$ rpki-client -vvf rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/6F94DE3C628911EEA2D58C10C4F9AE02.roa File: 6F94DE3C628911EEA2D58C10C4F9AE02.roa (raw, json) Hash identifier: 2icqnjOM7NhkNWNRK/vV/u0TPESMuw0eja9A3sbJDHg= Subject key identifier: B8:86:06:9F:8C:0E:9A:E7:BF:E5:70:44:3F:50:C8:06:29:38:0B:D6 Certificate issuer: /CN=A91C607C/serialNumber=31CBED1D4A02170831807D7744AC4AAFF26A06E6 Certificate serial: 0118 Authority key identifier: 31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/6F94DE3C628911EEA2D58C10C4F9AE02.roa Signing time: Wed 19 Mar 2025 04:20:46 +0000 ROA not before: Wed 19 Mar 2025 04:20:46 +0000 ROA not after: Thu 28 May 2026 00:00:00 +0000 asID: 131310 IP address blocks: 103.6.236.0/22 maxlen: 22 103.6.236.0/24 maxlen: 24 103.6.237.0/24 maxlen: 24 103.6.238.0/24 maxlen: 24 103.6.239.0/24 maxlen: 24 150.129.68.0/22 maxlen: 22 150.129.68.0/24 maxlen: 24 150.129.69.0/24 maxlen: 24 150.129.70.0/24 maxlen: 24 150.129.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Apr 2025 04:14:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 280 (0x118) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C607C Validity Not Before: Mar 19 04:20:46 2025 GMT Not After : May 28 00:00:00 2026 GMT Subject: CN=67da461e-dab2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:40:b7:21:32:dc:bc:2c:06:4d:85:eb:e1:1c: 75:37:2f:49:ef:ee:7d:50:9f:85:6a:2c:3d:1e:53: b1:19:6b:42:c2:96:74:9d:bf:91:c1:65:90:60:b3: 02:b9:09:d3:ca:63:f1:20:61:8c:3e:ad:1a:09:5a: 13:4a:93:36:57:57:23:2c:07:f5:40:f8:21:60:87: a5:85:db:43:3e:3d:be:f1:97:84:83:c2:63:a6:e6: 1d:c4:5a:72:0b:bc:4c:21:85:29:56:35:44:5c:fe: 22:0e:4d:6f:4c:f8:75:2e:91:82:49:4e:4a:0f:53: 8b:19:4c:ef:cb:0e:9c:09:0b:3c:b4:8d:05:96:e3: 0e:4d:af:41:92:ba:32:37:ca:01:9e:e5:ed:1b:75: b0:8e:a7:c5:32:1a:0e:72:dc:62:73:23:27:66:8b: ba:01:a1:7c:a5:c4:75:9d:bf:66:20:d0:51:51:85: 0d:f5:a6:d2:78:51:c4:0d:43:01:5d:d9:a6:90:bb: 0f:ba:31:84:29:92:07:62:8d:50:3b:59:d4:80:6f: 17:a0:96:1b:ee:31:ae:13:9f:49:36:f2:81:10:ff: 7a:f1:e0:27:9b:64:1f:8c:82:6f:10:c8:55:69:40: 81:be:2b:36:da:ef:1f:6f:db:bc:85:27:5a:99:da: 27:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:86:06:9F:8C:0E:9A:E7:BF:E5:70:44:3F:50:C8:06:29:38:0B:D6 X509v3 Authority Key Identifier: keyid:31:CB:ED:1D:4A:02:17:08:31:80:7D:77:44:AC:4A:AF:F2:6A:06:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/McvtHUoCFwgxgH13RKxKr_JqBuY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/McvtHUoCFwgxgH13RKxKr_JqBuY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C607C/D4DD3A88628811EE9644A90CC4F9AE02/6F94DE3C628911EEA2D58C10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.6.236.0/22 150.129.68.0/22 Signature Algorithm: sha256WithRSAEncryption 41:1a:27:3e:41:86:b7:76:2e:ba:b4:40:4d:cd:5d:ea:e9:a0: 77:a1:b1:02:f4:8c:0d:a5:22:95:51:7f:22:03:14:c3:e9:d0: 68:ca:82:f0:6e:60:91:16:e7:70:83:e8:ba:98:d1:03:2d:d9: e4:44:bd:5c:65:1c:04:52:0b:56:8a:9e:c4:c3:ac:a5:ae:3f: c5:dc:db:71:08:53:83:4c:b7:10:89:06:41:0c:93:5b:ae:6c: 8e:3e:5c:19:51:ed:4a:60:79:b7:fa:9d:16:e3:cd:8a:f5:ff: 95:7e:cf:e2:01:63:46:cf:2c:68:82:fc:1b:50:ea:e4:4c:4e: 3e:e6:aa:74:0a:28:d4:b1:b4:4f:ab:4b:33:ec:6a:67:13:98: 2e:75:0d:23:b1:e9:05:5f:df:88:95:40:ed:cf:12:d1:12:e9: 54:07:cd:fe:7e:28:d4:63:eb:55:12:4c:d5:f2:68:60:6c:30: d3:8e:dd:e2:43:94:0d:bd:4f:b7:9d:e8:dc:c3:98:9e:b1:ab: 86:e0:63:a4:4b:87:4c:ae:e5:df:5b:97:63:5d:91:41:05:08: 21:05:6a:08:fa:d0:e8:17:13:f9:53:82:1c:36:ec:6e:fd:53: 0f:43:93:9f:53:0b:6e:52:12:dd:79:8b:ad:1b:b3:cd:a4:0a: b9:cb:fe:41 -----BEGIN CERTIFICATE----- MIIFdzCCBF+gAwIBAgICARgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzYwN0MxMTAvBgNVBAUTKDMxQ0JFRDFENEEwMjE3MDgzMTgwN0Q3NzQ0QUM0QUFG RjI2QTA2RTYwHhcNMjUwMzE5MDQyMDQ2WhcNMjYwNTI4MDAwMDAwWjAYMRYwFAYD VQQDEw02N2RhNDYxZS1kYWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAq0C3ITLcvCwGTYXr4Rx1Ny9J7+59UJ+Faiw9HlOxGWtCwpZ0nb+RwWWQYLMC uQnTymPxIGGMPq0aCVoTSpM2V1cjLAf1QPghYIelhdtDPj2+8ZeEg8JjpuYdxFpy C7xMIYUpVjVEXP4iDk1vTPh1LpGCSU5KD1OLGUzvyw6cCQs8tI0FluMOTa9Bkroy N8oBnuXtG3WwjqfFMhoOctxicyMnZou6AaF8pcR1nb9mINBRUYUN9abSeFHEDUMB XdmmkLsPujGEKZIHYo1QO1nUgG8XoJYb7jGuE59JNvKBEP968eAnm2QfjIJvEMhV aUCBvis22u8fb9u8hSdamdonDwIDAQABo4ICmzCCApcwHQYDVR0OBBYEFLiGBp+M Dprnv+VwRD9QyAYpOAvWMB8GA1UdIwQYMBaAFDHL7R1KAhcIMYB9d0SsSq/yagbm MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNjA3Qy9ENEREM0E4ODYy ODgxMUVFOTY0NEE5MENDNEY5QUUwMi9NY3Z0SFVvQ0Z3Z3hnSDEzUkt4S3JfSnFC dVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL01jdnRIVW9DRndneGdIMTNSS3hLcl9KcUJ1WS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzYwN0MvRDRERDNBODg2Mjg4MTFFRTk2NDRBOTBDQzRGOUFFMDIvNkY5NERFM0M2 Mjg5MTFFRUEyRDU4QzEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwJQYIKwYBBQUHAQcBAf8E FjAUMBIEAgABMAwDBAJnBuwDBAKWgUQwDQYJKoZIhvcNAQELBQADggEBAEEaJz5B hrd2Lrq0QE3NXerpoHehsQL0jA2lIpVRfyIDFMPp0GjKgvBuYJEW53CD6LqY0QMt 2eREvVxlHARSC1aKnsTDrKWuP8Xc23EIU4NMtxCJBkEMk1uubI4+XBlR7Upgebf6 nRbjzYr1/5V+z+IBY0bPLGiC/BtQ6uRMTj7mqnQKKNSxtE+rSzPsamcTmC51DSOx 6QVf34iVQO3PEtES6VQHzf5+KNRj61USTNXyaGBsMNOO3eJDlA29T7ed6NzDmJ6x q4bgY6RLh0yu5d9bl2NdkUEFCCEFagj60OgXE/lTghw27G79Uw9Dk59TC25SEt15 i60bs82kCrnL/kE= -----END CERTIFICATE-----Generated at Sat Apr 5 03:54:12 2025 by rpki-client