$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/6171A1E0F3FC11EF8D463030C4F9AE02.roa File: 6171A1E0F3FC11EF8D463030C4F9AE02.roa (raw, json) Hash identifier: SaPyXfhw3tZDk0uJ1qGtWHP6Pbo8zXu054TW5a1GfAs= Subject key identifier: D7:AB:05:21:EC:3E:3B:29:DD:49:7B:BE:5C:D2:D2:48:E2:31:72:A8 Certificate issuer: /CN=A91CBE4E/serialNumber=6FF1A24E7F54F2EF0C605E0E06FC8A46C544D6D3 Certificate serial: 011A Authority key identifier: 6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/6171A1E0F3FC11EF8D463030C4F9AE02.roa Signing time: Wed 26 Feb 2025 04:44:37 +0000 ROA not before: Wed 26 Feb 2025 04:44:37 +0000 ROA not after: Tue 30 Dec 2025 00:00:00 +0000 asID: 139921 IP address blocks: 103.218.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 04:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 282 (0x11a) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CBE4E Validity Not Before: Feb 26 04:44:37 2025 GMT Not After : Dec 30 00:00:00 2025 GMT Subject: CN=67be9c34-b940 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:e7:ec:72:9b:e3:77:1c:43:c2:c0:03:f2: 74:8c:64:ff:0c:9f:bb:22:f7:44:87:6b:32:3e:d8: 68:e3:14:ad:ca:44:ff:e8:8b:63:0a:e6:78:47:3e: 4c:2c:29:3d:bd:3f:ec:5f:ba:f3:82:36:94:dc:ea: 6a:79:88:ba:6b:27:cf:b2:2a:71:3b:11:20:82:cd: 4a:9e:08:89:69:69:09:37:dd:a9:52:f1:4f:66:fd: 8f:5d:00:fe:43:e3:e9:f4:6a:fb:1a:f0:9e:11:40: a6:45:41:9d:8e:48:4d:9f:4b:54:3b:47:b3:50:f5: fb:c4:90:6a:c9:1b:d6:ba:cb:21:b9:b4:7f:f6:cf: 16:1f:ca:f5:5e:cd:b3:fa:83:4d:1c:34:0c:28:28: 53:f8:b8:e0:ce:86:71:63:9a:6f:08:aa:80:21:1f: 47:93:a0:ca:94:2d:89:5d:d3:38:cd:ed:e6:4b:b5: 5e:9e:a5:7e:c8:1e:38:11:05:f0:6f:cf:c9:ad:78: 7a:6a:23:b2:ea:9f:f1:93:2c:00:ae:7d:6e:47:1c: 36:0a:e8:6d:5b:e3:62:6e:f5:3c:d1:05:66:ef:6f: 3c:9f:8b:2e:4e:e4:26:9a:73:71:84:f0:10:7d:7f: bf:4c:0f:fb:bc:63:54:b5:ec:28:0d:fa:ec:5c:bf: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:AB:05:21:EC:3E:3B:29:DD:49:7B:BE:5C:D2:D2:48:E2:31:72:A8 X509v3 Authority Key Identifier: keyid:6F:F1:A2:4E:7F:54:F2:EF:0C:60:5E:0E:06:FC:8A:46:C5:44:D6:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/b_GiTn9U8u8MYF4OBvyKRsVE1tM.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b_GiTn9U8u8MYF4OBvyKRsVE1tM.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBE4E/DB03F65A52C911EE90328F14C4F9AE02/6171A1E0F3FC11EF8D463030C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.218.137.0/24 Signature Algorithm: sha256WithRSAEncryption 7a:53:e7:d5:81:99:71:af:82:8d:39:1a:79:55:7e:e6:23:51: 94:7a:5b:8d:b3:d4:a9:02:c1:42:bc:a4:94:29:db:72:8e:6f: 4b:63:59:3d:e0:ff:c5:15:f0:5a:f5:fd:37:a6:b8:b9:29:80: a3:0c:d5:7c:12:10:75:e3:b7:64:ee:08:7c:51:46:45:28:5d: 49:cb:09:ae:8a:49:fc:de:df:d8:f0:60:1e:dd:f8:75:47:f4: 70:79:f5:fe:d0:e4:a7:1b:eb:89:b7:64:05:c3:2e:dd:12:1e: 7e:d1:c2:e3:7f:b8:5c:30:6e:b2:75:0f:a8:f1:df:6c:6e:a8: 18:30:74:5e:5e:fa:fc:40:d6:0f:26:a6:20:4c:30:c2:97:68: 55:77:bb:77:68:ad:bc:14:61:8e:a6:6a:4b:a9:11:97:3b:86: 40:8c:ca:54:45:61:fd:ec:ee:f2:5a:9a:df:64:6a:9d:9c:ef: fb:df:3c:3b:a7:4d:82:42:38:d9:9d:5d:69:02:fe:6c:52:b4: 97:9c:a8:18:3f:b1:a5:dc:cf:3e:8e:84:16:c7:4b:67:bf:aa: d0:47:19:75:c0:10:e4:b2:e3:13:f2:ab:ce:58:29:6e:cb:0a: 03:02:08:e4:b5:2e:9d:ea:9b:74:f3:7d:2b:19:bb:ab:eb:ff: f5:f7:c2:6c -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICARowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0JFNEUxMTAvBgNVBAUTKDZGRjFBMjRFN0Y1NEYyRUYwQzYwNUUwRTA2RkM4QTQ2 QzU0NEQ2RDMwHhcNMjUwMjI2MDQ0NDM3WhcNMjUxMjMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2JlOWMzNC1iOTQwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAzT7n7HKb43ccQ8LAA/J0jGT/DJ+7IvdEh2syPtho4xStykT/6ItjCuZ4Rz5M LCk9vT/sX7rzgjaU3OpqeYi6ayfPsipxOxEggs1KngiJaWkJN92pUvFPZv2PXQD+ Q+Pp9Gr7GvCeEUCmRUGdjkhNn0tUO0ezUPX7xJBqyRvWusshubR/9s8WH8r1Xs2z +oNNHDQMKChT+LjgzoZxY5pvCKqAIR9Hk6DKlC2JXdM4ze3mS7VenqV+yB44EQXw b8/JrXh6aiOy6p/xkywArn1uRxw2CuhtW+NibvU80QVm7288n4suTuQmmnNxhPAQ fX+/TA/7vGNUtewoDfrsXL9S8wIDAQABo4IClTCCApEwHQYDVR0OBBYEFNerBSHs Pjsp3Ul7vlzS0kjiMXKoMB8GA1UdIwQYMBaAFG/xok5/VPLvDGBeDgb8ikbFRNbT MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDQkU0RS9EQjAzRjY1QTUy QzkxMUVFOTAzMjhGMTRDNEY5QUUwMi9iX0dpVG45VTh1OE1ZRjRPQnZ5S1JzVkUx dE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2JfR2lUbjlVOHU4TVlGNE9CdnlLUnNWRTF0TS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0JFNEUvREIwM0Y2NUE1MkM5MTFFRTkwMzI4RjE0QzRGOUFFMDIvNjE3MUExRTBG M0ZDMTFFRjhENDYzMDMwQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBABn2okwDQYJKoZIhvcNAQELBQADggEBAHpT59WBmXGvgo05 GnlVfuYjUZR6W42z1KkCwUK8pJQp23KOb0tjWT3g/8UV8Fr1/TemuLkpgKMM1XwS EHXjt2TuCHxRRkUoXUnLCa6KSfze39jwYB7d+HVH9HB59f7Q5Kcb64m3ZAXDLt0S Hn7RwuN/uFwwbrJ1D6jx32xuqBgwdF5e+vxA1g8mpiBMMMKXaFV3u3dorbwUYY6m akupEZc7hkCMylRFYf3s7vJamt9kap2c7/vfPDunTYJCONmdXWkC/mxStJecqBg/ saXczz6OhBbHS2e/qtBHGXXAEOSy4xPyq85YKW7LCgMCCOS1Lp3qm3TzfSsZu6vr //X3wmw= -----END CERTIFICATE-----Generated at Sat Apr 5 07:13:57 2025 by rpki-client