$ rpki-client -vvf rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/101ED47C04A811F0B2A84883C4F9AE02.roa File: 101ED47C04A811F0B2A84883C4F9AE02.roa (raw, json) Hash identifier: UMF6vL/14eo387r7vPb0+tyR8XlL97j8b/ozHXisZRM= Subject key identifier: 3B:0A:45:5D:FE:3A:1C:90:49:C5:0C:BC:5D:96:5B:7E:14:33:9A:A9 Certificate issuer: /CN=A91897B3/serialNumber=9BE292E7D16D4E8E816169C3B502EBE4EF45C163 Certificate serial: 0581 Authority key identifier: 9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/101ED47C04A811F0B2A84883C4F9AE02.roa Signing time: Wed 19 Mar 2025 09:53:52 +0000 ROA not before: Wed 19 Mar 2025 09:53:52 +0000 ROA not after: Tue 01 Jul 2025 00:00:00 +0000 asID: 135097 IP address blocks: 103.165.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:23:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1409 (0x581) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91897B3 Validity Not Before: Mar 19 09:53:52 2025 GMT Not After : Jul 1 00:00:00 2025 GMT Subject: CN=67da9430-18d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:6d:49:b1:89:6b:b4:01:dd:ac:ea:44:20: 2f:4f:50:0c:c3:08:f4:90:f0:c3:26:11:c7:2c:bc: 93:18:f6:63:4c:a9:54:d6:41:b3:60:8e:f0:e6:24: 36:bb:10:02:cb:43:e2:a7:c4:e3:b9:54:f5:60:42: 1e:bd:f6:0d:c3:8b:8f:94:0e:d4:04:33:b3:5c:a2: 19:be:39:dd:80:00:cd:40:ff:0b:3a:ff:d6:64:24: 8b:c9:71:ca:ba:bc:10:80:1f:84:c6:ac:c0:88:ae: 26:67:db:71:6d:da:7e:49:d1:4a:69:ab:43:bb:4d: 53:6a:9c:a4:4b:4a:86:14:69:5a:4e:e6:51:92:37: 26:1c:62:76:be:5d:ca:99:26:94:50:69:ca:ee:46: 4f:23:de:00:3b:08:8a:7e:e5:d7:3a:37:86:08:7e: 13:f9:5d:c6:26:ea:8e:e7:eb:bc:8c:a1:c1:30:fb: 18:67:8f:c7:90:59:b6:96:a3:4a:22:04:19:f7:42: 26:ef:fc:f8:5e:1c:01:a0:e9:f7:71:7e:76:c8:b3: 86:fa:38:d0:57:ea:ea:f8:8f:4d:9c:9a:5c:1f:de: 8c:5c:82:0a:bb:70:0a:ce:54:86:78:8d:48:34:77: a8:b1:fe:7b:95:64:7e:98:1a:6d:40:4b:86:dd:00: 33:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:0A:45:5D:FE:3A:1C:90:49:C5:0C:BC:5D:96:5B:7E:14:33:9A:A9 X509v3 Authority Key Identifier: keyid:9B:E2:92:E7:D1:6D:4E:8E:81:61:69:C3:B5:02:EB:E4:EF:45:C1:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/m-KS59FtTo6BYWnDtQLr5O9FwWM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m-KS59FtTo6BYWnDtQLr5O9FwWM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91897B3/67212DFECEA811EB9A969E0FC4F9AE02/101ED47C04A811F0B2A84883C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.165.81.0/24 Signature Algorithm: sha256WithRSAEncryption 8f:80:d0:c4:70:b2:04:a3:88:35:ae:44:4d:08:3b:80:89:f7: 0b:f8:22:a3:4a:98:7b:4e:8b:31:74:bb:c1:1c:3e:f3:27:09: de:79:c6:0d:53:79:a0:af:05:29:b4:9d:2b:03:8b:49:4a:03: fb:86:ed:e1:14:91:fe:12:d8:7f:51:7a:87:a0:b8:c2:a5:c8: 87:41:ac:5c:1b:78:2a:5a:da:5d:cf:c5:4e:4c:21:5b:76:f8: 3a:09:23:e9:2c:fd:a1:90:17:ce:87:7b:3d:29:8c:7c:21:ea: a9:86:3c:49:19:be:1c:bf:fa:d8:61:ac:fe:eb:0b:43:5b:63: b2:63:46:63:00:46:88:75:7b:0f:90:80:2b:d5:8b:67:c8:59: 0d:d0:b4:73:fa:dc:d5:0c:d7:41:48:9b:b9:89:19:7a:6b:85: eb:47:eb:b6:f7:ff:b2:b2:80:19:09:13:16:b3:a7:0b:98:92: fa:48:15:77:98:2b:d2:3d:24:cb:22:86:6d:ba:76:8f:5f:f5: 23:b9:9d:6e:ab:ce:ae:20:7c:ec:c4:fc:ab:8c:0a:04:b9:5e: a7:15:ac:82:eb:3f:0a:c3:e6:54:8d:59:b8:c4:75:bd:e0:a2: 1e:b1:db:cf:2e:80:85:81:a8:e7:95:82:3d:45:cb:8b:16:66: 81:d7:98:db -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBYEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODk3QjMxMTAvBgNVBAUTKDlCRTI5MkU3RDE2RDRFOEU4MTYxNjlDM0I1MDJFQkU0 RUY0NUMxNjMwHhcNMjUwMzE5MDk1MzUyWhcNMjUwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RhOTQzMC0xOGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwCNtSbGJa7QB3azqRCAvT1AMwwj0kPDDJhHHLLyTGPZjTKlU1kGzYI7w5iQ2 uxACy0Pip8TjuVT1YEIevfYNw4uPlA7UBDOzXKIZvjndgADNQP8LOv/WZCSLyXHK urwQgB+ExqzAiK4mZ9txbdp+SdFKaatDu01TapykS0qGFGlaTuZRkjcmHGJ2vl3K mSaUUGnK7kZPI94AOwiKfuXXOjeGCH4T+V3GJuqO5+u8jKHBMPsYZ4/HkFm2lqNK IgQZ90Im7/z4XhwBoOn3cX52yLOG+jjQV+rq+I9NnJpcH96MXIIKu3AKzlSGeI1I NHeosf57lWR+mBptQEuG3QAzZQIDAQABo4IClTCCApEwHQYDVR0OBBYEFDsKRV3+ OhyQScUMvF2WW34UM5qpMB8GA1UdIwQYMBaAFJvikufRbU6OgWFpw7UC6+TvRcFj MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4OTdCMy82NzIxMkRGRUNF QTgxMUVCOUE5NjlFMEZDNEY5QUUwMi9tLUtTNTlGdFRvNkJZV25EdFFMcjVPOUZ3 V00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL20tS1M1OUZ0VG82QllXbkR0UUxyNU85RndXTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODk3QjMvNjcyMTJERkVDRUE4MTFFQjlBOTY5RTBGQzRGOUFFMDIvMTAxRUQ0N0Mw NEE4MTFGMEIyQTg0ODgzQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnpVEwDQYJKoZIhvcNAQELBQADggEBAI+A0MRwsgSjiDWu RE0IO4CJ9wv4IqNKmHtOizF0u8EcPvMnCd55xg1TeaCvBSm0nSsDi0lKA/uG7eEU kf4S2H9ReoeguMKlyIdBrFwbeCpa2l3PxU5MIVt2+DoJI+ks/aGQF86Hez0pjHwh 6qmGPEkZvhy/+thhrP7rC0NbY7JjRmMARoh1ew+QgCvVi2fIWQ3QtHP63NUM10FI m7mJGXprhetH67b3/7KygBkJExazpwuYkvpIFXeYK9I9JMsihm26do9f9SO5nW6r zq4gfOzE/KuMCgS5XqcVrILrPwrD5lSNWbjEdb3goh6x288ugIWBqOeVgj1Fy4sW ZoHXmNs= -----END CERTIFICATE-----Generated at Sat Apr 5 12:51:00 2025 by rpki-client