoJG8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/joN3gQz5wgS7ElhPPltfBQNoJG8.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913F0E3/291576BE6B3411E69184B66CC4F9AE02/31603938763B11EF810E6D1FC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.5.28.0/24 103.192.197.0/24 IPv6: 2001:df0:247::/48 2400:c760:1::-2400:c760:2:ffff:ffff:ffff:ffff:ffff Signature Algorithm: sha256WithRSAEncryption 35:1e:2e:4c:b3:4c:ce:5a:b7:34:55:61:9d:7e:f6:cb:62:25: b6:81:23:a3:a9:49:28:92:72:fa:70:5f:2a:65:ab:33:77:54: 7c:5e:34:aa:ea:7f:ce:8f:4c:1c:bb:a0:0b:1f:57:dc:22:23: 14:68:01:44:c9:b8:22:c5:b1:df:d6:d2:b3:76:ac:1b:12:60: 68:3f:7c:b6:f4:e7:54:a5:f2:5c:4e:70:82:b0:e6:0a:a9:d3: 56:1c:c1:a0:82:9e:ad:11:b3:b0:cc:41:b4:c9:31:ea:ad:1c: 6b:c9:90:1e:50:76:d1:de:c8:4a:a1:a1:60:c1:6e:83:e0:8d: 66:d3:be:92:68:74:3a:c8:a3:b4:06:73:17:75:26:44:97:0e: 56:24:64:7d:fc:31:fa:57:65:2e:2c:52:6d:06:96:28:43:ef: b9:aa:58:bb:97:07:6c:c0:26:8a:c2:df:28:79:30:6e:ab:60: a7:10:d0:41:0d:2e:b7:71:ff:f8:fa:ed:ac:6a:6f:99:2d:2c: ec:a2:fa:87:3d:0c:11:f9:ff:55:a4:6d:f7:06:d7:90:57:b6: 13:a7:2a:8c:be:a6:58:f8:d4:61:20:fa:a2:df:1a:f6:4e:0a: 79:37:b3:54:da:c0:81:3a:43:7e:12:94:66:f4:f9:94:23:71: 30:57:0f:25 -----BEGIN CERTIFICATE----- MIIFnDCCBISgAwIBAgICHrgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx M0YwRTMxMTAvBgNVBAUTKDhFODM3NzgxMENGOUMyMDRCQjEyNTg0RjNFNUI1RjA1 MDM2ODI0NkYwHhcNMjUwMzMxMDQ1OTM1WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VhMjEzNy1lMzBhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAozxiLZV+y3xnH+ReGaRtAbhD/kSwRXaGNDpunL1EoJ3LQHpUT8ODVqhEmnlp SNliOikI9OOy0Z9drliYO7u9e1Pb3sJiE1iMYw9P6RcKOxgtDPdC+ZcxsVnp/OTq tN8VTuy6gXiD5ruNs3XgqzlyNFW3D9BWyN6X0jPtrcPiH/Bwou0LFQJKbfspDFMI SIwzjZy+WFSlAWtgGPRQeNcx4Lbhf/dvRG8tGiwVlLJR5ImOiJ9NVEnhYx0Jzpmc Y/4kt9H7Z64vRZST9GycIO7cf0puxjRCVmSCan4yHIwzm5aqLUOLrIGHUG9DqwF9 zqPdH4C6zKvTNYadu0ATtmrg/wIDAQABo4ICwDCCArwwHQYDVR0OBBYEFEb3xFdK GxQ1TNoqclyc4XCqoDAmMB8GA1UdIwQYMBaAFI6Dd4EM+cIEuxJYTz5bXwUDaCRv MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzRjBFMy8yOTE1NzZCRTZC MzQxMUU2OTE4NEI2NkNDNEY5QUUwMi9qb04zZ1F6NXdnUzdFbGhQUGx0ZkJRTm9K RzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2pvTjNnUXo1d2dTN0VsaFBQbHRmQlFOb0pHOC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx M0YwRTMvMjkxNTc2QkU2QjM0MTFFNjkxODRCNjZDQzRGOUFFMDIvMzE2MDM5Mzg3 NjNCMTFFRjgxMEU2RDFGQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwSgYIKwYBBQUHAQcBAf8E OzA5MBIEAgABMAwDBABnBRwDBABnwMUwIwQCAAIwHQMHACABDfACRzASAwcAJADH YAABAwcAJADHYAACMA0GCSqGSIb3DQEBCwUAA4IBAQA1Hi5Ms0zOWrc0VWGdfvbL YiW2gSOjqUkoknL6cF8qZaszd1R8XjSq6n/Oj0wcu6ALH1fcIiMUaAFEybgixbHf 1tKzdqwbEmBoP3y29OdUpfJcTnCCsOYKqdNWHMGggp6tEbOwzEG0yTHqrRxryZAe UHbR3shKoaFgwW6D4I1m076SaHQ6yKO0BnMXdSZElw5WJGR9/DH6V2UuLFJtBpYo Q++5qli7lwdswCaKwt8oeTBuq2CnENBBDS63cf/4+u2sam+ZLSzsovqHPQwR+f9V pG33BteQV7YTpyqMvqZY+NRhIPqi3xr2Tgp5N7NU2sCBOkN+EpRm9PmUI3EwVw8l -----END CERTIFICATE-----Generated at Sat Apr 12 09:10:31 2025 by rpki-client