$ rpki-client -vvf rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/3CFFF9E222E311EEA9A41468C4F9AE02.roa File: 3CFFF9E222E311EEA9A41468C4F9AE02.roa (raw, json) Hash identifier: 5XUSE3b9VwlQx8jlx2gr+WLds1tKvy1eGNiKCEwB3xM= Subject key identifier: 35:59:F0:E7:05:07:DA:F2:F6:E5:5E:0F:D9:50:FF:AE:B0:CD:09:C6 Certificate issuer: /CN=A91A8CB6/serialNumber=2A877EED52E6222039BFCC38FE70358FBBD27B68 Certificate serial: 0A71 Authority key identifier: 2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/3CFFF9E222E311EEA9A41468C4F9AE02.roa Signing time: Thu 20 Mar 2025 19:59:37 +0000 ROA not before: Thu 20 Mar 2025 19:59:37 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 140228 IP address blocks: 103.148.212.0/24 maxlen: 24 103.148.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2673 (0xa71) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A8CB6 Validity Not Before: Mar 20 19:59:37 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67dc73a8-4a4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ca:d5:62:87:fb:56:db:6f:cf:22:05:0e:58: 91:52:8f:6b:20:6c:52:e0:95:b6:8e:c5:ca:55:e6: 27:87:be:ca:bb:ea:57:23:4e:3b:b3:d3:90:75:97: e7:01:13:8a:3c:34:52:bd:f4:f5:91:23:66:91:54: 83:c9:4b:53:6f:06:a6:89:00:d3:37:c8:d3:1e:9a: 80:2d:b1:73:01:c6:d0:f8:1b:09:9d:93:d6:47:03: be:59:f2:ef:1f:65:2e:b7:a4:77:46:f6:5d:eb:8a: e4:87:e4:c0:41:23:d7:7a:f0:00:27:3a:03:8c:f5: 56:13:c8:d6:14:8c:12:97:43:f9:53:03:e0:bb:cb: 96:f2:86:47:da:27:16:82:4d:22:61:43:7f:4d:18: 1d:0e:1c:40:b5:db:8e:90:97:b7:d3:9b:72:f8:6e: fe:54:78:2f:99:12:10:d2:64:75:0c:44:2b:ee:90: 50:35:7a:bf:d7:cf:ae:ea:ed:dd:9f:c5:fe:08:aa: 76:62:4b:fc:9a:5b:a5:af:bf:10:29:45:1c:6f:86: 0a:33:9a:65:88:a6:8d:f5:37:07:6f:a8:b9:43:ee: 99:24:e0:82:07:7b:d1:75:22:ad:38:6f:a7:49:45: 87:79:22:ce:56:71:91:0c:e3:87:b3:be:f6:9c:64: 4b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:59:F0:E7:05:07:DA:F2:F6:E5:5E:0F:D9:50:FF:AE:B0:CD:09:C6 X509v3 Authority Key Identifier: keyid:2A:87:7E:ED:52:E6:22:20:39:BF:CC:38:FE:70:35:8F:BB:D2:7B:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/Kod-7VLmIiA5v8w4_nA1j7vSe2g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kod-7VLmIiA5v8w4_nA1j7vSe2g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A8CB6/56A4A6405AE611EA9C88CB82C4F9AE02/3CFFF9E222E311EEA9A41468C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.148.212.0/23 Signature Algorithm: sha256WithRSAEncryption 2c:c5:22:c9:e3:f6:ea:ab:5b:c4:6e:12:5c:6f:7d:79:48:28: 96:a0:65:68:eb:66:5e:53:cd:c2:bc:2f:f8:5f:38:1b:77:37: b0:4f:76:ad:63:11:79:1b:43:38:01:f2:10:fe:d5:8a:7a:9b: a2:81:3a:c3:8a:3f:bc:b1:db:23:e2:ee:2a:6d:03:d2:a6:09: 80:99:03:f6:b4:24:12:47:94:5e:93:52:62:c1:3e:9e:a0:e1: 6a:3f:0c:70:82:ea:e3:ca:76:5a:af:68:49:d7:27:d1:d5:85: b7:96:b2:98:d4:9b:1c:04:9d:e0:94:e6:19:dd:e2:49:50:bd: ca:7c:f9:09:fb:c7:62:01:b6:2e:db:e2:5d:4b:f8:61:82:f0: d0:e8:10:22:15:41:d8:45:be:0f:9c:57:df:f6:bf:bc:4e:19: 7f:05:a9:f8:70:5b:13:55:7e:25:9e:db:a6:ae:c6:75:ac:81: cf:82:ac:a9:dc:c8:71:ec:77:d4:8e:24:2f:04:f5:6f:42:58: e8:96:3b:80:3f:a6:1a:bb:6d:b4:24:d9:ba:a2:2e:55:db:de: 12:bd:c7:3b:b2:e8:5e:ee:80:b2:30:d3:e0:c8:6e:3d:a6:8d: 5b:9e:1a:2e:c9:42:1b:28:5f:60:9c:e5:fa:d0:3d:5a:c2:f6: 09:9f:ed:51 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICCnEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QThDQjYxMTAvBgNVBAUTKDJBODc3RUVENTJFNjIyMjAzOUJGQ0MzOEZFNzAzNThG QkJEMjdCNjgwHhcNMjUwMzIwMTk1OTM3WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RjNzNhOC00YTRjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA4crVYof7VttvzyIFDliRUo9rIGxS4JW2jsXKVeYnh77Ku+pXI047s9OQdZfn AROKPDRSvfT1kSNmkVSDyUtTbwamiQDTN8jTHpqALbFzAcbQ+BsJnZPWRwO+WfLv H2Uut6R3RvZd64rkh+TAQSPXevAAJzoDjPVWE8jWFIwSl0P5UwPgu8uW8oZH2icW gk0iYUN/TRgdDhxAtduOkJe305ty+G7+VHgvmRIQ0mR1DEQr7pBQNXq/18+u6u3d n8X+CKp2Ykv8mlulr78QKUUcb4YKM5pliKaN9TcHb6i5Q+6ZJOCCB3vRdSKtOG+n SUWHeSLOVnGRDOOHs772nGRLvwIDAQABo4IClTCCApEwHQYDVR0OBBYEFDVZ8OcF B9ry9uVeD9lQ/66wzQnGMB8GA1UdIwQYMBaAFCqHfu1S5iIgOb/MOP5wNY+70nto MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBOENCNi81NkE0QTY0MDVB RTYxMUVBOUM4OENCODJDNEY5QUUwMi9Lb2QtN1ZMbUlpQTV2OHc0X25BMWo3dlNl MmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0tvZC03VkxtSWlBNXY4dzRfbkExajd2U2UyZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QThDQjYvNTZBNEE2NDA1QUU2MTFFQTlDODhDQjgyQzRGOUFFMDIvM0NGRkY5RTIy MkUzMTFFRUE5QTQxNDY4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlNQwDQYJKoZIhvcNAQELBQADggEBACzFIsnj9uqrW8Ru ElxvfXlIKJagZWjrZl5TzcK8L/hfOBt3N7BPdq1jEXkbQzgB8hD+1Yp6m6KBOsOK P7yx2yPi7iptA9KmCYCZA/a0JBJHlF6TUmLBPp6g4Wo/DHCC6uPKdlqvaEnXJ9HV hbeWspjUmxwEneCU5hnd4klQvcp8+Qn7x2IBti7b4l1L+GGC8NDoECIVQdhFvg+c V9/2v7xOGX8FqfhwWxNVfiWe26auxnWsgc+CrKncyHHsd9SOJC8E9W9CWOiWO4A/ phq7bbQk2bqiLlXb3hK9xzuy6F7ugLIw0+DIbj2mjVueGi7JQhsoX2Cc5frQPVrC 9gmf7VE= -----END CERTIFICATE-----Generated at Sat Apr 5 02:10:01 2025 by rpki-client