$ rpki-client -vvf rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa File: DCE5E9CA713611E9A71D3311C4F9AE02.roa (raw, json) Hash identifier: yUcmYZ18wT5AwWICmpq0ZcagYP+uu8UmtnyixruA6kM= Subject key identifier: 0B:63:75:B2:A0:7B:C4:71:62:46:26:0C:61:B4:B5:D5:9B:A9:89:3F Certificate issuer: /CN=A91BDA06/serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Certificate serial: 0F04 Authority key identifier: 7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa Signing time: Fri 14 Feb 2025 18:36:22 +0000 ROA not before: Fri 14 Feb 2025 18:36:22 +0000 ROA not after: Fri 01 May 2026 00:00:00 +0000 asID: 136480 IP address blocks: 103.134.204.0/22 maxlen: 22 103.134.204.0/24 maxlen: 24 103.134.205.0/24 maxlen: 24 103.134.206.0/24 maxlen: 24 103.134.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 17:32:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3844 (0xf04) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91BDA06, serialNumber=7CF92898033021E03B3B93C0EEB88213C7FB5EC5 Validity Not Before: Feb 14 18:36:22 2025 GMT Not After : May 1 00:00:00 2026 GMT Subject: CN=67af8d25-e5fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:80:de:bf:c3:fd:03:2b:cd:ba:01:2f:5f:bd: b3:18:8a:db:ad:c0:4a:3f:c9:19:44:03:bc:e2:02: 95:1c:d7:89:ef:b1:0a:70:5d:5e:6d:68:f5:0d:48: 8f:6a:e5:58:1a:d0:fc:cd:bf:a9:80:0e:f4:bd:07: 53:05:0b:a6:fc:77:1e:1e:1b:c6:e7:1a:a4:8b:7d: 23:f6:fa:57:c3:9e:af:99:8d:b9:9e:95:ef:87:63: f4:05:ba:29:09:af:d4:29:e7:5e:3e:e0:bf:e1:8f: ad:36:90:4d:a8:59:56:f4:6c:39:76:3a:2b:b6:aa: a0:9d:ee:16:e6:93:b8:fe:19:58:93:8e:0c:52:c0: dc:d3:84:a9:6f:a4:35:18:d7:11:9a:6e:ac:48:af: 2c:d4:0a:89:e2:df:6b:e7:42:3b:fd:10:d0:4e:ba: ad:39:d7:12:66:97:15:cb:9b:21:20:1e:ca:f8:3a: 18:24:15:75:0d:b9:b6:4e:2f:4a:76:41:ca:e8:d0: 8e:0d:87:76:70:1e:30:50:61:65:e6:ec:45:91:f4: 3b:e7:45:ef:ea:1a:7f:a0:4c:74:c8:6f:c5:11:2b: 88:50:e4:99:57:82:fb:0b:4e:06:23:72:61:11:40: 39:cd:8d:0b:e6:6f:3e:bd:8e:5d:b9:36:97:05:ec: 99:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:63:75:B2:A0:7B:C4:71:62:46:26:0C:61:B4:B5:D5:9B:A9:89:3F X509v3 Authority Key Identifier: keyid:7C:F9:28:98:03:30:21:E0:3B:3B:93:C0:EE:B8:82:13:C7:FB:5E:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/fPkomAMwIeA7O5PA7riCE8f7XsU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fPkomAMwIeA7O5PA7riCE8f7XsU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BDA06/2BFC8948713611E9869DBF10C4F9AE02/DCE5E9CA713611E9A71D3311C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.134.204.0/22 Signature Algorithm: sha256WithRSAEncryption 65:2b:2c:ca:42:61:20:76:d1:c3:8f:0d:a0:9e:15:e4:79:f6: 7d:d7:23:8d:14:ca:04:a2:03:9b:91:96:ee:f2:cf:d9:ab:21: 74:10:46:d5:64:c1:c0:29:e8:5a:5e:26:d1:5b:43:aa:e1:52: ff:4b:50:6b:8a:55:5a:a5:82:a6:3b:c4:e9:44:dd:13:ad:bb: f5:75:b8:5d:b9:f2:76:d0:37:7b:ab:f3:36:4c:aa:dc:a1:d4: fb:9f:1a:18:65:ef:f1:b3:63:25:69:5f:2d:bd:3d:2a:61:ad: 99:0a:a3:18:68:a7:05:7d:26:67:91:34:ba:c0:e0:56:17:52: cf:e4:df:8b:94:6b:03:4a:e0:32:ae:03:38:0c:c7:c3:c5:54: 06:37:cc:c9:87:ba:0a:2c:51:df:4e:4a:1c:b7:c5:7b:62:78: 62:89:e7:64:c5:64:65:12:18:aa:c6:d5:46:99:c9:33:4f:e9: bf:b7:9f:d1:a4:a9:f3:07:09:f3:dc:63:23:48:02:3b:f6:c4: 64:6f:04:fa:db:5e:3e:63:11:9e:8a:c8:f4:bd:f8:e3:2c:67: d9:85:8e:95:84:fe:54:18:d2:0e:8e:85:9d:77:82:1a:02:63: e2:30:bd:78:d1:ea:39:b4:03:a2:e0:e4:4d:ad:0b:da:db:f4: 28:7d:49:0c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICDwQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QkRBMDYxMTAvBgNVBAUTKDdDRjkyODk4MDMzMDIxRTAzQjNCOTNDMEVFQjg4MjEz QzdGQjVFQzUwHhcNMjUwMjE0MTgzNjIyWhcNMjYwNTAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2FmOGQyNS1lNWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAz4Dev8P9AyvNugEvX72zGIrbrcBKP8kZRAO84gKVHNeJ77EKcF1ebWj1DUiP auVYGtD8zb+pgA70vQdTBQum/HceHhvG5xqki30j9vpXw56vmY25npXvh2P0Bbop Ca/UKedePuC/4Y+tNpBNqFlW9Gw5djortqqgne4W5pO4/hlYk44MUsDc04Spb6Q1 GNcRmm6sSK8s1AqJ4t9r50I7/RDQTrqtOdcSZpcVy5shIB7K+DoYJBV1Dbm2Ti9K dkHK6NCODYd2cB4wUGFl5uxFkfQ750Xv6hp/oEx0yG/FESuIUOSZV4L7C04GI3Jh EUA5zY0L5m8+vY5duTaXBeyZGQIDAQABo4IClTCCApEwHQYDVR0OBBYEFAtjdbKg e8RxYkYmDGG0tdWbqYk/MB8GA1UdIwQYMBaAFHz5KJgDMCHgOzuTwO64ghPH+17F MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCREEwNi8yQkZDODk0ODcx MzYxMUU5ODY5REJGMTBDNEY5QUUwMi9mUGtvbUFNd0llQTdPNVBBN3JpQ0U4ZjdY c1UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZQa29tQU13SWVBN081UEE3cmlDRThmN1hzVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QkRBMDYvMkJGQzg5NDg3MTM2MTFFOTg2OURCRjEwQzRGOUFFMDIvRENFNUU5Q0E3 MTM2MTFFOUE3MUQzMzExQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJnhswwDQYJKoZIhvcNAQELBQADggEBAGUrLMpCYSB20cOP DaCeFeR59n3XI40UygSiA5uRlu7yz9mrIXQQRtVkwcAp6FpeJtFbQ6rhUv9LUGuK VVqlgqY7xOlE3ROtu/V1uF258nbQN3ur8zZMqtyh1PufGhhl7/GzYyVpXy29PSph rZkKoxhopwV9JmeRNLrA4FYXUs/k34uUawNK4DKuAzgMx8PFVAY3zMmHugosUd9O Shy3xXtieGKJ52TFZGUSGKrG1UaZyTNP6b+3n9GkqfMHCfPcYyNIAjv2xGRvBPrb Xj5jEZ6KyPS9+OMsZ9mFjpWE/lQY0g6OhZ13ghoCY+IwvXjR6jm0A6Lg5E2tC9rb 9Ch9SQw= -----END CERTIFICATE-----Generated at Sat Apr 12 19:38:09 2025 by rpki-client