$ rpki-client -vvf rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/2841A0CE0BE111ED9E3AA135C4F9AE02.roa File: 2841A0CE0BE111ED9E3AA135C4F9AE02.roa (raw, json) Hash identifier: hJkxXQfC6FPhKQvUl8F7nqWwJZPrWQsil7QshGWSWw0= Subject key identifier: 28:F5:F6:41:8D:BB:71:19:7F:83:C3:23:41:2F:BF:93:13:50:CB:9E Certificate issuer: /CN=A91770B7/serialNumber=277779AC6936A2D3214A5F1740213FDB9256C6A3 Certificate serial: 023C Authority key identifier: 27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/2841A0CE0BE111ED9E3AA135C4F9AE02.roa Signing time: Sat 11 Jan 2025 01:24:34 +0000 ROA not before: Sat 11 Jan 2025 01:24:34 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 133189 IP address blocks: 103.87.218.0/23 maxlen: 23 103.226.8.0/23 maxlen: 23 2401:3ac0::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 01:52:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 572 (0x23c) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91770B7 Validity Not Before: Jan 11 01:24:34 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=6781c851-6b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:66:d6:ff:df:58:a2:c9:c2:9b:46:89:d1:14: 3c:b5:38:13:ed:16:f1:e4:0d:98:36:73:38:f7:ac: 41:14:ff:99:93:9f:de:40:b6:62:22:7e:57:38:65: 80:2d:0e:2e:d4:32:f7:19:28:5b:91:dd:97:de:6e: 81:bb:64:55:f6:fa:bf:24:22:cc:6b:c5:76:cd:fc: 23:3e:b1:28:83:ac:e1:cc:19:4f:5a:4e:03:aa:3c: ab:2c:f2:f1:4c:39:64:4b:1c:e3:f5:1f:0b:75:21: ea:08:33:bd:d3:2b:c2:7c:92:11:15:4e:7b:f3:b3: 1e:e4:13:e6:03:cf:7b:cc:3a:da:00:79:c8:6b:36: 69:25:2f:03:e1:bd:bd:64:2f:7b:13:ad:30:14:c7: 99:d5:c8:b3:85:72:50:8f:0c:18:1e:8f:56:f1:16: 9b:ac:22:1b:ce:98:d9:e5:4c:14:39:60:6e:e7:d0: 9c:9e:8f:61:7f:68:8c:19:04:f3:f1:d7:f0:4f:9e: 8b:51:17:24:0c:08:5e:df:8c:62:bb:0f:89:5a:d7: 2a:ab:28:34:13:8e:e5:c3:a2:9b:aa:ef:e8:59:01: 08:de:f5:1f:1e:e1:eb:f1:48:d2:bc:20:31:f7:04: ff:bd:10:e6:9d:f7:4a:0a:ce:38:86:7b:f0:33:62: b7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:F5:F6:41:8D:BB:71:19:7F:83:C3:23:41:2F:BF:93:13:50:CB:9E X509v3 Authority Key Identifier: keyid:27:77:79:AC:69:36:A2:D3:21:4A:5F:17:40:21:3F:DB:92:56:C6:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/J3d5rGk2otMhSl8XQCE_25JWxqM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J3d5rGk2otMhSl8XQCE_25JWxqM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91770B7/A5264EE00BDD11ED9AB9EC2BC4F9AE02/2841A0CE0BE111ED9E3AA135C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.87.218.0/23 103.226.8.0/23 IPv6: 2401:3ac0::/32 Signature Algorithm: sha256WithRSAEncryption ae:a2:90:e6:a2:19:02:29:80:1d:0f:54:c8:75:22:25:7e:90: 8b:f3:a8:9a:75:82:65:7e:5a:bb:ad:44:5f:6b:8f:6f:07:f9: 56:61:25:69:b4:de:ae:87:98:d9:5e:50:52:6f:94:11:23:5c: e5:f1:71:31:e4:71:e1:32:c2:43:ce:9e:9a:11:f1:4e:54:cd: 6e:05:1e:b2:83:ef:4e:6c:d7:74:6f:93:78:cb:1a:92:bf:c2: 0d:b1:68:99:1a:06:5c:18:49:b5:de:78:15:32:e7:8c:b3:d4: 06:16:fd:20:6d:a4:2d:d5:40:a9:77:d4:e6:d0:50:db:dd:a5: 4d:e4:c4:7b:26:44:2c:f3:ea:64:e5:d9:be:4b:c0:0a:38:f5: 91:02:0f:51:94:1b:49:a4:74:20:d2:0f:78:79:05:aa:f3:75: 41:ec:59:43:67:52:81:dc:3f:6b:9c:22:b5:2f:e3:60:0a:e7: bc:ea:5c:3d:b7:6f:df:7c:55:a0:0f:cf:e0:ba:30:ac:8f:f3: cc:59:5b:2f:1a:44:81:54:76:81:42:50:00:a0:cd:e6:d8:49: 93:14:a0:fd:84:60:27:0c:6c:78:4d:9c:6a:1a:6d:37:9a:8d: f2:86:00:cf:32:46:46:1f:63:73:a3:2d:79:e6:95:87:b4:22: 9a:80:12:e9 -----BEGIN CERTIFICATE----- MIIFhjCCBG6gAwIBAgICAjwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NzcwQjcxMTAvBgNVBAUTKDI3Nzc3OUFDNjkzNkEyRDMyMTRBNUYxNzQwMjEzRkRC OTI1NkM2QTMwHhcNMjUwMTExMDEyNDM0WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02NzgxYzg1MS02Yjg1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA42bW/99YosnCm0aJ0RQ8tTgT7Rbx5A2YNnM496xBFP+Zk5/eQLZiIn5XOGWA LQ4u1DL3GShbkd2X3m6Bu2RV9vq/JCLMa8V2zfwjPrEog6zhzBlPWk4DqjyrLPLx TDlkSxzj9R8LdSHqCDO90yvCfJIRFU5787Me5BPmA897zDraAHnIazZpJS8D4b29 ZC97E60wFMeZ1cizhXJQjwwYHo9W8RabrCIbzpjZ5UwUOWBu59Ccno9hf2iMGQTz 8dfwT56LURckDAhe34xiuw+JWtcqqyg0E47lw6Kbqu/oWQEI3vUfHuHr8UjSvCAx 9wT/vRDmnfdKCs44hnvwM2K3HwIDAQABo4ICqjCCAqYwHQYDVR0OBBYEFCj19kGN u3EZf4PDI0Evv5MTUMueMB8GA1UdIwQYMBaAFCd3eaxpNqLTIUpfF0AhP9uSVsaj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NzBCNy9BNTI2NEVFMDBC REQxMUVEOUFCOUVDMkJDNEY5QUUwMi9KM2Q1ckdrMm90TWhTbDhYUUNFXzI1Sld4 cU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0ozZDVyR2syb3RNaFNsOFhRQ0VfMjVKV3hxTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx NzcwQjcvQTUyNjRFRTAwQkREMTFFRDlBQjlFQzJCQzRGOUFFMDIvMjg0MUEwQ0Uw QkUxMTFFRDlFM0FBMTM1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwNAYIKwYBBQUHAQcBAf8E JTAjMBIEAgABMAwDBAFnV9oDBAFn4ggwDQQCAAIwBwMFACQBOsAwDQYJKoZIhvcN AQELBQADggEBAK6ikOaiGQIpgB0PVMh1IiV+kIvzqJp1gmV+WrutRF9rj28H+VZh JWm03q6HmNleUFJvlBEjXOXxcTHkceEywkPOnpoR8U5UzW4FHrKD705s13Rvk3jL GpK/wg2xaJkaBlwYSbXeeBUy54yz1AYW/SBtpC3VQKl31ObQUNvdpU3kxHsmRCzz 6mTl2b5LwAo49ZECD1GUG0mkdCDSD3h5BarzdUHsWUNnUoHcP2ucIrUv42AK57zq XD23b998VaAPz+C6MKyP88xZWy8aRIFUdoFCUACgzebYSZMUoP2EYCcMbHhNnGoa bTeajfKGAM8yRkYfY3OjLXnmlYe0IpqAEuk= -----END CERTIFICATE-----Generated at Sun Apr 6 09:10:12 2025 by rpki-client