$ rpki-client -vvf rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/3135AFCECBF411EFBCA06B6BC4F9AE02.roa File: 3135AFCECBF411EFBCA06B6BC4F9AE02.roa (raw, json) Hash identifier: KQyWlLwg95xKEA7eXDtYxt189xq6hS1CzXkzk6a37uA= Subject key identifier: A9:D2:D5:25:BA:9E:8B:DC:7A:31:93:B5:31:B6:08:D6:9F:36:CB:EA Certificate issuer: /CN=A91BC238/serialNumber=12A102F08ED14F623FA6E31DBAB49A24D1B9A151 Certificate serial: 04 Authority key identifier: 12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/3135AFCECBF411EFBCA06B6BC4F9AE02.roa Signing time: Mon 06 Jan 2025 06:06:11 +0000 ROA not before: Mon 06 Jan 2025 06:06:11 +0000 ROA not after: Wed 30 Jul 2025 00:00:00 +0000 asID: 395793 IP address blocks: 103.218.96.0/24 maxlen: 24 103.218.97.0/24 maxlen: 24 103.218.98.0/24 maxlen: 24 103.218.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 16 Apr 2025 06:26:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4 (0x4) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BC238 Validity Not Before: Jan 6 06:06:11 2025 GMT Not After : Jul 30 00:00:00 2025 GMT Subject: CN=677b72d2-d672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:28:53:52:41:ba:e3:9b:78:b5:66:21:09:27: d9:d6:8b:2b:04:1e:10:d6:32:e7:47:f7:ff:6b:24: 2d:8f:d0:44:4d:46:ee:86:bc:c4:9d:3f:68:e4:fb: 09:c3:40:fc:08:ae:bb:50:79:e9:cb:17:c0:9d:91: d7:37:8a:36:a3:17:01:de:a1:30:b6:e2:e9:3d:d7: a7:78:3f:f8:41:a8:3e:bf:8e:af:f7:eb:5d:c2:cb: a3:3f:36:d6:2a:65:41:c7:68:d1:dc:80:81:b7:8d: cc:02:4a:6e:68:0e:38:d4:85:aa:a4:ef:10:8f:45: 57:09:83:b3:e1:88:1c:66:8d:a9:1b:36:aa:4b:4d: 19:fa:e5:e3:a4:26:62:47:b3:7b:af:57:40:a3:98: e0:03:92:fb:26:3f:5c:19:f9:66:a2:29:3a:ce:0d: 85:6e:38:1b:15:f3:f5:6f:b7:61:7f:d4:57:69:30: dd:83:10:c5:f8:af:a2:fe:6f:ee:8a:59:76:dc:f6: 25:7e:0b:16:7f:3a:7b:e2:ea:0a:0c:63:1d:92:ef: ab:4b:79:96:40:96:4f:17:a0:28:ec:21:50:74:7d: 63:1c:fc:fd:14:74:6c:72:d6:34:ee:7b:17:9e:2a: ba:98:cb:61:69:e2:62:3f:d9:60:26:1e:22:6b:c3: 53:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D2:D5:25:BA:9E:8B:DC:7A:31:93:B5:31:B6:08:D6:9F:36:CB:EA X509v3 Authority Key Identifier: keyid:12:A1:02:F0:8E:D1:4F:62:3F:A6:E3:1D:BA:B4:9A:24:D1:B9:A1:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/EqEC8I7RT2I_puMdurSaJNG5oVE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EqEC8I7RT2I_puMdurSaJNG5oVE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BC238/CD717D9CCBF311EFBE5B3330C4F9AE02/3135AFCECBF411EFBCA06B6BC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.218.96.0/22 Signature Algorithm: sha256WithRSAEncryption 22:b7:0b:13:51:e1:7a:df:13:a1:3e:7a:be:ab:f0:ea:ab:a1: 56:44:06:77:52:e4:9e:50:57:fe:2b:f5:96:4d:0e:64:18:73: 3b:85:cb:fa:6f:36:09:60:d4:c9:61:3d:b5:ef:d3:a9:35:68: a2:be:c4:34:c7:ef:40:4b:1d:28:32:bb:c3:e1:cc:7e:31:25: c2:56:b2:42:9f:df:46:5d:e9:25:b0:de:29:4f:f7:93:58:da: 9f:68:bb:57:08:48:4d:7b:8a:38:fd:a2:56:d3:ea:69:fc:a8: 35:d2:95:ff:76:d7:e8:89:90:77:af:93:83:a0:e0:35:7c:2c: 61:e3:78:2f:45:fc:4f:cf:9d:54:e0:d3:1d:53:4a:59:47:4b: d1:45:a5:85:8b:08:2f:d2:76:77:81:09:59:7f:c8:d2:bb:ab: 9e:74:ba:ae:65:2e:7e:e8:13:6e:48:b5:d4:3c:08:fd:d1:18: 76:e3:1f:5a:c0:23:d8:01:37:1a:5e:ce:f1:69:a2:a8:94:eb: e6:6e:ca:a2:77:43:87:ad:e9:d2:68:b6:67:50:d1:00:f7:aa: b2:70:47:ae:77:54:c9:25:5d:a6:a0:07:ee:a9:b0:01:6b:37: 15:f6:5e:45:49:13:0e:e3:7b:0c:fe:c0:ab:17:0a:ca:04:b5: 29:34:dc:9e -----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIBBDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC QzIzODExMC8GA1UEBRMoMTJBMTAyRjA4RUQxNEY2MjNGQTZFMzFEQkFCNDlBMjRE MUI5QTE1MTAeFw0yNTAxMDYwNjA2MTFaFw0yNTA3MzAwMDAwMDBaMBgxFjAUBgNV BAMTDTY3N2I3MmQyLWQ2NzIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQC8KFNSQbrjm3i1ZiEJJ9nWiysEHhDWMudH9/9rJC2P0ERNRu6GvMSdP2jk+wnD QPwIrrtQeenLF8Cdkdc3ijajFwHeoTC24uk916d4P/hBqD6/jq/3613Cy6M/NtYq ZUHHaNHcgIG3jcwCSm5oDjjUhaqk7xCPRVcJg7PhiBxmjakbNqpLTRn65eOkJmJH s3uvV0CjmOADkvsmP1wZ+WaiKTrODYVuOBsV8/Vvt2F/1FdpMN2DEMX4r6L+b+6K WXbc9iV+CxZ/Onvi6goMYx2S76tLeZZAlk8XoCjsIVB0fWMc/P0UdGxy1jTuexee KrqYy2Fp4mI/2WAmHiJrw1M/AgMBAAGjggKVMIICkTAdBgNVHQ4EFgQUqdLVJbqe i9x6MZO1MbYI1p82y+owHwYDVR0jBBgwFoAUEqEC8I7RT2I/puMdurSaJNG5oVEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUJDMjM4L0NENzE3RDlDQ0JG MzExRUZCRTVCMzMzMEM0RjlBRTAyL0VxRUM4STdSVDJJX3B1TWR1clNhSk5HNW9W RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvRXFFQzhJN1JUMklfcHVNZHVyU2FKTkc1b1ZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcsGCCsGAQUFBwELBIG+MIG7MIGDBggrBgEFBQcw C4Z3cnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC QzIzOC9DRDcxN0Q5Q0NCRjMxMUVGQkU1QjMzMzBDNEY5QUUwMi8zMTM1QUZDRUNC RjQxMUVGQkNBMDZCNkJDNEY5QUUwMi5yb2EwMwYIKwYBBQUHMA2GJ2h0dHBzOi8v cnJkcC5hcG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQ MA4wDAQCAAEwBgMEAmfaYDANBgkqhkiG9w0BAQsFAAOCAQEAIrcLE1Hhet8ToT56 vqvw6quhVkQGd1LknlBX/iv1lk0OZBhzO4XL+m82CWDUyWE9te/TqTVoor7ENMfv QEsdKDK7w+HMfjElwlayQp/fRl3pJbDeKU/3k1jan2i7VwhITXuKOP2iVtPqafyo NdKV/3bX6ImQd6+Tg6DgNXwsYeN4L0X8T8+dVODTHVNKWUdL0UWlhYsIL9J2d4EJ WX/I0rurnnS6rmUufugTbki11DwI/dEYduMfWsAj2AE3Gl7O8WmiqJTr5m7KondD h63p0mi2Z1DRAPeqsnBHrndUySVdpqAH7qmwAWs3FfZeRUkTDuN7DP7AqxcKygS1 KTTcng== -----END CERTIFICATE-----Generated at Fri Apr 11 17:56:07 2025 by rpki-client