$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa File: EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa (raw, json) Hash identifier: i9JFPAUn7PS/i/yxYDte5hNt2lU/GYfFJVKLS5WTzUc= Subject key identifier: 82:76:2B:92:FA:14:CD:FC:AC:C0:34:18:6C:F1:99:85:8A:36:F2:18 Certificate issuer: /CN=A91CBA26/serialNumber=1AFD4265E63D0CBF75236ED9686AE4F00155FF7E Certificate serial: 18FE Authority key identifier: 1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa Signing time: Sat 22 Feb 2025 16:54:06 +0000 ROA not before: Sat 22 Feb 2025 16:54:06 +0000 ROA not after: Tue 31 Mar 2026 00:00:00 +0000 asID: 136230 IP address blocks: 103.84.96.0/24 maxlen: 24 103.101.172.0/24 maxlen: 24 103.101.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 16:30:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6398 (0x18fe) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBA26 Validity Not Before: Feb 22 16:54:06 2025 GMT Not After : Mar 31 00:00:00 2026 GMT Subject: CN=67ba012e-d4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b1:98:77:43:f5:2a:5a:29:e0:8f:b8:a7:f1: 79:a7:57:ae:41:6d:1a:08:7c:a0:b3:9a:be:9a:03: 01:1c:46:65:6f:e3:36:d7:f6:c9:54:50:55:c8:44: dc:88:1d:bc:4d:d1:ae:82:25:ea:e3:2d:48:aa:ae: 55:a1:2d:f5:d5:fd:ae:d5:ab:7f:28:75:76:15:0f: 40:be:6b:d8:34:76:cf:b6:4c:9d:74:ef:10:4d:e1: 9f:c7:f9:7a:a9:a6:0c:c3:3d:7b:43:69:f5:20:60: 2a:62:7d:a0:f5:d0:06:a7:b8:25:5d:e0:23:f7:4d: 4f:6d:e6:f4:0e:c7:83:ae:6a:00:c3:ed:19:43:ca: fe:49:80:98:bd:17:ac:86:88:4e:e0:38:72:07:ea: ea:0d:17:19:c8:c2:f2:f6:ed:55:61:f3:86:ac:c6: eb:d5:38:19:c1:1d:22:a4:65:72:4c:64:5d:1e:16: 8d:1f:a2:10:e5:6a:f2:10:ee:ce:95:ef:c8:1b:d3: 58:ce:9c:2a:a7:3b:f7:ca:2f:99:6c:9c:49:2c:05: 4e:e6:ce:6f:5f:ab:7c:33:87:84:c0:35:42:be:7e: 62:e6:06:2c:a9:7d:2c:e1:8e:ca:b2:70:92:9b:a3: 8c:11:be:7b:55:67:20:09:85:b3:e7:ee:70:b0:10: a9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:76:2B:92:FA:14:CD:FC:AC:C0:34:18:6C:F1:99:85:8A:36:F2:18 X509v3 Authority Key Identifier: keyid:1A:FD:42:65:E6:3D:0C:BF:75:23:6E:D9:68:6A:E4:F0:01:55:FF:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/Gv1CZeY9DL91I27ZaGrk8AFV_34.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Gv1CZeY9DL91I27ZaGrk8AFV_34.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBA26/CA64CBFA825D11E79132091DC4F9AE02/EFD9938E2FAF11EDBE0A8C10C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.84.96.0/24 103.101.172.0/24 103.101.174.0/24 Signature Algorithm: sha256WithRSAEncryption 52:14:16:c1:b7:39:ae:f7:40:b6:3b:3b:d0:9a:a3:83:08:c1: 57:f9:d7:d3:8f:e4:6b:8e:f8:6d:b7:22:7e:94:be:a5:28:2a: 1e:80:36:7c:ea:48:13:c2:55:da:84:e6:48:a6:13:13:50:81: 19:07:b6:8d:85:3b:57:8c:26:09:e3:16:bf:c0:d9:1f:dd:9f: 99:54:c8:1f:b8:87:ad:28:da:66:10:24:d3:0b:f5:b1:22:34: 9a:4c:47:94:95:ed:0a:8a:f8:d6:24:d8:8f:0c:64:f4:60:6d: 7d:c6:ba:68:ce:64:53:2a:43:2e:ec:e2:4e:b0:ab:32:f0:20: 8b:4d:bb:c8:bf:da:c3:86:54:7d:86:88:f2:43:96:54:87:75: 17:46:86:74:c4:34:62:e6:f7:76:49:bf:72:49:84:4c:bc:31: 04:6b:7b:72:c5:32:a1:c3:cc:02:40:cf:40:ee:a3:7f:ee:a2: 09:00:28:b0:e6:67:3a:da:c9:f3:3e:d0:09:88:69:20:97:61: ff:66:c1:41:db:82:36:b5:e4:25:e7:43:1f:ca:99:58:b0:cd: 09:7c:7b:df:68:22:82:46:b0:fc:88:04:92:9d:2e:ad:71:64: 19:33:09:e2:4a:23:8a:6a:52:12:c3:a0:74:55:48:de:0f:4c: 16:26:36:a6 -----BEGIN CERTIFICATE----- MIIFfTCCBGWgAwIBAgICGP4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JBMjYxMTAvBgNVBAUTKDFBRkQ0MjY1RTYzRDBDQkY3NTIzNkVEOTY4NkFFNEYw MDE1NUZGN0UwHhcNMjUwMjIyMTY1NDA2WhcNMjYwMzMxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JhMDEyZS1kNGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAwrGYd0P1Klop4I+4p/F5p1euQW0aCHygs5q+mgMBHEZlb+M21/bJVFBVyETc iB28TdGugiXq4y1Iqq5VoS311f2u1at/KHV2FQ9AvmvYNHbPtkyddO8QTeGfx/l6 qaYMwz17Q2n1IGAqYn2g9dAGp7glXeAj901Pbeb0DseDrmoAw+0ZQ8r+SYCYvRes hohO4DhyB+rqDRcZyMLy9u1VYfOGrMbr1TgZwR0ipGVyTGRdHhaNH6IQ5WryEO7O le/IG9NYzpwqpzv3yi+ZbJxJLAVO5s5vX6t8M4eEwDVCvn5i5gYsqX0s4Y7KsnCS m6OMEb57VWcgCYWz5+5wsBCpYQIDAQABo4ICoTCCAp0wHQYDVR0OBBYEFIJ2K5L6 FM38rMA0GGzxmYWKNvIYMB8GA1UdIwQYMBaAFBr9QmXmPQy/dSNu2Whq5PABVf9+ MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkEyNi9DQTY0Q0JGQTgy NUQxMUU3OTEzMjA5MURDNEY5QUUwMi9HdjFDWmVZOURMOTFJMjdaYUdyazhBRlZf MzQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0d2MUNaZVk5REw5MUkyN1phR3JrOEFGVl8zNC5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JBMjYvQ0E2NENCRkE4MjVEMTFFNzkxMzIwOTFEQzRGOUFFMDIvRUZEOTkzOEUy RkFGMTFFREJFMEE4QzEwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwKwYIKwYBBQUHAQcBAf8E HDAaMBgEAgABMBIDBABnVGADBABnZawDBABnZa4wDQYJKoZIhvcNAQELBQADggEB AFIUFsG3Oa73QLY7O9Cao4MIwVf519OP5GuO+G23In6UvqUoKh6ANnzqSBPCVdqE 5kimExNQgRkHto2FO1eMJgnjFr/A2R/dn5lUyB+4h60o2mYQJNML9bEiNJpMR5SV 7QqK+NYk2I8MZPRgbX3GumjOZFMqQy7s4k6wqzLwIItNu8i/2sOGVH2GiPJDllSH dRdGhnTENGLm93ZJv3JJhEy8MQRre3LFMqHDzAJAz0Duo3/uogkAKLDmZzrayfM+ 0AmIaSCXYf9mwUHbgja15CXnQx/KmViwzQl8e99oIoJGsPyIBJKdLq1xZBkzCeJK I4pqUhLDoHRVSN4PTBYmNqY= -----END CERTIFICATE-----Generated at Sun Apr 6 09:47:19 2025 by rpki-client