$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/E75FB4F0CE4A11EE95C15E20C4F9AE02.roa File: E75FB4F0CE4A11EE95C15E20C4F9AE02.roa (raw, json) Hash identifier: utq11zi2cO+ldR8mXOv++lb25ZgD5tUSUW03iRiwBL0= Subject key identifier: BB:30:35:1C:3D:28:58:42:E7:35:C7:E2:D1:1E:45:DE:97:A4:A6:8A Certificate issuer: /CN=A91A1CAA/serialNumber=617F054E3CE451E0C3E7F446DD09F7864652B656 Certificate serial: CD Authority key identifier: 61:7F:05:4E:3C:E4:51:E0:C3:E7:F4:46:DD:09:F7:86:46:52:B6:56 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/E75FB4F0CE4A11EE95C15E20C4F9AE02.roa Signing time: Sat 15 Mar 2025 04:51:15 +0000 ROA not before: Sat 15 Mar 2025 04:51:15 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 30402 IP address blocks: 103.147.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 205 (0xcd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A1CAA Validity Not Before: Mar 15 04:51:15 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67d50742-c438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:43:99:72:ea:cd:25:0e:0f:44:92:3f:f5:b4: a5:01:fe:c2:60:e1:2d:47:20:c8:3a:61:9b:bc:41: dc:83:15:96:4a:f1:96:84:96:43:3c:d4:cb:a0:77: 4a:36:40:72:44:12:22:ad:88:e9:8d:02:7c:9e:36: a7:e2:76:59:a0:4c:a4:0c:b3:38:95:5d:87:f4:ae: 7d:df:e8:e5:e8:7b:11:66:d4:2c:f3:0f:20:13:fc: 83:03:6c:52:8f:e3:ab:63:22:10:e3:85:60:6b:95: 70:2b:46:e9:d6:18:dc:ae:a9:bb:2f:e8:cf:1a:7e: cc:10:a1:a9:04:3c:9c:86:a9:35:01:c7:08:f3:80: ab:9f:b2:1b:01:4a:35:4b:88:07:b6:a1:9d:30:68: 8e:50:db:66:1c:ca:58:f4:06:3a:4b:cb:2d:a0:d6: f3:f0:5f:5a:42:fc:e6:9b:fe:ad:6c:0a:ae:81:f4: 11:3c:22:9a:e6:3f:3f:aa:bf:86:2f:ac:33:33:d9: 1a:df:29:e9:bb:3e:52:03:32:e9:2b:64:ae:e9:59: 30:29:15:44:e9:b1:f6:82:b8:1d:39:86:b3:26:01: 9a:37:74:69:e7:cc:94:ef:8c:06:3a:36:38:2c:cf: 4b:d6:4f:d6:38:39:33:aa:13:ca:78:5e:af:e4:49: 8b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:30:35:1C:3D:28:58:42:E7:35:C7:E2:D1:1E:45:DE:97:A4:A6:8A X509v3 Authority Key Identifier: keyid:61:7F:05:4E:3C:E4:51:E0:C3:E7:F4:46:DD:09:F7:86:46:52:B6:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/YX8FTjzkUeDD5_RG3Qn3hkZStlY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/YX8FTjzkUeDD5_RG3Qn3hkZStlY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1CAA/8E275A1ECE4A11EE8DE9E51FC4F9AE02/E75FB4F0CE4A11EE95C15E20C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.147.45.0/24 Signature Algorithm: sha256WithRSAEncryption 7b:4e:23:9f:7b:21:ac:6f:fa:9f:15:bb:9b:21:01:ad:c2:3a: 33:ea:21:eb:e7:4e:44:52:a7:da:30:59:67:c6:e7:9d:b3:9d: 9c:3d:01:df:57:54:7c:1d:e2:8c:77:d5:9f:b0:4b:b8:0b:d2: 32:eb:05:ac:eb:a1:b6:ce:d6:e7:48:9f:93:52:a3:74:78:55: 74:74:bb:54:5d:bb:35:e8:60:09:b3:d6:c9:46:cc:6e:07:15: ac:9e:c3:e4:02:42:0c:d1:6e:e0:33:20:54:0a:0a:c6:f8:74: 71:33:b6:fc:b3:a6:07:b7:b9:d8:b4:bb:42:d7:e3:8a:39:54: 65:f0:6b:ca:e9:9d:5f:ff:14:0f:86:97:40:47:09:02:ed:f2: 6e:6d:2f:5e:41:16:08:42:ec:4b:29:14:dd:3f:b6:c7:4c:1d: 93:35:b1:91:39:57:34:89:c3:91:42:ff:d7:ff:9f:57:77:da: dd:7a:3a:bd:6f:a9:01:26:23:76:47:ea:16:cb:66:46:da:0f: 5c:75:77:45:1f:fe:f0:e2:a5:de:6b:bb:2b:81:c2:31:94:8a: 1a:7a:e7:66:08:b5:b6:d5:22:88:16:ef:2a:8a:7a:c1:1e:df: b8:fb:62:1a:4e:5c:74:87:0a:24:4c:5b:5e:5c:46:73:ed:99: d8:7d:ad:d0 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAM0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTFDQUExMTAvBgNVBAUTKDYxN0YwNTRFM0NFNDUxRTBDM0U3RjQ0NkREMDlGNzg2 NDY1MkI2NTYwHhcNMjUwMzE1MDQ1MTE1WhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Q1MDc0Mi1jNDM4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAqUOZcurNJQ4PRJI/9bSlAf7CYOEtRyDIOmGbvEHcgxWWSvGWhJZDPNTLoHdK NkByRBIirYjpjQJ8njan4nZZoEykDLM4lV2H9K593+jl6HsRZtQs8w8gE/yDA2xS j+OrYyIQ44Vga5VwK0bp1hjcrqm7L+jPGn7MEKGpBDychqk1AccI84Crn7IbAUo1 S4gHtqGdMGiOUNtmHMpY9AY6S8stoNbz8F9aQvzmm/6tbAqugfQRPCKa5j8/qr+G L6wzM9ka3ynpuz5SAzLpK2Su6VkwKRVE6bH2grgdOYazJgGaN3Rp58yU74wGOjY4 LM9L1k/WODkzqhPKeF6v5EmLJwIDAQABo4IClTCCApEwHQYDVR0OBBYEFLswNRw9 KFhC5zXH4tEeRd6XpKaKMB8GA1UdIwQYMBaAFGF/BU485FHgw+f0Rt0J94ZGUrZW MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMUNBQS84RTI3NUExRUNF NEExMUVFOERFOUU1MUZDNEY5QUUwMi9ZWDhGVGp6a1VlREQ1X1JHM1FuM2hrWlN0 bFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1lYOEZUanprVWVERDVfUkczUW4zaGtaU3RsWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTFDQUEvOEUyNzVBMUVDRTRBMTFFRThERTlFNTFGQzRGOUFFMDIvRTc1RkI0RjBD RTRBMTFFRTk1QzE1RTIwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABnky0wDQYJKoZIhvcNAQELBQADggEBAHtOI597Iaxv+p8V u5shAa3COjPqIevnTkRSp9owWWfG552znZw9Ad9XVHwd4ox31Z+wS7gL0jLrBazr obbO1udIn5NSo3R4VXR0u1RduzXoYAmz1slGzG4HFayew+QCQgzRbuAzIFQKCsb4 dHEztvyzpge3udi0u0LX44o5VGXwa8rpnV//FA+Gl0BHCQLt8m5tL15BFghC7Esp FN0/tsdMHZM1sZE5VzSJw5FC/9f/n1d32t16Or1vqQEmI3ZH6hbLZkbaD1x1d0Uf /vDipd5ruyuBwjGUihp652YItbbVIogW7yqKesEe37j7YhpOXHSHCiRMW15cRnPt mdh9rdA= -----END CERTIFICATE-----Generated at Sat Apr 5 19:28:52 2025 by rpki-client