$ rpki-client -vvf rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/E64999C258D611ED86C99945C4F9AE02.roa File: E64999C258D611ED86C99945C4F9AE02.roa (raw, json) Hash identifier: DQ+JErFx/tRloLusNXusv2s1HWOBWc0JnN5N02SFoik= Subject key identifier: BC:A1:4F:30:75:2A:74:68:48:01:44:B6:B9:80:ED:38:B8:E8:AF:61 Certificate issuer: /CN=A91AA95A/serialNumber=EC179A58742228E30B7DF7978826583878255B78 Certificate serial: 0D87 Authority key identifier: EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/E64999C258D611ED86C99945C4F9AE02.roa Signing time: Mon 24 Mar 2025 18:27:16 +0000 ROA not before: Mon 24 Mar 2025 18:27:16 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 137473 IP address blocks: 103.110.28.0/23 maxlen: 24 2402:8e40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3463 (0xd87) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91AA95A, serialNumber=EC179A58742228E30B7DF7978826583878255B78 Validity Not Before: Mar 24 18:27:16 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67e1a403-0ea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cc:e3:34:30:d7:fb:19:52:16:75:bb:ad:1c: a0:99:ad:1d:49:5f:5d:4b:a2:00:54:75:a5:a1:4c: 01:e7:f9:a1:7f:55:2b:20:67:b4:1b:b0:58:8e:3c: b3:cb:90:e2:9b:fa:d3:86:f3:b3:99:fb:b6:f8:68: 60:9a:b8:97:ad:76:f6:1c:bc:2c:18:e7:81:fa:7d: eb:33:1a:79:fe:46:ba:72:20:7e:9f:a5:a5:aa:89: 51:b3:16:4c:34:b7:1e:9e:75:9e:75:20:5c:5b:41: 9c:0a:15:0e:90:62:ac:15:02:ac:64:5e:cd:a8:e7: 40:36:66:4b:56:fb:9c:85:8a:07:78:02:0c:2a:d7: 70:83:05:1f:95:65:17:c9:b4:4b:1c:7d:31:37:2c: 29:02:a0:e1:da:25:20:57:66:e5:63:64:1b:5c:b4: 6f:81:b2:09:0e:54:b0:8f:2f:ac:e5:51:f8:8f:e9: 7b:79:6e:db:0c:1b:36:bb:99:11:56:6a:d8:db:b9: 99:57:52:d2:da:3c:83:87:4c:bd:65:ce:91:96:5c: eb:f5:4d:1a:1b:a9:96:1f:e8:f9:2a:eb:fb:52:09: 19:19:fa:73:e6:b0:ca:46:1e:f1:70:09:f3:fa:8c: 4d:d3:8b:7b:64:48:86:a8:03:30:21:7a:1f:12:5c: d8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:A1:4F:30:75:2A:74:68:48:01:44:B6:B9:80:ED:38:B8:E8:AF:61 X509v3 Authority Key Identifier: keyid:EC:17:9A:58:74:22:28:E3:0B:7D:F7:97:88:26:58:38:78:25:5B:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/7BeaWHQiKOMLffeXiCZYOHglW3g.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7BeaWHQiKOMLffeXiCZYOHglW3g.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AA95A/B0D1D5FCBE7411E98F95FA64C4F9AE02/E64999C258D611ED86C99945C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.110.28.0/23 IPv6: 2402:8e40::/32 Signature Algorithm: sha256WithRSAEncryption 58:8a:2d:56:92:dd:1f:f9:95:22:4a:5d:16:af:99:b4:82:da: f1:78:b6:b6:04:08:ea:5e:72:90:b5:f2:fe:96:3e:99:89:58: 2d:d4:f1:a7:5e:e3:41:27:c8:b3:c6:23:72:14:f8:90:ef:d3: 7d:d8:9d:da:c1:6d:2c:2b:78:7a:d5:69:6e:03:91:27:d3:f8: e6:59:bd:ea:c6:97:17:d5:0b:39:4a:9a:55:be:24:b1:28:86: c5:30:bc:5c:87:6c:4d:84:09:5e:3e:71:d8:d2:56:f5:00:47: 95:7c:45:ea:63:28:33:26:e0:da:ae:04:c1:a9:d4:09:54:24: e6:65:9c:a2:a1:84:c3:63:ed:42:12:6b:94:03:48:46:75:db: c6:4e:4d:a8:31:6c:71:8b:f3:d8:c1:06:9e:fb:ab:50:04:19: 07:fc:1d:8b:e3:97:fb:2c:54:32:c1:5d:fb:3c:06:8e:61:ef: 4a:e5:14:a7:1a:a3:4b:2f:62:82:e7:13:75:51:b4:b4:77:e5: ee:f4:a5:88:bc:2e:5c:8f:c0:ec:01:5c:b9:b2:a5:cb:15:24: f7:e2:0e:9e:e9:d6:ba:d9:46:cb:16:5d:97:31:cd:91:f7:02: 54:43:aa:6c:3a:a8:b4:0b:6b:f3:17:da:58:96:30:6a:ef:b4: 16:9c:34:6e -----BEGIN CERTIFICATE----- MIIFgDCCBGigAwIBAgICDYcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QUE5NUExMTAvBgNVBAUTKEVDMTc5QTU4NzQyMjI4RTMwQjdERjc5Nzg4MjY1ODM4 NzgyNTVCNzgwHhcNMjUwMzI0MTgyNzE2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2UxYTQwMy0wZWE3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxMzjNDDX+xlSFnW7rRygma0dSV9dS6IAVHWloUwB5/mhf1UrIGe0G7BYjjyz y5Dim/rThvOzmfu2+GhgmriXrXb2HLwsGOeB+n3rMxp5/ka6ciB+n6WlqolRsxZM NLcennWedSBcW0GcChUOkGKsFQKsZF7NqOdANmZLVvuchYoHeAIMKtdwgwUflWUX ybRLHH0xNywpAqDh2iUgV2blY2QbXLRvgbIJDlSwjy+s5VH4j+l7eW7bDBs2u5kR VmrY27mZV1LS2jyDh0y9Zc6Rllzr9U0aG6mWH+j5Kuv7UgkZGfpz5rDKRh7xcAnz +oxN04t7ZEiGqAMwIXofElzYRQIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLyhTzB1 KnRoSAFEtrmA7Ti46K9hMB8GA1UdIwQYMBaAFOwXmlh0IijjC333l4gmWDh4JVt4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQTk1QS9CMEQxRDVGQ0JF NzQxMUU5OEY5NUZBNjRDNEY5QUUwMi83QmVhV0hRaUtPTUxmZmVYaUNaWU9IZ2xX M2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzdCZWFXSFFpS09NTGZmZVhpQ1pZT0hnbFczZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QUE5NUEvQjBEMUQ1RkNCRTc0MTFFOThGOTVGQTY0QzRGOUFFMDIvRTY0OTk5QzI1 OEQ2MTFFRDg2Qzk5OTQ1QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E HzAdMAwEAgABMAYDBAFnbhwwDQQCAAIwBwMFACQCjkAwDQYJKoZIhvcNAQELBQAD ggEBAFiKLVaS3R/5lSJKXRavmbSC2vF4trYECOpecpC18v6WPpmJWC3U8ade40En yLPGI3IU+JDv033YndrBbSwreHrVaW4DkSfT+OZZverGlxfVCzlKmlW+JLEohsUw vFyHbE2ECV4+cdjSVvUAR5V8RepjKDMm4NquBMGp1AlUJOZlnKKhhMNj7UISa5QD SEZ128ZOTagxbHGL89jBBp77q1AEGQf8HYvjl/ssVDLBXfs8Bo5h70rlFKcao0sv YoLnE3VRtLR35e70pYi8LlyPwOwBXLmypcsVJPfiDp7p1rrZRssWXZcxzZH3AlRD qmw6qLQLa/MX2liWMGrvtBacNG4= -----END CERTIFICATE-----Generated at Sat Apr 19 07:59:09 2025 by rpki-client