$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/666595E890A911EDA8F5FF52C4F9AE02.roa File: 666595E890A911EDA8F5FF52C4F9AE02.roa (raw, json) Hash identifier: BtJQntraWj3X9XmZWJOEGn+Y1wojJqx0bXvw8A5EV+g= Subject key identifier: F5:1D:3B:53:B2:73:41:F2:98:D0:9E:E0:37:C6:1F:71:4D:CF:4C:0A Certificate issuer: /CN=A91CFFD7/serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Certificate serial: 072B Authority key identifier: EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/666595E890A911EDA8F5FF52C4F9AE02.roa Signing time: Thu 10 Apr 2025 22:02:51 +0000 ROA not before: Thu 10 Apr 2025 22:02:51 +0000 ROA not after: Wed 01 Jul 2026 00:00:00 +0000 asID: 140324 IP address blocks: 103.149.204.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Apr 2025 18:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1835 (0x72b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CFFD7, serialNumber=EFA6B107EF194A4DD67B28D555801175CCF71445 Validity Not Before: Apr 10 22:02:51 2025 GMT Not After : Jul 1 00:00:00 2026 GMT Subject: CN=67f8400a-cc1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:53:0c:9a:8d:79:d0:9a:af:f9:21:f3:11:e4: f4:5c:90:f5:47:1b:88:49:c5:3b:31:91:bb:bf:46: c8:7e:92:bf:3d:1a:61:e8:cb:78:ab:bd:da:1f:8e: 1f:c6:ba:dd:69:5e:a6:0f:1d:c8:6a:62:42:11:88: 37:47:51:d5:32:00:71:da:d2:c9:6a:e5:6f:87:85: 2c:e3:a8:d7:83:0f:44:f7:2f:98:87:b5:d9:92:95: 8d:90:7c:93:cd:f6:b1:95:50:92:ef:93:dc:2c:b5: 9d:8a:87:c9:cd:56:31:4b:38:57:8e:0e:80:75:3a: 4e:96:f6:ca:af:62:09:db:4c:8d:e1:5d:bc:93:87: 14:dc:b0:1b:16:8d:97:5e:04:09:57:ea:1a:07:34: 28:bf:4b:95:85:de:00:ff:32:83:69:d0:96:60:4e: 0d:48:0a:82:54:7d:66:9f:e8:66:d1:56:e1:49:1a: 3e:af:79:07:51:bf:b2:74:0f:e5:91:a1:5d:26:53: 4d:c9:dd:99:0f:1f:20:56:fb:88:4c:bd:00:c0:ad: 04:de:12:39:c7:fd:c6:d3:8a:70:65:12:cb:f7:b0: 1d:0b:c9:1c:b6:c4:7d:d7:76:1e:90:a0:f1:15:85: 90:f7:dd:5e:d2:24:ba:b6:b4:b3:6a:3d:3e:1c:5c: 67:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:1D:3B:53:B2:73:41:F2:98:D0:9E:E0:37:C6:1F:71:4D:CF:4C:0A X509v3 Authority Key Identifier: keyid:EF:A6:B1:07:EF:19:4A:4D:D6:7B:28:D5:55:80:11:75:CC:F7:14:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/76axB-8ZSk3WeyjVVYARdcz3FEU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/76axB-8ZSk3WeyjVVYARdcz3FEU.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFFD7/7B409CA02FA911EBB90BBA84C4F9AE02/666595E890A911EDA8F5FF52C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv4: 103.149.204.0/23 Signature Algorithm: sha256WithRSAEncryption 26:ed:a1:af:32:d6:e0:44:1d:1f:5a:a1:25:1f:55:5f:3f:98: ca:9d:c5:8e:2f:28:68:ea:4b:81:08:aa:71:0c:1e:62:80:e1: c0:6b:d1:01:9c:86:86:33:dc:c2:79:0a:94:ee:eb:d9:81:e3: 74:62:1e:0f:ba:bd:3f:f3:0b:85:3f:99:e3:9d:31:85:33:62: bc:ae:d6:ac:08:0f:f2:f5:7d:d6:52:f9:bc:6a:ad:d8:e3:af: b8:d9:96:46:d0:c0:fc:5a:4f:a6:17:e3:72:cd:a6:16:0f:d1: 33:ac:45:85:74:f2:53:ed:ba:17:21:3c:89:44:0e:4a:a4:ba: a7:88:2f:06:0a:a1:69:19:b4:dc:1b:7c:b5:d4:6f:53:cd:80: f1:53:d1:22:aa:12:ae:22:aa:84:aa:c4:39:ea:e3:78:15:c9: f0:a3:b5:34:70:78:0b:f9:6a:74:88:7b:4c:6d:69:2f:07:b1: d7:5e:63:59:37:bc:c8:66:38:12:98:53:d8:68:43:a0:f6:d3: 86:f2:e8:d8:b3:27:69:03:08:60:7a:06:fa:3f:2a:af:41:b2: e6:6b:b3:35:d8:20:34:d2:eb:e4:cb:50:f8:0a:f6:32:9a:27: 9a:1d:57:26:ba:08:ee:d7:ed:e2:34:7a:f4:19:e9:30:88:8a: 2c:e8:b0:e7 -----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgICByswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0ZGRDcxMTAvBgNVBAUTKEVGQTZCMTA3RUYxOTRBNERENjdCMjhENTU1ODAxMTc1 Q0NGNzE0NDUwHhcNMjUwNDEwMjIwMjUxWhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD VQQDEw02N2Y4NDAwYS1jYzFhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuFMMmo150Jqv+SHzEeT0XJD1RxuIScU7MZG7v0bIfpK/PRph6Mt4q73aH44f xrrdaV6mDx3IamJCEYg3R1HVMgBx2tLJauVvh4Us46jXgw9E9y+Yh7XZkpWNkHyT zfaxlVCS75PcLLWdiofJzVYxSzhXjg6AdTpOlvbKr2IJ20yN4V28k4cU3LAbFo2X XgQJV+oaBzQov0uVhd4A/zKDadCWYE4NSAqCVH1mn+hm0VbhSRo+r3kHUb+ydA/l kaFdJlNNyd2ZDx8gVvuITL0AwK0E3hI5x/3G04pwZRLL97AdC8kctsR913YekKDx FYWQ991e0iS6trSzaj0+HFxn+wIDAQABo4IClTCCApEwHQYDVR0OBBYEFPUdO1Oy c0HymNCe4DfGH3FNz0wKMB8GA1UdIwQYMBaAFO+msQfvGUpN1nso1VWAEXXM9xRF MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDRkZENy83QjQwOUNBMDJG QTkxMUVCQjkwQkJBODRDNEY5QUUwMi83NmF4Qi04WlNrM1dleWpWVllBUmRjejNG RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzc2YXhCLThaU2szV2V5alZWWUFSZGN6M0ZFVS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx Q0ZGRDcvN0I0MDlDQTAyRkE5MTFFQkI5MEJCQTg0QzRGOUFFMDIvNjY2NTk1RTg5 MEE5MTFFREE4RjVGRjUyQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8E EDAOMAwEAgABMAYDBAFnlcwwDQYJKoZIhvcNAQELBQADggEBACbtoa8y1uBEHR9a oSUfVV8/mMqdxY4vKGjqS4EIqnEMHmKA4cBr0QGchoYz3MJ5CpTu69mB43RiHg+6 vT/zC4U/meOdMYUzYryu1qwID/L1fdZS+bxqrdjjr7jZlkbQwPxaT6YX43LNphYP 0TOsRYV08lPtuhchPIlEDkqkuqeILwYKoWkZtNwbfLXUb1PNgPFT0SKqEq4iqoSq xDnq43gVyfCjtTRweAv5anSIe0xtaS8HsddeY1k3vMhmOBKYU9hoQ6D204by6Niz J2kDCGB6Bvo/Kq9BsuZrszXYIDTS6+TLUPgK9jKaJ5odVya6CO7X7eI0evQZ6TCI iizosOc= -----END CERTIFICATE-----Generated at Sat Apr 19 00:59:48 2025 by rpki-client