$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/F4777FBEEDDA11EF9731160CC4F9AE02.roa File: F4777FBEEDDA11EF9731160CC4F9AE02.roa (raw, json) Hash identifier: /1+2xPWqZMP3cO+rD339mV/1/rVWVDweL8VvbjIWd3Q= Subject key identifier: E5:C2:7E:39:54:68:E9:84:FB:0C:FB:CF:98:BA:B8:E7:B0:4E:2F:FD Certificate issuer: /CN=A91C8347/serialNumber=2ADBB71B11523CA3392E5F37D9DC76B211DBE083 Certificate serial: C6 Authority key identifier: 2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/F4777FBEEDDA11EF9731160CC4F9AE02.roa Signing time: Tue 18 Feb 2025 09:31:56 +0000 ROA not before: Tue 18 Feb 2025 09:31:56 +0000 ROA not after: Sun 31 Aug 2025 00:00:00 +0000 asID: 63150 IP address blocks: 103.219.192.0/24 maxlen: 24 103.219.193.0/24 maxlen: 24 103.219.194.0/24 maxlen: 24 103.219.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:16:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 198 (0xc6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C8347 Validity Not Before: Feb 18 09:31:56 2025 GMT Not After : Aug 31 00:00:00 2025 GMT Subject: CN=67b4538c-6067 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:a2:00:9e:b2:75:80:30:5c:a3:ef:3c:6c:72: 20:aa:d4:2a:5a:f6:eb:c1:1e:fc:88:e0:cf:f3:2c: 0f:26:39:df:bc:43:32:39:b5:86:2f:dd:a9:10:83: 3d:ac:16:88:c5:e0:53:08:d9:d9:9d:8b:49:5e:3d: 3b:7b:fd:68:10:c3:05:22:ac:c9:f7:2b:00:b8:bf: 9c:fe:ac:06:c8:78:c0:93:e8:c1:24:d7:a2:b0:e1: be:29:1d:cb:7b:1e:e2:b7:5f:1d:83:93:bc:97:a7: 6e:b2:b5:8b:c3:50:69:9b:70:57:c7:e8:17:1f:a8: fc:95:5b:ca:99:c7:ee:eb:ab:0f:3a:12:c8:7e:6d: df:e8:1f:62:d2:a5:77:fe:06:d6:bc:9c:9d:74:b1: 18:0a:a3:aa:d8:b5:b8:0f:75:f2:32:d4:e0:a8:de: 6a:7b:5e:22:ec:a1:c5:1c:bc:d4:d2:1d:ef:4c:77: c8:c1:b1:0f:01:c8:31:2e:db:3a:48:10:af:ba:8d: 3e:47:93:99:61:60:2e:14:eb:37:aa:c1:d4:b6:14: ae:16:4d:4c:ae:79:28:51:ae:08:c6:13:a3:5e:cf: 16:bc:1d:48:8e:92:86:17:d8:3f:85:f6:94:81:7d: 5f:20:d5:be:a6:51:65:ea:2f:f4:c1:4e:61:96:d6: 0b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C2:7E:39:54:68:E9:84:FB:0C:FB:CF:98:BA:B8:E7:B0:4E:2F:FD X509v3 Authority Key Identifier: keyid:2A:DB:B7:1B:11:52:3C:A3:39:2E:5F:37:D9:DC:76:B2:11:DB:E0:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/Ktu3GxFSPKM5Ll832dx2shHb4IM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ktu3GxFSPKM5Ll832dx2shHb4IM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8347/C3E72190F9A911EEA82A791AC4F9AE02/F4777FBEEDDA11EF9731160CC4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.219.192.0/22 Signature Algorithm: sha256WithRSAEncryption b5:60:bb:ca:2e:eb:cd:5b:fb:0f:49:f5:a8:fe:ad:77:55:d7: 12:cb:f2:b0:c6:68:92:9b:3a:0a:70:73:84:06:1b:ab:55:c3: 84:8a:f8:dd:7f:e9:cd:3a:9e:34:06:67:ab:59:e7:62:5d:73: f2:6b:db:fc:ec:fd:2c:12:f3:fb:e1:e0:da:3c:3c:6f:9d:25: 16:56:b9:8e:38:63:49:ee:15:50:ae:45:d8:6d:44:40:40:01: e8:dc:c4:df:d4:f0:97:83:9d:94:3a:ee:a1:f7:5c:6a:70:da: 47:92:0d:de:28:6b:09:b7:1a:cc:c6:3d:91:77:19:cf:6f:b7: 44:d3:50:e5:19:cf:99:3b:5e:5d:35:5e:d3:a1:fd:ae:b9:79: e4:b0:3c:6d:50:f6:80:aa:04:e7:a3:74:5e:16:37:c8:2b:b3: e1:bd:f0:18:69:b8:ad:60:a0:c5:eb:bd:f4:ee:ee:3c:18:59: 40:94:a4:e2:4f:36:df:2d:c1:e4:56:80:3a:6c:2a:e8:16:82: 6f:be:ca:80:ac:0f:35:e9:4d:76:fa:a0:be:53:52:e7:73:92: bd:34:71:ac:69:fd:b7:48:f7:a4:5b:9a:cc:67:11:2b:11:79: 07:fd:85:a9:63:f5:3a:da:8b:7c:87:cc:27:b2:8b:d8:16:d2: c5:a0:de:7b -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICAMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzgzNDcxMTAvBgNVBAUTKDJBREJCNzFCMTE1MjNDQTMzOTJFNUYzN0Q5REM3NkIy MTFEQkUwODMwHhcNMjUwMjE4MDkzMTU2WhcNMjUwODMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2I0NTM4Yy02MDY3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAx6IAnrJ1gDBco+88bHIgqtQqWvbrwR78iODP8ywPJjnfvEMyObWGL92pEIM9 rBaIxeBTCNnZnYtJXj07e/1oEMMFIqzJ9ysAuL+c/qwGyHjAk+jBJNeisOG+KR3L ex7it18dg5O8l6dusrWLw1Bpm3BXx+gXH6j8lVvKmcfu66sPOhLIfm3f6B9i0qV3 /gbWvJyddLEYCqOq2LW4D3XyMtTgqN5qe14i7KHFHLzU0h3vTHfIwbEPAcgxLts6 SBCvuo0+R5OZYWAuFOs3qsHUthSuFk1MrnkoUa4IxhOjXs8WvB1IjpKGF9g/hfaU gX1fINW+plFl6i/0wU5hltYLkwIDAQABo4IClTCCApEwHQYDVR0OBBYEFOXCfjlU aOmE+wz7z5i6uOewTi/9MB8GA1UdIwQYMBaAFCrbtxsRUjyjOS5fN9ncdrIR2+CD MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDODM0Ny9DM0U3MjE5MEY5 QTkxMUVFQTgyQTc5MUFDNEY5QUUwMi9LdHUzR3hGU1BLTTVMbDgzMmR4MnNoSGI0 SU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0t0dTNHeEZTUEtNNUxsODMyZHgyc2hIYjRJTS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx QzgzNDcvQzNFNzIxOTBGOUE5MTFFRUE4MkE3OTFBQzRGOUFFMDIvRjQ3NzdGQkVF RERBMTFFRjk3MzExNjBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAJn28AwDQYJKoZIhvcNAQELBQADggEBALVgu8ou681b+w9J 9aj+rXdV1xLL8rDGaJKbOgpwc4QGG6tVw4SK+N1/6c06njQGZ6tZ52Jdc/Jr2/zs /SwS8/vh4No8PG+dJRZWuY44Y0nuFVCuRdhtREBAAejcxN/U8JeDnZQ67qH3XGpw 2keSDd4oawm3GszGPZF3Gc9vt0TTUOUZz5k7Xl01XtOh/a65eeSwPG1Q9oCqBOej dF4WN8grs+G98BhpuK1goMXrvfTu7jwYWUCUpOJPNt8tweRWgDpsKugWgm++yoCs DzXpTXb6oL5TUudzkr00caxp/bdI96RbmsxnESsReQf9halj9Trai3yHzCeyi9gW 0sWg3ns= -----END CERTIFICATE-----Generated at Sat Apr 5 18:50:13 2025 by rpki-client