$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/2FFDFB74A5F111EC89780C38C4F9AE02.roa File: 2FFDFB74A5F111EC89780C38C4F9AE02.roa (raw, json) Hash identifier: t9Ue3iuOWPGeL64kpqjEgMmW4d4g4YPsvh4Erz4xwRU= Subject key identifier: 40:C3:23:19:87:2F:69:8F:E9:04:56:1F:65:62:05:D6:5F:A1:A8:A7 Certificate issuer: /CN=A91B3DC1/serialNumber=E144CCF41DA105AF6CD45BC3F8866234D38F7C75 Certificate serial: 035D Authority key identifier: E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/2FFDFB74A5F111EC89780C38C4F9AE02.roa Signing time: Mon 03 Mar 2025 02:55:22 +0000 ROA not before: Mon 03 Mar 2025 02:55:22 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 141737 IP address blocks: 103.182.212.0/23 maxlen: 23 103.182.212.0/24 maxlen: 24 103.182.213.0/24 maxlen: 24 2001:df0:7fc0::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 00:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 861 (0x35d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B3DC1 Validity Not Before: Mar 3 02:55:22 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67c51a1a-c090 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:6c:ba:c8:43:7a:1a:97:f5:4c:ae:c2:f7: 3e:66:7f:92:94:8a:7b:b5:10:a8:3b:7c:72:f5:5d: 22:6c:8e:ee:cb:f4:49:55:8d:df:48:ce:2e:17:58: 95:5e:89:24:3e:67:c4:54:31:41:23:82:fa:5e:c8: 7e:af:6b:9c:cc:06:49:4c:1e:27:11:87:fc:4f:67: d8:dd:b9:b2:a3:d8:8c:7c:fb:f5:83:bd:02:7a:dd: ed:53:39:ef:81:bc:90:92:39:46:6d:40:6d:39:18: ab:10:a6:18:3f:c1:14:29:ce:b0:f3:8a:a1:67:8f: 9a:98:94:77:c8:98:a2:4d:bb:d7:02:19:fa:93:b9: 11:d4:8d:3b:de:a2:de:1d:4f:cc:5f:70:ee:7c:a4: 56:fd:16:a4:0d:ba:7e:9d:e1:62:80:f0:a4:04:9d: b9:db:cd:a2:15:72:d3:94:9b:0a:67:e7:d4:a6:a4: ce:22:60:e4:ee:21:48:7a:bd:f4:b9:0e:03:c6:42: 40:bf:81:4c:ee:c8:33:e9:12:89:57:ab:aa:88:25: dc:48:6f:b1:0b:ec:52:7b:f8:ed:e2:b0:d1:11:7e: cc:0a:6b:ab:1d:cb:b9:38:8b:4f:ee:b5:4a:af:8f: a4:78:03:0c:0b:eb:c7:14:87:4b:16:0f:f1:8d:75: 7c:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:C3:23:19:87:2F:69:8F:E9:04:56:1F:65:62:05:D6:5F:A1:A8:A7 X509v3 Authority Key Identifier: keyid:E1:44:CC:F4:1D:A1:05:AF:6C:D4:5B:C3:F8:86:62:34:D3:8F:7C:75 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/4UTM9B2hBa9s1FvD-IZiNNOPfHU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UTM9B2hBa9s1FvD-IZiNNOPfHU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3DC1/50C6027AA50611EC82A2437DC4F9AE02/2FFDFB74A5F111EC89780C38C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.182.212.0/23 IPv6: 2001:df0:7fc0::/48 Signature Algorithm: sha256WithRSAEncryption d5:b3:9a:cf:aa:13:63:48:82:2a:40:ed:25:3c:00:22:01:e7: 79:83:65:48:5c:ef:f8:bb:d3:e0:ba:f0:16:fc:9e:f7:2c:97: 67:86:b3:0d:81:08:45:37:d4:5e:15:5e:a7:d1:8a:04:50:27: 1b:57:0b:68:b1:ed:67:0d:3a:01:ef:25:e9:6d:27:f6:1a:3b: 4c:e2:83:9d:87:76:74:03:83:37:de:f3:16:bc:90:0c:19:30: 7b:f1:86:9b:e9:a8:33:df:7a:cc:21:b9:d3:02:87:93:2e:f3: ef:37:0d:7b:ed:47:ae:df:dc:33:43:3b:08:da:6a:5b:83:24: 34:8c:65:c4:a6:8a:22:0d:95:a5:f4:47:3c:66:f1:33:98:68: ec:56:49:f2:46:ff:d9:0b:a4:8d:28:7c:83:d0:19:93:fe:e0: 49:0e:e7:27:58:a0:b1:d3:6a:75:63:ce:58:88:d1:67:ed:ac: 2d:54:af:e7:a4:74:b6:5a:b3:7e:67:f4:38:23:ed:59:42:2f: 2b:d8:4a:74:e5:4c:81:72:fd:86:31:0c:81:13:58:26:55:7c: 0f:f4:cc:a9:6f:d8:58:d3:79:66:5b:52:cc:ac:24:3f:58:ec: b3:60:b8:91:66:77:e6:04:7b:22:9e:2b:46:e2:04:ec:4c:5d: 37:7a:eb:70 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICA10wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjNEQzExMTAvBgNVBAUTKEUxNDRDQ0Y0MURBMTA1QUY2Q0Q0NUJDM0Y4ODY2MjM0 RDM4RjdDNzUwHhcNMjUwMzAzMDI1NTIyWhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2M1MWExYS1jMDkwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEArfhsushDehqX9Uyuwvc+Zn+SlIp7tRCoO3xy9V0ibI7uy/RJVY3fSM4uF1iV XokkPmfEVDFBI4L6Xsh+r2uczAZJTB4nEYf8T2fY3bmyo9iMfPv1g70Cet3tUznv gbyQkjlGbUBtORirEKYYP8EUKc6w84qhZ4+amJR3yJiiTbvXAhn6k7kR1I073qLe HU/MX3DufKRW/RakDbp+neFigPCkBJ25282iFXLTlJsKZ+fUpqTOImDk7iFIer30 uQ4DxkJAv4FM7sgz6RKJV6uqiCXcSG+xC+xSe/jt4rDREX7MCmurHcu5OItP7rVK r4+keAMMC+vHFIdLFg/xjXV8hwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFEDDIxmH L2mP6QRWH2ViBdZfoainMB8GA1UdIwQYMBaAFOFEzPQdoQWvbNRbw/iGYjTTj3x1 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCM0RDMS81MEM2MDI3QUE1 MDYxMUVDODJBMjQzN0RDNEY5QUUwMi80VVRNOUIyaEJhOXMxRnZELUlaaU5OT1Bm SFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzRVVE05QjJoQmE5czFGdkQtSVppTk5PUGZIVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjNEQzEvNTBDNjAyN0FBNTA2MTFFQzgyQTI0MzdEQzRGOUFFMDIvMkZGREZCNzRB NUYxMTFFQzg5NzgwQzM4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBAFnttQwDwQCAAIwCQMHACABDfB/wDANBgkqhkiG9w0BAQsF AAOCAQEA1bOaz6oTY0iCKkDtJTwAIgHneYNlSFzv+LvT4LrwFvye9yyXZ4azDYEI RTfUXhVep9GKBFAnG1cLaLHtZw06Ae8l6W0n9ho7TOKDnYd2dAODN97zFryQDBkw e/GGm+moM996zCG50wKHky7z7zcNe+1Hrt/cM0M7CNpqW4MkNIxlxKaKIg2VpfRH PGbxM5ho7FZJ8kb/2QukjSh8g9AZk/7gSQ7nJ1igsdNqdWPOWIjRZ+2sLVSv56R0 tlqzfmf0OCPtWUIvK9hKdOVMgXL9hjEMgRNYJlV8D/TMqW/YWNN5ZltSzKwkP1js s2C4kWZ35gR7Ip4rRuIE7ExdN3rrcA== -----END CERTIFICATE-----Generated at Sat Apr 5 01:55:11 2025 by rpki-client