$ rpki-client -vvf rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/9190CF9E2E7811EFB7206224C4F9AE02.roa File: 9190CF9E2E7811EFB7206224C4F9AE02.roa (raw, json) Hash identifier: h88YKkcazjRoHLRQFSfgpu+Eo1A4vft9VL2aQVc7RoU= Subject key identifier: 0A:3E:75:5E:C4:40:A6:49:0D:A0:64:E0:F1:C2:E2:85:34:5B:73:BC Certificate issuer: /CN=A91A0FC0/serialNumber=03EF0E390A315E5F3C461B0A72B218BEE223E00E Certificate serial: A7 Authority key identifier: 03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/9190CF9E2E7811EFB7206224C4F9AE02.roa Signing time: Wed 19 Mar 2025 00:45:39 +0000 ROA not before: Wed 19 Mar 2025 00:45:39 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 149517 IP address blocks: 103.182.62.0/23 maxlen: 23 103.182.62.0/24 maxlen: 24 103.182.63.0/24 maxlen: 24 2001:df0:75c0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 01:04:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 167 (0xa7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A0FC0 Validity Not Before: Mar 19 00:45:39 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67da13b3-5e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0a:c8:ff:6a:96:10:b1:71:5b:10:f3:64:27: 08:39:92:19:a0:94:dc:96:50:a8:ec:13:f4:7a:8a: fb:d5:2a:27:25:7a:9d:1c:d5:46:ce:10:7a:08:bd: cc:94:a5:78:25:2f:94:15:09:81:06:50:1e:d9:e8: c1:00:81:58:d9:cd:c2:38:53:0a:e9:20:3e:1e:9b: 32:f5:bb:5a:8b:30:79:15:68:42:af:a7:35:8c:72: c0:17:54:a2:a5:de:e9:44:b9:98:72:23:67:c9:78: ff:c3:a9:7a:55:f0:87:ec:ca:71:58:b9:26:ab:40: 5b:6a:6e:6f:a4:d4:1b:aa:e6:53:94:f0:22:a1:85: 9c:2b:72:9c:19:bd:80:19:d4:22:29:38:63:02:44: ed:c2:40:cb:b2:21:37:e7:ba:1a:0b:81:48:10:c7: e5:fa:25:ac:49:84:8a:7f:56:8f:a4:71:39:a4:6f: be:01:85:82:b6:df:93:d7:d3:3f:bf:72:8b:e5:31: dd:26:4e:4d:2b:21:95:13:a0:85:13:89:26:b4:3f: 9c:41:b0:0f:af:18:51:a7:89:40:9b:88:5f:09:49: c2:39:f2:e3:0b:ab:3e:71:0b:28:be:52:ab:7c:51: 89:24:b1:5d:73:88:92:19:04:59:15:c9:2f:81:30: bd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:3E:75:5E:C4:40:A6:49:0D:A0:64:E0:F1:C2:E2:85:34:5B:73:BC X509v3 Authority Key Identifier: keyid:03:EF:0E:39:0A:31:5E:5F:3C:46:1B:0A:72:B2:18:BE:E2:23:E0:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/A-8OOQoxXl88RhsKcrIYvuIj4A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A-8OOQoxXl88RhsKcrIYvuIj4A4.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A0FC0/CDE09876957811ECA32CCF55C4F9AE02/9190CF9E2E7811EFB7206224C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.62.0/23 IPv6: 2001:df0:75c0::/48 Signature Algorithm: sha256WithRSAEncryption 5e:2c:16:09:f1:58:19:19:0b:03:9e:49:40:ce:ec:e9:c8:6c: 1e:18:6c:94:ab:4d:64:15:80:82:0c:bb:e9:27:d0:e5:d9:eb: 62:b3:30:d8:e7:81:5a:ff:78:a8:47:ae:aa:ba:61:0f:32:aa: ad:17:15:ed:9c:0a:af:e1:a9:31:90:b0:c0:d6:d1:cb:bb:5c: 84:f5:af:26:7a:1e:82:c4:ad:b0:51:36:87:45:c4:20:7c:3d: 73:a0:f0:20:2d:1a:bd:94:9b:fe:0f:93:8b:88:3f:c1:8d:bd: eb:15:07:f8:86:6c:eb:d8:7b:64:0b:85:e6:c0:be:25:a5:43: b1:d7:83:6a:4a:db:ae:b9:cd:7f:41:cb:34:9c:50:59:16:38: ec:59:3d:77:d1:dc:e4:80:2b:37:ba:e9:0f:33:89:86:87:a8: 23:a6:ca:5e:42:07:39:14:9f:9f:93:df:2c:c3:1a:8b:65:29: c5:b2:27:a1:7f:52:4a:f0:e1:0f:e6:c7:7b:1d:e9:5b:85:fb: 64:85:65:56:57:c5:28:5b:3f:ce:60:a3:ab:68:4d:0b:8b:3c: 82:98:a7:fa:2d:db:d9:83:0c:1b:89:77:d0:c6:f3:82:73:5f: f4:b8:47:66:e0:30:95:dd:5d:dd:ff:9d:1b:ea:18:86:79:91: 52:89:02:95 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICAKcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTBGQzAxMTAvBgNVBAUTKDAzRUYwRTM5MEEzMTVFNUYzQzQ2MUIwQTcyQjIxOEJF RTIyM0UwMEUwHhcNMjUwMzE5MDA0NTM5WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2RhMTNiMy01ZTk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtQrI/2qWELFxWxDzZCcIOZIZoJTcllCo7BP0eor71SonJXqdHNVGzhB6CL3M lKV4JS+UFQmBBlAe2ejBAIFY2c3COFMK6SA+Hpsy9btaizB5FWhCr6c1jHLAF1Si pd7pRLmYciNnyXj/w6l6VfCH7MpxWLkmq0Bbam5vpNQbquZTlPAioYWcK3KcGb2A GdQiKThjAkTtwkDLsiE357oaC4FIEMfl+iWsSYSKf1aPpHE5pG++AYWCtt+T19M/ v3KL5THdJk5NKyGVE6CFE4kmtD+cQbAPrxhRp4lAm4hfCUnCOfLjC6s+cQsovlKr fFGJJLFdc4iSGQRZFckvgTC91QIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFAo+dV7E QKZJDaBk4PHC4oU0W3O8MB8GA1UdIwQYMBaAFAPvDjkKMV5fPEYbCnKyGL7iI+AO MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMEZDMC9DREUwOTg3Njk1 NzgxMUVDQTMyQ0NGNTVDNEY5QUUwMi9BLThPT1FveFhsODhSaHNLY3JJWXZ1SWo0 QTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0EtOE9PUW94WGw4OFJoc0tjcklZdnVJajRBNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTBGQzAvQ0RFMDk4NzY5NTc4MTFFQ0EzMkNDRjU1QzRGOUFFMDIvOTE5MENGOUUy RTc4MTFFRkI3MjA2MjI0QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFntj4wDwQCAAIwCQMHACABDfB1wDANBgkqhkiG9w0BAQsF AAOCAQEAXiwWCfFYGRkLA55JQM7s6chsHhhslKtNZBWAggy76SfQ5dnrYrMw2OeB Wv94qEeuqrphDzKqrRcV7ZwKr+GpMZCwwNbRy7tchPWvJnoegsStsFE2h0XEIHw9 c6DwIC0avZSb/g+Ti4g/wY296xUH+IZs69h7ZAuF5sC+JaVDsdeDakrbrrnNf0HL NJxQWRY47Fk9d9Hc5IArN7rpDzOJhoeoI6bKXkIHORSfn5PfLMMai2UpxbInoX9S SvDhD+bHex3pW4X7ZIVlVlfFKFs/zmCjq2hNC4s8gpin+i3b2YMMG4l30MbzgnNf 9LhHZuAwld1d3f+dG+oYhnmRUokClQ== -----END CERTIFICATE-----Generated at Fri Apr 4 23:56:42 2025 by rpki-client