$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/074283A632A511EF84ECD41AC4F9AE02.roa File: 074283A632A511EF84ECD41AC4F9AE02.roa (raw, json) Hash identifier: HH7FDVFqsTYbpuRf1EO/qaMVXCNqsjU0LtnOZhqtOfo= Subject key identifier: C5:09:43:FA:39:19:B6:46:3D:3C:85:BF:6B:99:C3:51:46:DD:D2:B0 Certificate issuer: /CN=A91A4DA5/serialNumber=4630A4B026A93D0DFAA8ECEC579CC521382E4E58 Certificate serial: 8D Authority key identifier: 46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/074283A632A511EF84ECD41AC4F9AE02.roa Signing time: Mon 03 Mar 2025 08:29:13 +0000 ROA not before: Mon 03 Mar 2025 08:29:13 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 133396 IP address blocks: 103.226.252.0/24 maxlen: 24 103.226.253.0/24 maxlen: 24 103.226.254.0/24 maxlen: 24 103.226.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 05:38:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 141 (0x8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A4DA5 Validity Not Before: Mar 3 08:29:13 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c56858-5f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:96:f3:25:81:f8:2f:a8:aa:4d:29:e3:cf:a5: 1f:e4:8a:f8:09:df:e2:2e:f8:c6:f3:fc:3b:c7:24: d1:f5:3a:58:75:99:7a:70:8f:04:27:ce:8f:75:75: 96:ee:1e:70:85:83:00:19:b4:78:7b:9c:15:48:ce: 54:52:d9:73:ae:0e:0a:47:c5:95:f1:a4:a5:de:06: ec:3f:04:d7:43:46:3f:1f:25:4b:70:ee:8a:c4:91: b6:40:b8:5e:cc:2b:71:2f:0b:9e:c9:21:14:c6:54: 50:e3:d8:3d:f2:c7:4e:7f:96:d6:95:73:c1:c7:c7: 98:af:dc:35:aa:b5:31:8f:11:aa:e0:68:24:57:ea: ae:c8:89:f1:ed:4c:f1:be:46:e8:28:af:51:88:6f: 0c:41:a1:a7:78:5b:ab:0d:84:3e:32:68:9e:34:98: a0:3f:25:2e:b1:65:91:74:a1:e1:c5:c3:01:88:39: 9a:1e:e0:cf:85:54:b5:fb:8d:ff:82:a8:ec:92:f9: 37:ef:a6:b0:60:ee:63:b8:1c:85:9b:45:56:60:bf: 9f:dc:48:7b:84:d2:80:ca:9d:f3:10:b5:77:63:2d: 59:41:eb:f1:56:10:97:88:16:39:3b:13:6c:b5:ae: 26:2a:1f:67:a0:95:d8:c1:2c:a9:88:94:02:09:87: 53:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:09:43:FA:39:19:B6:46:3D:3C:85:BF:6B:99:C3:51:46:DD:D2:B0 X509v3 Authority Key Identifier: keyid:46:30:A4:B0:26:A9:3D:0D:FA:A8:EC:EC:57:9C:C5:21:38:2E:4E:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/RjCksCapPQ36qOzsV5zFITguTlg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RjCksCapPQ36qOzsV5zFITguTlg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4DA5/BD34549C32A411EF822E0F1AC4F9AE02/074283A632A511EF84ECD41AC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.226.252.0/22 Signature Algorithm: sha256WithRSAEncryption 26:a6:25:7e:a2:d8:39:92:64:f2:09:47:72:a5:95:95:9c:fd: 89:47:b0:fa:d0:c3:bb:49:95:48:31:35:45:7e:b4:8f:2d:59: 04:be:de:2c:92:a5:6b:0a:b8:28:83:a1:4c:3a:84:b3:06:ab: 43:d4:37:42:ac:aa:f4:84:1d:1a:9a:7b:30:34:68:74:d0:c5: 46:db:43:73:f9:6d:00:77:0b:62:2c:f7:1d:34:50:b3:02:c9: 53:b5:95:fd:60:15:a1:5e:63:d9:0a:3b:59:a6:b2:06:9a:c0: e4:0b:f6:76:8a:60:b4:7a:c5:57:08:f5:a1:e3:e3:85:b5:65: 37:25:04:64:f1:76:19:0f:81:43:bc:0a:49:d9:4e:42:47:43: 9a:ff:30:f7:fb:24:04:69:3b:f6:b5:18:a3:d6:d4:63:51:a4: 78:82:bd:39:12:b1:40:6a:6c:e2:62:97:f1:27:92:f3:47:e4: 75:ca:e6:6f:db:82:ac:1b:81:26:ea:b8:78:4f:82:5b:8b:26: 05:84:30:67:de:d6:09:0e:14:9f:7c:14:94:b0:fb:bf:8d:10: 97:40:fe:5b:66:b7:d9:33:92:ec:20:ea:4c:00:f3:43:7f:50: 2a:26:3a:00:21:53:bf:9e:c9:38:b7:92:cd:4c:62:af:ad:95: 08:5f:af:04 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAI0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTREQTUxMTAvBgNVBAUTKDQ2MzBBNEIwMjZBOTNEMERGQUE4RUNFQzU3OUNDNTIx MzgyRTRFNTgwHhcNMjUwMzAzMDgyOTEzWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M1Njg1OC01ZjY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxpbzJYH4L6iqTSnjz6Uf5Ir4Cd/iLvjG8/w7xyTR9TpYdZl6cI8EJ86PdXWW 7h5whYMAGbR4e5wVSM5UUtlzrg4KR8WV8aSl3gbsPwTXQ0Y/HyVLcO6KxJG2QLhe zCtxLwueySEUxlRQ49g98sdOf5bWlXPBx8eYr9w1qrUxjxGq4GgkV+quyInx7Uzx vkboKK9RiG8MQaGneFurDYQ+MmieNJigPyUusWWRdKHhxcMBiDmaHuDPhVS1+43/ gqjskvk376awYO5juByFm0VWYL+f3Eh7hNKAyp3zELV3Yy1ZQevxVhCXiBY5OxNs ta4mKh9noJXYwSypiJQCCYdTIQIDAQABo4IClTCCApEwHQYDVR0OBBYEFMUJQ/o5 GbZGPTyFv2uZw1FG3dKwMB8GA1UdIwQYMBaAFEYwpLAmqT0N+qjs7FecxSE4Lk5Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNERBNS9CRDM0NTQ5QzMy QTQxMUVGODIyRTBGMUFDNEY5QUUwMi9SakNrc0NhcFBRMzZxT3pzVjV6RklUZ3VU bGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1JqQ2tzQ2FwUFEzNnFPenNWNXpGSVRndVRsZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QTREQTUvQkQzNDU0OUMzMkE0MTFFRjgyMkUwRjFBQzRGOUFFMDIvMDc0MjgzQTYz MkE1MTFFRjg0RUNENDFBQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn4vwwDQYJKoZIhvcNAQELBQADggEBACamJX6i2DmSZPIJ R3KllZWc/YlHsPrQw7tJlUgxNUV+tI8tWQS+3iySpWsKuCiDoUw6hLMGq0PUN0Ks qvSEHRqaezA0aHTQxUbbQ3P5bQB3C2Is9x00ULMCyVO1lf1gFaFeY9kKO1mmsgaa wOQL9naKYLR6xVcI9aHj44W1ZTclBGTxdhkPgUO8CknZTkJHQ5r/MPf7JARpO/a1 GKPW1GNRpHiCvTkSsUBqbOJil/EnkvNH5HXK5m/bgqwbgSbquHhPgluLJgWEMGfe 1gkOFJ98FJSw+7+NEJdA/ltmt9kzkuwg6kwA80N/UComOgAhU7+eyTi3ks1MYq+t lQhfrwQ= -----END CERTIFICATE-----Generated at Sat Apr 5 06:15:24 2025 by rpki-client