$ rpki-client -vvf rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/F2D5C21216F511F086107D74C4F9AE02.roa File: F2D5C21216F511F086107D74C4F9AE02.roa (raw, json) Hash identifier: hlb2SfBxJYheUKrpN9mM5swhopWBRQyixAQ28JRvUzI= Subject key identifier: 24:31:19:F1:61:64:1A:59:38:2A:9E:99:52:A0:A0:64:42:31:F6:7C Certificate issuer: /CN=A919F9A8/serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Certificate serial: E7 Authority key identifier: 87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/F2D5C21216F511F086107D74C4F9AE02.roa Signing time: Fri 11 Apr 2025 16:56:45 +0000 ROA not before: Fri 11 Apr 2025 16:56:44 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 9304 IP address blocks: 103.190.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Apr 2025 16:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 231 (0xe7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919F9A8, serialNumber=87B62C34E8DC5D40238C0F6BDE91156E5D06A44B Validity Not Before: Apr 11 16:56:44 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67f949cc-149b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:f0:e4:ba:fe:49:ad:1d:54:3e:b1:b2:c6:3a: 93:6f:7f:89:02:0a:64:f4:e5:ee:c9:4c:d7:0e:4f: e5:64:5f:a0:cb:40:98:3c:a4:0e:38:2f:7e:76:67: 8e:c3:05:7b:45:f4:58:b9:c3:c4:6d:91:1e:25:ca: 5f:8d:a7:e4:2d:5d:8a:df:1b:0b:d1:7b:c9:bf:3a: 49:91:54:71:75:21:f7:b5:87:b9:9f:4d:8d:9e:35: 52:4a:5f:91:80:6e:57:16:91:be:6d:73:a3:42:1c: 7e:81:d9:f3:b5:bb:22:cc:3d:78:b0:f0:fd:8c:77: 0b:37:1e:e0:73:55:84:c4:c0:c9:ef:cb:b1:f6:1e: e1:4d:8d:95:f9:8a:0b:82:3d:f1:35:33:63:a4:77: 68:03:c8:7c:d5:5d:e5:ad:d8:78:46:96:b8:f6:a3: c8:72:d2:b0:84:17:fb:d1:fa:6b:c0:71:be:67:78: 55:be:51:99:f3:f9:9f:ba:7a:3c:5c:e9:71:52:ee: 5b:8a:e5:c1:dd:7c:ec:d6:03:8e:b9:31:a9:e0:1f: fc:16:e1:4e:18:43:3a:57:e6:6a:35:26:a2:c0:03: 91:bb:2c:16:c7:9d:ec:73:bb:64:48:10:6c:42:79: bd:30:55:f7:8c:de:3b:7b:6e:39:ac:0e:df:e7:68: 5b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:31:19:F1:61:64:1A:59:38:2A:9E:99:52:A0:A0:64:42:31:F6:7C X509v3 Authority Key Identifier: keyid:87:B6:2C:34:E8:DC:5D:40:23:8C:0F:6B:DE:91:15:6E:5D:06:A4:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/h7YsNOjcXUAjjA9r3pEVbl0GpEs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h7YsNOjcXUAjjA9r3pEVbl0GpEs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F9A8/B92306FEEB6A11EE9C03B711C4F9AE02/F2D5C21216F511F086107D74C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.190.233.0/24 Signature Algorithm: sha256WithRSAEncryption 43:53:af:5d:c4:88:78:7c:c8:0b:d9:64:6f:67:17:4e:50:e3: f0:99:c2:c8:66:98:95:32:55:71:7d:16:ff:8b:cb:4c:b3:50: ec:70:1b:51:f5:04:67:36:22:f9:90:71:e6:e2:7e:ca:97:98: 79:06:21:73:dd:b9:e0:db:09:19:84:bf:7a:90:47:88:09:6b: bb:51:17:93:14:19:11:b1:be:b5:62:5d:d2:99:26:f8:49:f8: e3:4e:02:be:00:a5:96:db:45:65:26:76:33:a7:37:be:77:e7: d7:ad:87:a1:86:2c:57:42:5d:25:15:98:53:b2:01:92:88:36: e0:f2:da:24:c7:8a:c5:87:d2:49:b7:a1:7f:92:86:5a:c0:bf: f2:6e:3a:28:58:aa:33:11:62:a2:c1:81:c6:68:4a:19:d9:dc: ab:2b:46:93:25:54:6a:e7:08:bd:b5:d0:91:95:0f:4d:27:c4: fa:f9:6d:c1:c1:69:6f:93:4a:fb:79:01:30:90:3b:12:0a:87: 56:be:8a:52:ea:e7:30:d8:6f:a0:93:cd:b6:43:0f:df:02:6f: 63:26:7b:b4:7b:1b:36:12:28:ba:2d:2a:d0:cd:96:4d:83:6b: 9d:d5:cb:4d:93:dc:47:70:7c:94:d2:0a:4a:69:b0:e5:40:81: 07:ed:9d:fc -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAOcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OUY5QTgxMTAvBgNVBAUTKDg3QjYyQzM0RThEQzVENDAyMzhDMEY2QkRFOTExNTZF NUQwNkE0NEIwHhcNMjUwNDExMTY1NjQ0WhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y5NDljYy0xNDliMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2fDkuv5JrR1UPrGyxjqTb3+JAgpk9OXuyUzXDk/lZF+gy0CYPKQOOC9+dmeO wwV7RfRYucPEbZEeJcpfjafkLV2K3xsL0XvJvzpJkVRxdSH3tYe5n02NnjVSSl+R gG5XFpG+bXOjQhx+gdnztbsizD14sPD9jHcLNx7gc1WExMDJ78ux9h7hTY2V+YoL gj3xNTNjpHdoA8h81V3lrdh4Rpa49qPIctKwhBf70fprwHG+Z3hVvlGZ8/mfuno8 XOlxUu5biuXB3Xzs1gOOuTGp4B/8FuFOGEM6V+ZqNSaiwAORuywWx53sc7tkSBBs Qnm9MFX3jN47e245rA7f52hbVwIDAQABo4IClTCCApEwHQYDVR0OBBYEFCQxGfFh ZBpZOCqemVKgoGRCMfZ8MB8GA1UdIwQYMBaAFIe2LDTo3F1AI4wPa96RFW5dBqRL MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjlBOC9COTIzMDZGRUVC NkExMUVFOUMwM0I3MTFDNEY5QUUwMi9oN1lzTk9qY1hVQWpqQTlyM3BFVmJsMEdw RXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2g3WXNOT2pjWFVBampBOXIzcEVWYmwwR3BFcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx OUY5QTgvQjkyMzA2RkVFQjZBMTFFRTlDMDNCNzExQzRGOUFFMDIvRjJENUMyMTIx NkY1MTFGMDg2MTA3RDc0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnvukwDQYJKoZIhvcNAQELBQADggEBAENTr13EiHh8yAvZ ZG9nF05Q4/CZwshmmJUyVXF9Fv+Ly0yzUOxwG1H1BGc2IvmQcebifsqXmHkGIXPd ueDbCRmEv3qQR4gJa7tRF5MUGRGxvrViXdKZJvhJ+ONOAr4ApZbbRWUmdjOnN753 59eth6GGLFdCXSUVmFOyAZKINuDy2iTHisWH0km3oX+ShlrAv/JuOihYqjMRYqLB gcZoShnZ3KsrRpMlVGrnCL210JGVD00nxPr5bcHBaW+TSvt5ATCQOxIKh1a+ilLq 5zDYb6CTzbZDD98Cb2Mme7R7GzYSKLotKtDNlk2Da53Vy02T3EdwfJTSCkppsOVA gQftnfw= -----END CERTIFICATE-----Generated at Sat Apr 12 18:46:55 2025 by rpki-client