$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/2B7B2500A62E11EF8FF03040C4F9AE02.roa File: 2B7B2500A62E11EF8FF03040C4F9AE02.roa (raw, json) Hash identifier: fHHCg4dsSrKRMh2IkfaJKWc+8HaWo2WGJnqPV8bsROg= Subject key identifier: C1:30:BC:78:CC:C9:C3:AE:82:15:C3:83:A7:3F:35:3E:2F:81:93:D8 Certificate issuer: /CN=A91CB09E/serialNumber=1760FF71E16BCFEEE7B8D6710D63606799AEF767 Certificate serial: 05A3 Authority key identifier: 17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/2B7B2500A62E11EF8FF03040C4F9AE02.roa Signing time: Wed 02 Apr 2025 23:25:10 +0000 ROA not before: Wed 02 Apr 2025 23:25:10 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 32402 IP address blocks: 103.136.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 23:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1443 (0x5a3) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CB09E Validity Not Before: Apr 2 23:25:10 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67edc756-5529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:17:3b:72:39:6f:70:44:b5:44:55:94:13:27: 65:cb:8f:b7:bd:ed:d5:e5:47:10:38:b3:9d:d1:f7: 6e:e4:f7:8a:ec:93:16:52:d0:98:60:fb:3f:56:da: bd:1e:e4:f8:e2:b5:0b:8a:78:8c:3a:f8:79:46:e2: c0:f0:ad:20:23:fe:2c:1d:7e:03:50:a4:fb:84:98: 76:c6:96:0d:ce:af:2d:69:68:41:54:40:29:76:12: 7f:fb:a3:be:7b:e3:43:63:d3:27:11:63:6f:37:57: 82:5a:d6:c7:d3:ed:b6:f1:01:18:30:44:ff:3e:66: 02:10:a5:3c:4f:ae:f9:6a:aa:ee:21:4e:32:0b:47: a7:fb:92:b0:f2:4d:53:f9:9f:cf:d1:fc:36:c2:d9: 5b:5f:59:c1:2a:59:f6:b1:24:bc:8b:7e:ab:47:aa: e9:51:af:14:a9:bd:05:1c:1a:31:2d:b0:26:7b:b1: df:e2:e0:ca:3f:62:e8:d2:2d:d2:02:60:fd:5b:2d: cd:a3:02:c8:a9:f2:55:c3:3c:65:3f:ba:15:c7:5f: 3d:95:59:c8:4c:23:af:81:05:ed:76:0a:a2:43:d7: a1:f2:b8:e3:99:03:90:f4:d0:43:d0:6b:5c:59:7e: f6:59:a3:99:3a:7a:72:9f:2d:0e:2b:b6:73:02:77: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:30:BC:78:CC:C9:C3:AE:82:15:C3:83:A7:3F:35:3E:2F:81:93:D8 X509v3 Authority Key Identifier: keyid:17:60:FF:71:E1:6B:CF:EE:E7:B8:D6:71:0D:63:60:67:99:AE:F7:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/F2D_ceFrz-7nuNZxDWNgZ5mu92c.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F2D_ceFrz-7nuNZxDWNgZ5mu92c.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB09E/47119D00D00B11EBB5890E7BC4F9AE02/2B7B2500A62E11EF8FF03040C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.136.149.0/24 Signature Algorithm: sha256WithRSAEncryption 1a:be:b2:8f:03:4a:73:39:51:04:2e:71:67:92:f7:60:fb:6e: 1b:98:43:4c:f1:77:d5:24:37:2b:18:5a:a7:76:14:a1:a8:9a: e8:ce:5c:11:e9:c4:81:53:aa:2f:89:0b:4e:39:da:25:32:cc: 90:af:87:f1:55:6d:16:2b:7d:c4:80:15:8e:3d:0a:e4:a1:bc: 1f:75:d6:8d:ad:20:51:a3:b9:c8:f0:de:85:3d:9d:fa:d4:4b: 58:75:db:f6:c0:1c:ae:45:de:dc:b2:49:69:65:b9:d7:62:1f: 14:26:c2:f2:ac:0c:33:c9:84:a7:7d:02:8e:25:51:e6:80:20: 28:90:7d:6f:dd:d3:d3:fe:9d:26:84:e5:41:bb:4b:be:2f:86: 6b:0f:b5:f8:17:15:ff:c4:b2:d4:46:32:a9:3d:a9:86:d3:cc: cf:35:ab:e2:8f:26:c3:a7:20:66:37:71:1e:3b:57:c7:00:ec: 1c:ab:07:d3:ab:5d:0c:17:a1:da:20:02:50:cf:ef:67:d4:c7: 40:ba:d7:b3:e9:be:07:6e:11:e8:e9:c9:8e:b7:77:a3:5e:4c: 58:56:08:51:01:8b:ac:ca:5c:f7:69:d7:d6:97:4a:45:b3:d6: e8:8e:18:85:22:6b:1e:29:af:22:02:43:15:e8:64:da:6a:d9: aa:20:c3:c6 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICBaMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0IwOUUxMTAvBgNVBAUTKDE3NjBGRjcxRTE2QkNGRUVFN0I4RDY3MTBENjM2MDY3 OTlBRUY3NjcwHhcNMjUwNDAyMjMyNTEwWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2VkYzc1Ni01NTI5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzRc7cjlvcES1RFWUEydly4+3ve3V5UcQOLOd0fdu5PeK7JMWUtCYYPs/Vtq9 HuT44rULiniMOvh5RuLA8K0gI/4sHX4DUKT7hJh2xpYNzq8taWhBVEApdhJ/+6O+ e+NDY9MnEWNvN1eCWtbH0+228QEYMET/PmYCEKU8T675aqruIU4yC0en+5Kw8k1T +Z/P0fw2wtlbX1nBKln2sSS8i36rR6rpUa8Uqb0FHBoxLbAme7Hf4uDKP2Lo0i3S AmD9Wy3NowLIqfJVwzxlP7oVx189lVnITCOvgQXtdgqiQ9eh8rjjmQOQ9NBD0Gtc WX72WaOZOnpyny0OK7ZzAnfq8QIDAQABo4IClTCCApEwHQYDVR0OBBYEFMEwvHjM ycOughXDg6c/NT4vgZPYMB8GA1UdIwQYMBaAFBdg/3Hha8/u57jWcQ1jYGeZrvdn MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQjA5RS80NzExOUQwMEQw MEIxMUVCQjU4OTBFN0JDNEY5QUUwMi9GMkRfY2VGcnotN251Tlp4RFdOZ1o1bXU5 MmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0YyRF9jZUZyei03bnVOWnhEV05nWjVtdTkyYy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0IwOUUvNDcxMTlEMDBEMDBCMTFFQkI1ODkwRTdCQzRGOUFFMDIvMkI3QjI1MDBB NjJFMTFFRjhGRjAzMDQwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABniJUwDQYJKoZIhvcNAQELBQADggEBABq+so8DSnM5UQQu cWeS92D7bhuYQ0zxd9UkNysYWqd2FKGomujOXBHpxIFTqi+JC0452iUyzJCvh/FV bRYrfcSAFY49CuShvB911o2tIFGjucjw3oU9nfrUS1h12/bAHK5F3tyySWlluddi HxQmwvKsDDPJhKd9Ao4lUeaAICiQfW/d09P+nSaE5UG7S74vhmsPtfgXFf/EstRG Mqk9qYbTzM81q+KPJsOnIGY3cR47V8cA7ByrB9OrXQwXodogAlDP72fUx0C617Pp vgduEejpyY63d6NeTFhWCFEBi6zKXPdp19aXSkWz1uiOGIUiax4pryICQxXoZNpq 2aogw8Y= -----END CERTIFICATE-----Generated at Fri Apr 4 23:55:50 2025 by rpki-client