$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/B722FC542A0411EB992DD32EC4F9AE02.roa File: B722FC542A0411EB992DD32EC4F9AE02.roa (raw, json) Hash identifier: wsrS8Hj9tlKWrRYJKi3rNPfDpEOnN9QMK0e9qX0Cib4= Subject key identifier: 35:2A:98:A6:C4:8E:EF:0F:5D:7A:C6:F5:B9:EF:EE:21:7E:5E:4C:36 Certificate issuer: /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD Certificate serial: 0732 Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/B722FC542A0411EB992DD32EC4F9AE02.roa Signing time: Wed 02 Apr 2025 21:53:56 +0000 ROA not before: Wed 02 Apr 2025 21:53:55 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 4768 IP address blocks: 103.7.96.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 21:54:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1842 (0x732) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A3FEB Validity Not Before: Apr 2 21:53:55 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67edb1f3-c4be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:dc:01:d9:f4:72:f1:21:45:d0:9e:75:9f:14: 15:44:13:d4:8c:c8:01:10:49:43:bc:f0:62:17:6c: b7:16:b5:fa:a1:65:37:ac:aa:79:1f:b5:38:83:3d: 75:a6:ed:0c:cc:9e:92:36:39:1b:76:b6:16:10:ef: 0e:75:3f:d1:ea:2a:d1:e9:d0:f9:2f:d8:43:ad:3d: ce:70:a6:9e:e3:17:ed:ee:53:a6:d5:c1:e8:04:7d: fd:8a:e2:bc:0b:0d:5c:2a:0c:37:71:70:af:45:d8: de:08:70:3d:77:f7:ed:32:45:56:3b:12:70:6d:ea: 6a:7c:c5:91:ad:7e:8f:b4:c0:22:7d:5f:15:6b:52: 84:9f:ac:53:64:65:86:75:d2:04:bf:43:52:b7:ca: 8b:be:1e:90:aa:64:18:d6:0a:07:3c:b3:54:26:6a: 7e:1c:94:04:89:16:53:9f:e1:bb:e3:6b:f0:b3:b6: ba:81:dc:b3:89:33:59:a2:97:66:01:86:c7:98:78: 10:b5:19:ae:33:d9:df:c9:de:b1:63:b6:94:df:88: 37:d2:04:84:7e:d1:a9:6b:75:d4:46:2c:6e:ce:60: 2f:0c:22:4d:95:bd:87:92:2c:15:98:31:6d:41:cb: 5b:6f:a8:6f:ad:4d:1d:1a:dd:0a:62:36:1f:f3:f0: 13:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2A:98:A6:C4:8E:EF:0F:5D:7A:C6:F5:B9:EF:EE:21:7E:5E:4C:36 X509v3 Authority Key Identifier: keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/B722FC542A0411EB992DD32EC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.7.96.0/23 Signature Algorithm: sha256WithRSAEncryption bf:56:90:45:52:93:24:be:6e:1a:fb:05:44:d1:89:71:24:a8: 0d:12:f4:8a:6b:f5:95:3d:33:a6:3f:4f:ed:14:55:b0:91:d0: e9:72:a3:86:b6:45:40:87:f4:d1:8d:99:b9:7c:e9:7b:48:5e: 7e:c2:5a:a9:c5:ce:01:b5:0c:bc:7a:aa:9a:e3:10:08:64:70: 3f:41:7f:f7:c6:29:cf:f0:bd:14:9a:b3:f5:4e:2a:88:cb:14: f2:09:a5:df:76:4c:4f:25:44:ee:3d:41:fd:fc:c9:15:84:7f: d3:54:a1:3d:bd:a1:ac:0b:ee:7e:41:04:22:12:a1:26:75:88: 71:2a:35:48:03:e3:92:37:8d:34:22:1a:46:c9:a9:9d:51:f3: ed:47:09:90:b4:ff:20:9b:b0:76:41:b4:8e:cb:40:64:b1:88: fb:65:11:50:94:d0:d3:b1:92:10:fd:4c:68:93:9f:c5:72:f9: fe:00:5b:1a:06:de:08:8e:69:02:17:6c:ae:12:e8:65:84:af: b9:86:a2:79:61:0c:c5:75:2f:db:d4:bb:fd:10:b7:d4:98:e7: a9:46:3d:d1:90:9d:db:b1:e6:8c:4a:ff:0a:27:ed:39:1c:bc: 93:ba:c8:83:7b:56:4a:35:68:38:00:47:93:24:3d:1a:e0:e0: 32:ab:e2:50 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBzIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTNGRUIxMTAvBgNVBAUTKEM3OTVFNTlDMDMwQzdDOTI5RkNCRTQ3NDE5RkM1RUM2 OUUxRkFDRkQwHhcNMjUwNDAyMjE1MzU1WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkYjFmMy1jNGJlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvdwB2fRy8SFF0J51nxQVRBPUjMgBEElDvPBiF2y3FrX6oWU3rKp5H7U4gz11 pu0MzJ6SNjkbdrYWEO8OdT/R6irR6dD5L9hDrT3OcKae4xft7lOm1cHoBH39iuK8 Cw1cKgw3cXCvRdjeCHA9d/ftMkVWOxJwbepqfMWRrX6PtMAifV8Va1KEn6xTZGWG ddIEv0NSt8qLvh6QqmQY1goHPLNUJmp+HJQEiRZTn+G742vws7a6gdyziTNZopdm AYbHmHgQtRmuM9nfyd6xY7aU34g30gSEftGpa3XURixuzmAvDCJNlb2HkiwVmDFt Qctbb6hvrU0dGt0KYjYf8/ATqwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDUqmKbE ju8PXXrG9bnv7iF+Xkw2MB8GA1UdIwQYMBaAFMeV5ZwDDHySn8vkdBn8XsaeH6z9 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBM0ZFQi9CMDE4QUQ5NjI5 MTkxMUVCOTg1NDk4NUNDNEY5QUUwMi94NVhsbkFNTWZKS2Z5LVIwR2Z4ZXhwNGZy UDAuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3g1WGxuQU1NZkpLZnktUjBHZnhleHA0ZnJQMC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTNGRUIvQjAxOEFEOTYyOTE5MTFFQjk4NTQ5ODVDQzRGOUFFMDIvQjcyMkZDNTQy QTA0MTFFQjk5MkREMzJFQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnB2AwDQYJKoZIhvcNAQELBQADggEBAL9WkEVSkyS+bhr7 BUTRiXEkqA0S9Ipr9ZU9M6Y/T+0UVbCR0Olyo4a2RUCH9NGNmbl86XtIXn7CWqnF zgG1DLx6qprjEAhkcD9Bf/fGKc/wvRSas/VOKojLFPIJpd92TE8lRO49Qf38yRWE f9NUoT29oawL7n5BBCISoSZ1iHEqNUgD45I3jTQiGkbJqZ1R8+1HCZC0/yCbsHZB tI7LQGSxiPtlEVCU0NOxkhD9TGiTn8Vy+f4AWxoG3giOaQIXbK4S6GWEr7mGonlh DMV1L9vUu/0Qt9SY56lGPdGQndux5oxK/won7TkcvJO6yIN7Vko1aDgAR5MkPRrg 4DKr4lA= -----END CERTIFICATE-----Generated at Sun Apr 6 02:23:06 2025 by rpki-client