$ rpki-client -vvf rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FDC6A888AEB111EE9A78E132C4F9AE02.roa File: FDC6A888AEB111EE9A78E132C4F9AE02.roa (raw, json) Hash identifier: ptIGt2wYMEPKhzv8i8tfWNEfDe4elqSnf1QbHzmubdk= Subject key identifier: 54:AE:35:01:AC:93:1F:E5:3F:60:62:ED:FF:EE:C7:3B:29:B8:F9:A3 Certificate issuer: /CN=A91B6587/serialNumber=2D634077CC847B59D4048D43E04B3309698FE638 Certificate serial: 02B7 Authority key identifier: 2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FDC6A888AEB111EE9A78E132C4F9AE02.roa Signing time: Thu 06 Mar 2025 04:21:56 +0000 ROA not before: Thu 06 Mar 2025 04:21:56 +0000 ROA not after: Fri 31 Oct 2025 00:00:00 +0000 asID: 146943 IP address blocks: 103.101.58.0/24 maxlen: 24 103.101.59.0/24 maxlen: 24 103.205.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 02:40:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 695 (0x2b7) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B6587 Validity Not Before: Mar 6 04:21:56 2025 GMT Not After : Oct 31 00:00:00 2025 GMT Subject: CN=67c922e4-17cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:15:d9:ac:8b:4e:c1:14:59:0f:76:6c:ea: 52:84:10:31:86:b1:16:ea:9f:19:de:c5:e3:ec:b3: b4:35:9d:31:e3:dd:92:3b:d3:25:f5:fe:dc:28:4c: 7a:d5:f8:31:85:ed:f3:08:54:51:46:40:74:20:ce: 7c:75:46:bc:7b:2f:10:fd:b6:10:a0:e0:d8:ec:f5: 1b:66:58:e1:4e:41:e9:fd:dc:e4:71:c2:f6:86:4e: 1a:88:31:68:f9:ea:7b:9b:25:71:7a:28:29:8c:a8: 46:0d:aa:01:a2:1d:2d:1a:84:54:63:f3:3f:4b:0d: 66:6f:cd:f0:b3:cb:4e:c4:ca:ca:44:1b:83:7a:47: f0:36:b3:fe:c2:ce:71:98:b5:0a:f1:ad:b5:00:02: 7e:8c:a8:93:3c:84:df:54:28:44:49:d5:3f:fb:67: 33:e0:66:fa:29:bf:fa:a5:17:9b:e8:ea:36:74:5e: 9f:67:97:4e:cf:23:f5:1a:d7:9e:80:35:c8:48:51: ff:49:a2:ee:e9:bd:6f:ff:70:6e:1d:8e:ea:bc:0c: 7d:db:8c:b5:84:82:44:c0:18:c8:c2:5d:f0:fd:21: 47:c9:b2:04:51:e1:01:70:12:dc:94:f9:81:79:a4: db:3c:e6:db:5d:f0:2e:4f:a5:3a:37:26:18:b9:3d: fc:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AE:35:01:AC:93:1F:E5:3F:60:62:ED:FF:EE:C7:3B:29:B8:F9:A3 X509v3 Authority Key Identifier: keyid:2D:63:40:77:CC:84:7B:59:D4:04:8D:43:E0:4B:33:09:69:8F:E6:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/LWNAd8yEe1nUBI1D4EszCWmP5jg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LWNAd8yEe1nUBI1D4EszCWmP5jg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B6587/417D71B4918611EDA84A124DC4F9AE02/FDC6A888AEB111EE9A78E132C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.101.58.0/23 103.205.142.0/24 Signature Algorithm: sha256WithRSAEncryption 49:cc:2c:fa:03:32:8a:36:23:02:e2:a7:77:26:b1:1e:8f:4b: 76:f6:18:46:24:af:51:aa:ea:29:8f:ef:cc:cd:8b:f4:f0:cb: a3:11:3b:8e:49:c9:84:63:af:ca:2e:35:8a:ee:74:5a:7d:77: ee:f5:20:98:30:3a:2e:7a:49:e5:72:e5:af:b1:89:3b:16:35: 74:f7:35:11:9a:c0:96:6d:7f:d9:55:3f:4c:49:b5:df:0e:53: 3c:7a:d5:1f:c0:42:3a:91:81:6e:83:aa:3d:f0:e8:66:48:85: fc:4c:32:59:f5:47:10:3c:e9:d3:8d:81:83:30:00:15:a1:c1: a0:46:55:33:c1:d8:d7:5d:bb:e7:5a:cf:6a:a7:69:ae:c2:7f: 69:38:e2:1b:c9:08:56:93:8f:04:49:e5:60:58:77:d0:81:3c: d8:52:de:f1:d6:cd:45:1e:7e:9e:3d:9b:2c:63:dd:98:a4:d6: e9:70:aa:af:b1:df:6a:58:00:5b:e9:ca:33:b5:85:eb:99:95: e6:a7:c7:73:49:97:41:65:0e:a9:39:76:0b:b8:22:d8:93:2a: f6:09:3b:cf:98:f0:e1:9f:0c:9c:a3:80:25:3b:7b:3d:b0:3b: e7:dd:8d:c3:4b:19:9a:62:da:9e:17:2f:31:22:78:be:ee:f1: 86:67:9b:61 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICArcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QjY1ODcxMTAvBgNVBAUTKDJENjM0MDc3Q0M4NDdCNTlENDA0OEQ0M0UwNEIzMzA5 Njk4RkU2MzgwHhcNMjUwMzA2MDQyMTU2WhcNMjUxMDMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2M5MjJlNC0xN2NkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtUsV2ayLTsEUWQ92bOpShBAxhrEW6p8Z3sXj7LO0NZ0x492SO9Ml9f7cKEx6 1fgxhe3zCFRRRkB0IM58dUa8ey8Q/bYQoODY7PUbZljhTkHp/dzkccL2hk4aiDFo +ep7myVxeigpjKhGDaoBoh0tGoRUY/M/Sw1mb83ws8tOxMrKRBuDekfwNrP+ws5x mLUK8a21AAJ+jKiTPITfVChESdU/+2cz4Gb6Kb/6pReb6Oo2dF6fZ5dOzyP1Gtee gDXISFH/SaLu6b1v/3BuHY7qvAx924y1hIJEwBjIwl3w/SFHybIEUeEBcBLclPmB eaTbPObbXfAuT6U6NyYYuT38LwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFFSuNQGs kx/lP2Bi7f/uxzspuPmjMB8GA1UdIwQYMBaAFC1jQHfMhHtZ1ASNQ+BLMwlpj+Y4 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjU4Ny80MTdENzFCNDkx ODYxMUVEQTg0QTEyNERDNEY5QUUwMi9MV05BZDh5RWUxblVCSTFENEVzekNXbVA1 amcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xXTkFkOHlFZTFuVUJJMUQ0RXN6Q1dtUDVqZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QjY1ODcvNDE3RDcxQjQ5MTg2MTFFREE4NEExMjREQzRGOUFFMDIvRkRDNkE4ODhB RUIxMTFFRTlBNzhFMTMyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAFnZToDBABnzY4wDQYJKoZIhvcNAQELBQADggEBAEnMLPoD Moo2IwLip3cmsR6PS3b2GEYkr1Gq6imP78zNi/Twy6MRO45JyYRjr8ouNYrudFp9 d+71IJgwOi56SeVy5a+xiTsWNXT3NRGawJZtf9lVP0xJtd8OUzx61R/AQjqRgW6D qj3w6GZIhfxMMln1RxA86dONgYMwABWhwaBGVTPB2Nddu+daz2qnaa7Cf2k44hvJ CFaTjwRJ5WBYd9CBPNhS3vHWzUUefp49myxj3Zik1ulwqq+x32pYAFvpyjO1heuZ leanx3NJl0FlDqk5dgu4ItiTKvYJO8+Y8OGfDJyjgCU7ez2wO+fdjcNLGZpi2p4X LzEieL7u8YZnm2E= -----END CERTIFICATE-----Generated at Sat Apr 5 02:15:59 2025 by rpki-client