$ rpki-client -vvf rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/96F26DD8E4A511EF8259C769C4F9AE02.roa File: 96F26DD8E4A511EF8259C769C4F9AE02.roa (raw, json) Hash identifier: Fcy0t/fzkFaWJQcPeRfi9B3H65XjHBViUmgSczRX2lU= Subject key identifier: 7D:DF:08:A7:51:78:17:9F:AC:83:28:4F:3B:E2:7E:B7:DA:0F:4A:CA Certificate issuer: /CN=A91CE6EC/serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Certificate serial: 2549 Authority key identifier: A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/96F26DD8E4A511EF8259C769C4F9AE02.roa Signing time: Thu 06 Feb 2025 16:15:33 +0000 ROA not before: Thu 06 Feb 2025 16:15:33 +0000 ROA not after: Tue 30 Sep 2025 00:00:00 +0000 asID: 38887 IP address blocks: 103.60.216.0/24 maxlen: 24 2001:df3:a00::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 15:41:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9545 (0x2549) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CE6EC, serialNumber=A1C2396570401772429EB8CBB0DF6653F1678CF6 Validity Not Before: Feb 6 16:15:33 2025 GMT Not After : Sep 30 00:00:00 2025 GMT Subject: CN=67a4e024-4aad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3c:1a:54:fe:ff:05:b3:f1:bd:86:8f:64:be: f7:05:90:82:c0:76:83:03:e3:6d:32:f0:e6:93:ef: 17:99:2a:0f:03:e7:71:59:cf:b0:d0:94:72:83:10: 12:c1:3b:2a:bf:be:7c:8d:4d:6e:0e:71:07:fd:7b: 07:56:ad:fa:7d:84:8b:34:81:23:c6:aa:ba:17:8d: ed:80:b3:ea:e7:ca:69:fb:43:c2:ed:96:b5:16:38: 79:62:67:25:30:36:a2:5e:07:c0:7e:a8:2c:c2:1e: e4:86:ba:7b:ca:6a:25:9c:d7:cb:03:07:d9:b6:77: 98:0f:a8:1a:eb:1f:36:6e:09:5d:cf:92:49:cc:c7: b1:18:6e:73:a2:7e:7a:b8:89:eb:05:41:fa:c5:96: 19:43:bf:9d:85:3f:0a:c7:a8:28:25:32:0e:19:3d: b2:58:fa:1f:6f:01:b1:ac:25:d6:59:48:5b:eb:70: 77:d0:90:b7:bd:e5:d3:88:4d:aa:86:1e:97:a8:28: e4:ab:a4:f2:1f:7d:ef:82:76:fc:66:a9:fa:62:98: b9:74:3b:0d:c8:fa:17:e2:a9:2e:a4:06:c7:b9:78: de:0f:3a:38:38:70:d7:dd:b5:19:4b:f7:a7:fe:b4: 88:75:a3:25:63:8f:22:64:73:b6:63:d3:af:9e:7e: cb:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:DF:08:A7:51:78:17:9F:AC:83:28:4F:3B:E2:7E:B7:DA:0F:4A:CA X509v3 Authority Key Identifier: keyid:A1:C2:39:65:70:40:17:72:42:9E:B8:CB:B0:DF:66:53:F1:67:8C:F6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ocI5ZXBAF3JCnrjLsN9mU_FnjPY.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CE6EC/D3AB601614C811E5A2FCEF15C4F9AE02/96F26DD8E4A511EF8259C769C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.60.216.0/24 IPv6: 2001:df3:a00::/48 Signature Algorithm: sha256WithRSAEncryption 8d:dd:dd:1e:ec:06:a5:7d:c2:f0:11:1b:e6:3e:33:5b:14:e1: c1:f6:fb:f8:d0:94:d4:82:67:f2:18:7f:b9:69:4e:50:c0:fb: 96:f9:8d:da:b7:00:57:bf:6c:17:ae:75:73:7e:31:71:6c:67: 71:39:fc:e1:6a:97:bd:11:d3:9d:31:15:ec:07:de:3f:36:04: b1:bd:cc:76:c5:51:23:a8:8a:d0:8b:40:07:ac:c3:87:4a:a0: a0:2b:78:94:f7:2d:6f:75:d6:0f:b7:9e:7f:a1:d0:32:2e:91: 3d:f2:bf:c9:72:65:14:0c:4e:9e:91:69:f7:9d:32:1e:70:18: 45:15:75:11:96:85:83:10:5c:a6:a5:b2:b6:84:76:1e:96:51: 57:11:0c:41:9e:89:a4:06:cb:4f:aa:0f:13:a8:9d:6b:5f:78: 99:45:d7:a6:70:e0:9b:0c:a8:34:60:88:60:88:ed:7e:89:2c: 14:4f:02:5d:a0:26:58:32:45:7f:b4:88:eb:d0:21:92:98:76: 1c:bd:2b:35:2c:60:07:78:dc:a3:f4:98:62:d8:19:ca:26:aa: 9c:30:02:2a:ec:63:58:2c:80:e0:0a:c2:82:2d:a6:ba:31:3a: f9:38:11:81:f2:8e:f2:5f:32:a5:e7:73:ee:93:77:f1:6b:22: 0f:1d:eb:66 -----BEGIN CERTIFICATE----- MIIFgjCCBGqgAwIBAgICJUkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0U2RUMxMTAvBgNVBAUTKEExQzIzOTY1NzA0MDE3NzI0MjlFQjhDQkIwREY2NjUz RjE2NzhDRjYwHhcNMjUwMjA2MTYxNTMzWhcNMjUwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02N2E0ZTAyNC00YWFkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuzwaVP7/BbPxvYaPZL73BZCCwHaDA+NtMvDmk+8XmSoPA+dxWc+w0JRygxAS wTsqv758jU1uDnEH/XsHVq36fYSLNIEjxqq6F43tgLPq58pp+0PC7Za1Fjh5Ymcl MDaiXgfAfqgswh7khrp7ymolnNfLAwfZtneYD6ga6x82bgldz5JJzMexGG5zon56 uInrBUH6xZYZQ7+dhT8Kx6goJTIOGT2yWPofbwGxrCXWWUhb63B30JC3veXTiE2q hh6XqCjkq6TyH33vgnb8Zqn6Ypi5dDsNyPoX4qkupAbHuXjeDzo4OHDX3bUZS/en /rSIdaMlY48iZHO2Y9Ovnn7LVwIDAQABo4ICpjCCAqIwHQYDVR0OBBYEFH3fCKdR eBefrIMoTzvifrfaD0rKMB8GA1UdIwQYMBaAFKHCOWVwQBdyQp64y7DfZlPxZ4z2 MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRTZFQy9EM0FCNjAxNjE0 QzgxMUU1QTJGQ0VGMTVDNEY5QUUwMi9vY0k1WlhCQUYzSkNucmpMc045bVVfRm5q UFkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29jSTVaWEJBRjNKQ25yakxzTjltVV9GbmpQWS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0U2RUMvRDNBQjYwMTYxNEM4MTFFNUEyRkNFRjE1QzRGOUFFMDIvOTZGMjZERDhF NEE1MTFFRjgyNTlDNzY5QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwMAYIKwYBBQUHAQcBAf8E ITAfMAwEAgABMAYDBABnPNgwDwQCAAIwCQMHACABDfMKADANBgkqhkiG9w0BAQsF AAOCAQEAjd3dHuwGpX3C8BEb5j4zWxThwfb7+NCU1IJn8hh/uWlOUMD7lvmN2rcA V79sF651c34xcWxncTn84WqXvRHTnTEV7AfePzYEsb3MdsVRI6iK0ItAB6zDh0qg oCt4lPctb3XWD7eef6HQMi6RPfK/yXJlFAxOnpFp950yHnAYRRV1EZaFgxBcpqWy toR2HpZRVxEMQZ6JpAbLT6oPE6ida194mUXXpnDgmwyoNGCIYIjtfoksFE8CXaAm WDJFf7SI69Ahkph2HL0rNSxgB3jco/SYYtgZyiaqnDACKuxjWCyA4ArCgi2mujE6 +TgRgfKO8l8ypedz7pN38WsiDx3rZg== -----END CERTIFICATE-----Generated at Sat Apr 12 20:10:40 2025 by rpki-client